last executing test programs: 1m32.326949955s ago: executing program 3 (id=392): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x6) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x4, &(0x7f0000000040)={0xb, "810456c72139000000000000000d000000e400"}}) 1m30.831013495s ago: executing program 3 (id=404): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/vlan/vlan1\x00') unshare(0x22020400) readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) 1m30.669129129s ago: executing program 3 (id=415): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m30.403631966s ago: executing program 3 (id=407): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = syz_open_dev$dvb_dvr(&(0x7f0000001040), 0x0, 0x100) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m30.056225476s ago: executing program 3 (id=410): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch', 0x1e) 1m29.924795949s ago: executing program 3 (id=411): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x9c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close(0x3) 1m19.645297175s ago: executing program 4 (id=471): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) creat(&(0x7f0000000040)='./file0\x00', 0x102) 1m19.366924192s ago: executing program 4 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0xf, 0x20000fff, 0x4, 0x8, 0xd20b, 0x2, 0xe48c, 0xe16, 0xb, 0x102, 0x5, 0x7ad5785a, 0x0, 0x7, 0x4, 0xffffffff, 0x7, 0x7f, 0x7, 0x3, 0x7, 0x9, 0xe0d, 0x9a6, 0x3518, 0x8, 0x0, 0x6, 0x0, 0x7, 0x21, 0x7, 0x1, 0xc, 0x14, 0x6, 0x7, 0x4, 0x6, 0x3, 0x8, 0xb, 0xd5aa, 0xfff, 0x8, 0x4, 0x1, 0xfff, 0xffff, 0x4, 0xb, 0x1, 0x7, 0x101, 0x6, 0x75a, 0x0, 0x5, 0x3, 0x400, 0xfffffff7, 0x6, 0xfffffffd, 0xfffffe00, 0x3, 0x7fffffff, 0xd, 0x4, 0x21, 0x4a, 0x3, 0x5, 0x5, 0x2, 0x0, 0x4, 0x3, 0x8, 0x4, 0x2, 0x10, 0x2, 0x4, 0x10000000, 0x6, 0x80000001, 0x3b, 0x8, 0x2000002, 0x9, 0x800, 0x1, 0x8001, 0x6, 0x2a, 0xffffffff, 0x0, 0x401, 0x8, 0xffffffff, 0x1, 0xa479, 0x7, 0x2, 0x6, 0x8a8, 0x7, 0x2, 0x8, 0x6, 0x4, 0x2, 0x0, 0xba5, 0x7, 0x74a3ae00, 0x9, 0x200, 0x7fec, 0x5, 0xffffffff, 0x478, 0x8001, 0x1, 0x2, 0x9, 0x8f69, 0xe, 0x4b4, 0x2, 0x2, 0x20004, 0x8000, 0x5, 0x6, 0xe26, 0xffffffff, 0x7, 0x8, 0xea98f1e, 0x900000, 0x5, 0xd, 0x8, 0xdc3d, 0x8, 0x40, 0x5, 0x81, 0x9, 0x6, 0xfff, 0x400, 0x1, 0x1, 0x13bd0de8, 0xae2, 0xb0e, 0x9, 0x5, 0x40, 0x5, 0x1, 0x8, 0x3, 0x9e1b, 0x7f, 0xe40e, 0xc4, 0xa, 0x152, 0x9d, 0x7ff, 0x0, 0x8, 0x8, 0xc0, 0x2, 0x52e9, 0x1ff, 0x83c, 0x8, 0x2, 0x6, 0x7bfe, 0x8, 0xd8a, 0x765, 0x6, 0xe247, 0x3, 0x80200, 0x8, 0xe, 0x7, 0x5, 0x7, 0x7, 0x0, 0x9, 0x44, 0xb, 0x3, 0x54d, 0x6fd2, 0x6, 0x3, 0x20007, 0xd, 0x1, 0xffffffff, 0x27fff, 0xfff, 0xd7, 0xb90, 0x6, 0xaec, 0x9, 0xfffffffb, 0xe, 0x407, 0xffff, 0x1, 0x1, 0x6, 0x2, 0xffffffff, 0x2, 0x200, 0x6, 0x1, 0x49f, 0x6, 0x0, 0x1000, 0x8000, 0x4, 0x4, 0xfffffff8, 0x9, 0x3, 0x7, 0x1, 0x6, 0xdee, 0x3, 0x9, 0x6, 0x1, 0x8, 0x8, 0x3, 0x9, 0x5, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 1m19.181650437s ago: executing program 4 (id=476): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) ftruncate(r0, 0x84) 1m17.915607432s ago: executing program 4 (id=483): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}}) 1m16.870795099s ago: executing program 4 (id=489): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 1m16.489195179s ago: executing program 4 (id=493): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000003c0)={0x6, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) 1m14.698381227s ago: executing program 32 (id=411): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x9c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close(0x3) 1m1.165812041s ago: executing program 33 (id=493): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000003c0)={0x6, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) 36.808125134s ago: executing program 2 (id=690): r0 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x2003, 0x40, 0x2, 0x276}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x19}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000080)={0xd33e, 0xaca3, 0x4}, 0x0) 36.607271429s ago: executing program 2 (id=691): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0x200000, 0xffb, 0x7, 0xb6b, 0x4, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0x4, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x7, 0x40, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x228b, 0x1, 0x2af, 0x3, 0x88, 0x5, 0x1, 0xb, 0x4, 0x7, 0xd, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3fa, 0xffffffff, 0x6, 0x6, 0x49, 0x80000000, 0xfdffbfff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x252, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0xff, 0xb, 0x10000002, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x80001, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x400, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xfffffffd]}}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 36.457603953s ago: executing program 2 (id=692): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r1, 0x9}, 0x8) 36.329364626s ago: executing program 2 (id=694): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x8, 0x1b) 35.793576081s ago: executing program 2 (id=700): r0 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 34.039016228s ago: executing program 2 (id=714): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000240)='\f', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x8880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 33.437974054s ago: executing program 34 (id=714): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000240)='\f', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x8880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.710819857s ago: executing program 7 (id=858): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x80, @empty, 0x7fffffff}, 0x1c) 8.401366855s ago: executing program 7 (id=859): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 6.243621373s ago: executing program 7 (id=875): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @empty}, 0x1c) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.918805662s ago: executing program 7 (id=879): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x8, 0x1b) 5.312416068s ago: executing program 7 (id=882): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) statx(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x1000, 0x0, &(0x7f00000010c0)) 4.924114698s ago: executing program 1 (id=884): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000140)='./file1\x00', 0x2004890, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfd, 0x2b3, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101042, 0xc0) pwrite64(r1, &(0x7f0000000100)='\x00', 0x1, 0xfecc) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4.411191082s ago: executing program 1 (id=885): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffffc) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x182) fallocate(r1, 0x20, 0x1, 0x20003ff) 3.867291477s ago: executing program 7 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000780), &(0x7f0000000740)=@tcp6=r1}, 0x90) 3.404462929s ago: executing program 35 (id=890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000780), &(0x7f0000000740)=@tcp6=r1}, 0x90) 3.142990086s ago: executing program 0 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}, 0x1, 0xba01}, 0x0) 2.685971288s ago: executing program 6 (id=896): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.614916611s ago: executing program 0 (id=897): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0], 0x21, 0x1d2, &(0x7f0000000640)="$eJzsVU+rElEU/92Z+8bXW1TrCN6iR9kiHceKNpGr8EtEiU4mjf1xhFKEppXfo41fo0X7NkFB0KYWFbQw2oZx7j13vKagWVLB/YHvd/7fOffMO3MnfZgCwPfpqIkaFAIcx1shIAEcCm27XtD8OdBcYv2j1Hye7D4rAGaMdDC820iSuLdDYbXP4yf5lYoU/7Pr1fTGiVV1hFxf8A0C7Lh5Jfj4jXSxxUWtFZDporvv/Z8RbvqmZWp+7hJbXcK3P/Vgh1h8wzeeu9xgylie8j79D/2NEYhl11y99tTDF9Xx6+moScIt3lJka+mfsGNomi+smFNS/YSPWR5D+46UcwDK/e6DcjoYXuh0G+24Hd+Lourl8GIYXorKtztJHOq/wjrCrCji2tUCaKces/x7AN7xTj2AhU9evmaN6QAQdi7t4xkv6eIZLMCz2jIs8DzPpTQao6/4rJIfZeZ9IeuRqiKhWqpDwFcKL/0nfC36rH0VVWreT1pjCHWeSptA6hp7eahEAEuhsOqVzJjGzEfMdeYJ83tm8816xsWkqvCBtWJGN/q40e/3KsFLTqnQV0/ZosB4o5OZfWF06leuYZo7XYCDg4ODg4ODw3+GHwEAAP//WXFMcA==") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010026bd70000000001c3b00000008000300", @ANYRES32=r1, @ANYBLOB="5200330080200900ffffffffffff0802110000005050505050505f000000000000000000640000380102b0b604067001480d04000503"], 0x84}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 2.440228195s ago: executing program 1 (id=898): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1a5, &(0x7f0000002840)="$eJzsmL9OIlEUxr87w5+w2YRtd5vdZElgix1mhl0jhQW1hSYajZ0TGQk6iIEpgM74DMbaJ7A0xIb30EKtLMTOymLMnbk4FxTRAkU9v+LMN+ce7px7CB/JgCCIT8vF+c3ZYTqV4PorUoiL/KUa1ihSfTt5++ekPHe8r1+ftjuz+cH9GADPe/7zIwA6BRWuuPe8/k+nxHURSk9H5fVlMGhCr0LBktA2GFaE3pB0lddr2nrZsbW1qlPkQufB4MHkITfYX3eHoSj1x6T1erO1aTmOXRujGDW/bkHBjNSf/H31ZqOH84MBBYbQOTAsCD2NeG82wUik8/+IhPurr3z+9y2+J0fURDGep7M9Liye4T/vyZjGxxcMXFwlgMno561E6E/eAUNa8qeI5B9Zt7KdrTdbf8sVq2SX7C3TzE3p/3T9v5n1jSiIT/hfwvenL9L+0SG1MRZDw3LdmhHE+3uzEYdbMx9z3Jjvfwoyv4OumcjJ+P8H39gvfsmowK60djS0c4IgCIIgCIIgCIIgCIIgiJfyE8x/C9pH/kHKnPer7wIAAP//PKhwTA==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='2', 0x1}], 0x1) open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) 2.053287975s ago: executing program 0 (id=899): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 2.053103095s ago: executing program 6 (id=901): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.544697029s ago: executing program 6 (id=902): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='c', 0x1}], 0x1}, 0x11) close_range(r0, r1, 0x0) 1.325838545s ago: executing program 5 (id=903): r0 = socket$inet6(0xa, 0x3, 0x3c) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0xffd}}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x7ffffffd, @loopback, 0x8}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.235589837s ago: executing program 6 (id=904): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad21ed0d1bf91b29550987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f3b096c060890e0878f0e1ac6e7049b096e959b449a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b075d0d36cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f4077fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a81aa1020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b21052010689af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474b0679dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691951264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a70500be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x8f5}}, 0x1006) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) 1.036573203s ago: executing program 1 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x8808, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) 902.965126ms ago: executing program 5 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 779.868089ms ago: executing program 0 (id=907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {{{}, {0x3}, @broadcast, @device_a, @random="f16d3a7e5d80"}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0xd701}, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x5c}}, 0x0) 747.131141ms ago: executing program 6 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 700.591772ms ago: executing program 1 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 575.038885ms ago: executing program 5 (id=910): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 462.350708ms ago: executing program 5 (id=911): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002ec0)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000002f00)={'binder1\x00'}) 460.343028ms ago: executing program 1 (id=912): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x801, &(0x7f0000000a80)=ANY=[], 0xff, 0x17f, &(0x7f0000000340)="$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") chdir(&(0x7f0000000040)='./file0\x00') capset(&(0x7f0000000040)={0x20080522}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) listxattr(&(0x7f0000005580)='./file0\x00', 0x0, 0x3f) 305.599062ms ago: executing program 0 (id=913): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0x7, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x7fffffffffffffff, 0x200000200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 125.363607ms ago: executing program 5 (id=914): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 4.56135ms ago: executing program 5 (id=915): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1a5, &(0x7f0000002840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='2', 0x1}], 0x1) open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) 3.86317ms ago: executing program 0 (id=924): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xf73f) 0s ago: executing program 6 (id=925): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 5-4e76-9a50-61ac97e9b59d [ 128.770332][ T5650] loop4: detected capacity change from 0 to 512 [ 128.946828][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.968385][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.983095][ T5650] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.453: bg 0: block 5: invalid block bitmap [ 129.069787][ T5650] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 129.091963][ T5650] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.453: invalid indirect mapped block 3 (level 2) [ 129.117901][ T5650] EXT4-fs (loop4): 1 orphan inode deleted [ 129.125120][ T5650] EXT4-fs (loop4): 1 truncate cleaned up [ 129.135429][ T5650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.351732][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 129.517585][ T5664] loop4: detected capacity change from 0 to 512 [ 129.565084][ T5663] loop0: detected capacity change from 0 to 1024 [ 129.580308][ T5664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.616877][ T5664] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.903027][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 129.971650][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.720676][ T5688] loop2: detected capacity change from 0 to 32768 [ 130.775083][ T5688] XFS (loop2): Mounting V5 Filesystem [ 130.853192][ T5688] XFS (loop2): Ending clean mount [ 131.028839][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.042575][ T4277] XFS (loop2): Unmounting Filesystem [ 131.561263][ T4676] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.777222][ T4676] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.796259][ T4676] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.837436][ T4676] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.865803][ T4676] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 131.889371][ T4676] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 131.930619][ T4676] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.959514][ T4676] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.978250][ T4676] usb 2-1: Product: syz [ 132.009375][ T4676] usb 2-1: Manufacturer: syz [ 132.025226][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.029376][ T4676] cdc_wdm 2-1:1.0: skipping garbage [ 132.069089][ T4676] cdc_wdm 2-1:1.0: skipping garbage [ 132.085266][ T4676] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 132.107192][ T4676] cdc_wdm 2-1:1.0: Unknown control protocol [ 132.132045][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.400314][ T5719] loop4: detected capacity change from 0 to 40427 [ 132.423415][ T5719] F2FS-fs (loop4): invalid crc value [ 132.453464][ T5719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.495341][ T5722] loop0: detected capacity change from 0 to 40427 [ 132.538084][ T5722] F2FS-fs (loop0): invalid crc value [ 132.562564][ T5722] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.571411][ T5719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.677067][ T5722] F2FS-fs (loop0): Start checkpoint disabled! [ 132.776468][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783247][ T5722] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 132.803305][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.824736][ T4274] syz-executor: attempt to access beyond end of device [ 132.824736][ T4274] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.053223][ T4350] usb 2-1: USB disconnect, device number 7 [ 133.114468][ T4446] kworker/u4:7: attempt to access beyond end of device [ 133.114468][ T4446] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 133.181529][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.413100][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.429903][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.601236][ T4350] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.617458][ T5751] loop5: detected capacity change from 0 to 7 [ 133.637670][ T5751] Dev loop5: unable to read RDB block 7 [ 133.647613][ T5751] loop5: AHDI p1 p3 p4 [ 133.663621][ T5751] loop5: partition table partially beyond EOD, truncated [ 133.682147][ T5751] loop5: p1 size 100663296 extends beyond EOD, truncated [ 133.705394][ T5751] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 133.791159][ T4350] usb 1-1: Using ep0 maxpacket: 8 [ 133.793656][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 133.798108][ T4350] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.824921][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 133.864864][ T4350] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.891107][ T4350] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.926965][ T4350] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.991358][ T4350] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.000444][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.213026][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.255592][ T4350] usb 1-1: GET_CAPABILITIES returned 0 [ 134.261367][ T4350] usbtmc 1-1:16.0: can't read capabilities [ 134.301189][ T5766] loop2: detected capacity change from 0 to 512 [ 134.321919][ T5766] EXT4-fs: inline encryption not supported [ 134.371880][ T5766] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.430982][ T5766] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 134.456929][ T5766] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.492: invalid indirect mapped block 2683928664 (level 1) [ 134.471505][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.483408][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.508369][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.519106][ T4676] usb 1-1: USB disconnect, device number 9 [ 134.535824][ T5766] EXT4-fs (loop2): 1 truncate cleaned up [ 134.551155][ T5766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.572190][ T5766] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.492: Invalid block bitmap block 3 in block_group 0 [ 134.667230][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 135.007520][ T5764] loop1: detected capacity change from 0 to 40427 [ 135.053580][ T5764] F2FS-fs (loop1): invalid crc value [ 135.080741][ T5764] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.091427][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.191138][ T4676] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.239833][ T5764] F2FS-fs (loop1): Start checkpoint disabled! [ 135.256590][ T4675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.316529][ T5764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 135.331435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.412528][ T4676] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 135.431056][ T4676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.476752][ T4676] usb 3-1: config 0 descriptor?? [ 135.507088][ T4676] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 135.976566][ T5775] mmap: syz.0.496 (5775) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.083527][ T76] kworker/u4:4: attempt to access beyond end of device [ 136.083527][ T76] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 136.296893][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.309297][ T4676] gspca_stv06xx: I2C: Read error writing address: -71 [ 136.365562][ T4676] usb 3-1: USB disconnect, device number 9 [ 136.786763][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.799960][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.820189][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.833436][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.840998][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.848450][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.964933][ T5789] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 137.057456][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.066451][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.242763][ T4446] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.261639][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.329472][ T5796] loop2: detected capacity change from 0 to 1024 [ 137.341482][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.365782][ T4446] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.441176][ T4318] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.483753][ T4446] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.549736][ T5801] autofs4:pid:5801:autofs_fill_super: called with bogus options [ 137.551094][ T4446] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.574189][ T76] hfsplus: b-tree write err: -5, ino 25 [ 137.585053][ T76] hfsplus: b-tree write err: -5, ino 4 [ 137.612954][ T76] hfsplus: b-tree write err: -5, ino 2 [ 137.649015][ T76] hfsplus: b-tree write err: -5, ino 17 [ 137.655001][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 137.671333][ T4318] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 137.715148][ T4318] usb 2-1: config 0 has no interface number 0 [ 137.728958][ T4318] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 137.744141][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.791739][ T4318] usb 2-1: Product: syz [ 137.795946][ T4318] usb 2-1: Manufacturer: syz [ 137.800558][ T4318] usb 2-1: SerialNumber: syz [ 137.848357][ T4318] usb 2-1: config 0 descriptor?? [ 137.857372][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 137.916672][ T4318] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 137.942165][ T4338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.961505][ T4317] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.097350][ T4318] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 138.115399][ T4318] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 138.154389][ T4317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.201125][ T4317] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.216908][ T4317] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 138.226582][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.236182][ T4317] usb 1-1: Product: syz [ 138.240398][ T4317] usb 1-1: Manufacturer: syz [ 138.245477][ T4317] usb 1-1: SerialNumber: syz [ 138.358148][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.395965][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.422171][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.426605][ T5782] device bridge_slave_0 entered promiscuous mode [ 138.460769][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.492365][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.501631][ T4317] usb 1-1: USB disconnect, device number 10 [ 138.508973][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 138.518894][ T4350] usb 2-1: USB disconnect, device number 8 [ 138.552994][ T4350] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 138.576377][ T5782] device bridge_slave_1 entered promiscuous mode [ 138.615392][ T4350] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 138.670510][ T4350] quatech2 2-1:0.51: device disconnected [ 138.866027][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.933017][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 138.989923][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.004046][ T5812] loop2: detected capacity change from 0 to 40427 [ 139.021625][ T5812] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 139.030979][ T5812] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.065943][ T5812] F2FS-fs (loop2): invalid crc value [ 139.183289][ T5812] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.358217][ T5782] team0: Port device team_slave_0 added [ 139.362725][ T5812] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.406636][ T5812] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.501600][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.619241][ T5782] team0: Port device team_slave_1 added [ 139.755844][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.812474][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.847178][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.974944][ T5845] fuse: Invalid group_id [ 140.209887][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.223701][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.249982][ T4317] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 140.267095][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.291513][ T4350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.462800][ T4317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.523173][ T4317] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.541642][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.555750][ T5782] device hsr_slave_0 entered promiscuous mode [ 140.563197][ T4317] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.573426][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.584660][ T4317] usb 1-1: SerialNumber: syz [ 140.601583][ T5782] device hsr_slave_1 entered promiscuous mode [ 140.639245][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.649361][ T5782] Cannot create hsr debugfs directory [ 140.807163][ T4317] usb 1-1: 0:2 : does not exist [ 140.841285][ T4317] usb 1-1: USB disconnect, device number 11 [ 140.892197][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.021186][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 141.184012][ T5851] loop2: detected capacity change from 0 to 32768 [ 141.267415][ T5851] UFO tlock:0xffffc900028ba1b0 [ 141.596145][ T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.619965][ T4446] device hsr_slave_0 left promiscuous mode [ 141.636090][ T5869] input: syz0 as /devices/virtual/input/input10 [ 141.682635][ T4446] device hsr_slave_1 left promiscuous mode [ 141.712598][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.720134][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.772060][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.798455][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.861432][ T4446] device bridge_slave_1 left promiscuous mode [ 141.870398][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.929591][ T4446] device bridge_slave_0 left promiscuous mode [ 141.937533][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.037071][ T5884] loop0: detected capacity change from 0 to 256 [ 142.065990][ T5884] exfat: Deprecated parameter 'namecase' [ 142.074171][ T4446] device veth1_macvtap left promiscuous mode [ 142.080990][ T4446] device veth0_macvtap left promiscuous mode [ 142.097784][ T5884] exfat: Deprecated parameter 'namecase' [ 142.111414][ T4446] device veth1_vlan left promiscuous mode [ 142.117809][ T5884] exfat: Deprecated parameter 'utf8' [ 142.131621][ T4446] device veth0_vlan left promiscuous mode [ 142.150313][ T5884] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 142.617332][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.663037][ T5897] loop1: detected capacity change from 0 to 4096 [ 142.725542][ T5898] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.824849][ T5897] overlayfs: upper fs does not support tmpfile. [ 142.890482][ T5897] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 142.943363][ T5897] overlayfs: failed to set xattr on upper [ 142.955624][ T5897] overlayfs: ...falling back to index=off,metacopy=off. [ 142.989004][ T5897] overlayfs: conflicting lowerdir path [ 143.091171][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 143.198445][ T5895] loop0: detected capacity change from 0 to 40427 [ 143.212117][ T5895] F2FS-fs (loop0): invalid crc value [ 143.226787][ T5895] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.385824][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.388989][ T5895] F2FS-fs (loop0): Start checkpoint disabled! [ 143.458411][ T5895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 143.651884][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.671538][ T5905] loop1: detected capacity change from 0 to 512 [ 143.692282][ T5905] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.807666][ T5905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 143.936108][ T5905] Quota error (device loop1): write_blk: dquota write failed [ 143.981313][ T5905] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 144.012295][ T5905] Quota error (device loop1): write_blk: dquota write failed [ 144.021853][ T5905] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 144.055136][ T5905] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.532: Failed to acquire dquot type 1 [ 144.096017][ T5905] EXT4-fs (loop1): 1 truncate cleaned up [ 144.111114][ T5905] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.184810][ T5905] EXT4-fs (loop1): shut down requested (2) [ 144.220458][ T5905] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 144.259620][ T5805] kworker/u4:8: attempt to access beyond end of device [ 144.259620][ T5805] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 144.292348][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 144.636746][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 144.708428][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.757584][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 144.870000][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.051928][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.171190][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 145.292109][ T5919] loop0: detected capacity change from 0 to 32768 [ 145.323673][ T5919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.537 (5919) [ 145.380322][ T5919] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.411471][ T5919] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 145.420476][ T5919] BTRFS info (device loop0): setting nodatasum [ 145.434524][ T5919] BTRFS info (device loop0): force zlib compression, level 3 [ 145.450708][ T5919] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 145.461234][ T5919] BTRFS info (device loop0): use lzo compression, level 0 [ 145.484716][ T5919] BTRFS info (device loop0): turning on flush-on-commit [ 145.506190][ T5919] BTRFS info (device loop0): enabling auto defrag [ 145.513152][ T5919] BTRFS info (device loop0): max_inline at 4096 [ 145.530030][ T5919] BTRFS info (device loop0): using free space tree [ 145.683841][ T5919] BTRFS info (device loop0): enabling ssd optimizations [ 145.700903][ T5943] loop1: detected capacity change from 0 to 2048 [ 145.734418][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.796692][ T5943] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.809910][ T26] audit: type=1800 audit(1785908192.467:10): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.537" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 145.821292][ T5943] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.014246][ T5943] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.541: bg 0: block 321: padding at end of block bitmap is not set [ 146.039932][ T4446] bond0 (unregistering): Released all slaves [ 146.049473][ T4271] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.070633][ T5943] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 4 [ 146.097400][ T5943] fs-verity (loop1, inode 13): Error -117 building Merkle tree [ 146.358202][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 146.443792][ T5878] bridge0: port 3(vlan2) entered blocking state [ 146.455986][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.487223][ T5878] bridge0: port 3(vlan2) entered disabled state [ 146.508148][ T5878] device vlan2 entered promiscuous mode [ 146.521272][ T5878] device netdevsim0 entered promiscuous mode [ 146.562693][ T5782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.633100][ T5782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.668594][ T5782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.722009][ T5782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.776392][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.019459][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.084101][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.112493][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.124513][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.187007][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.206721][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.260616][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.267849][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.351436][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.368019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.412064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.420553][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.427720][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.491512][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.531350][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.611556][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.676523][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.722482][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.821504][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.838030][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.868400][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.922924][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.964018][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.008394][ T5949] loop1: detected capacity change from 0 to 40427 [ 148.024942][ T5951] loop0: detected capacity change from 0 to 32768 [ 148.039778][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.093026][ T5949] F2FS-fs (loop1): invalid crc value [ 148.111175][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.155553][ T5949] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.156098][ T5951] XFS (loop0): Mounting V5 Filesystem [ 148.171924][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.180563][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.280179][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.312148][ T5951] XFS (loop0): Ending clean mount [ 148.364921][ T5957] loop2: detected capacity change from 0 to 32768 [ 148.386851][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.411449][ T5949] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.419910][ T5957] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.545 (5957) [ 148.455477][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.488502][ T5957] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 148.650245][ T4271] XFS (loop0): Unmounting Filesystem [ 148.659191][ T5957] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 148.698001][ T5957] BTRFS info (device loop2): using free space tree [ 148.852892][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.119056][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.131261][ T5957] BTRFS info (device loop2): enabling ssd optimizations [ 149.175802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.189789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.578306][ T4277] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 149.664178][ T6008] input: syz0 as /devices/virtual/input/input11 [ 149.708720][ T6011] loop0: detected capacity change from 0 to 512 [ 149.874578][ T6011] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 150.058557][ T4676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.130441][ T6011] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 150.155438][ T4355] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (4355) [ 150.281088][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.308385][ T6011] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.546: corrupted inode contents [ 150.388958][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.433915][ T6011] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #16: comm syz.0.546: mark_inode_dirty error [ 150.493777][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.546438][ T6011] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.546: corrupted inode contents [ 150.563885][ T5248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.591575][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.598146][ T6011] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.546: mark_inode_dirty error [ 150.675846][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.709080][ T6011] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.546: corrupted inode contents [ 150.742763][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.759803][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.772050][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.778608][ T6011] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.546: mark_inode_dirty error [ 150.827002][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.834414][ T6011] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.546: corrupted inode contents [ 150.851569][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.864252][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.873288][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.879960][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.881570][ T6011] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 150.896724][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.904974][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.912788][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.961530][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 150.968112][ T6011] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #16: comm syz.0.546: corrupted inode contents [ 151.029916][ T76] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.066477][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 151.089051][ T6011] EXT4-fs error (device loop0): ext4_truncate:4325: inode #16: comm syz.0.546: mark_inode_dirty error [ 151.119049][ T5782] device veth0_vlan entered promiscuous mode [ 151.142354][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 151.148916][ T6011] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 151.178315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.192952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.210831][ T6011] EXT4-fs (loop0): Remounting filesystem read-only [ 151.220734][ T6011] EXT4-fs (loop0): 1 truncate cleaned up [ 151.235701][ T4322] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 151.259535][ T6011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.275209][ T4322] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 151.281603][ T6011] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.299627][ T76] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.316403][ T4322] EXT4-fs (loop0): Remounting filesystem read-only [ 151.331454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.341924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.377843][ T5782] device veth1_vlan entered promiscuous mode [ 151.458240][ T76] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.500137][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 151.612192][ T76] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.673605][ T5782] device veth0_macvtap entered promiscuous mode [ 151.728983][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.753583][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.773192][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.808269][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.832758][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.869317][ T5782] device veth1_macvtap entered promiscuous mode [ 151.992652][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.003634][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.015800][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.026762][ T5249] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 152.034744][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.045493][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.057552][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.067550][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.078200][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.089620][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.100499][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.121584][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.151157][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.171189][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.191116][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.204514][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.231129][ T5249] usb 1-1: Using ep0 maxpacket: 8 [ 152.238180][ T5249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.255009][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.266008][ T5249] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.275379][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.287201][ T5249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.306038][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.322898][ T5249] usb 1-1: config 0 descriptor?? [ 152.328136][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.372272][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.383862][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.401876][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.435849][ T5782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.461147][ T5782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.490300][ T5782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.519748][ T5782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.542971][ T5249] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 152.562822][ T6034] chnl_net:caif_netlink_parms(): no params data found [ 152.906611][ T6075] loop1: detected capacity change from 0 to 64 [ 152.931268][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 153.029907][ T6061] loop2: detected capacity change from 0 to 40427 [ 153.064529][ T6061] F2FS-fs (loop2): invalid crc value [ 153.099919][ T6061] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.130383][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.165892][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.191507][ T5247] usb 1-1: USB disconnect, device number 12 [ 153.206679][ T6034] device bridge_slave_0 entered promiscuous mode [ 153.274713][ T6061] F2FS-fs (loop2): Start checkpoint disabled! [ 153.352682][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.359773][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.369128][ T6061] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 153.403953][ T6034] device bridge_slave_1 entered promiscuous mode [ 153.405751][ T6084] loop1: detected capacity change from 0 to 256 [ 153.555992][ T6034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.597203][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.625194][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.670250][ T6034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.772061][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.865791][ T6092] loop0: detected capacity change from 0 to 65 [ 153.901779][ T6092] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 153.920877][ T6091] loop1: detected capacity change from 0 to 2048 [ 154.012475][ T6091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.053615][ T6034] team0: Port device team_slave_0 added [ 154.096761][ T6034] team0: Port device team_slave_1 added [ 154.152841][ T6094] type: 126 invalid [ 154.201537][ T4322] kworker/u4:6: attempt to access beyond end of device [ 154.201537][ T4322] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 154.255946][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.264154][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.273534][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.309363][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.313155][ T6096] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 154.351325][ T6034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.362552][ T6096] ALSA: mixer_oss: invalid OSS volume 'VOLUM0:00000000' [ 154.369803][ T6096] ALSA: mixer_oss: invalid OSS volume '6' [ 154.409737][ T6096] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 154.431286][ T6096] ALSA: mixer_oss: invalid OSS volume '7' [ 154.463643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.492654][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.499652][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.640581][ T6034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.764361][ T6108] loop0: detected capacity change from 0 to 512 [ 154.830595][ T6108] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 154.872576][ T6034] device hsr_slave_0 entered promiscuous mode [ 154.880358][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 154.892703][ T6034] device hsr_slave_1 entered promiscuous mode [ 155.011245][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 155.222347][ T6108] EXT4-fs (loop0): failed to open journal device unknown-block(11,127) -6 [ 155.810948][ T76] device hsr_slave_0 left promiscuous mode [ 155.832647][ T76] device hsr_slave_1 left promiscuous mode [ 155.844409][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.871138][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.901452][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.911209][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.942330][ T76] device bridge_slave_1 left promiscuous mode [ 155.950101][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.008356][ T76] device bridge_slave_0 left promiscuous mode [ 156.021265][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.063468][ T6126] loop5: detected capacity change from 0 to 40427 [ 156.099218][ T6126] F2FS-fs (loop5): invalid crc value [ 156.104840][ T76] device veth1_macvtap left promiscuous mode [ 156.110901][ T76] device veth0_macvtap left promiscuous mode [ 156.131787][ T76] device veth1_vlan left promiscuous mode [ 156.138934][ T76] device veth0_vlan left promiscuous mode [ 156.146669][ T6126] F2FS-fs (loop5): Found nat_bits in checkpoint [ 156.263603][ T6126] F2FS-fs (loop5): Start checkpoint disabled! [ 156.392741][ T6126] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 156.610163][ T6172] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 157.056543][ T4446] kworker/u4:7: attempt to access beyond end of device [ 157.056543][ T4446] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 157.091345][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 157.396976][ T6177] loop1: detected capacity change from 0 to 32768 [ 157.446829][ T6177] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 157.548280][ T6177] syz.1.587 (6177) used greatest stack depth: 18592 bytes left [ 157.562591][ T4284] ocfs2: Unmounting device (7,1) on (node local) [ 157.671180][ T4319] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.796129][ T76] team0 (unregistering): Port device team_slave_1 removed [ 157.863790][ T76] team0 (unregistering): Port device team_slave_0 removed [ 157.873598][ T4319] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.885176][ T4319] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.887199][ T6197] netlink: 188 bytes leftover after parsing attributes in process `syz.1.595'. [ 157.902464][ T4319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.919481][ T4319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 157.931757][ T4319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 157.950914][ T4319] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.961482][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.969627][ T4319] usb 3-1: Product: syz [ 157.978066][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.997256][ T4319] usb 3-1: Manufacturer: syz [ 158.039691][ T4319] cdc_wdm 3-1:1.0: skipping garbage [ 158.046272][ T4319] cdc_wdm 3-1:1.0: skipping garbage [ 158.053040][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.059411][ T4319] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 158.067878][ T4319] cdc_wdm 3-1:1.0: Unknown control protocol [ 158.730190][ T6201] loop5: detected capacity change from 0 to 32768 [ 158.794388][ T76] bond0 (unregistering): Released all slaves [ 158.809893][ T6201] XFS (loop5): Mounting V5 Filesystem [ 158.910725][ T6201] XFS (loop5): Ending clean mount [ 159.015845][ T6034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 159.043571][ T6034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 159.076263][ T6034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 159.105532][ T6034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 159.159122][ T5782] XFS (loop5): Unmounting Filesystem [ 159.181246][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 159.399404][ T6218] loop0: detected capacity change from 0 to 16 [ 159.462778][ T6034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.506257][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.523177][ T6218] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.526633][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.562972][ T4350] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.583172][ T6218] syz.0.601: attempt to access beyond end of device [ 159.583172][ T6218] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 159.618041][ T6034] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.657181][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.669140][ T6218] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 159.702793][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.751242][ T4350] usb 2-1: Using ep0 maxpacket: 16 [ 159.757551][ T6218] syz.0.601: attempt to access beyond end of device [ 159.757551][ T6218] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 159.758987][ T4350] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 159.795934][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.803116][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.852642][ T6218] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 159.854676][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.886254][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.933833][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.954920][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.960924][ T4350] usb 2-1: config 0 descriptor?? [ 159.988163][ T4350] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 159.993812][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.001471][ T5805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.037786][ T26] audit: type=1800 audit(1785908206.687:11): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.601" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 160.084246][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.099916][ T6224] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 160.120522][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.129676][ T26] audit: type=1800 audit(1785908206.777:12): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.601" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 160.161204][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.180289][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.204090][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.232697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.249595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.280571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.310132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.342373][ T6034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.379411][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.405455][ T6220] syz.0.601 (6220): drop_caches: 2 [ 160.423394][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.436118][ T5250] usb 3-1: USB disconnect, device number 10 [ 160.461269][ T4314] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 160.477535][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.662638][ T4314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.668322][ T6239] loop0: detected capacity change from 0 to 256 [ 160.691285][ T4314] usb 6-1: config 1 has no interface number 0 [ 160.709209][ T6239] exfat: Deprecated parameter 'utf8' [ 160.718544][ T4314] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.749461][ T4314] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 160.751495][ T6239] exfat: Deprecated parameter 'utf8' [ 160.791420][ T4314] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 160.799177][ T6239] exfat: Deprecated parameter 'namecase' [ 160.800502][ T4314] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 160.834412][ T6239] exfat: Deprecated parameter 'namecase' [ 160.878405][ T4314] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 160.878870][ T6239] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 160.915129][ T4314] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.959659][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.009250][ T4314] usb 6-1: Product: syz [ 161.021181][ T6242] loop2: detected capacity change from 0 to 8192 [ 161.025708][ T4314] usb 6-1: Manufacturer: syz [ 161.028673][ T4350] gspca_sonixj: reg_w1 err -71 [ 161.052722][ T4314] usb 6-1: SerialNumber: syz [ 161.062531][ T4350] sonixj: probe of 2-1:0.0 failed with error -71 [ 161.084267][ T6227] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 161.089468][ T6242] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 161.153036][ T4350] usb 2-1: USB disconnect, device number 9 [ 161.181175][ T6242] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 161.235604][ T6242] REISERFS (device loop2): using ordered data mode [ 161.272202][ T6242] reiserfs: using flush barriers [ 161.310286][ T6242] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.314707][ T6227] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 161.357751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.372554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.373112][ T6242] REISERFS (device loop2): checking transaction log (loop2) [ 161.395362][ T6034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.415812][ T6250] loop0: detected capacity change from 0 to 512 [ 161.455107][ T6250] EXT4-fs: Ignoring removed nobh option [ 161.569841][ T6250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 161.603711][ T6250] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.650434][ T6242] REISERFS (device loop2): Using tea hash to sort names [ 161.693234][ T6242] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 161.707609][ T6227] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 161.823977][ T6250] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.605: corrupted inode contents [ 161.916713][ T6250] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.605: mark_inode_dirty error [ 161.966167][ T6250] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.605: corrupted inode contents [ 162.021562][ T6250] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.605: mark_inode_dirty error [ 162.084271][ T6267] loop1: detected capacity change from 0 to 512 [ 162.122263][ T6267] EXT4-fs: Ignoring removed orlov option [ 162.166275][ T6267] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.180871][ T6227] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 162.202474][ T4314] cdc_ncm 6-1:1.1: bind() failure [ 162.225673][ T6267] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.607: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 162.288522][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 162.467837][ T4676] usb 6-1: USB disconnect, device number 2 [ 162.493069][ T6267] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.607: couldn't read orphan inode 16 (err -117) [ 162.532802][ T6267] EXT4-fs (loop1): 1 orphan inode deleted [ 162.538608][ T6267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.745144][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 162.758951][ T6287] loop2: detected capacity change from 0 to 128 [ 162.784982][ T6287] EXT4-fs: Ignoring removed i_version option [ 162.878997][ T6287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.918663][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.937998][ T6287] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.988257][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.091811][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.116761][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.155377][ T6034] device veth0_vlan entered promiscuous mode [ 163.183189][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.222036][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.250004][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 163.265783][ T6034] device veth1_vlan entered promiscuous mode [ 163.372553][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.380949][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.424563][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.439100][ T5250] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 163.450211][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.475412][ T6034] device veth0_macvtap entered promiscuous mode [ 163.498809][ T6034] device veth1_macvtap entered promiscuous mode [ 163.524261][ T5250] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.556115][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.562019][ T6308] loop0: detected capacity change from 0 to 4096 [ 163.600606][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.603411][ T6308] EXT4-fs: inline encryption not supported [ 163.631434][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.657165][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.684289][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.700093][ T6308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.710214][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.724039][ T6308] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.735516][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.767279][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.767736][ T6308] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 163.785948][ T4313] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 163.796374][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.825412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.837841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.847176][ T6308] System zones: 0-5 [ 163.870548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.880535][ T6308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.885836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.928329][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.957963][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.975485][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.986570][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 164.017988][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 164.025584][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.061079][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 164.085804][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.096501][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 164.110171][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.135422][ T4313] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 164.150763][ T6034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.161518][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.174916][ T6034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.184993][ T4313] usb 2-1: Product: syz [ 164.189191][ T4313] usb 2-1: Manufacturer: syz [ 164.202514][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 164.214260][ T4313] usb 2-1: SerialNumber: syz [ 164.220455][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.247923][ T4313] usb 2-1: config 0 descriptor?? [ 164.257302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.287846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.323364][ T6034] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.341554][ T6034] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.350310][ T6034] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.384074][ T6034] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.504125][ T4313] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 164.565180][ T4313] usb 2-1: USB disconnect, device number 10 [ 164.654334][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.688000][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.739276][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.761650][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.803350][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.835439][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.161221][ T4313] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.224298][ T6347] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 165.352813][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 165.381811][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.417839][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 165.428899][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 165.459791][ T4313] usb 2-1: string descriptor 0 read error: -22 [ 165.499645][ T4313] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 165.519214][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.544201][ T6331] loop5: detected capacity change from 0 to 32768 [ 165.559989][ T4313] usb 2-1: config 0 descriptor?? [ 165.606547][ T4313] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 165.613971][ T26] audit: type=1800 audit(1785908212.257:13): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.624" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 165.634120][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.668320][ T6362] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 165.668320][ T6362] [ 165.819293][ T6310] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 165.859153][ T5250] usb 2-1: USB disconnect, device number 11 [ 166.013419][ T6371] loop6: detected capacity change from 0 to 128 [ 166.125930][ T6371] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 166.172799][ T6371] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.273280][ T6371] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes [ 166.428320][ T6034] EXT4-fs (loop6): unmounting filesystem. [ 166.893669][ T6402] loop6: detected capacity change from 0 to 256 [ 166.926104][ T6402] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.993225][ T6402] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 167.132949][ T26] audit: type=1326 audit(1785908213.777:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.6.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e399e019 code=0x7ffc0000 [ 167.237981][ T26] audit: type=1326 audit(1785908213.787:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.6.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8e399e019 code=0x7ffc0000 [ 167.302936][ T26] audit: type=1326 audit(1785908213.817:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.6.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e399e019 code=0x7ffc0000 [ 167.425523][ T26] audit: type=1326 audit(1785908213.837:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.6.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc8e399e019 code=0x7ffc0000 [ 167.500791][ T26] audit: type=1326 audit(1785908213.837:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.6.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e399e019 code=0x7ffc0000 [ 167.641225][ T26] audit: type=1326 audit(1785908213.837:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.6.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc8e399e019 code=0x7ffc0000 [ 167.765947][ T26] audit: type=1326 audit(1785908213.837:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.6.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e399e019 code=0x7ffc0000 [ 167.869747][ T6426] loop2: detected capacity change from 0 to 1024 [ 167.902402][ T6426] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.980309][ T6426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.202020][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 168.327595][ T6411] loop1: detected capacity change from 0 to 32768 [ 168.411626][ T26] audit: type=1800 audit(1785908215.067:21): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.648" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 168.431800][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.563972][ T6450] netlink: 240 bytes leftover after parsing attributes in process `syz.6.660'. [ 168.639907][ T6452] loop0: detected capacity change from 0 to 2048 [ 168.649665][ T6446] loop2: detected capacity change from 0 to 8192 [ 168.723596][ T6446] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.758056][ T6456] loop6: detected capacity change from 0 to 128 [ 168.760331][ T6452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.796649][ T6456] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 168.807665][ T6456] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.896705][ T6446] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 168.946892][ T6446] REISERFS (device loop2): using ordered data mode [ 168.981590][ T6446] reiserfs: using flush barriers [ 169.018374][ T6446] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.072490][ T6446] REISERFS (device loop2): checking transaction log (loop2) [ 169.086590][ T6459] loop5: detected capacity change from 0 to 2048 [ 169.095131][ T6034] EXT4-fs (loop6): unmounting filesystem. [ 169.249495][ T6465] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.468303][ T6446] REISERFS (device loop2): Using tea hash to sort names [ 169.488176][ T6446] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 170.025950][ T5248] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.138208][ T6487] loop5: detected capacity change from 0 to 4096 [ 170.205777][ T6487] EXT4-fs: inline encryption not supported [ 170.227783][ T6487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 170.231183][ T5248] usb 2-1: Using ep0 maxpacket: 8 [ 170.244406][ T5248] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.255460][ T5248] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.265838][ T5248] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.276445][ T5248] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.287053][ T6487] EXT4-fs (loop5): Test dummy encryption mode enabled [ 170.302061][ T5248] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.311550][ T5248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.341554][ T6466] XFS (loop6): Mounting V5 Filesystem [ 170.389318][ T6487] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 170.443233][ T6487] System zones: 0-5 [ 170.518710][ T6487] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.537104][ T5248] usb 2-1: GET_CAPABILITIES returned 0 [ 170.543492][ T5248] usbtmc 2-1:16.0: can't read capabilities [ 170.575480][ T6466] XFS (loop6): Ending clean mount [ 170.638811][ T6481] set_capacity_and_notify: 1 callbacks suppressed [ 170.638826][ T6481] loop0: detected capacity change from 0 to 40427 [ 170.639706][ T6466] XFS (loop6): Quotacheck needed: Please wait. [ 170.710693][ T6481] F2FS-fs (loop0): invalid crc value [ 170.750940][ T6481] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.799651][ T5782] EXT4-fs (loop5): unmounting filesystem. [ 170.832413][ T6466] XFS (loop6): Quotacheck: Done. [ 170.853851][ T4676] usb 2-1: USB disconnect, device number 12 [ 170.983171][ T6481] F2FS-fs (loop0): Start checkpoint disabled! [ 171.058408][ T6481] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 171.147736][ T6034] XFS (loop6): Unmounting Filesystem [ 171.273644][ T6481] syz.0.670: attempt to access beyond end of device [ 171.273644][ T6481] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 171.613290][ T4320] kworker/u4:5: attempt to access beyond end of device [ 171.613290][ T4320] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 171.681746][ T4320] kworker/u4:5: attempt to access beyond end of device [ 171.681746][ T4320] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 172.195267][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 172.429935][ T5250] kernel write not supported for file /ppp (pid: 5250 comm: kworker/0:12) [ 172.501147][ T5248] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 172.720597][ T5248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.761921][ T5248] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.791115][ T5248] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.824596][ T5248] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.856142][ T5248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.876473][ T4676] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 172.887252][ T5248] usb 6-1: config 0 descriptor?? [ 173.071083][ T4676] usb 1-1: Using ep0 maxpacket: 16 [ 173.078455][ T4676] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.107751][ T4676] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.144360][ T4676] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 173.189763][ T4676] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.214513][ T4676] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 173.225029][ T4676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.242151][ T4676] usb 1-1: Product: syz [ 173.251701][ T4676] usb 1-1: Manufacturer: syz [ 173.256352][ T4676] usb 1-1: SerialNumber: syz [ 173.322391][ T5248] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 173.352621][ T5248] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 173.501976][ T4676] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 173.528385][ T4676] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 173.949954][ T4676] usb 1-1: USB disconnect, device number 13 [ 174.440547][ T6595] loop2: detected capacity change from 0 to 512 [ 174.458731][ T6595] EXT4-fs: Ignoring removed nobh option [ 174.472772][ T6593] loop6: detected capacity change from 0 to 2048 [ 174.495796][ T6595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.529326][ T6593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.592317][ T6595] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 174.614545][ T6595] EXT4-fs (loop2): 1 truncate cleaned up [ 174.620762][ T6595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.946674][ T4277] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /154/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 175.013640][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.020746][ T4277] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 175.051490][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.065281][ T4277] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /154/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 175.122192][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.138836][ T4277] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 175.216122][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.224455][ T4277] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /154/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 175.296140][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.314514][ T4277] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 175.371264][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.381872][ T4277] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /154/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 175.421823][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.434683][ T6617] loop6: detected capacity change from 0 to 512 [ 175.442133][ T4277] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 175.478781][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.487007][ T4277] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /154/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 175.521923][ T6617] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 175.522545][ T4676] usb 6-1: USB disconnect, device number 3 [ 175.537550][ T6617] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 175.546018][ T6617] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 175.559630][ T4277] EXT4-fs (loop2): Remounting filesystem read-only [ 175.637684][ T4277] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 175.691642][ T6617] EXT4-fs (loop6): 1 truncate cleaned up [ 175.698649][ T6617] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 175.846330][ T6621] loop5: detected capacity change from 0 to 16 [ 175.871718][ T6617] System zones: 1-12 [ 175.897992][ T6621] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 175.909304][ T6617] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 176.086140][ T6034] EXT4-fs (loop6): unmounting filesystem. [ 176.293423][ T5250] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.498570][ T5250] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.509102][ T6640] loop5: detected capacity change from 0 to 128 [ 176.524115][ T6642] loop6: detected capacity change from 0 to 1024 [ 176.528157][ T5250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.558251][ T5250] usb 1-1: config 0 descriptor?? [ 176.569896][ T5250] cp210x 1-1:0.0: cp210x converter detected [ 176.627233][ T6640] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 176.647698][ T6640] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.952211][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.984766][ T5250] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 177.025367][ T5250] usb 1-1: cp210x converter now attached to ttyUSB0 [ 177.103945][ T5782] EXT4-fs (loop5): unmounting filesystem. [ 177.226777][ T4313] usb 1-1: USB disconnect, device number 14 [ 177.256557][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.270625][ T4313] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 177.339548][ T4313] cp210x 1-1:0.0: device disconnected [ 177.407274][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.468059][ T6662] loop6: detected capacity change from 0 to 2048 [ 177.570151][ T30] device vlan2 left promiscuous mode [ 177.591988][ T6662] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 177.619923][ T30] device netdevsim0 left promiscuous mode [ 177.633369][ T6662] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.643230][ T30] bridge0: port 3(vlan2) entered disabled state [ 177.700292][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.905673][ T6034] EXT4-fs (loop6): unmounting filesystem. [ 178.121389][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.130999][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.141696][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.149534][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.160082][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.169165][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.569857][ T6683] chnl_net:caif_netlink_parms(): no params data found [ 178.710076][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.717591][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.732404][ T6683] device bridge_slave_0 entered promiscuous mode [ 178.747260][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.759089][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.772475][ T6683] device bridge_slave_1 entered promiscuous mode [ 178.813074][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.824843][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.874021][ T6683] team0: Port device team_slave_0 added [ 178.883015][ T6683] team0: Port device team_slave_1 added [ 178.931626][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.938600][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.965844][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.978378][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.985598][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.012477][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.087251][ T6683] device hsr_slave_0 entered promiscuous mode [ 179.094243][ T6683] device hsr_slave_1 entered promiscuous mode [ 179.100766][ T6683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.108636][ T6683] Cannot create hsr debugfs directory [ 179.384246][ T30] device hsr_slave_0 left promiscuous mode [ 179.390933][ T30] device hsr_slave_1 left promiscuous mode [ 179.398855][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.413112][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.420784][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.429343][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.437530][ T30] device bridge_slave_1 left promiscuous mode [ 179.447030][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.457316][ T30] device bridge_slave_0 left promiscuous mode [ 179.463841][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.498248][ T30] device veth1_macvtap left promiscuous mode [ 179.504530][ T30] device veth0_macvtap left promiscuous mode [ 179.510720][ T30] device veth1_vlan left promiscuous mode [ 179.517068][ T30] device veth0_vlan left promiscuous mode [ 180.220531][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 180.288651][ T30] team0 (unregistering): Port device team_slave_1 removed [ 180.337550][ T30] team0 (unregistering): Port device team_slave_0 removed [ 180.388095][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.435816][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.806525][ T30] bond0 (unregistering): Released all slaves [ 180.948699][ T6683] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 180.958695][ T6683] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 180.974620][ T6683] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 180.985732][ T6683] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 181.078335][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.103990][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.113119][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.124150][ T6683] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.170406][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.180142][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.191983][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.199106][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.216812][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.225099][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.235634][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.250947][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.258135][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.274798][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.308591][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.325874][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.344833][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.359272][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.368908][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.386253][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.394376][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.404364][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.424274][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.432778][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.446489][ T6683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.735476][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.746090][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.764999][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.148326][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.160502][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.195288][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.209498][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.223378][ T6683] device veth0_vlan entered promiscuous mode [ 182.239967][ T6683] device veth1_vlan entered promiscuous mode [ 182.258846][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.266995][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.282685][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.301233][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 182.327705][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.339274][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.349817][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.366539][ T6683] device veth0_macvtap entered promiscuous mode [ 182.380669][ T6683] device veth1_macvtap entered promiscuous mode [ 182.409229][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.425074][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.438244][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.467996][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.478135][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.488996][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.499102][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.509866][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.523073][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.530427][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.542486][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.550754][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.562768][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.577216][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.588098][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.598099][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.610177][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.620175][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.630679][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.640749][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.652167][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.663980][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.684768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.695170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.710220][ T6683] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.719745][ T6683] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.728608][ T6683] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.737360][ T6683] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.808084][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.827901][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.836272][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.874071][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.882134][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.889818][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.035785][ T6763] loop0: detected capacity change from 0 to 512 [ 183.136748][ T6763] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 183.262627][ T6763] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.733: casefold flag without casefold feature [ 183.311271][ T4313] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 183.360361][ T6763] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.733: couldn't read orphan inode 15 (err -117) [ 183.402414][ T6763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.483300][ T6763] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.733: bg 0: block 5: invalid block bitmap [ 183.508577][ T4313] usb 7-1: Using ep0 maxpacket: 8 [ 183.520171][ T4313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.532912][ T4313] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.544742][ T4313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.559529][ T6779] CacheFiles: mkdir cache failed with error -105 [ 183.563616][ T4313] usb 7-1: config 0 descriptor?? [ 183.605596][ T6779] CacheFiles: Failed to register: -105 [ 183.694945][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 183.780834][ T4313] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.818325][ T6786] loop0: detected capacity change from 0 to 256 [ 183.860009][ T6786] exfat: Deprecated parameter 'utf8' [ 183.872689][ T6786] exfat: Deprecated parameter 'utf8' [ 183.889427][ T6786] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 184.007248][ T4313] usb 7-1: USB disconnect, device number 2 [ 184.253356][ T6794] loop0: detected capacity change from 0 to 256 [ 184.285900][ T6794] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.371704][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 184.524024][ T6801] loop0: detected capacity change from 0 to 128 [ 184.534764][ T6799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.587396][ T6799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.632538][ T6801] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.665233][ T6801] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.690650][ T6806] loop6: detected capacity change from 0 to 256 [ 184.777620][ T6806] FAT-fs (loop6): Directory bread(block 64) failed [ 184.805888][ T6806] FAT-fs (loop6): Directory bread(block 65) failed [ 184.827633][ T6806] FAT-fs (loop6): Directory bread(block 66) failed [ 184.837770][ T6806] FAT-fs (loop6): Directory bread(block 67) failed [ 184.845190][ T6806] FAT-fs (loop6): Directory bread(block 68) failed [ 184.859762][ T6806] FAT-fs (loop6): Directory bread(block 69) failed [ 184.891266][ T6806] FAT-fs (loop6): Directory bread(block 70) failed [ 184.897853][ T6806] FAT-fs (loop6): Directory bread(block 71) failed [ 184.921409][ T6806] FAT-fs (loop6): Directory bread(block 72) failed [ 184.932484][ T6806] FAT-fs (loop6): Directory bread(block 73) failed [ 184.961407][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 185.124115][ T6818] loop0: detected capacity change from 0 to 1024 [ 185.217239][ T6818] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.233992][ T6818] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.251274][ T4272] Bluetooth: hci5: command 0x1003 tx timeout [ 185.260089][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 185.360854][ T6818] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.732: lblock 3 mapped to illegal pblock 3 (length 1) [ 185.451381][ T6818] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 185.498563][ T6818] EXT4-fs (loop0): This should not happen!! Data will be lost [ 185.498563][ T6818] [ 185.515657][ T6831] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: block 3: comm syz.0.732: lblock 3 mapped to illegal pblock 3 (length 1) [ 185.549957][ T26] audit: type=1800 audit(1785908232.197:22): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.732" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 185.659445][ T6839] loop6: detected capacity change from 0 to 128 [ 185.670979][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 185.680964][ T6839] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.741561][ T6839] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.904892][ T6845] loop5: detected capacity change from 0 to 1024 [ 185.984281][ T6845] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 186.003225][ T6845] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.028014][ T6844] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.746: lblock 0 mapped to illegal pblock 0 (length 1) [ 186.045001][ T11] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.049206][ T6844] EXT4-fs (loop5): Remounting filesystem read-only [ 186.067988][ T6845] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.746: Freeing blocks not in datazone - block = 0, count = 1 [ 186.086690][ T6845] EXT4-fs (loop5): Remounting filesystem read-only [ 186.194505][ T5782] EXT4-fs (loop5): unmounting filesystem. [ 186.451675][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 186.621243][ T5247] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 186.823176][ T5247] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.841401][ T5247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.872588][ T5247] usb 6-1: config 0 descriptor?? [ 186.905871][ T5247] cp210x 6-1:0.0: cp210x converter detected [ 187.021270][ T4676] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 187.085117][ T6883] loop7: detected capacity change from 0 to 256 [ 187.093677][ T6881] loop1: detected capacity change from 0 to 1024 [ 187.166913][ T6883] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.212643][ T4676] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.237583][ T26] audit: type=1800 audit(1785908233.887:23): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.757" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 187.268326][ T4676] usb 7-1: config 0 interface 0 has no altsetting 0 [ 187.271370][ T6883] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 187.298038][ T5247] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 187.302501][ T4676] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 187.341278][ T6883] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 187.346761][ T4676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.384139][ T4676] usb 7-1: Product: syz [ 187.388847][ T4676] usb 7-1: Manufacturer: syz [ 187.424247][ T4676] usb 7-1: SerialNumber: syz [ 187.451709][ T4676] usb 7-1: config 0 descriptor?? [ 187.477509][ T4676] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 187.499947][ T4676] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.514969][ T5247] usb 6-1: cp210x converter now attached to ttyUSB0 [ 187.589077][ T4676] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 187.634114][ T4676] usb 7-1: media controller created [ 187.676122][ T4676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.748459][ T5247] usb 6-1: USB disconnect, device number 4 [ 187.805099][ T5247] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.847796][ T5247] cp210x 6-1:0.0: device disconnected [ 187.867224][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.7.760'. [ 187.915518][ T4676] DVB: Unable to find symbol tda10046_attach() [ 187.931849][ T4676] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 187.966385][ T4676] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 187.967053][ T6896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 188.106198][ T6896] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 188.149811][ T6896] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 188.176780][ T6896] EXT4-fs (loop0): 1 truncate cleaned up [ 188.193113][ T6896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.391581][ T6896] System zones: 1-12 [ 188.408333][ T6896] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 188.428350][ T4676] dvb_usb_m920x: probe of 7-1:0.0 failed with error -71 [ 188.465139][ T4676] usb 7-1: USB disconnect, device number 3 [ 188.635946][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 188.748835][ T6915] set_capacity_and_notify: 1 callbacks suppressed [ 188.748851][ T6915] loop5: detected capacity change from 0 to 8192 [ 188.810572][ T6915] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.835023][ T6915] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 188.837595][ T6924] loop7: detected capacity change from 0 to 128 [ 188.861609][ T6915] REISERFS (device loop5): using ordered data mode [ 188.906268][ T6915] reiserfs: using flush barriers [ 188.952512][ T6924] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 188.961188][ T6915] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.977882][ T6915] REISERFS (device loop5): checking transaction log (loop5) [ 188.984312][ T6924] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.171735][ T6924] EXT4-fs (loop7): shut down requested (2) [ 189.302678][ T6915] REISERFS (device loop5): Using tea hash to sort names [ 189.305450][ T6683] EXT4-fs (loop7): unmounting filesystem. [ 189.319021][ T6915] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 190.013955][ T6922] loop0: detected capacity change from 0 to 40427 [ 190.044510][ T6949] loop7: detected capacity change from 0 to 256 [ 190.074215][ T6922] F2FS-fs (loop0): invalid crc value [ 190.105106][ T6922] F2FS-fs (loop0): Found nat_bits in checkpoint [ 190.173092][ T6949] FAT-fs (loop7): Directory bread(block 64) failed [ 190.213168][ T6949] FAT-fs (loop7): Directory bread(block 65) failed [ 190.219868][ T6949] FAT-fs (loop7): Directory bread(block 66) failed [ 190.291340][ T6949] FAT-fs (loop7): Directory bread(block 67) failed [ 190.296132][ T6957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.323504][ T6922] F2FS-fs (loop0): Start checkpoint disabled! [ 190.334224][ T6949] FAT-fs (loop7): Directory bread(block 68) failed [ 190.340837][ T6949] FAT-fs (loop7): Directory bread(block 69) failed [ 190.407446][ T6949] FAT-fs (loop7): Directory bread(block 70) failed [ 190.422982][ T6922] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 190.443506][ T6964] loop5: detected capacity change from 0 to 512 [ 190.446043][ T6949] FAT-fs (loop7): Directory bread(block 71) failed [ 190.491208][ T6949] FAT-fs (loop7): Directory bread(block 72) failed [ 190.521152][ T6949] FAT-fs (loop7): Directory bread(block 73) failed [ 190.548831][ T6964] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.639364][ T6964] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.693606][ T26] audit: type=1800 audit(1785908237.347:24): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.768" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 190.713867][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.939146][ T5782] EXT4-fs (loop5): unmounting filesystem. [ 190.971711][ T9] kworker/u4:0: attempt to access beyond end of device [ 190.971711][ T9] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 191.047526][ T9] kworker/u4:0: attempt to access beyond end of device [ 191.047526][ T9] loop0: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 191.181315][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 191.381185][ T5247] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 191.615849][ T5247] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 191.640024][ T5247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.665147][ T5247] usb 6-1: Product: syz [ 191.678293][ T5247] usb 6-1: Manufacturer: syz [ 191.689959][ T5247] usb 6-1: SerialNumber: syz [ 191.720581][ T5247] usb 6-1: config 0 descriptor?? [ 191.767541][ T5247] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 191.906238][ T6990] loop7: detected capacity change from 0 to 40427 [ 191.962488][ T6990] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 192.001257][ T6990] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 192.078731][ T6990] F2FS-fs (loop7): Found nat_bits in checkpoint [ 192.254563][ T6990] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 192.274228][ T6990] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 192.434994][ T7001] loop1: detected capacity change from 0 to 32768 [ 192.530703][ T7017] input: syz0 as /devices/virtual/input/input13 [ 192.571576][ T7001] XFS (loop1): Mounting V5 Filesystem [ 192.684165][ T7001] XFS (loop1): Ending clean mount [ 192.755937][ T5247] gspca_sunplus: reg_w_riv err -71 [ 192.765245][ T5247] sunplus: probe of 6-1:0.0 failed with error -71 [ 192.807136][ T5247] usb 6-1: USB disconnect, device number 5 [ 192.912796][ T4284] XFS (loop1): Unmounting Filesystem [ 193.445545][ T7042] loop5: detected capacity change from 0 to 128 [ 193.790098][ T7054] loop0: detected capacity change from 0 to 256 [ 194.161599][ T7066] loop6: detected capacity change from 0 to 2048 [ 194.199432][ T7066] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 194.215035][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240580][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.287965][ T7074] loop0: detected capacity change from 0 to 1024 [ 194.291531][ T7066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.363675][ T7074] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 194.441150][ T4676] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 194.651149][ T4676] usb 2-1: Using ep0 maxpacket: 32 [ 194.658190][ T4676] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 194.684761][ T4676] usb 2-1: config 0 has no interface number 0 [ 194.728587][ T4676] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 194.762978][ T4676] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 194.826943][ T4676] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 194.868945][ T7088] loop0: detected capacity change from 0 to 512 [ 194.881126][ T4676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.889172][ T4676] usb 2-1: Product: syz [ 194.901070][ T4676] usb 2-1: Manufacturer: syz [ 194.905716][ T4676] usb 2-1: SerialNumber: syz [ 194.936287][ T4676] usb 2-1: config 0 descriptor?? [ 195.026391][ T7090] loop7: detected capacity change from 0 to 128 [ 195.167527][ T4676] radio-si470x 2-1:0.35: this is not a si470x device. [ 195.375453][ T4676] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 195.553079][ T7068] loop5: detected capacity change from 0 to 32768 [ 195.591806][ T4676] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 195.705018][ T7068] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 195.749876][ T7068] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 195.780733][ T4676] usb 2-1: USB disconnect, device number 14 [ 195.794020][ T4676] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 195.935548][ T7068] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 195.963016][ T5248] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 195.972169][ T5248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 196.044544][ T5248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 196.068014][ T5248] gfs2: fsid=syz:syz.0: jid=0: Done [ 196.082894][ T7068] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 196.127470][ T7096] loop0: detected capacity change from 0 to 32768 [ 196.266233][ T7096] XFS (loop0): Mounting V5 Filesystem [ 196.333608][ T7096] XFS (loop0): Ending clean mount [ 196.467881][ T4271] XFS (loop0): Unmounting Filesystem [ 196.550964][ T7133] loop1: detected capacity change from 0 to 1024 [ 196.704220][ T7133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.728516][ T7133] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.751002][ T26] audit: type=1800 audit(1785908243.397:25): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.826" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 196.802109][ T7132] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.826: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.884845][ T26] audit: type=1800 audit(1785908243.447:26): pid=7133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.826" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 196.892714][ T7133] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.826: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.927213][ T7142] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.826: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.964257][ T7133] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.826: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.000204][ T7142] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.826: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.015778][ T7142] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.826: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.091484][ T7142] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.826: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.127535][ T7142] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.826: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.248572][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 197.305054][ T7150] loop0: detected capacity change from 0 to 1024 [ 197.847952][ T26] audit: type=1326 audit(1785908244.497:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.0.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f727699e019 code=0x0 [ 198.249710][ T7151] loop6: detected capacity change from 0 to 40427 [ 198.305956][ T7151] F2FS-fs (loop6): invalid crc value [ 198.350548][ T7151] F2FS-fs (loop6): Found nat_bits in checkpoint [ 198.510604][ T7151] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 198.684495][ T6034] syz-executor: attempt to access beyond end of device [ 198.684495][ T6034] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.842434][ T7190] syz.0.839 sent an empty control message without MSG_MORE. [ 199.321504][ T7200] loop0: detected capacity change from 0 to 2048 [ 199.379370][ T7200] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18881, location=18881 [ 199.485335][ T7200] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.572389][ T26] audit: type=1800 audit(1785908246.227:28): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.843" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 199.866958][ T7197] loop1: detected capacity change from 0 to 131072 [ 199.935584][ T7197] F2FS-fs (loop1): Test dummy encryption mode enabled [ 199.965068][ T7197] F2FS-fs (loop1): invalid crc value [ 199.988506][ T7197] F2FS-fs (loop1): Found nat_bits in checkpoint [ 200.032410][ T7197] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 200.044959][ T7197] F2FS-fs (loop1): Start checkpoint disabled! [ 200.075401][ T7197] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 200.131566][ T7197] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 200.336556][ T7218] WARNING! power/level is deprecated; use power/control instead [ 200.411487][ T26] audit: type=1326 audit(1785908247.067:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.6.846" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8e399e019 code=0x0 [ 200.466520][ T7198] loop5: detected capacity change from 0 to 32768 [ 200.653057][ T7198] XFS (loop5): Mounting V5 Filesystem [ 200.847251][ T7198] XFS (loop5): Ending clean mount [ 200.935462][ T7198] XFS (loop5): User initiated shutdown received. [ 200.964733][ T7198] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 201.027325][ T7198] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 201.246094][ T5782] XFS (loop5): Unmounting Filesystem [ 202.145132][ T7272] loop0: detected capacity change from 0 to 256 [ 202.216200][ T7272] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 203.434503][ T7276] loop5: detected capacity change from 0 to 40427 [ 203.479004][ T7276] F2FS-fs (loop5): invalid crc value [ 203.535851][ T7276] F2FS-fs (loop5): Found nat_bits in checkpoint [ 203.703297][ T7276] F2FS-fs (loop5): Start checkpoint disabled! [ 203.788318][ T7313] loop1: detected capacity change from 0 to 2048 [ 203.801305][ T7276] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 203.889132][ T7313] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 203.901195][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 203.991472][ T7276] syz.5.854: attempt to access beyond end of device [ 203.991472][ T7276] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 204.399111][ T7328] device syzkaller1 entered promiscuous mode [ 204.400843][ T76] kworker/u4:4: attempt to access beyond end of device [ 204.400843][ T76] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 204.544210][ T76] kworker/u4:4: attempt to access beyond end of device [ 204.544210][ T76] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 204.901221][ T4676] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 204.917215][ T7346] loop7: detected capacity change from 0 to 512 [ 204.952849][ T7346] EXT4-fs: Ignoring removed nobh option [ 204.987458][ T7346] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 205.008684][ T4313] kernel read not supported for file /video9 (pid: 4313 comm: kworker/0:3) [ 205.102915][ T4676] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 205.130620][ T7346] EXT4-fs (loop7): 1 truncate cleaned up [ 205.145779][ T7346] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 205.158569][ T4676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.221134][ T4676] usb 1-1: Product: syz [ 205.225410][ T4676] usb 1-1: Manufacturer: syz [ 205.289225][ T4676] usb 1-1: SerialNumber: syz [ 205.314877][ T4676] usb 1-1: config 0 descriptor?? [ 205.383014][ T7357] loop6: detected capacity change from 0 to 16 [ 205.448411][ T6683] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /35/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 205.469762][ T7357] erofs: (device loop6): mounted with root inode @ nid 36. [ 205.492702][ T7357] syz.6.881: attempt to access beyond end of device [ 205.492702][ T7357] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 205.587512][ T4676] usb 1-1: USB disconnect, device number 15 [ 205.607905][ T7357] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 205.657958][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 205.691300][ T7357] syz.6.881: attempt to access beyond end of device [ 205.691300][ T7357] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 205.710572][ T6683] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 205.769939][ T7357] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 205.781491][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 205.806901][ T6683] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /35/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 205.829201][ T26] audit: type=1800 audit(1785908252.487:30): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.881" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 205.870041][ T7373] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 205.881586][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 205.888483][ T6683] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 205.910803][ T7377] loop1: detected capacity change from 0 to 64 [ 205.928656][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 205.935813][ T6683] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /35/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 205.958194][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 205.969483][ T6683] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 205.991734][ T26] audit: type=1800 audit(1785908252.647:31): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.881" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 206.023030][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 206.030135][ T6683] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /35/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 206.057452][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 206.065088][ T6683] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 206.092595][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 206.096780][ T7370] syz.6.881 (7370): drop_caches: 2 [ 206.119451][ T6683] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /35/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 206.168099][ T6683] EXT4-fs (loop7): Remounting filesystem read-only [ 206.180358][ T6683] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 206.571266][ T7384] loop0: detected capacity change from 0 to 1024 [ 206.668693][ T7384] hfsplus: xattr searching failed [ 206.725583][ T4320] hfsplus: b-tree write err: -5, ino 3 [ 206.748658][ T4271] hfsplus: node 4:3 still has 2 user(s)! [ 206.902928][ T4319] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 207.002375][ T4320] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.092950][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.114366][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.144920][ T4319] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.190658][ T4320] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.198541][ T4319] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.230543][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.274588][ T4319] usb 6-1: config 0 descriptor?? [ 207.398135][ T4320] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.529917][ T7380] loop1: detected capacity change from 0 to 40427 [ 207.580986][ T4320] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.585742][ T7380] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 207.636814][ T7380] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 207.672723][ T7380] F2FS-fs (loop1): invalid crc value [ 207.681668][ T7408] device bridge0 entered promiscuous mode [ 207.699283][ T4319] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 207.713620][ T7380] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 207.727825][ T4319] plantronics 0003:047F:FFFF.0008: unbalanced delimiter at end of report description [ 207.765092][ T4319] plantronics 0003:047F:FFFF.0008: parse failed [ 207.777293][ T7408] device dummy0 entered promiscuous mode [ 207.783192][ T4319] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 207.906095][ T7408] device bridge0 left promiscuous mode [ 207.913281][ T7412] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 207.914026][ T4319] usb 6-1: USB disconnect, device number 6 [ 207.971516][ T7408] device dummy0 left promiscuous mode [ 207.987394][ T7380] F2FS-fs (loop1): Start checkpoint disabled! [ 208.063712][ T7380] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 208.074170][ T7380] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 208.249025][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.261331][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.265257][ T7419] loop0: detected capacity change from 0 to 8 [ 208.285105][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.326847][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.341435][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.350613][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.376591][ T9] kworker/u4:0: attempt to access beyond end of device [ 208.376591][ T9] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.382774][ T7419] squashfs image failed sanity check [ 208.474091][ T4355] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.512693][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'. [ 208.790936][ T7432] loop6: detected capacity change from 0 to 512 [ 208.835158][ T7432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.871260][ T7432] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 208.915576][ T7451] loop1: detected capacity change from 0 to 16 [ 208.972446][ T7451] erofs: (device loop1): mounted with root inode @ nid 36. [ 208.988291][ T7432] EXT4-fs (loop6): 1 truncate cleaned up [ 209.011721][ T7431] tipc: Started in network mode [ 209.012783][ T7451] syz.1.898: attempt to access beyond end of device [ 209.012783][ T7451] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 209.016701][ T7431] tipc: Node identity ac14142f, cluster identity 4711 [ 209.042587][ T7431] tipc: New replicast peer: 172.20.20.170 [ 209.050941][ T7431] tipc: Enabled bearer , priority 10 [ 209.061184][ T7432] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 209.086541][ T26] audit: type=1800 audit(1785908255.737:32): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.901" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 209.127329][ T7451] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 209.162028][ T7455] syz.1.898 (7455): drop_caches: 2 [ 209.170066][ T6034] EXT4-fs (loop6): unmounting filesystem. [ 209.256733][ T7451] syz.1.898: attempt to access beyond end of device [ 209.256733][ T7451] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 209.290113][ T7439] tipc: New replicast peer: 0.0.0.0 [ 209.328480][ T7451] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 209.392700][ T26] audit: type=1800 audit(1785908256.047:33): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.898" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 209.421521][ T7455] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 209.473052][ T26] audit: type=1800 audit(1785908256.107:34): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.898" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 209.598575][ T7462] loop6: detected capacity change from 0 to 256 [ 209.622053][ T7462] exfat: Deprecated parameter 'utf8' [ 209.627467][ T7462] exfat: Deprecated parameter 'utf8' [ 209.732130][ T7462] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 209.924845][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 210.297737][ T33] tipc: Node number set to 2886997039 [ 210.412325][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.420054][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.429119][ T7416] device bridge_slave_0 entered promiscuous mode [ 210.451260][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 210.463094][ T7493] loop1: detected capacity change from 0 to 8 [ 210.485725][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.492987][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.501502][ T7416] device bridge_slave_1 entered promiscuous mode [ 210.721478][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.740477][ T7503] SQUASHFS error: Failed to read block 0x2d7: -5 [ 210.836831][ T7503] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 210.864114][ T7508] loop5: detected capacity change from 0 to 16 [ 210.916152][ T7508] erofs: (device loop5): mounted with root inode @ nid 36. [ 210.981379][ T7508] syz.5.915: attempt to access beyond end of device [ 210.981379][ T7508] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 211.077664][ T7508] erofs: (device loop5): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 211.088991][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.146940][ T7508] syz.5.915: attempt to access beyond end of device [ 211.146940][ T7508] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 211.182079][ T7416] team0: Port device team_slave_0 added [ 211.268546][ T7508] ================================================================== [ 211.276663][ T7508] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a7/0x4a0 [ 211.284673][ T7508] Read of size 4096 at addr ffff888077d25000 by task syz.5.915/7508 [ 211.292663][ T7508] [ 211.295006][ T7508] CPU: 1 PID: 7508 Comm: syz.5.915 Not tainted syzkaller #0 [ 211.302300][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.312371][ T7508] Call Trace: [ 211.315656][ T7508] [ 211.318592][ T7508] dump_stack_lvl+0x188/0x24e [ 211.323289][ T7508] ? read_lock_is_recursive+0x10/0x10 [ 211.328684][ T7508] ? show_regs_print_info+0x12/0x12 [ 211.333911][ T7508] ? load_image+0x410/0x410 [ 211.338430][ T7508] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 211.343915][ T7508] ? __virt_addr_valid+0x188/0x540 [ 211.349045][ T7508] ? __virt_addr_valid+0x467/0x540 [ 211.354175][ T7508] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 211.359823][ T7508] print_report+0xa8/0x210 [ 211.364244][ T7508] kasan_report+0x10b/0x140 [ 211.368781][ T7508] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 211.374413][ T7508] kasan_check_range+0x235/0x290 [ 211.379349][ T7508] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 211.384975][ T7508] memcpy+0x25/0x60 [ 211.388775][ T7508] z_erofs_transform_plain+0x3a7/0x4a0 [ 211.394232][ T7508] z_erofs_decompress_queue+0x169e/0x24a0 [ 211.399955][ T7508] ? z_erofs_onlinepage_end+0x370/0x370 [ 211.405503][ T7508] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 211.411482][ T7508] ? lock_chain_count+0x20/0x20 [ 211.416336][ T7508] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 211.422487][ T7508] ? erofs_map_blocks+0x18b0/0x18b0 [ 211.427678][ T7508] ? folio_unlock+0x114/0x2f0 [ 211.432356][ T7508] z_erofs_runqueue+0x198d/0x1b20 [ 211.437383][ T7508] ? z_erofs_do_read_page+0x3920/0x3920 [ 211.442927][ T7508] ? z_erofs_read_folio+0x2af/0x630 [ 211.448143][ T7508] ? __lock_acquire+0x7c40/0x7c40 [ 211.453258][ T7508] ? z_erofs_pcluster_readmore+0x43a/0x4f0 [ 211.459061][ T7508] ? verify_lock_unused+0x140/0x140 [ 211.464257][ T7508] z_erofs_read_folio+0x35d/0x630 [ 211.469285][ T7508] ? z_erofs_rcu_callback+0x1a0/0x1a0 [ 211.474662][ T7508] ? __might_sleep+0xd0/0xd0 [ 211.479251][ T7508] ? filemap_add_folio+0x186/0x3d0 [ 211.484386][ T7508] filemap_read_folio+0x164/0x7a0 [ 211.489416][ T7508] ? z_erofs_rcu_callback+0x1a0/0x1a0 [ 211.494799][ T7508] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 211.500542][ T7508] ? down_read+0x1a8/0x2d0 [ 211.505231][ T7508] filemap_read+0x1846/0x3150 [ 211.509920][ T7508] ? find_get_pages_range_tag+0x780/0x780 [ 211.515651][ T7508] ? kernel_text_address+0x9c/0xd0 [ 211.520764][ T7508] generic_file_read_iter+0x124/0x700 [ 211.526139][ T7508] ? kiocb_invalidate_pages+0x360/0x360 [ 211.531702][ T7508] ? iov_iter_kvec+0x4a/0x1f0 [ 211.536390][ T7508] __kernel_read+0x2dd/0x6e0 [ 211.540989][ T7508] ? rw_verify_area+0x1a0/0x1a0 [ 211.545848][ T7508] ? crypto_shash_setkey+0x2a0/0x2a0 [ 211.551149][ T7508] integrity_kernel_read+0x86/0xd0 [ 211.556264][ T7508] ? integrity_inode_free+0x170/0x170 [ 211.561632][ T7508] ima_calc_file_hash+0xb12/0x1950 [ 211.566744][ T7508] ? __lock_acquire+0x7c40/0x7c40 [ 211.571767][ T7508] ? register_lock_class+0xc0/0x870 [ 211.576957][ T7508] ? unwind_next_frame+0x1719/0x1fd0 [ 211.582243][ T7508] ? is_dynamic_key+0x260/0x260 [ 211.587085][ T7508] ? is_bpf_text_address+0x28b/0x2a0 [ 211.592361][ T7508] ? ima_alloc_tfm+0x2f0/0x2f0 [ 211.597124][ T7508] ? mark_lock+0x94/0x320 [ 211.601455][ T7508] ? init_inode_xattrs+0x2b0/0xbf0 [ 211.606559][ T7508] ? integrity_inode_get+0x111/0x560 [ 211.611839][ T7508] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.617908][ T7508] ? erofs_getxattr+0x590/0x590 [ 211.622759][ T7508] ima_collect_measurement+0x503/0xb50 [ 211.628216][ T7508] ? trace_raw_output_contention_end+0xd0/0xd0 [ 211.634367][ T7508] ? trace_contention_end+0x5f/0x170 [ 211.639653][ T7508] ? ima_get_action+0xa0/0xa0 [ 211.644333][ T7508] ? __mutex_lock+0x1ab/0xae0 [ 211.649014][ T7508] ? vfs_getxattr_alloc+0x49f/0x5a0 [ 211.654209][ T7508] ? ima_get_cache_status+0xb0/0xb0 [ 211.659432][ T7508] process_measurement+0x119b/0x1c40 [ 211.664720][ T7508] ? ima_file_mmap+0x140/0x140 [ 211.669482][ T7508] ? tomoyo_check_open_permission+0x1bf/0x440 [ 211.675542][ T7508] ? tomoyo_check_path_number_acl+0x280/0x280 [ 211.681609][ T7508] ? apparmor_inode_getattr+0x20/0x20 [ 211.686995][ T7508] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 211.693147][ T7508] ima_file_check+0xc8/0x110 [ 211.697734][ T7508] ? ima_bprm_check+0x200/0x200 [ 211.702582][ T7508] path_openat+0x272b/0x2f10 [ 211.707177][ T7508] ? do_filp_open+0x420/0x420 [ 211.711847][ T7508] do_filp_open+0x1ee/0x420 [ 211.716350][ T7508] ? vfs_tmpfile+0x470/0x470 [ 211.720935][ T7508] ? _raw_spin_unlock+0x24/0x40 [ 211.725775][ T7508] ? alloc_fd+0x590/0x640 [ 211.730103][ T7508] do_sys_openat2+0x14b/0x4f0 [ 211.734782][ T7508] ? do_sys_open+0xe0/0xe0 [ 211.739195][ T7508] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 211.745171][ T7508] ? lock_chain_count+0x20/0x20 [ 211.750019][ T7508] __x64_sys_openat+0x135/0x160 [ 211.754866][ T7508] do_syscall_64+0x4c/0xa0 [ 211.759284][ T7508] ? clear_bhb_loop+0x60/0xb0 [ 211.763965][ T7508] ? clear_bhb_loop+0x60/0xb0 [ 211.768637][ T7508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.774552][ T7508] RIP: 0033:0x7f81d799e019 [ 211.778964][ T7508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.798568][ T7508] RSP: 002b:00007f81d87dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.807006][ T7508] RAX: ffffffffffffffda RBX: 00007f81d7c25fa0 RCX: 00007f81d799e019 [ 211.815020][ T7508] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 211.823001][ T7508] RBP: 00007f81d7a3500c R08: 0000000000000000 R09: 0000000000000000 [ 211.831003][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.839046][ T7508] R13: 00007f81d7c26038 R14: 00007f81d7c25fa0 R15: 00007ffe63d60b48 [ 211.847073][ T7508] [ 211.850095][ T7508] [ 211.852411][ T7508] The buggy address belongs to the physical page: [ 211.858821][ T7508] page:ffffea0001df4940 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77d25 [ 211.868978][ T7508] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 211.876102][ T7508] raw: 00fff00000000000 ffffea0001f90588 ffffea0001f9f688 0000000000000000 [ 211.884681][ T7508] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 211.893250][ T7508] page dumped because: kasan: bad access detected [ 211.899647][ T7508] page_owner tracks the page as freed [ 211.905002][ T7508] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7278, tgid 7278 (dhcpcd-run-hook), ts 202558040926, free_ts 209256477064 [ 211.928177][ T7508] post_alloc_hook+0x173/0x1a0 [ 211.932945][ T7508] get_page_from_freelist+0x206b/0x2180 [ 211.938493][ T7508] __alloc_pages+0x1ec/0x4f0 [ 211.943077][ T7508] alloc_slab_page+0x5d/0x180 [ 211.947746][ T7508] new_slab+0x87/0x2d0 [ 211.951891][ T7508] ___slab_alloc+0xbc5/0x1240 [ 211.956562][ T7508] kmem_cache_alloc_bulk+0x1a3/0x4e0 [ 211.961842][ T7508] mas_alloc_nodes+0x449/0x880 [ 211.966599][ T7508] mas_preallocate+0x162/0x3b0 [ 211.971375][ T7508] __vma_adjust+0x2ff/0x1d00 [ 211.975958][ T7508] __split_vma+0x3a2/0x4f0 [ 211.980366][ T7508] do_mas_align_munmap+0x399/0x12d0 [ 211.985560][ T7508] do_mas_munmap+0x240/0x2b0 [ 211.990140][ T7508] mmap_region+0x7ab/0x1c50 [ 211.994636][ T7508] do_mmap+0x9ce/0x10d0 [ 211.998782][ T7508] vm_mmap_pgoff+0x1c1/0x2d0 [ 212.003366][ T7508] page last free stack trace: [ 212.008048][ T7508] free_unref_page_prepare+0x8e5/0x9e0 [ 212.013500][ T7508] free_unref_page+0x2e/0x3f0 [ 212.018165][ T7508] qlist_free_all+0x76/0xe0 [ 212.022657][ T7508] kasan_quarantine_reduce+0x144/0x160 [ 212.028106][ T7508] __kasan_slab_alloc+0x1e/0x80 [ 212.032949][ T7508] slab_post_alloc_hook+0x4b/0x490 [ 212.038049][ T7508] __kmem_cache_alloc_node+0x19d/0x270 [ 212.043497][ T7508] __kmalloc_node+0xa2/0x240 [ 212.048079][ T7508] kvmalloc_node+0x6c/0x180 [ 212.052575][ T7508] z_erofs_runqueue+0x296/0x1b20 [ 212.057505][ T7508] z_erofs_readahead+0xa66/0xde0 [ 212.062438][ T7508] read_pages+0x187/0x860 [ 212.066759][ T7508] page_cache_ra_unbounded+0x667/0x750 [ 212.072317][ T7508] filemap_read+0x917/0x3150 [ 212.076900][ T7508] generic_file_read_iter+0x124/0x700 [ 212.082285][ T7508] __kernel_read+0x2dd/0x6e0 [ 212.086899][ T7508] [ 212.089214][ T7508] Memory state around the buggy address: [ 212.094836][ T7508] ffff888077d24f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 212.102895][ T7508] ffff888077d24f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 212.110969][ T7508] >ffff888077d25000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 212.119048][ T7508] ^ [ 212.123119][ T7508] ffff888077d25080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 212.131191][ T7508] ffff888077d25100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 212.139278][ T7508] ================================================================== [ 212.201159][ T7508] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 212.208406][ T7508] CPU: 1 PID: 7508 Comm: syz.5.915 Not tainted syzkaller #0 [ 212.215705][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.225774][ T7508] Call Trace: [ 212.229068][ T7508] [ 212.232018][ T7508] dump_stack_lvl+0x188/0x24e [ 212.236829][ T7508] ? memcpy+0x3c/0x60 [ 212.240839][ T7508] ? show_regs_print_info+0x12/0x12 [ 212.246073][ T7508] ? load_image+0x410/0x410 [ 212.250610][ T7508] panic+0x2d3/0x710 [ 212.254534][ T7508] ? bpf_jit_dump+0xd0/0xd0 [ 212.259061][ T7508] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 212.265068][ T7508] ? _raw_spin_unlock+0x40/0x40 [ 212.269957][ T7508] check_panic_on_warn+0x80/0xa0 [ 212.274926][ T7508] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 212.280588][ T7508] end_report+0x66/0x110 [ 212.284868][ T7508] kasan_report+0x118/0x140 [ 212.289401][ T7508] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 212.295074][ T7508] kasan_check_range+0x235/0x290 [ 212.300045][ T7508] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 212.305708][ T7508] memcpy+0x25/0x60 [ 212.309560][ T7508] z_erofs_transform_plain+0x3a7/0x4a0 [ 212.315053][ T7508] z_erofs_decompress_queue+0x169e/0x24a0 [ 212.320810][ T7508] ? z_erofs_onlinepage_end+0x370/0x370 [ 212.326378][ T7508] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 212.332385][ T7508] ? lock_chain_count+0x20/0x20 [ 212.337277][ T7508] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 212.343495][ T7508] ? erofs_map_blocks+0x18b0/0x18b0 [ 212.348725][ T7508] ? folio_unlock+0x114/0x2f0 [ 212.353434][ T7508] z_erofs_runqueue+0x198d/0x1b20 [ 212.358496][ T7508] ? z_erofs_do_read_page+0x3920/0x3920 [ 212.364136][ T7508] ? z_erofs_read_folio+0x2af/0x630 [ 212.369366][ T7508] ? __lock_acquire+0x7c40/0x7c40 [ 212.374474][ T7508] ? z_erofs_pcluster_readmore+0x43a/0x4f0 [ 212.380321][ T7508] ? verify_lock_unused+0x140/0x140 [ 212.385552][ T7508] z_erofs_read_folio+0x35d/0x630 [ 212.390598][ T7508] ? z_erofs_rcu_callback+0x1a0/0x1a0 [ 212.396000][ T7508] ? __might_sleep+0xd0/0xd0 [ 212.400602][ T7508] ? filemap_add_folio+0x186/0x3d0 [ 212.405736][ T7508] filemap_read_folio+0x164/0x7a0 [ 212.410781][ T7508] ? z_erofs_rcu_callback+0x1a0/0x1a0 [ 212.416178][ T7508] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 212.421920][ T7508] ? down_read+0x1a8/0x2d0 [ 212.426350][ T7508] filemap_read+0x1846/0x3150 [ 212.431049][ T7508] ? find_get_pages_range_tag+0x780/0x780 [ 212.436797][ T7508] ? kernel_text_address+0x9c/0xd0 [ 212.441927][ T7508] generic_file_read_iter+0x124/0x700 [ 212.447322][ T7508] ? kiocb_invalidate_pages+0x360/0x360 [ 212.452892][ T7508] ? iov_iter_kvec+0x4a/0x1f0 [ 212.457589][ T7508] __kernel_read+0x2dd/0x6e0 [ 212.462198][ T7508] ? rw_verify_area+0x1a0/0x1a0 [ 212.467073][ T7508] ? crypto_shash_setkey+0x2a0/0x2a0 [ 212.472371][ T7508] integrity_kernel_read+0x86/0xd0 [ 212.477500][ T7508] ? integrity_inode_free+0x170/0x170 [ 212.482900][ T7508] ima_calc_file_hash+0xb12/0x1950 [ 212.488040][ T7508] ? __lock_acquire+0x7c40/0x7c40 [ 212.493086][ T7508] ? register_lock_class+0xc0/0x870 [ 212.498299][ T7508] ? unwind_next_frame+0x1719/0x1fd0 [ 212.503600][ T7508] ? is_dynamic_key+0x260/0x260 [ 212.508466][ T7508] ? is_bpf_text_address+0x28b/0x2a0 [ 212.513771][ T7508] ? ima_alloc_tfm+0x2f0/0x2f0 [ 212.518554][ T7508] ? mark_lock+0x94/0x320 [ 212.522916][ T7508] ? init_inode_xattrs+0x2b0/0xbf0 [ 212.528041][ T7508] ? integrity_inode_get+0x111/0x560 [ 212.533344][ T7508] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.539427][ T7508] ? erofs_getxattr+0x590/0x590 [ 212.544302][ T7508] ima_collect_measurement+0x503/0xb50 [ 212.549784][ T7508] ? trace_raw_output_contention_end+0xd0/0xd0 [ 212.555954][ T7508] ? trace_contention_end+0x5f/0x170 [ 212.559709][ T7513] syz.5.915 (7513): drop_caches: 2 [ 212.566357][ T7508] ? ima_get_action+0xa0/0xa0 [ 212.571050][ T7508] ? __mutex_lock+0x1ab/0xae0 [ 212.575822][ T7508] ? vfs_getxattr_alloc+0x49f/0x5a0 [ 212.581016][ T7508] ? ima_get_cache_status+0xb0/0xb0 [ 212.586217][ T7508] process_measurement+0x119b/0x1c40 [ 212.591551][ T7508] ? ima_file_mmap+0x140/0x140 [ 212.596328][ T7508] ? tomoyo_check_open_permission+0x1bf/0x440 [ 212.602398][ T7508] ? tomoyo_check_path_number_acl+0x280/0x280 [ 212.608466][ T7508] ? apparmor_inode_getattr+0x20/0x20 [ 212.613837][ T7508] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 212.619993][ T7508] ima_file_check+0xc8/0x110 [ 212.624606][ T7508] ? ima_bprm_check+0x200/0x200 [ 212.629454][ T7508] path_openat+0x272b/0x2f10 [ 212.634074][ T7508] ? do_filp_open+0x420/0x420 [ 212.638760][ T7508] do_filp_open+0x1ee/0x420 [ 212.643278][ T7508] ? vfs_tmpfile+0x470/0x470 [ 212.647894][ T7508] ? _raw_spin_unlock+0x24/0x40 [ 212.652770][ T7508] ? alloc_fd+0x590/0x640 [ 212.657103][ T7508] do_sys_openat2+0x14b/0x4f0 [ 212.661779][ T7508] ? do_sys_open+0xe0/0xe0 [ 212.666192][ T7508] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 212.672171][ T7508] ? lock_chain_count+0x20/0x20 [ 212.677020][ T7508] __x64_sys_openat+0x135/0x160 [ 212.681876][ T7508] do_syscall_64+0x4c/0xa0 [ 212.686285][ T7508] ? clear_bhb_loop+0x60/0xb0 [ 212.690956][ T7508] ? clear_bhb_loop+0x60/0xb0 [ 212.695628][ T7508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.701512][ T7508] RIP: 0033:0x7f81d799e019 [ 212.705929][ T7508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.725540][ T7508] RSP: 002b:00007f81d87dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.733946][ T7508] RAX: ffffffffffffffda RBX: 00007f81d7c25fa0 RCX: 00007f81d799e019 [ 212.742195][ T7508] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 212.750162][ T7508] RBP: 00007f81d7a3500c R08: 0000000000000000 R09: 0000000000000000 [ 212.758122][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.766099][ T7508] R13: 00007f81d7c26038 R14: 00007f81d7c25fa0 R15: 00007ffe63d60b48 [ 212.774096][ T7508] [ 212.777411][ T7508] Kernel Offset: disabled [ 212.781729][ T7508] Rebooting in 86400 seconds..