last executing test programs: 1m43.128197786s ago: executing program 1 (id=74): r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m42.960651769s ago: executing program 1 (id=75): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_pts(r1, 0x4040) 1m42.832896451s ago: executing program 1 (id=77): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) mlockall(0x7) 1m41.292400477s ago: executing program 1 (id=86): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000001cc0)='.\x00', 0x1aca4b8, &(0x7f0000000a80)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX, @ANYRES32=r0], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000440)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) 1m40.687182226s ago: executing program 1 (id=91): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffe, 0x9}, 0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x20001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x7b8ec57e, 0x2000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x4, 0x9, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x200400, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1010, 0x0, 0xf, 0x0, 0x7fff, 0x0, 0x1, 0x40, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0xa10000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4c44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x80000000, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x1, 0x0, 0x0, 0x3, 0x1000000, 0x1, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x7, 0xfffffffd, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x20001, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd5], [0x0, 0x80000000, 0x6, 0x2, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x4, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffd, 0x0, 0x10000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 1m40.188212865s ago: executing program 1 (id=96): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00') preadv(r1, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}], 0x1, 0x10001, 0x7) 1m39.8485441s ago: executing program 32 (id=96): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00') preadv(r1, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}], 0x1, 0x10001, 0x7) 1m32.862068125s ago: executing program 0 (id=157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000187c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="afbf", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)='A', 0x1}], 0x1}}], 0x2, 0x4008440) 1m32.717345027s ago: executing program 0 (id=160): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m31.080607144s ago: executing program 0 (id=174): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1m30.846577898s ago: executing program 0 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r0, 0x4000, r0}, 0x18) 1m30.643337652s ago: executing program 0 (id=179): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000200)='./file1\x00', 0x300000a, &(0x7f0000000280)={[{@enospc_debug}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@discard_sync}, {@ref_verify}, {@space_cache_v2}, {@notreelog}, {@thread_pool={'thread_pool', 0x3d, 0x5}}, {@skip_balance}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0xff, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001480)={{r1}, 0x0, 0x0, @unused=[0x0, 0xfffffffffffffffc, 0xfffffffffffffffc], @subvolid=0x3}) 1m29.373513532s ago: executing program 0 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xc5, 0x100, @void}}}}}}}}, 0x32) 1m14.227835111s ago: executing program 33 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xc5, 0x100, @void}}}}}}}}, 0x32) 57.292091719s ago: executing program 2 (id=378): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 57.149682121s ago: executing program 2 (id=379): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="b4", 0x1}], 0x1, 0x1e7b, 0x9, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 56.601599041s ago: executing program 2 (id=382): setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x2000001, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16], 0x5, 0x22a, &(0x7f00000005c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r0, &(0x7f0000000180)=""/169, 0xa9) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 56.284073976s ago: executing program 2 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 56.00705297s ago: executing program 2 (id=385): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x68a3e, 0xe1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) fallocate(r0, 0x0, 0x0, 0x1001f0) 55.620036707s ago: executing program 2 (id=387): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 55.161413484s ago: executing program 34 (id=387): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 29.991370537s ago: executing program 3 (id=550): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 27.739791414s ago: executing program 3 (id=568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x7001) 27.492354398s ago: executing program 3 (id=571): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14", 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) 27.342346411s ago: executing program 3 (id=573): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000001cc0)='.\x00', 0x1aca4b8, &(0x7f0000000a80)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="29ab3b30df7d75af6a66b0358c15235889ce2a0584d8b2ef4a21a27c9af13b6657ff207e1c5d58aea9c00a00ca049d3d367df0c23e00000000fdff00000639e695cecd9d0c27f3bd893e78c469110da7a3f6e2a787693f16be9dccc8aa22db6946d10cc6f04f5ca3a1a1d4a66bf1109fb12822f5e2a37bdd6dfdc5a2a86a95ba2a86dc0f5b5567f70a01d8aa78820a5dfb853c8562ce313972cf4af2e04803755d0068705559237f9a063c2c24ed23c25b8f4aab53efd1c9ced5045e9b88cfe32f33119a4bc01d3d73afd037dedde8aa4600c93c71e78ab732db07cba921af5f6b88c9b5ceccf4c71a4e74dca34e9c482904efbc2ea3d7ec2ec12cdae77d039aa63a344714995b27f961e81b2a68e073361ac1380aa8a2f3298c0807e1fe47f57e88e1a7ed753c1afbdda398eb521c9bc74429", @ANYRESHEX=r0, @ANYRESHEX, @ANYRES32=r0], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000440)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) 26.78486081s ago: executing program 3 (id=575): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x641, 0x1c3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60a00}], 0x1f) 26.356225497s ago: executing program 3 (id=578): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 26.157672871s ago: executing program 35 (id=578): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 2.688877146s ago: executing program 4 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000f80)=ANY=[], 0x84}}, 0x0) 2.625284427s ago: executing program 4 (id=701): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.947972098s ago: executing program 7 (id=711): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x9) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.84168283s ago: executing program 6 (id=712): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.681699753s ago: executing program 6 (id=715): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x1, r1}) 1.674575553s ago: executing program 4 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e0f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) pause() 1.582729474s ago: executing program 7 (id=717): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x1000000000}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x4, {0x1, 0xff, 0x3}, 0xfe}, 0x18) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 1.579940765s ago: executing program 5 (id=725): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1.459299756s ago: executing program 6 (id=718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000180)="6621daa6", 0x4) 1.429391267s ago: executing program 7 (id=719): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x100, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) unshare(0x2040600) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x101) 1.355566018s ago: executing program 6 (id=720): r0 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) 1.053900703s ago: executing program 5 (id=721): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) close(r0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 914.116905ms ago: executing program 7 (id=722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r0}) 878.077956ms ago: executing program 5 (id=723): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0x1, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0xf}, &(0x7f00000000c0)=0x8) 808.039227ms ago: executing program 7 (id=724): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000007300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c1300000000aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0xfe, 0x6178, &(0x7f000000ca40)="$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") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 663.440399ms ago: executing program 4 (id=726): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x8, 0x100}, &(0x7f0000000180)=0xc) 663.000079ms ago: executing program 6 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') 445.927683ms ago: executing program 4 (id=728): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x1000000000}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x4, {0x1, 0xff, 0x3}, 0xfe}, 0x18) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 442.769363ms ago: executing program 5 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x40, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x85}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xec}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xffff}]}]}, 0x40}}, 0x0) 441.573823ms ago: executing program 6 (id=729): poll(0x0, 0x0, 0x400) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c", @ANYRESOCT=0x0], 0x1, 0x369, &(0x7f00000041c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/176, 0xb0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 269.241506ms ago: executing program 5 (id=730): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0x3) 268.466646ms ago: executing program 4 (id=731): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8044c0, &(0x7f0000000200), 0x3, 0x4be, &(0x7f0000000a00)="$eJzs3cFvG1UaAPBvnKRN23ST7u6hW2m71W5XabVbO2m2bbSHbldaLadKQLmHkDhRFCeOYqdtogql4sQJCRAgOHHigsQfgIT6JyCkSnBHCIEqaMuBA2BkZ9yEYCcpdeI2+f2kl3nzxvH3PVt+4zcz8gSwZ52IiEsR0RERpyOiN23PpCWWV0r1cffu3hirliQqlSvfJJGkbfXnStLlofTfuiPi2aciXkh+Hbe0uDQ9Wijk59P1XHlmLldaXDozNTM6mZ/Mzw4NDZ4fvjB8bnigZX29+L8v33jlvf9f/Oif1z4f+frUi9W0etJta/vRSitd76q9FnWdETG/HcHaoCPtT1e7EwEAYEuq3/F/HxF/jYj7b7c7GwAAAGA7VP7TEz8kEZXm9m+0EQAAAHj8ZWrXwCaZbHotQE9kMtnsyjW8f4yDmUKxVP7HRHFhdnzlWtm+6MpMTBXyA+m1wn3RlVTXB2v11fWz69aHIuJIRLzee6C2nh0rFsbbffADAAAA9ohDa+b/SUR817sy/wcAAAB2mb52JwAAAABsO/N/AAAA2P2azv+TzojXDu9sMgAAAECrPX35crVU6ve/Hr+6uDBdvHpmPF+azs4sjGXHivNz2clicbL2m30zmz1foVic+1fMLlzPlfOlcq60uDQyU1yYLY/U7us9knefaAAAANh5R/5y67MkIpb/faBWqval28zVYXfLPNzDk+3KA9h5He1OAGibh9z/A7uIOT6w2cS+e4fyAAAAtk//n7Z2/t95Ath9HP+Hvct+HfauznYnALSN8//Abz7///Fq9eUW5gMAALReT60kmWx6LrAnMplsNuJw7bYAXcnEVCE/EBG/i4hPe7v2V9cH2500AAAAAAAAAAAAAAAAAAAAAAAAADxhKpUkKgAAAMCuFpH5Kknv/9Xfe7Jn/fGBfcn3vbVlRFx758qb10fL5fnBavu3D9rLb6XtZ9txBAMAAABYrz5Pr8/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCV7t29MVYvOxn3zn8joq9R/M7ori27oysiDt5PonPN/yUR0dGC+Ms3I+Joo/hJNa3oS7NYHz8TEQfaHP9QC+LDXnarOv5cavT5y8SJ2rLx568zLY/qzolm41/mwfjX0WT8O7zFGMduf5BrGv9mxLHOxuNPPX7yiOPv888tLTXbVnk3or/h/if5RaxceWYuV1pcOjM1MzqZn8zPDg0Nnh++MHxueCA3MVXIp38bxnj1zx/+tFH/DzaJ37dJ/09usf8/3r5+9w8bxD/1t8bv/9H18Vdfktpr//d0P1Bt7q/Xl1fqax1//5PjG/V/vEn/N3v/T22x/6efeemLLT4UANgBpcWl6dFCIT+vorKrK/vjsUjjiam0e2QCAABabfVLf7szAQAAAAAAAAAAAAAAAAAAgL1rJ35ObG287vZ1FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgQz8HAAD//2iV0qM=") r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 156.017948ms ago: executing program 5 (id=732): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) 0s ago: executing program 7 (id=733): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x7ab78c4493c52f9b, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) kernel console output (not intermixed with test programs): mended to keep mac addresses unique to avoid problems! [ 107.588872][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.603401][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.617155][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.632127][ T6091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.641466][ T6091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.650875][ T6091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.661022][ T6091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.730513][ T3372] usb 1-1: config 1 interface 0 has no altsetting 0 [ 107.748138][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 107.759069][ T3372] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.782424][ T5824] usb 3-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 107.783691][ T3372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.801904][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.823653][ T5824] usb 3-1: config 0 descriptor?? [ 107.829354][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.843088][ T3372] usb 1-1: Product: syz [ 107.847888][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.858640][ T3372] usb 1-1: Manufacturer: syz [ 107.863310][ T3372] usb 1-1: SerialNumber: syz [ 107.928039][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.940721][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.108707][ T3372] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 108.149045][ T3372] usb 1-1: USB disconnect, device number 2 [ 108.163351][ T3372] usblp0: removed [ 108.291631][ T5824] wacom 0003:056A:0307.0002: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.2-1/input0 [ 108.444029][ T6254] loop3: detected capacity change from 0 to 32768 [ 108.470839][ T6254] (syz.3.167,6254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.508885][ T6254] (syz.3.167,6254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.540219][ T3372] usb 3-1: USB disconnect, device number 2 [ 108.590319][ T6254] JBD2: Ignoring recovery information on journal [ 108.657781][ T6254] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 108.684990][ T6254] (syz.3.167,6254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 108.885665][ T6254] (syz.3.167,6254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 108.904331][ T6273] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.936602][ T6254] (syz.3.167,6254,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 108.975427][ T6254] (syz.3.167,6254,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 108.996323][ T6254] (syz.3.167,6254,0):ocfs2_quota_read:201 ERROR: status = -5 [ 109.004368][ T6254] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 109.030163][ T6254] (syz.3.167,6254,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 109.105716][ T5785] Bluetooth: hci3: command tx timeout [ 109.231601][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 109.355784][ T5783] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.547360][ T5783] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.580667][ T5783] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.607678][ T5783] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.628125][ T5783] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 109.662759][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.698527][ T5783] usb 5-1: config 0 descriptor?? [ 110.035814][ T3372] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.148154][ T5783] apple 0003:05AC:0262.0003: bogus close delimiter [ 110.155141][ T5783] apple 0003:05AC:0262.0003: item 0 1 2 10 parsing failed [ 110.184573][ T5783] apple 0003:05AC:0262.0003: parse failed [ 110.203019][ T5783] apple: probe of 0003:05AC:0262.0003 failed with error -22 [ 110.247150][ T3372] usb 3-1: Using ep0 maxpacket: 32 [ 110.258013][ T3372] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.283694][ T3372] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.309384][ T3372] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 110.319598][ T3372] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 110.329370][ T3372] usb 3-1: Product: syz [ 110.333938][ T3372] usb 3-1: Manufacturer: syz [ 110.381991][ T3372] hub 3-1:4.0: USB hub found [ 110.432622][ T23] usb 5-1: USB disconnect, device number 2 [ 112.555338][ C1] sched: RT throttling activated [ 112.556817][ T3372] hub 3-1:4.0: 2 ports detected [ 112.708954][ T6308] loop4: detected capacity change from 0 to 512 [ 112.997270][ T6310] warning: `syz.2.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.078487][ T6308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.154575][ T6308] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.240728][ T6299] loop3: detected capacity change from 0 to 262144 [ 113.255568][ T3372] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 113.263337][ T6299] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.188 (6299) [ 113.278767][ T3372] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 113.301732][ T6299] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 113.314186][ T6299] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 113.324979][ T6299] BTRFS info (device loop3): using free space tree [ 113.377557][ T3372] usb 3-1: USB disconnect, device number 3 [ 113.445628][ T6299] BTRFS info (device loop3): enabling ssd optimizations [ 113.463644][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.628268][ T5773] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 114.455626][ T5824] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.674299][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 114.690545][ T5824] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 114.715858][ T5824] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 114.756101][ T5824] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 114.790510][ T5824] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 114.830500][ T5824] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.853478][ T5824] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 114.885570][ T5824] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 114.894168][ T5824] usb 5-1: Product: syz [ 114.909096][ T5824] usb 5-1: Manufacturer: syz [ 114.913932][ T5824] usb 5-1: SerialNumber: syz [ 114.960566][ T5824] usb 5-1: config 0 descriptor?? [ 115.034568][ T5824] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 115.055677][ T5824] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 115.381506][ T3372] usb 5-1: USB disconnect, device number 3 [ 115.391996][ T3372] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 116.157627][ T6359] loop2: detected capacity change from 0 to 512 [ 116.253570][ T6359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.273859][ T6359] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.509573][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.693471][ T6377] loop2: detected capacity change from 0 to 512 [ 116.707182][ T6377] EXT4-fs: Ignoring removed oldalloc option [ 116.722183][ T6377] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.733730][ T6377] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 117.005184][ T6383] Zero length message leads to an empty skb [ 117.396003][ T6389] loop2: detected capacity change from 0 to 736 [ 117.408963][ T6391] loop4: detected capacity change from 0 to 128 [ 117.435828][ T6391] EXT4-fs (loop4): Test dummy encryption mode enabled [ 117.459981][ T6391] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.521592][ T6391] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.624196][ T6391] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.776009][ T6091] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.813851][ T6381] loop3: detected capacity change from 0 to 40427 [ 117.831279][ T6381] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 117.859055][ T6381] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.913463][ T6381] F2FS-fs (loop3): invalid crc value [ 117.960931][ T6381] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.997072][ T6400] loop4: detected capacity change from 0 to 2048 [ 118.054901][ T6400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.125519][ T6381] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 118.133936][ T6381] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.221732][ T6400] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 118.274493][ T6400] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 118.328523][ T6400] EXT4-fs (loop4): This should not happen!! Data will be lost [ 118.328523][ T6400] [ 118.368195][ T6400] EXT4-fs (loop4): Total free blocks count 0 [ 118.405048][ T6400] EXT4-fs (loop4): Free/Dirty block details [ 118.425819][ T6400] EXT4-fs (loop4): free_blocks=2415919504 [ 118.435702][ T6400] EXT4-fs (loop4): dirty_blocks=32 [ 118.451968][ T6400] EXT4-fs (loop4): Block reservation details [ 118.466163][ T6400] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 118.469221][ T6381] syz.3.213: attempt to access beyond end of device [ 118.469221][ T6381] loop3: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 118.651161][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.685825][ T2974] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 118.722186][ T2974] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 118.851902][ T6395] loop2: detected capacity change from 0 to 32768 [ 118.876517][ T6395] XFS: ikeep mount option is deprecated. [ 118.916734][ T6395] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.146300][ T6395] XFS (loop2): Ending clean mount [ 119.177868][ T6395] XFS (loop2): Quotacheck needed: Please wait. [ 119.318327][ T6395] XFS (loop2): Quotacheck: Done. [ 119.596704][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.237243][ T6433] loop4: detected capacity change from 0 to 8192 [ 120.267687][ T6433] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.314127][ T6433] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 120.341302][ T6433] REISERFS (device loop4): using ordered data mode [ 120.361455][ T6433] reiserfs: using flush barriers [ 120.377384][ T6433] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.453499][ T6433] REISERFS (device loop4): checking transaction log (loop4) [ 120.478137][ T6433] REISERFS (device loop4): Using r5 hash to sort names [ 120.502634][ T6433] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 120.562455][ T6443] loop2: detected capacity change from 0 to 512 [ 120.580871][ T6443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.663184][ T6443] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.716353][ T6437] loop3: detected capacity change from 0 to 40427 [ 120.733680][ T6443] EXT4-fs (loop2): 1 truncate cleaned up [ 120.740197][ T6437] F2FS-fs (loop3): heap/no_heap options were deprecated [ 120.750411][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.003633][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.738576][ T6463] loop2: detected capacity change from 0 to 1024 [ 121.797411][ T6463] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 121.815734][ T6463] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 121.836455][ T6463] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.242: Failed to acquire dquot type 0 [ 121.894131][ T6463] EXT4-fs error (device loop2): mb_free_blocks:1943: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 121.945626][ T6463] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #13: comm syz.2.242: corrupted inode contents [ 121.987133][ T6463] EXT4-fs error (device loop2): ext4_dirty_inode:6100: inode #13: comm syz.2.242: mark_inode_dirty error [ 122.032111][ T6463] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #13: comm syz.2.242: corrupted inode contents [ 122.072316][ T6463] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.242: mark_inode_dirty error [ 122.087454][ T6459] loop3: detected capacity change from 0 to 32768 [ 122.100836][ T6463] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #13: comm syz.2.242: corrupted inode contents [ 122.107393][ T6459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.240 (6459) [ 122.149011][ T6463] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 122.179294][ T6463] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #13: comm syz.2.242: corrupted inode contents [ 122.195159][ T6459] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.217656][ T6463] EXT4-fs error (device loop2): ext4_truncate:4283: inode #13: comm syz.2.242: mark_inode_dirty error [ 122.225712][ T6459] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 122.256155][ T6463] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 122.260040][ T6459] BTRFS info (device loop3): setting nodatacow, compression disabled [ 122.269892][ T6463] EXT4-fs (loop2): 1 truncate cleaned up [ 122.283474][ T6459] BTRFS info (device loop3): force clearing of disk cache [ 122.285003][ T6463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.305555][ T6459] BTRFS info (device loop3): setting datacow [ 122.311835][ T6459] BTRFS info (device loop3): enabling disk space caching [ 122.345963][ T6459] BTRFS info (device loop3): turning on sync discard [ 122.352831][ T6459] BTRFS info (device loop3): disabling disk space caching [ 122.379480][ T6463] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 122.407490][ T6459] BTRFS info (device loop3): turning off discard [ 122.433550][ T6459] BTRFS info (device loop3): use no compression [ 122.461341][ T6463] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 122.489896][ T6463] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 122.504017][ T6463] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 122.544896][ T6463] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.242: Failed to acquire dquot type 0 [ 122.573147][ T6459] BTRFS info (device loop3): rebuilding free space tree [ 122.608236][ T6463] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 122.706731][ T6459] BTRFS info (device loop3): disabling free space tree [ 122.713850][ T6459] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.755566][ T6459] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.788889][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.103397][ T6495] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 123.276638][ T5773] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.435695][ T6497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.250'. [ 123.557717][ T6491] loop4: detected capacity change from 0 to 32768 [ 123.586858][ T6491] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.247 (6491) [ 123.688350][ T6491] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.720909][ T6491] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 123.765880][ T6491] BTRFS info (device loop4): doing ref verification [ 123.772792][ T6491] BTRFS info (device loop4): turning on async discard [ 123.815480][ T6491] BTRFS info (device loop4): force clearing of disk cache [ 123.842834][ T6491] BTRFS info (device loop4): doing ref verification [ 123.861259][ T6491] BTRFS info (device loop4): disabling free space tree [ 123.874191][ T6491] BTRFS info (device loop4): max_inline at 4096 [ 124.009365][ T6491] BTRFS info (device loop4): rebuilding free space tree [ 124.104540][ T6491] BTRFS info (device loop4): disabling free space tree [ 124.123695][ T6491] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.136712][ T6522] loop2: detected capacity change from 0 to 128 [ 124.150340][ T6491] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.173721][ T6522] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.224087][ T6524] loop3: detected capacity change from 0 to 1024 [ 124.228362][ T6522] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.247089][ T6524] EXT4-fs: Ignoring removed oldalloc option [ 124.263149][ T6522] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.263790][ T6524] EXT4-fs: Ignoring removed orlov option [ 124.339370][ T6524] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 124.399343][ T6524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.594393][ T6522] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 124.625188][ T6524] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.256: Allocating blocks 497-513 which overlap fs metadata [ 124.669499][ T6091] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.701813][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.965241][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.001365][ T6536] xt_bpf: check failed: parse error [ 125.164346][ T6538] loop3: detected capacity change from 0 to 256 [ 125.377457][ T6542] loop2: detected capacity change from 0 to 4096 [ 126.337063][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.349749][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.358501][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.396813][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.404854][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 126.423770][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.441465][ T27] audit: type=1326 audit(1750191970.197:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.469051][ T27] audit: type=1326 audit(1750191970.197:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.557681][ T27] audit: type=1326 audit(1750191970.197:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.607213][ T6571] loop2: detected capacity change from 0 to 16 [ 126.628531][ T6571] erofs: (device loop2): mounted with root inode @ nid 36. [ 126.651095][ T27] audit: type=1326 audit(1750191970.197:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.664386][ T6571] overlayfs: upper fs does not support file handles, falling back to index=off. [ 126.698000][ T6571] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 126.734885][ T27] audit: type=1326 audit(1750191970.197:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.792662][ T27] audit: type=1326 audit(1750191970.207:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.847344][ T27] audit: type=1326 audit(1750191970.207:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.883789][ T27] audit: type=1326 audit(1750191970.207:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.921116][ T27] audit: type=1326 audit(1750191970.207:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.944441][ T27] audit: type=1326 audit(1750191970.207:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.969695][ T27] audit: type=1326 audit(1750191970.207:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 126.992708][ T27] audit: type=1326 audit(1750191970.207:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 127.016786][ T27] audit: type=1326 audit(1750191970.207:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 127.061823][ T27] audit: type=1326 audit(1750191970.207:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0135b8e929 code=0x7ffc0000 [ 127.172074][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 127.419657][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.435739][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.455846][ T6560] bridge_slave_0: entered allmulticast mode [ 127.482864][ T6560] bridge_slave_0: entered promiscuous mode [ 127.493394][ T6599] loop4: detected capacity change from 0 to 256 [ 127.507947][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.520724][ T6599] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.521565][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.545676][ T6560] bridge_slave_1: entered allmulticast mode [ 127.545711][ T6599] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 127.553294][ T6560] bridge_slave_1: entered promiscuous mode [ 127.637782][ T6599] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d) [ 127.657572][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.683157][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.783969][ T6560] team0: Port device team_slave_0 added [ 127.799179][ T6560] team0: Port device team_slave_1 added [ 127.863117][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.880766][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.931255][ T6585] loop3: detected capacity change from 0 to 32768 [ 127.938081][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.956222][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.964387][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.995195][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.028539][ T6585] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.087718][ T6560] hsr_slave_0: entered promiscuous mode [ 128.095912][ T6560] hsr_slave_1: entered promiscuous mode [ 128.102671][ T6560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.111635][ T6560] Cannot create hsr debugfs directory [ 128.223419][ T6585] XFS (loop3): Ending clean mount [ 128.253650][ T6585] XFS (loop3): Quotacheck needed: Please wait. [ 128.338367][ T6585] XFS (loop3): Quotacheck: Done. [ 128.533065][ T6560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.555571][ T5785] Bluetooth: hci2: command tx timeout [ 128.567235][ T6560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.614489][ T6560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.623752][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.664111][ T6560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.009187][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.058927][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.100719][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.108283][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.121661][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.129106][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.694816][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.741066][ T6623] loop3: detected capacity change from 0 to 8192 [ 129.793152][ T6623] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 129.805677][ T6623] UDF-fs: Scanning with blocksize 512 failed [ 129.818309][ T6623] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 129.836088][ T6623] UDF-fs: Scanning with blocksize 1024 failed [ 129.857218][ T6623] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 129.865006][ T6623] UDF-fs: Scanning with blocksize 2048 failed [ 129.907952][ T6623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.436307][ T6560] veth0_vlan: entered promiscuous mode [ 130.460948][ T6560] veth1_vlan: entered promiscuous mode [ 130.538733][ T6634] loop2: detected capacity change from 0 to 256 [ 130.572788][ T6560] veth0_macvtap: entered promiscuous mode [ 130.611365][ T6560] veth1_macvtap: entered promiscuous mode [ 130.625995][ T5785] Bluetooth: hci2: command tx timeout [ 130.731671][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.753819][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.780493][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.791663][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.801858][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.813389][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.823856][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.834568][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.858237][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.941916][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.960804][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.973618][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.984445][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.995113][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.005778][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.015932][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.026653][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.038758][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.079224][ T6560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.115463][ T6560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.124506][ T6560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.165505][ T6560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.415854][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.444604][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.444907][ T6645] loop4: detected capacity change from 0 to 4096 [ 131.507748][ T6645] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 131.517734][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.528381][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.918576][ T6654] loop5: detected capacity change from 0 to 1024 [ 131.966351][ T6654] ext4: Unknown parameter 'uid<00000000000000000000' [ 132.170803][ T6668] loop4: detected capacity change from 0 to 1024 [ 132.196469][ T6668] EXT4-fs: Ignoring removed bh option [ 132.239581][ T6668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 132.497940][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 132.601479][ T6666] loop3: detected capacity change from 0 to 32768 [ 132.644116][ T6666] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.705485][ T5785] Bluetooth: hci2: command tx timeout [ 132.827387][ T6666] XFS (loop3): Ending clean mount [ 132.851498][ T6666] XFS (loop3): Quotacheck needed: Please wait. [ 132.953637][ T6666] XFS (loop3): Quotacheck: Done. [ 132.991700][ T6660] loop2: detected capacity change from 0 to 40427 [ 133.010024][ T6660] F2FS-fs (loop2): invalid crc value [ 133.042761][ T6660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.130151][ T6660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.215195][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.276273][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.286773][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.704937][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 133.732392][ T6693] xfrm1: entered promiscuous mode [ 133.744078][ T6693] xfrm1: entered allmulticast mode [ 133.783328][ T6690] syz.2.298: attempt to access beyond end of device [ 133.783328][ T6690] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.810708][ T6690] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 133.985622][ T5783] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.205555][ T5783] usb 5-1: Using ep0 maxpacket: 8 [ 134.213007][ T5783] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 134.221644][ T5783] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.245571][ T5783] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.265538][ T5783] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.285384][ T5783] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.315481][ T5783] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.345459][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.577968][ T5783] usb 5-1: usb_control_msg returned -32 [ 134.583825][ T5783] usbtmc 5-1:16.0: can't read capabilities [ 134.786125][ T5785] Bluetooth: hci2: command tx timeout [ 135.829873][ T6722] loop5: detected capacity change from 0 to 8 [ 135.857710][ T6722] SQUASHFS error: zlib decompression failed, data probably corrupt [ 135.877509][ T6722] SQUASHFS error: Failed to read block 0x9b: -5 [ 135.883864][ T6722] SQUASHFS error: Unable to read metadata cache entry [99] [ 135.905150][ T6722] SQUASHFS error: Unable to read inode 0x127 [ 136.739064][ T5824] usb 5-1: USB disconnect, device number 4 [ 137.450855][ T6743] loop2: detected capacity change from 0 to 32768 [ 137.466740][ T6743] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.330 (6743) [ 137.501758][ T6743] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.524825][ T6743] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 137.537687][ T6743] BTRFS info (device loop2): enabling auto defrag [ 137.544737][ T6743] BTRFS info (device loop2): doing ref verification [ 137.551775][ T6743] BTRFS info (device loop2): use no compression [ 137.558643][ T6743] BTRFS info (device loop2): force clearing of disk cache [ 137.566090][ T6743] BTRFS info (device loop2): setting nodatacow, compression disabled [ 137.574660][ T6743] BTRFS info (device loop2): disabling free space tree [ 137.675468][ T6743] BTRFS info (device loop2): enabling ssd optimizations [ 137.685032][ T6743] BTRFS info (device loop2): auto enabling async discard [ 137.717587][ T6743] BTRFS info (device loop2): rebuilding free space tree [ 137.763195][ T6743] BTRFS info (device loop2): disabling free space tree [ 137.775560][ T6743] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.795436][ T6743] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.893852][ T27] audit: type=1800 audit(1750191981.647:17): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.330" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 138.310129][ T5777] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.075899][ T5824] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.275427][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 139.294374][ T5824] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 139.314520][ T5824] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.340970][ T5824] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.385864][ T5824] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.415582][ T5824] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.459595][ T5824] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.495458][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.738406][ T5824] usb 3-1: usb_control_msg returned -32 [ 139.754838][ T5824] usbtmc 3-1:16.0: can't read capabilities [ 140.057050][ T6824] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 140.296326][ T6833] loop3: detected capacity change from 0 to 256 [ 140.897520][ T6844] loop3: detected capacity change from 0 to 1024 [ 140.921843][ T6844] EXT4-fs: Ignoring removed nobh option [ 140.928305][ T6844] EXT4-fs: Ignoring removed bh option [ 140.946640][ T6844] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.946974][ T6845] loop4: detected capacity change from 0 to 128 [ 140.989364][ T6844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.019002][ T6845] ADFS-fs (loop4): unrecognised mount option "uid=0x0000000000000000ÿ0x0000000000000000" or missing value [ 141.116704][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.239860][ T6850] loop3: detected capacity change from 0 to 64 [ 141.446604][ T6853] loop4: detected capacity change from 0 to 128 [ 141.482136][ T6853] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 141.527662][ T6853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.858521][ T5825] usb 3-1: USB disconnect, device number 4 [ 141.982154][ T6861] loop2: detected capacity change from 0 to 512 [ 142.002814][ T6861] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #17: comm syz.2.368: iget: bogus i_mode (0) [ 142.011654][ T6852] loop3: detected capacity change from 0 to 32768 [ 142.021837][ T6861] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.368: couldn't read orphan inode 17 (err -117) [ 142.036996][ T6861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.156808][ T6868] loop5: detected capacity change from 0 to 256 [ 142.296528][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.861204][ T6886] loop2: detected capacity change from 0 to 2048 [ 142.871983][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 142.893498][ T6886] EXT4-fs: Ignoring removed nobh option [ 142.898133][ T6888] loop3: detected capacity change from 0 to 256 [ 142.943473][ T6886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.957213][ T27] audit: type=1800 audit(1750191986.707:18): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.380" name="file1" dev="loop3" ino=1048617 res=0 errno=0 [ 142.958128][ T6888] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 143.108695][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.150420][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.174532][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.197107][ T5825] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.225480][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.255125][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.277529][ T5825] usb 6-1: config 0 descriptor?? [ 143.428706][ T6894] loop2: detected capacity change from 0 to 16 [ 143.448741][ T6894] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.742397][ T5825] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 143.781495][ T5825] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 144.161520][ T5825] usb 6-1: USB disconnect, device number 2 [ 144.281300][ T6901] loop4: detected capacity change from 0 to 256 [ 144.341128][ T2932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.372910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 144.381478][ T6901] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 144.641655][ T2932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.781320][ T2932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.041994][ T6906] loop5: detected capacity change from 0 to 512 [ 145.073962][ T2932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.092463][ T6906] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.124831][ T6906] EXT4-fs (loop5): 1 truncate cleaned up [ 145.143249][ T6906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.171596][ T6908] netlink: 'syz.4.391': attribute type 39 has an invalid length. [ 145.324918][ T6560] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.474807][ T6904] loop3: detected capacity change from 0 to 32768 [ 145.508416][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.519788][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.540833][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.550723][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.559023][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.576008][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.639364][ T6904] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.824355][ T6904] XFS (loop3): Ending clean mount [ 145.847800][ T6904] XFS (loop3): Quotacheck needed: Please wait. [ 145.873080][ T58] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2443 dinode [ 145.886450][ T58] XFS (loop3): Unmount and run xfs_repair [ 145.892352][ T58] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 145.901817][ T58] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 145.911445][ T58] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.922372][ T58] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 145.933809][ T58] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 145.944757][ T58] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.960917][ T58] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 145.971211][ T58] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 145.985422][ T58] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 146.029578][ T6904] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 146.182887][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.208820][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 146.440697][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.451086][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.458460][ T6914] bridge_slave_0: entered allmulticast mode [ 146.466756][ T6914] bridge_slave_0: entered promiscuous mode [ 146.494763][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.503478][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.512480][ T6914] bridge_slave_1: entered allmulticast mode [ 146.520185][ T6914] bridge_slave_1: entered promiscuous mode [ 146.573322][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.587065][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.661508][ T6914] team0: Port device team_slave_0 added [ 146.671180][ T6914] team0: Port device team_slave_1 added [ 146.728295][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.742914][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.770814][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.812293][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.820363][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.846891][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.921734][ T6914] hsr_slave_0: entered promiscuous mode [ 146.929770][ T6914] hsr_slave_1: entered promiscuous mode [ 146.936295][ T6914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.943880][ T6914] Cannot create hsr debugfs directory [ 146.955228][ T2932] hsr_slave_0: left promiscuous mode [ 146.961907][ T2932] hsr_slave_1: left promiscuous mode [ 146.968136][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.976248][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.984170][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.991956][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.001331][ T2932] bridge_slave_1: left allmulticast mode [ 147.007633][ T2932] bridge_slave_1: left promiscuous mode [ 147.013489][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.024196][ T2932] bridge_slave_0: left allmulticast mode [ 147.030299][ T2932] bridge_slave_0: left promiscuous mode [ 147.036516][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.063848][ T2932] veth1_macvtap: left promiscuous mode [ 147.069681][ T2932] veth0_macvtap: left promiscuous mode [ 147.075289][ T2932] veth1_vlan: left promiscuous mode [ 147.080701][ T2932] veth0_vlan: left promiscuous mode [ 147.672992][ T5091] Bluetooth: hci1: command tx timeout [ 147.711033][ T2932] team0 (unregistering): Port device team_slave_1 removed [ 147.769694][ T2932] team0 (unregistering): Port device team_slave_0 removed [ 147.823261][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.889528][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.513055][ T2932] bond0 (unregistering): Released all slaves [ 148.824650][ T6914] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.839673][ T6914] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.872995][ T6914] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.887219][ T6914] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.978488][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.010514][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.026932][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.034094][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.059768][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.067188][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.269219][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.509702][ T6914] veth0_vlan: entered promiscuous mode [ 149.521546][ T6914] veth1_vlan: entered promiscuous mode [ 149.553282][ T6914] veth0_macvtap: entered promiscuous mode [ 149.569927][ T6914] veth1_macvtap: entered promiscuous mode [ 149.592719][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.604652][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.615607][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.627239][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.637457][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.648373][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.658398][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.669302][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.681254][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.693992][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.704883][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.715178][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.727117][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.737301][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.748697][ T5091] Bluetooth: hci1: command tx timeout [ 149.755778][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.765882][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.776842][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.790259][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.814059][ T6914] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.823338][ T6914] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.832425][ T6914] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.842074][ T6914] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.927682][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.941061][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.964969][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.973242][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.254045][ T6957] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 150.446540][ T6963] loop4: detected capacity change from 0 to 1024 [ 150.467770][ T6963] ext3: Unknown parameter 'fowner<00000000000000000000' [ 150.561914][ T6967] loop8: detected capacity change from 0 to 7 [ 150.584001][ T6967] Dev loop8: unable to read RDB block 7 [ 150.595905][ T6967] loop8: AHDI p1 p3 p4 [ 150.602775][ T6967] loop8: partition table partially beyond EOD, truncated [ 150.621723][ T6967] loop8: p1 start 975770946 is beyond EOD, truncated [ 150.633798][ T6967] loop8: p3 start 6514546 is beyond EOD, truncated [ 150.874949][ T27] audit: type=1326 audit(1750191994.627:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.5.405" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcae198e929 code=0x0 [ 151.797140][ T6986] loop5: detected capacity change from 0 to 2048 [ 151.828745][ T5091] Bluetooth: hci1: command tx timeout [ 151.890121][ T6986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.968383][ T6997] loop4: detected capacity change from 0 to 1024 [ 152.005514][ T6986] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 152.029445][ T6986] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 152.055204][ T6986] EXT4-fs (loop5): This should not happen!! Data will be lost [ 152.055204][ T6986] [ 152.075945][ T6986] EXT4-fs (loop5): Total free blocks count 0 [ 152.082125][ T6986] EXT4-fs (loop5): Free/Dirty block details [ 152.103303][ T6986] EXT4-fs (loop5): free_blocks=2415919504 [ 152.123600][ T6986] EXT4-fs (loop5): dirty_blocks=80 [ 152.143040][ T6986] EXT4-fs (loop5): Block reservation details [ 152.155440][ T6986] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 152.246331][ T3511] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.461852][ T7006] loop5: detected capacity change from 0 to 2048 [ 152.559322][ T7011] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.932614][ T6995] loop3: detected capacity change from 0 to 40427 [ 152.964827][ T6995] F2FS-fs (loop3): invalid crc value [ 152.982914][ T6995] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.163217][ T6995] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 153.412576][ T6995] syz.3.415: attempt to access beyond end of device [ 153.412576][ T6995] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.474201][ T6995] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 153.906176][ T5091] Bluetooth: hci1: command tx timeout [ 154.394230][ T7022] syzkaller1: entered promiscuous mode [ 154.434824][ T7022] syzkaller1: entered allmulticast mode [ 155.056247][ T7025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.426'. [ 155.432368][ T7014] loop6: detected capacity change from 0 to 262144 [ 155.462719][ T7014] F2FS-fs (loop6): invalid crc value [ 155.474824][ T7014] F2FS-fs (loop6): Found nat_bits in checkpoint [ 155.534718][ T7014] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 155.783175][ T7040] loop5: detected capacity change from 0 to 512 [ 155.793569][ T7040] EXT4-fs: Ignoring removed bh option [ 155.807073][ T7040] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 155.879729][ T7040] EXT4-fs (loop5): 1 truncate cleaned up [ 155.893840][ T7040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.324397][ T6560] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.419380][ T1014] Bluetooth: hci4: Frame reassembly failed (-84) [ 157.310594][ T7061] loop5: detected capacity change from 0 to 32768 [ 157.847428][ T7068] loop5: detected capacity change from 0 to 128 [ 157.859680][ T7068] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 157.889285][ T7068] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.908365][ T7068] ext2 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.090784][ T6560] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.465525][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.465569][ T5785] Bluetooth: hci4: command 0x1003 tx timeout [ 159.138708][ T786] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.327133][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.341263][ T786] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 159.350928][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.363547][ T786] usb 5-1: config 0 descriptor?? [ 159.634844][ T7109] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 159.820102][ T786] dragonrise 0003:0079:0006.0005: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 159.852374][ T786] dragonrise 0003:0079:0006.0005: no inputs found [ 159.867094][ T786] dragonrise 0003:0079:0006.0005: force feedback init failed [ 160.086621][ T5820] usb 5-1: USB disconnect, device number 5 [ 160.459659][ T7128] syz.3.465[7128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.459919][ T7128] syz.3.465[7128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.607191][ T7132] loop6: detected capacity change from 0 to 512 [ 160.654894][ T7132] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.467: casefold flag without casefold feature [ 160.673081][ T7132] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.467: couldn't read orphan inode 15 (err -117) [ 160.696118][ T7132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.722523][ T7138] loop5: detected capacity change from 0 to 64 [ 160.844527][ T7132] EXT4-fs (loop6): shut down requested (0) [ 161.050822][ T6914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.195519][ T5824] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.215106][ T7156] loop6: detected capacity change from 0 to 2048 [ 161.226751][ T7156] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=18576, location=18576 [ 161.237519][ T7159] loop4: detected capacity change from 0 to 128 [ 161.259802][ T7159] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 161.265174][ T7156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.391997][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 161.407342][ T5824] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.408378][ T7162] loop3: detected capacity change from 0 to 1024 [ 161.424314][ T5824] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.445627][ T5824] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.462102][ T5824] usb 6-1: config 1 interface 0 has no altsetting 0 [ 161.473006][ T5824] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.482434][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.505545][ T5824] usb 6-1: Product: syz [ 161.509823][ T5824] usb 6-1: Manufacturer: syz [ 161.535205][ T5824] usb 6-1: SerialNumber: syz [ 161.621969][ T7166] loop6: detected capacity change from 0 to 2048 [ 161.650523][ T7166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.663242][ T2932] hfsplus: b-tree write err: -5, ino 4 [ 161.781796][ T5824] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 161.859643][ T6914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.915486][ T7173] loop3: detected capacity change from 0 to 4096 [ 161.935063][ T7173] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 162.046919][ T5824] usb 6-1: USB disconnect, device number 3 [ 162.059789][ T5824] usblp0: removed [ 162.152694][ T7182] loop4: detected capacity change from 0 to 2048 [ 162.171780][ T7182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.638596][ T7196] loop4: detected capacity change from 0 to 1024 [ 162.786340][ T2932] hfsplus: b-tree write err: -5, ino 4 [ 162.808884][ T7200] loop5: detected capacity change from 0 to 512 [ 162.841382][ T7200] EXT4-fs: Ignoring removed bh option [ 162.859442][ T7200] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.877550][ T7200] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 162.919929][ T7200] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 162.935178][ T7200] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.967673][ T7200] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 162.994516][ T7204] loop4: detected capacity change from 0 to 2048 [ 163.010702][ T7200] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 163.041890][ T23] kernel write not supported for file /media2 (pid: 23 comm: kworker/1:0) [ 163.049281][ T7200] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.495: Failed to acquire dquot type 1 [ 163.084727][ T7204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.178055][ T7200] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.495: Invalid block bitmap block 0 in block_group 0 [ 163.250225][ T7200] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.495: Invalid block bitmap block 0 in block_group 0 [ 163.278158][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.306017][ T7200] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.495: Invalid block bitmap block 0 in block_group 0 [ 163.355656][ T7200] Quota error (device loop5): write_blk: dquota write failed [ 163.363361][ T7200] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 163.410666][ T7200] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.495: Failed to acquire dquot type 1 [ 163.467087][ T7200] Quota error (device loop5): write_blk: dquota write failed [ 163.494062][ T7200] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 163.518733][ T7200] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.495: Failed to acquire dquot type 1 [ 163.559580][ T7200] EXT4-fs (loop5): 1 orphan inode deleted [ 163.582300][ T7200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.702985][ T6560] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.815526][ T5825] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.018440][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.045456][ T5825] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 164.054670][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.074835][ T5825] usb 5-1: config 0 descriptor?? [ 164.325597][ T5824] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.382044][ T7238] loop5: detected capacity change from 0 to 4096 [ 164.391415][ T7238] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 164.450159][ T7241] loop3: detected capacity change from 0 to 512 [ 164.460441][ T7241] EXT4-fs: Ignoring removed bh option [ 164.466212][ T7241] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.475164][ T7241] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 164.496050][ T7241] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 164.501826][ T5825] uclogic 0003:5543:0003.0006: unknown main item tag 0x0 [ 164.504606][ T7241] EXT4-fs (loop3): orphan cleanup on readonly fs [ 164.518502][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 164.527875][ T5824] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.533955][ T5825] uclogic 0003:5543:0003.0006: item fetching failed at offset 1/5 [ 164.539457][ T5824] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.550409][ T7241] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 164.556981][ T5824] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.581099][ T5824] usb 7-1: config 1 interface 0 has no altsetting 0 [ 164.583928][ T5825] uclogic 0003:5543:0003.0006: parse failed [ 164.589010][ T7241] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 164.613384][ T7241] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.511: Failed to acquire dquot type 1 [ 164.616212][ T5824] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.626811][ T5825] uclogic: probe of 0003:5543:0003.0006 failed with error -22 [ 164.650631][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.659553][ T5824] usb 7-1: Product: syz [ 164.663830][ T5824] usb 7-1: Manufacturer: syz [ 164.668838][ T7241] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.511: Invalid block bitmap block 0 in block_group 0 [ 164.682433][ T5824] usb 7-1: SerialNumber: syz [ 164.701165][ T7241] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.511: Invalid block bitmap block 0 in block_group 0 [ 164.734188][ T7241] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.511: Invalid block bitmap block 0 in block_group 0 [ 164.771586][ T7241] Quota error (device loop3): write_blk: dquota write failed [ 164.800845][ T7241] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 164.825455][ T7241] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.511: Failed to acquire dquot type 1 [ 164.847109][ T7241] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.511: Failed to acquire dquot type 1 [ 164.862127][ T28] usb 5-1: USB disconnect, device number 6 [ 164.884097][ T7241] EXT4-fs (loop3): 1 orphan inode deleted [ 164.892028][ T7241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.918817][ T5824] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 164.999373][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.209899][ T5824] usb 7-1: USB disconnect, device number 2 [ 165.218648][ T5824] usblp0: removed [ 165.516478][ T7249] loop3: detected capacity change from 0 to 256 [ 165.550045][ T7249] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 166.434359][ T7267] loop6: detected capacity change from 0 to 4096 [ 166.468640][ T5091] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 166.477630][ T5091] Bluetooth: hci0: Injecting HCI hardware error event [ 166.488593][ T5091] Bluetooth: hci0: hardware error 0x00 [ 166.777149][ T7274] netlink: 'syz.5.524': attribute type 1 has an invalid length. [ 166.802883][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.524'. [ 166.855933][ T7279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 167.052428][ T7285] loop3: detected capacity change from 0 to 164 [ 167.394805][ T7292] loop3: detected capacity change from 0 to 4096 [ 168.066352][ T7307] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 168.079054][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 168.230336][ T7309] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 168.545644][ T5091] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 168.569320][ T7317] loop4: detected capacity change from 0 to 4096 [ 168.584950][ T7317] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 169.275817][ T7325] loop6: detected capacity change from 0 to 164 [ 169.596497][ T7329] syzkaller1: entered promiscuous mode [ 169.602063][ T7329] syzkaller1: entered allmulticast mode [ 170.044665][ T7323] loop5: detected capacity change from 0 to 32768 [ 170.062870][ T7323] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.552 (7323) [ 170.085249][ T7323] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.115216][ T7323] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 170.124557][ T7323] BTRFS info (device loop5): using free space tree [ 170.239167][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.255576][ T7323] BTRFS info (device loop5): enabling ssd optimizations [ 170.263539][ T7323] BTRFS info (device loop5): auto enabling async discard [ 170.461862][ T23] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 170.493110][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.521629][ T23] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.545456][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.573886][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.589358][ T6560] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.640873][ T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 170.672227][ T23] usb 4-1: invalid MIDI out EP 0 [ 170.948839][ T23] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 170.961859][ T23] usb 4-1: USB disconnect, device number 4 [ 171.017304][ T7366] loop6: detected capacity change from 0 to 1024 [ 171.146199][ T7366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.255001][ T7366] EXT4-fs error (device loop6): __ext4_remount:6741: comm syz.6.559: Abort forced by user [ 171.268088][ T7366] EXT4-fs (loop6): Remounting filesystem read-only [ 171.274688][ T7366] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 171.291794][ T7366] overlayfs: failed to get metacopy (-5) [ 171.474635][ T7380] loop5: detected capacity change from 0 to 4096 [ 171.494527][ T7380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.558956][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 171.558972][ T27] audit: type=1800 audit(1750192015.317:20): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.564" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 171.591806][ T6560] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.601528][ T6914] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.731614][ T2974] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.932897][ T2974] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.134328][ T2974] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.334581][ T2974] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.581349][ T7401] loop3: detected capacity change from 0 to 1024 [ 172.627418][ T7401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.627478][ T7402] batadv0: entered promiscuous mode [ 172.655487][ T5824] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.680137][ T7402] batadv0: left promiscuous mode [ 172.705032][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.734351][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.736060][ T7401] EXT4-fs error (device loop3): __ext4_remount:6741: comm syz.3.573: Abort forced by user [ 172.743746][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.761853][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.769957][ T7401] EXT4-fs (loop3): Remounting filesystem read-only [ 172.771019][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.784506][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.786088][ T7401] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 172.859282][ T7401] overlayfs: failed to get metacopy (-5) [ 172.867971][ T5824] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 172.898951][ T5824] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.933293][ T5824] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.988870][ T5824] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.998356][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.021152][ T5824] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 173.034573][ T5824] usb 5-1: invalid MIDI out EP 0 [ 173.151992][ T5824] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 173.176081][ T5820] kernel write not supported for file /166/clear_refs (pid: 5820 comm: kworker/0:4) [ 173.364945][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.365624][ T5820] usb 5-1: USB disconnect, device number 7 [ 173.490192][ T7405] chnl_net:caif_netlink_parms(): no params data found [ 173.555685][ T5825] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 173.724111][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.732150][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.742812][ T7405] bridge_slave_0: entered allmulticast mode [ 173.751635][ T7405] bridge_slave_0: entered promiscuous mode [ 173.759645][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.778497][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.801091][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.814441][ T5825] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.830759][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.839420][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.847159][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.856218][ T7405] bridge_slave_1: entered allmulticast mode [ 173.863286][ T5825] usb 6-1: config 0 descriptor?? [ 173.872362][ T7405] bridge_slave_1: entered promiscuous mode [ 173.961241][ T7405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.003176][ T7405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.085139][ T7405] team0: Port device team_slave_0 added [ 174.104590][ T7405] team0: Port device team_slave_1 added [ 174.156916][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.169451][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.179077][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.190565][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.206022][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.214016][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.284265][ T7405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.291451][ T7405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.303357][ T5825] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 174.325511][ T7405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.336059][ T5825] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 174.342508][ T7405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.356951][ T7405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.383988][ T7405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.543675][ T7405] hsr_slave_0: entered promiscuous mode [ 174.553941][ T7405] hsr_slave_1: entered promiscuous mode [ 174.561326][ T7405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.570693][ T7405] Cannot create hsr debugfs directory [ 174.589194][ T2974] hsr_slave_0: left promiscuous mode [ 174.595905][ T2974] hsr_slave_1: left promiscuous mode [ 174.603161][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.611177][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.621285][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.629258][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.637912][ T2974] bridge_slave_1: left allmulticast mode [ 174.643826][ T2974] bridge_slave_1: left promiscuous mode [ 174.649870][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.659966][ T2974] bridge_slave_0: left allmulticast mode [ 174.668137][ T2974] bridge_slave_0: left promiscuous mode [ 174.674107][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.701723][ T28] usb 6-1: USB disconnect, device number 4 [ 174.709241][ T2974] veth1_macvtap: left promiscuous mode [ 174.714981][ T2974] veth0_macvtap: left promiscuous mode [ 174.723306][ T2974] veth1_vlan: left promiscuous mode [ 174.729494][ T2974] veth0_vlan: left promiscuous mode [ 174.866757][ T5785] Bluetooth: hci1: command tx timeout [ 175.380526][ T7427] loop5: detected capacity change from 0 to 1024 [ 175.408828][ T7427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.512794][ T7431] EXT4-fs error (device loop5): __ext4_remount:6741: comm syz.5.582: Abort forced by user [ 175.529461][ T7431] EXT4-fs (loop5): Remounting filesystem read-only [ 175.540104][ T7431] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 175.576790][ T7427] overlayfs: failed to get metacopy (-5) [ 175.587599][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 175.678977][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 175.780246][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.838527][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.319440][ T5785] Bluetooth: hci0: command tx timeout [ 176.541055][ T2974] bond0 (unregistering): Released all slaves [ 176.907928][ T7434] batadv0: entered promiscuous mode [ 176.915108][ T7434] batadv0: left promiscuous mode [ 176.945703][ T5785] Bluetooth: hci1: command tx timeout [ 176.990374][ T6560] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.378380][ T7418] chnl_net:caif_netlink_parms(): no params data found [ 177.575679][ T2974] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.600428][ T7440] loop4: detected capacity change from 0 to 4096 [ 177.664009][ T7440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.747773][ T2974] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.764612][ T27] audit: type=1800 audit(1750192021.517:21): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.585" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 177.812877][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.836089][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.847470][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.857286][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.861619][ T6091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.866123][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.882489][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.907748][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.931793][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.950156][ T7418] bridge_slave_0: entered allmulticast mode [ 177.961933][ T7418] bridge_slave_0: entered promiscuous mode [ 178.016788][ T2974] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.032783][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.045689][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.053911][ T7418] bridge_slave_1: entered allmulticast mode [ 178.067196][ T7418] bridge_slave_1: entered promiscuous mode [ 178.151092][ T2974] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.178374][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.191266][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.286500][ T7418] team0: Port device team_slave_0 added [ 178.340413][ T7418] team0: Port device team_slave_1 added [ 178.386194][ T5785] Bluetooth: hci0: command tx timeout [ 178.395232][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.402805][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.431568][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.444997][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.452129][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.480351][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.492778][ T7405] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 178.511509][ T7405] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.521815][ T7405] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.539573][ T7405] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.696549][ T7418] hsr_slave_0: entered promiscuous mode [ 178.715004][ T7418] hsr_slave_1: entered promiscuous mode [ 178.734869][ T7418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.744108][ T7418] Cannot create hsr debugfs directory [ 178.840785][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 179.025614][ T5785] Bluetooth: hci1: command tx timeout [ 179.141588][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.149159][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.157246][ T7445] bridge_slave_0: entered allmulticast mode [ 179.164489][ T7445] bridge_slave_0: entered promiscuous mode [ 179.179885][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.189269][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.196994][ T7445] bridge_slave_1: entered allmulticast mode [ 179.204106][ T7445] bridge_slave_1: entered promiscuous mode [ 179.302542][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.317643][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.400440][ T7445] team0: Port device team_slave_0 added [ 179.435159][ T7405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.447202][ T7445] team0: Port device team_slave_1 added [ 179.537592][ T7418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 179.590891][ T7418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 179.606186][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.613286][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.642700][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.655917][ T7418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 179.671560][ T7418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 179.702906][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.710584][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.738119][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.830771][ T7445] hsr_slave_0: entered promiscuous mode [ 179.838246][ T7445] hsr_slave_1: entered promiscuous mode [ 179.844810][ T7445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.852652][ T7445] Cannot create hsr debugfs directory [ 179.868260][ T7405] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.891982][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.899164][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.907282][ T5785] Bluetooth: hci2: command tx timeout [ 180.029640][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.037564][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.077434][ T2974] hsr_slave_0: left promiscuous mode [ 180.083605][ T2974] hsr_slave_1: left promiscuous mode [ 180.090431][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.098187][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.107056][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.114505][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.122900][ T2974] bridge_slave_1: left allmulticast mode [ 180.128815][ T2974] bridge_slave_1: left promiscuous mode [ 180.134571][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.144064][ T2974] bridge_slave_0: left allmulticast mode [ 180.150275][ T2974] bridge_slave_0: left promiscuous mode [ 180.156817][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.183709][ T2974] veth1_macvtap: left promiscuous mode [ 180.190763][ T2974] veth0_macvtap: left promiscuous mode [ 180.196669][ T2974] veth1_vlan: left promiscuous mode [ 180.202212][ T2974] veth0_vlan: left promiscuous mode [ 180.465678][ T5785] Bluetooth: hci0: command tx timeout [ 180.961141][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 181.032985][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 181.096435][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.105624][ T5785] Bluetooth: hci1: command tx timeout [ 181.162938][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.894246][ T2974] bond0 (unregistering): Released all slaves [ 181.991520][ T5785] Bluetooth: hci2: command tx timeout [ 182.122288][ T7405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.369050][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.460401][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.489129][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.496424][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.531761][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.540405][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.545722][ T5785] Bluetooth: hci0: command tx timeout [ 182.593937][ T7405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.754947][ T7445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.768415][ T7445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.817183][ T7445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.836831][ T7445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.064368][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.092504][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.121141][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.153115][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.160588][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.192696][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.200070][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.278820][ T7445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.293190][ T7445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.380923][ T7405] veth0_vlan: entered promiscuous mode [ 183.422561][ T7405] veth1_vlan: entered promiscuous mode [ 183.534464][ T7405] veth0_macvtap: entered promiscuous mode [ 183.583526][ T7405] veth1_macvtap: entered promiscuous mode [ 183.661014][ T7405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.684451][ T7405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.696276][ T7405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.707275][ T7405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.718021][ T7405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.729023][ T7405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.741434][ T7405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.769549][ T7405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.781156][ T7405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.793708][ T7405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.805047][ T7405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.815632][ T7405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.827889][ T7405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.841086][ T7405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.853343][ T7418] veth0_vlan: entered promiscuous mode [ 183.871960][ T7405] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.881311][ T7405] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.891089][ T7405] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.901316][ T7405] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.944288][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.977252][ T7418] veth1_vlan: entered promiscuous mode [ 184.066631][ T5785] Bluetooth: hci2: command tx timeout [ 184.088717][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.101677][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.178621][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.194691][ T7418] veth0_macvtap: entered promiscuous mode [ 184.201318][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.224620][ T7418] veth1_macvtap: entered promiscuous mode [ 184.300012][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.319434][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.355370][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.386164][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.397080][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.412916][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.433375][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.445220][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.468653][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.495125][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.506951][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.518107][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.529237][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.545787][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.565610][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.585463][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.600810][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.617207][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.682219][ T7418] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.692055][ T7418] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.702137][ T7418] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.714375][ T7418] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.779595][ T7445] veth0_vlan: entered promiscuous mode [ 184.821192][ T7445] veth1_vlan: entered promiscuous mode [ 184.916133][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.924177][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.932447][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 184.980894][ T7445] veth0_macvtap: entered promiscuous mode [ 185.015964][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.018913][ T7445] veth1_macvtap: entered promiscuous mode [ 185.035407][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.079646][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.095026][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.108268][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.119921][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.129975][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.149866][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.162345][ T8] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 185.176350][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.188000][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.199856][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.210107][ T8] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.223886][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.234726][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.247200][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.257867][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.277599][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.301811][ T8] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 185.306325][ T7500] loop4: detected capacity change from 0 to 32768 [ 185.317875][ T8] usb 7-1: invalid MIDI out EP 0 [ 185.333993][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.339152][ T7500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.588 (7500) [ 185.348000][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.367353][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.379798][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.403524][ T7500] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.406021][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.417962][ T7500] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 185.438945][ T7500] BTRFS info (device loop4): using free space tree [ 185.453502][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.472334][ T8] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 185.473150][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.490813][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.500993][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.512575][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.526591][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.579001][ T7500] BTRFS info (device loop4): enabling ssd optimizations [ 185.588419][ T7445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.611057][ T7445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.621918][ T7500] BTRFS info (device loop4): auto enabling async discard [ 185.653424][ T7445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.662697][ T7445] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.684942][ T8] usb 7-1: USB disconnect, device number 3 [ 185.801353][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.818202][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.871125][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.884266][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.944063][ T6091] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.988651][ T23] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 186.147311][ T5785] Bluetooth: hci2: command tx timeout [ 186.199287][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.211856][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.221945][ T23] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.245489][ T23] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.254804][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.269159][ T23] usb 8-1: config 0 descriptor?? [ 186.328622][ T27] audit: type=1326 audit(1750192030.087:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 186.361267][ T27] audit: type=1326 audit(1750192030.087:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 186.394738][ T27] audit: type=1326 audit(1750192030.087:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 186.429093][ T27] audit: type=1326 audit(1750192030.087:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 186.458900][ T27] audit: type=1326 audit(1750192030.087:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.4.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 186.560919][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.594'. [ 186.718713][ T23] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 186.737950][ T23] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 187.031138][ T5824] usb 8-1: USB disconnect, device number 2 [ 187.037380][ T7501] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 187.073280][ T7540] loop6: detected capacity change from 0 to 524287999 [ 187.083042][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.092663][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.102023][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.111398][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.119557][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.128888][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.139432][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.149035][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.158079][ T3511] loop: Write error at byte offset 1, length 1024. [ 187.166505][ T3511] loop: Write error at byte offset 521217, length 4096. [ 187.173720][ T3511] loop: Write error at byte offset 1045505, length 4096. [ 187.180856][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 187.180902][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 187.181209][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 187.181240][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 187.223589][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 187.233911][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 187.244622][ T3511] loop: Write error at byte offset 1569793, length 4096. [ 187.252686][ T3511] loop: Write error at byte offset 2094081, length 4096. [ 187.260467][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.268738][ T3511] loop: Write error at byte offset 2618369, length 4096. [ 187.277746][ T7501] usb 7-1: Using ep0 maxpacket: 8 [ 187.285207][ T3511] loop: Write error at byte offset 3142657, length 4096. [ 187.293539][ T7501] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.302651][ T7501] usb 7-1: config 0 has no interface number 0 [ 187.310025][ T3511] loop: Write error at byte offset 3666945, length 4096. [ 187.317299][ T7501] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.329669][ T3511] loop: Write error at byte offset 4191233, length 4096. [ 187.338828][ T7501] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.348902][ T3511] loop: Write error at byte offset 4715521, length 4096. [ 187.370352][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.378472][ T7501] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.391587][ T7501] usb 7-1: config 0 descriptor?? [ 187.399132][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.408092][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.417505][ T7540] ldm_validate_partition_table(): Disk read failed. [ 187.424505][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.431036][ T7501] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 187.457369][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.476144][ T7540] Dev loop6: unable to read RDB block 0 [ 187.498113][ T7540] loop6: unable to read partition table [ 187.504645][ T7540] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 187.582340][ T27] audit: type=1326 audit(1750192031.337:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 187.635616][ T27] audit: type=1326 audit(1750192031.367:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 187.704438][ T23] usb 7-1: USB disconnect, device number 4 [ 187.715469][ T27] audit: type=1326 audit(1750192031.367:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 187.742990][ T27] audit: type=1326 audit(1750192031.367:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 188.092439][ T7558] loop5: detected capacity change from 0 to 256 [ 188.469470][ T7567] loop7: detected capacity change from 0 to 128 [ 188.492105][ T7567] FAT-fs (loop7): bogus logical sector size 65535 [ 188.506560][ T7567] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 188.542367][ T7567] FAT-fs (loop7): Can't find a valid FAT filesystem [ 189.027722][ T27] audit: type=1326 audit(1750192032.787:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228ad8e929 code=0x7ffc0000 [ 189.835664][ T7604] loop4: detected capacity change from 0 to 32768 [ 189.844901][ T7604] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.628 (7604) [ 189.862230][ T7604] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.872712][ T7604] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 189.881523][ T7604] BTRFS info (device loop4): using free space tree [ 189.913352][ T7604] BTRFS info (device loop4): enabling ssd optimizations [ 189.920567][ T7604] BTRFS info (device loop4): auto enabling async discard [ 190.019481][ T7501] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 190.045214][ T6091] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.232229][ T7501] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.255440][ T7501] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.285869][ T7501] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.344750][ T7501] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.354049][ T7501] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.383805][ T7501] usb 7-1: config 0 descriptor?? [ 190.848466][ T7501] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xe [ 190.868020][ T7501] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 190.896429][ T7501] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 190.926330][ T7501] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 191.082199][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 191.093798][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:5 Not tainted 6.6.93-syzkaller #0 [ 191.102029][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.112230][ T5785] Workqueue: hci3 hci_rx_work [ 191.117064][ T5785] Call Trace: [ 191.120381][ T5785] [ 191.123449][ T5785] dump_stack_lvl+0x16c/0x230 [ 191.128457][ T5785] ? show_regs_print_info+0x20/0x20 [ 191.133746][ T5785] ? load_image+0x3b0/0x3b0 [ 191.138601][ T5785] sysfs_create_dir_ns+0x256/0x280 [ 191.144339][ T5785] ? hci_rx_work+0x43a/0xd80 [ 191.149089][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 191.154862][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 191.160395][ T5785] kobject_add_internal+0x6b8/0xc70 [ 191.165660][ T5785] kobject_add+0x156/0x220 [ 191.170346][ T5785] ? __rwlock_init+0x150/0x150 [ 191.175164][ T5785] ? kobject_init+0x1e0/0x1e0 [ 191.179909][ T5785] ? _raw_spin_unlock+0x28/0x40 [ 191.184837][ T5785] ? get_device_parent+0x366/0x390 [ 191.190168][ T5785] device_add+0x408/0xc20 [ 191.194989][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 191.200404][ T5785] le_conn_complete_evt+0xc37/0x1220 [ 191.205821][ T5785] ? hci_event_packet+0x4a7/0x1210 [ 191.211209][ T5785] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 191.217940][ T5785] ? __copy_skb_header+0xa7/0x550 [ 191.223015][ T5785] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 191.228823][ T5785] ? skb_pull_data+0xfb/0x200 [ 191.233841][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 191.239627][ T5785] ? hci_remote_host_features_evt+0x160/0x160 [ 191.245837][ T5785] hci_event_packet+0x795/0x1210 [ 191.249961][ T7501] usb 7-1: USB disconnect, device number 5 [ 191.250810][ T5785] ? bis_list+0x290/0x290 [ 191.261099][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 191.266412][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 191.271679][ T5785] hci_rx_work+0x43a/0xd80 [ 191.276265][ T5785] ? process_scheduled_works+0x957/0x15b0 [ 191.282049][ T5785] process_scheduled_works+0xa45/0x15b0 [ 191.287787][ T5785] ? assign_work+0x400/0x400 [ 191.292464][ T5785] ? assign_work+0x39e/0x400 [ 191.297321][ T5785] worker_thread+0xa55/0xfc0 [ 191.302001][ T5785] kthread+0x2fa/0x390 [ 191.306209][ T5785] ? pr_cont_work+0x560/0x560 [ 191.311060][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 191.315698][ T5785] ret_from_fork+0x48/0x80 [ 191.320351][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 191.325074][ T5785] ret_from_fork_asm+0x11/0x20 [ 191.329917][ T5785] [ 191.337063][ T5785] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.351785][ T5785] Bluetooth: hci3: failed to register connection device [ 191.489638][ T7634] loop7: detected capacity change from 0 to 32768 [ 191.507045][ T7634] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.635 (7634) [ 191.551541][ T7643] loop5: detected capacity change from 0 to 64 [ 191.559942][ T7634] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 191.597035][ T7634] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 191.613653][ T7634] BTRFS info (device loop7): force zlib compression, level 3 [ 191.621596][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 191.621612][ T27] audit: type=1800 audit(1750192035.377:49): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.639" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 191.657277][ T7634] BTRFS info (device loop7): force clearing of disk cache [ 191.664693][ T7634] BTRFS info (device loop7): setting nodatasum [ 191.675733][ T7634] BTRFS info (device loop7): doing ref verification [ 191.682418][ T7634] BTRFS info (device loop7): allowing degraded mounts [ 191.691622][ T7634] BTRFS info (device loop7): enabling disk space caching [ 191.693717][ T7647] loop4: detected capacity change from 0 to 1024 [ 191.699056][ T7634] BTRFS info (device loop7): disk space caching is enabled [ 191.770378][ T7634] BTRFS info (device loop7): enabling ssd optimizations [ 191.783795][ T7634] BTRFS info (device loop7): auto enabling async discard [ 191.833233][ T7634] BTRFS info (device loop7): rebuilding free space tree [ 191.918627][ T7634] BTRFS info (device loop7): disabling free space tree [ 191.964446][ T7634] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.004947][ T7634] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.338934][ T7418] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 192.363552][ T27] audit: type=1326 audit(1750192036.117:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 192.413876][ T27] audit: type=1326 audit(1750192036.117:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 192.521585][ T27] audit: type=1326 audit(1750192036.117:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 192.595485][ T27] audit: type=1326 audit(1750192036.117:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 192.643792][ T27] audit: type=1326 audit(1750192036.127:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 192.715539][ T27] audit: type=1326 audit(1750192036.127:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 192.823605][ T27] audit: type=1326 audit(1750192036.127:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d338e929 code=0x7ffc0000 [ 192.964384][ T7694] loop6: detected capacity change from 0 to 256 [ 193.041722][ T7693] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 193.064669][ T27] audit: type=1804 audit(1750192036.817:57): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.656" name="/newroot/15/file0/file0" dev="loop6" ino=1048639 res=1 errno=0 [ 193.258055][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 193.668259][ T7715] loop6: detected capacity change from 0 to 512 [ 193.687837][ T7715] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 193.708387][ T7715] EXT4-fs error (device loop6): ext4_get_journal_inode:5805: comm syz.6.663: inode #1661: comm syz.6.663: iget: illegal inode # [ 193.745696][ T7715] EXT4-fs (loop6): no journal found [ 193.762453][ T7715] EXT4-fs (loop6): can't get journal size [ 193.774922][ T7715] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 193.791125][ T7715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c118, mo2=0002] [ 193.809536][ T7715] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 193.834787][ T7715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.947027][ T7405] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.721152][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.728003][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.545545][ T3372] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 195.587635][ T7769] loop5: detected capacity change from 0 to 256 [ 195.607142][ T7769] exfat: Deprecated parameter 'namecase' [ 195.632235][ T7769] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3d8a7575, utbl_chksum : 0xe619d30d) [ 195.747595][ T3372] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.775453][ T3372] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.795129][ T3372] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.815426][ T3372] usb 8-1: SerialNumber: syz [ 195.834128][ T7757] loop4: detected capacity change from 0 to 32768 [ 195.858653][ T7773] loop6: detected capacity change from 0 to 4096 [ 195.884743][ T7773] NILFS (loop6): invalid segment: Checksum error in segment payload [ 195.885849][ T7757] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 195.893748][ T7773] NILFS (loop6): trying rollback from an earlier position [ 195.912221][ T7780] loop5: detected capacity change from 0 to 64 [ 195.944881][ T7773] NILFS (loop6): recovery complete [ 195.975133][ T7784] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.074339][ T7757] XFS (loop4): Ending clean mount [ 196.113309][ T7757] XFS (loop4): Quotacheck needed: Please wait. [ 196.234653][ T7757] XFS (loop4): Quotacheck: Done. [ 196.384145][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.690'. [ 196.412376][ T7791] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.422091][ T7791] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.431131][ T7791] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.439946][ T7791] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.472178][ T7791] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.481835][ T7791] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.492030][ T7791] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.501360][ T7791] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.541783][ T6091] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.673200][ T3372] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 196.940999][ T7501] usb 8-1: USB disconnect, device number 3 [ 196.948798][ T7501] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 197.776666][ T7828] syz_tun: entered promiscuous mode [ 197.790955][ T7828] batadv_slave_0: entered promiscuous mode [ 197.963195][ T7834] loop7: detected capacity change from 0 to 512 [ 197.976759][ T7834] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 198.013557][ T7834] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 198.039211][ T7834] EXT4-fs (loop7): 1 truncate cleaned up [ 198.060336][ T7834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.268515][ T7418] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.367652][ T7851] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 198.386557][ T7849] loop5: detected capacity change from 0 to 1024 [ 198.510363][ T7855] loop9: detected capacity change from 0 to 7 [ 198.534116][ C0] blk_print_req_error: 71 callbacks suppressed [ 198.534139][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.550497][ C0] buffer_io_error: 7 callbacks suppressed [ 198.550514][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.567363][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.576883][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.590472][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.599793][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.617110][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.626565][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.647142][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.648022][ T7849] hfsplus: catalog searching failed [ 198.656414][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.656905][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.679416][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.688077][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.697529][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.705661][ T7855] ldm_validate_partition_table(): Disk read failed. [ 198.717279][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.726569][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.738281][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.747563][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.755742][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.765160][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 198.773358][ T7855] Dev loop9: unable to read RDB block 0 [ 198.785432][ T3551] hfsplus: b-tree write err: -5, ino 3 [ 198.794106][ T7855] loop9: unable to read partition table [ 198.800429][ T7855] loop9: partition table beyond EOD, truncated [ 198.818123][ T7445] hfsplus: node 4:3 still has 1 user(s)! [ 198.824510][ T7855] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 198.824510][ T7855] ) failed (rc=-5) [ 199.496113][ T7880] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 199.534055][ T7882] loop6: detected capacity change from 0 to 256 [ 199.630579][ T7871] loop7: detected capacity change from 0 to 32768 [ 199.657819][ T7886] loop4: detected capacity change from 0 to 512 [ 199.693634][ T7882] FAT-fs (loop6): Directory bread(block 64) failed [ 199.706517][ T7882] FAT-fs (loop6): Directory bread(block 65) failed [ 199.713252][ T7882] FAT-fs (loop6): Directory bread(block 66) failed [ 199.737582][ T27] audit: type=1804 audit(1750192043.477:58): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.724" name="/newroot/31/file0/file1" dev="loop7" ino=4 res=1 errno=0 [ 199.760544][ T7882] FAT-fs (loop6): Directory bread(block 67) failed [ 199.768955][ T7882] FAT-fs (loop6): Directory bread(block 68) failed [ 199.776282][ T7882] FAT-fs (loop6): Directory bread(block 69) failed [ 199.779489][ T7886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.783111][ T7882] FAT-fs (loop6): Directory bread(block 70) failed [ 199.802303][ T7882] FAT-fs (loop6): Directory bread(block 71) failed [ 199.815441][ T7882] FAT-fs (loop6): Directory bread(block 72) failed [ 199.822054][ T7882] FAT-fs (loop6): Directory bread(block 73) failed [ 199.829923][ T7886] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.864994][ T111] ------------[ cut here ]------------ [ 199.871526][ T111] WARNING: CPU: 0 PID: 111 at fs/jfs/jfs_dmap.c:2882 dbAdjTree+0x448/0x4d0 [ 199.880376][ T111] Modules linked in: [ 199.884415][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted 6.6.93-syzkaller #0 [ 199.892973][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.903229][ T111] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 199.908554][ T111] Code: e8 6d 32 e0 fe e9 5a ff ff ff e8 d3 8d 87 fe eb 05 e8 cc 8d 87 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b8 8d 87 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 199.928864][ T111] RSP: 0018:ffffc90002cd7ac8 EFLAGS: 00010293 [ 199.934983][ T111] RAX: ffffffff82fe0928 RBX: ffff88805b6f4010 RCX: ffff888018759e00 [ 199.943268][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 199.951391][ T111] RBP: 0000000000020056 R08: ffffea00016dbd07 R09: 1ffffd40002db7a0 [ 199.959703][ T111] R10: dffffc0000000000 R11: fffff940002db7a1 R12: ffff88805b6f4018 [ 199.968893][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 199.977734][ T111] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 199.987034][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.993770][ T111] CR2: 00007f1bac3b7bac CR3: 000000005efcb000 CR4: 00000000003506f0 [ 200.001925][ T111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.010328][ T111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.018547][ T111] Call Trace: [ 200.021899][ T111] [ 200.024955][ T111] ? lock_page+0x2a0/0x2a0 [ 200.029805][ T111] dbJoin+0x238/0x300 [ 200.033861][ T111] dbFreeBits+0x4e2/0xdb0 [ 200.038576][ T111] dbFree+0x332/0x650 [ 200.042633][ T111] txFreeMap+0x7ff/0xde0 [ 200.047020][ T111] txUpdateMap+0x306/0x890 [ 200.051873][ T111] jfs_lazycommit+0x42b/0xa60 [ 200.056980][ T111] ? txFreelock+0x5a0/0x5a0 [ 200.061724][ T111] ? do_task_dead+0xd0/0xd0 [ 200.067129][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 200.072408][ T111] kthread+0x2fa/0x390 [ 200.077033][ T111] ? txFreelock+0x5a0/0x5a0 [ 200.081740][ T111] ? kthread_blkcg+0xd0/0xd0 [ 200.086652][ T111] ret_from_fork+0x48/0x80 [ 200.091374][ T111] ? kthread_blkcg+0xd0/0xd0 [ 200.096323][ T111] ret_from_fork_asm+0x11/0x20 [ 200.101329][ T111] [ 200.104470][ T111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.111872][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted 6.6.93-syzkaller #0 [ 200.119896][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.130168][ T111] Call Trace: [ 200.133741][ T111] [ 200.136876][ T111] dump_stack_lvl+0x16c/0x230 [ 200.141704][ T111] ? show_regs_print_info+0x20/0x20 [ 200.146974][ T111] ? load_image+0x3b0/0x3b0 [ 200.151535][ T111] panic+0x2c0/0x710 [ 200.155561][ T111] ? bpf_jit_dump+0xd0/0xd0 [ 200.160115][ T111] ? ret_from_fork_asm+0x11/0x20 [ 200.165076][ T111] __warn+0x2e0/0x470 [ 200.169070][ T111] ? dbAdjTree+0x448/0x4d0 [ 200.173497][ T111] ? dbAdjTree+0x448/0x4d0 [ 200.178094][ T111] report_bug+0x2be/0x4f0 [ 200.182529][ T111] ? dbAdjTree+0x448/0x4d0 [ 200.187058][ T111] ? dbAdjTree+0x448/0x4d0 [ 200.191533][ T111] ? dbAdjTree+0x44a/0x4d0 [ 200.195957][ T111] handle_bug+0xcf/0x120 [ 200.200216][ T111] exc_invalid_op+0x1a/0x50 [ 200.204732][ T111] asm_exc_invalid_op+0x1a/0x20 [ 200.209880][ T111] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 200.215207][ T111] Code: e8 6d 32 e0 fe e9 5a ff ff ff e8 d3 8d 87 fe eb 05 e8 cc 8d 87 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b8 8d 87 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 200.235215][ T111] RSP: 0018:ffffc90002cd7ac8 EFLAGS: 00010293 [ 200.241667][ T111] RAX: ffffffff82fe0928 RBX: ffff88805b6f4010 RCX: ffff888018759e00 [ 200.250033][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 200.258397][ T111] RBP: 0000000000020056 R08: ffffea00016dbd07 R09: 1ffffd40002db7a0 [ 200.267727][ T111] R10: dffffc0000000000 R11: fffff940002db7a1 R12: ffff88805b6f4018 [ 200.276613][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 200.285058][ T111] ? dbAdjTree+0x448/0x4d0 [ 200.289630][ T111] ? dbAdjTree+0x448/0x4d0 [ 200.294205][ T111] ? lock_page+0x2a0/0x2a0 [ 200.298760][ T111] dbJoin+0x238/0x300 [ 200.302857][ T111] dbFreeBits+0x4e2/0xdb0 [ 200.307216][ T111] dbFree+0x332/0x650 [ 200.311475][ T111] txFreeMap+0x7ff/0xde0 [ 200.315838][ T111] txUpdateMap+0x306/0x890 [ 200.320331][ T111] jfs_lazycommit+0x42b/0xa60 [ 200.325024][ T111] ? txFreelock+0x5a0/0x5a0 [ 200.329549][ T111] ? do_task_dead+0xd0/0xd0 [ 200.334234][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 200.339282][ T111] kthread+0x2fa/0x390 [ 200.343355][ T111] ? txFreelock+0x5a0/0x5a0 [ 200.347867][ T111] ? kthread_blkcg+0xd0/0xd0 [ 200.352464][ T111] ret_from_fork+0x48/0x80 [ 200.356975][ T111] ? kthread_blkcg+0xd0/0xd0 [ 200.361592][ T111] ret_from_fork_asm+0x11/0x20 [ 200.366540][ T111] [ 200.386696][ T111] Kernel Offset: disabled [ 200.391179][ T111] Rebooting in 86400 seconds..