last executing test programs: 11.599188005s ago: executing program 2 (id=233): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x31b, &(0x7f0000000640)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 11.446847487s ago: executing program 2 (id=235): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x4f27, 0x4, 0x2, 0x3, 0x2, 0xcc5, 0x39825e4f, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a446, 0x3, 0x40000003, 0x98, 0xcaa7, 0x0, 0x20001e58, 0x81, 0xe6b, 0x3c, 0x8, 0x2, 0x1, 0xfffffff8]}) read$FUSE(r0, 0x0, 0x0) 11.352557515s ago: executing program 2 (id=238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fff, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x3ff, {[@timestamp={0x8, 0xa, 0x8, 0x7}]}}}}}}}}, 0x0) 11.238548374s ago: executing program 2 (id=240): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5ca, &(0x7f0000001480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x42000, 0x0) getdents64(r0, &(0x7f0000000c80)=""/135, 0x87) 10.952070027s ago: executing program 2 (id=242): writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10.434611059s ago: executing program 2 (id=250): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 10.150437642s ago: executing program 32 (id=250): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 3.699096981s ago: executing program 0 (id=285): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.361112469s ago: executing program 0 (id=288): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.97388011s ago: executing program 0 (id=292): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x4031, 0xffffffffffffffff, 0xdd762000) 2.667099575s ago: executing program 0 (id=295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020596c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.509444027s ago: executing program 1 (id=296): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000200)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) 2.48247744s ago: executing program 0 (id=297): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 2.272887666s ago: executing program 3 (id=299): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) 2.187850544s ago: executing program 3 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 2.077652892s ago: executing program 3 (id=301): r0 = syz_open_dev$media(&(0x7f0000000480), 0x8000000000000000, 0x123141) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, r3, 0x2, [0x1, 0xfffff325]}, {0x80000000, 0x0, 0x4, [0x3, 0xf]}, 0x0, [0x1, 0x8000]}) 2.007526318s ago: executing program 3 (id=302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0xffffffff) 1.516797428s ago: executing program 1 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x10000, 0x380, 0x9, &(0x7f0000000200)=[0x8, 0x1, 0x7, 0x401, 0x1e69, 0x1ff, 0x8, 0x81, 0x8, 0xffffffffffffffff, 0x55, 0x6, 0x403, 0x4, 0x3, 0x3, 0x1, 0x5, 0x7, 0x660, 0xfffffffffffffffb, 0x5f5e, 0x7, 0x4, 0xfffffffffffffc01, 0x2, 0x3, 0xff, 0xfffffffffffffffb, 0x4, 0x2, 0xfffffffffffffff9, 0x3, 0x35, 0x6, 0x5, 0x8000000000000000, 0x9d, 0x8, 0x9, 0x8, 0x2, 0x5, 0x7, 0x8, 0x1, 0xfff, 0x9, 0x3, 0x6, 0x6, 0x5, 0x8000, 0x7, 0x6, 0x41, 0xff, 0x100, 0x400, 0x3, 0x0, 0x80000001, 0x4, 0x6f9, 0x5, 0x8, 0x32, 0x35b, 0x5, 0xa0a4, 0x2, 0x6, 0x0, 0xa33, 0xc1e2, 0xfffffffffffffbff, 0x8, 0xfffffffffffffffe, 0x0, 0x7, 0x6f7, 0x1, 0x80, 0x6, 0x9, 0x0, 0xb, 0x3, 0x101, 0x0, 0x0, 0x4, 0x9, 0x81, 0x12, 0x3, 0x29, 0xf7, 0x80000001, 0x9, 0x4, 0xffffffffffffffff, 0x1, 0x8, 0x8d94, 0x6, 0xfffffffffffffffd, 0x100000000, 0x663e, 0x12d69986, 0x1, 0x63, 0x5, 0x1000, 0x4, 0x4, 0x79, 0x9, 0x9, 0x2, 0x3, 0xf, 0x3, 0x25, 0x2, 0x8, 0x0, 0x2dbbd6b8]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB='\n']) 1.493621659s ago: executing program 0 (id=304): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1) 1.292091846s ago: executing program 3 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0xc}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x40, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) 1.183953994s ago: executing program 1 (id=306): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.152646377s ago: executing program 4 (id=251): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.100407171s ago: executing program 1 (id=307): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0xc00, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1.033144266s ago: executing program 3 (id=308): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.009345679s ago: executing program 1 (id=309): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0xfffe80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) 0s ago: executing program 1 (id=310): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 73.506988][ T5775] cgroup: Unknown subsys name 'net' [ 73.639898][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.969174][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.935282][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.957060][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.965601][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.975887][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.989356][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.997005][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.999475][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.004523][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.012255][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.021591][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.028094][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.034149][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.042727][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.056755][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.057391][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.072453][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.072712][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.087649][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.090268][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.104408][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.104570][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.120683][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.128137][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.128274][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.550917][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 77.687497][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 77.736558][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 77.812922][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.820665][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.828714][ T5786] bridge_slave_0: entered allmulticast mode [ 77.836213][ T5786] bridge_slave_0: entered promiscuous mode [ 77.860011][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.867386][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.874989][ T5786] bridge_slave_1: entered allmulticast mode [ 77.881644][ T5786] bridge_slave_1: entered promiscuous mode [ 77.920203][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 77.980658][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.991690][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.999140][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.006865][ T5785] bridge_slave_0: entered allmulticast mode [ 78.014713][ T5785] bridge_slave_0: entered promiscuous mode [ 78.021970][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.029355][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.036703][ T5785] bridge_slave_1: entered allmulticast mode [ 78.044101][ T5785] bridge_slave_1: entered promiscuous mode [ 78.056150][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.063680][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.070960][ T5788] bridge_slave_0: entered allmulticast mode [ 78.078137][ T5788] bridge_slave_0: entered promiscuous mode [ 78.088099][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.132170][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.139367][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.146796][ T5788] bridge_slave_1: entered allmulticast mode [ 78.153760][ T5788] bridge_slave_1: entered promiscuous mode [ 78.217945][ T5786] team0: Port device team_slave_0 added [ 78.228003][ T5786] team0: Port device team_slave_1 added [ 78.236984][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.249562][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.265399][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.319870][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.349081][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.356827][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.365875][ T5787] bridge_slave_0: entered allmulticast mode [ 78.372673][ T5787] bridge_slave_0: entered promiscuous mode [ 78.406640][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.414514][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.441891][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.456458][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.463752][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.490938][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.505108][ T5785] team0: Port device team_slave_0 added [ 78.511583][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.519342][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.526617][ T5787] bridge_slave_1: entered allmulticast mode [ 78.533736][ T5787] bridge_slave_1: entered promiscuous mode [ 78.555625][ T5788] team0: Port device team_slave_0 added [ 78.589820][ T5785] team0: Port device team_slave_1 added [ 78.598587][ T5788] team0: Port device team_slave_1 added [ 78.607998][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.622116][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.691462][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.699750][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.725823][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.739486][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.746888][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.775048][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.803111][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.810608][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.838280][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.878763][ T5787] team0: Port device team_slave_0 added [ 78.891609][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.898733][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.926717][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.947852][ T5786] hsr_slave_0: entered promiscuous mode [ 78.955999][ T5786] hsr_slave_1: entered promiscuous mode [ 78.968337][ T5787] team0: Port device team_slave_1 added [ 79.030831][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.039075][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.066584][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.111822][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.120546][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.150159][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.150208][ T5796] Bluetooth: hci0: command tx timeout [ 79.192489][ T5785] hsr_slave_0: entered promiscuous mode [ 79.198625][ T5796] Bluetooth: hci2: command tx timeout [ 79.198645][ T5789] Bluetooth: hci3: command tx timeout [ 79.198870][ T5789] Bluetooth: hci1: command tx timeout [ 79.217804][ T5785] hsr_slave_1: entered promiscuous mode [ 79.226188][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.235943][ T5785] Cannot create hsr debugfs directory [ 79.249105][ T5788] hsr_slave_0: entered promiscuous mode [ 79.256436][ T5788] hsr_slave_1: entered promiscuous mode [ 79.263356][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.271841][ T5788] Cannot create hsr debugfs directory [ 79.396240][ T5787] hsr_slave_0: entered promiscuous mode [ 79.402811][ T5787] hsr_slave_1: entered promiscuous mode [ 79.409634][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.417408][ T5787] Cannot create hsr debugfs directory [ 79.743047][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.762711][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.773044][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.787845][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.866886][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.876546][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.894381][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.904555][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.990205][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.002205][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.012276][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.035867][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.122299][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.151568][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.162275][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.175432][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.251509][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.291498][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.332313][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.389010][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.396469][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.411650][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.432320][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.441683][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.468022][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.476485][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.523328][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.530713][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.632728][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.648464][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.687202][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.740827][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.748431][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.768520][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.776160][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.817435][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.859352][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.867578][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.919119][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.926569][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.071438][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.100929][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.195698][ T5789] Bluetooth: hci0: command tx timeout [ 81.270327][ T5786] veth0_vlan: entered promiscuous mode [ 81.277181][ T5789] Bluetooth: hci2: command tx timeout [ 81.279002][ T5792] Bluetooth: hci3: command tx timeout [ 81.285648][ T5789] Bluetooth: hci1: command tx timeout [ 81.348368][ T5786] veth1_vlan: entered promiscuous mode [ 81.427826][ T5786] veth0_macvtap: entered promiscuous mode [ 81.467055][ T5786] veth1_macvtap: entered promiscuous mode [ 81.522416][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.583936][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.629564][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.650375][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.663775][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.672541][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.682112][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.691393][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.701838][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.782754][ T5787] veth0_vlan: entered promiscuous mode [ 81.822434][ T5787] veth1_vlan: entered promiscuous mode [ 81.890537][ T5785] veth0_vlan: entered promiscuous mode [ 81.930625][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.953355][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.976370][ T5785] veth1_vlan: entered promiscuous mode [ 81.991575][ T5788] veth0_vlan: entered promiscuous mode [ 82.074100][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.082440][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.105840][ T5787] veth0_macvtap: entered promiscuous mode [ 82.125650][ T5788] veth1_vlan: entered promiscuous mode [ 82.150803][ T5785] veth0_macvtap: entered promiscuous mode [ 82.166880][ T5787] veth1_macvtap: entered promiscuous mode [ 82.198372][ T5785] veth1_macvtap: entered promiscuous mode [ 82.277898][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.290493][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.304661][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.316780][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.329726][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.340627][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.351754][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.364600][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.406805][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.419196][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.441876][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.467797][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.480849][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.500316][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.513229][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.532517][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.553165][ T5788] veth0_macvtap: entered promiscuous mode [ 82.576893][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.587758][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.599908][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.609288][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.631408][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.647250][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.657940][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.668540][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.678860][ T5879] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 82.707693][ T5788] veth1_macvtap: entered promiscuous mode [ 82.837308][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.854880][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.869731][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.902511][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.918980][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.931029][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.945339][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.031479][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.048408][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.061565][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.072626][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.084402][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.096507][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.109764][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.176619][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.191038][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.211070][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.221081][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.275407][ T5789] Bluetooth: hci0: command tx timeout [ 83.320795][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.334434][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.354143][ T5789] Bluetooth: hci3: command tx timeout [ 83.364753][ T5789] Bluetooth: hci1: command tx timeout [ 83.370326][ T5792] Bluetooth: hci2: command tx timeout [ 83.398454][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.424986][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.459557][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.467739][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.515297][ T5886] syz.2.6[5886]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.584315][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.593012][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.620675][ T5886] loop2: detected capacity change from 0 to 1024 [ 83.647905][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.669884][ T5886] ======================================================= [ 83.669884][ T5886] WARNING: The mand mount option has been deprecated and [ 83.669884][ T5886] and is ignored by this kernel. Remove the mand [ 83.669884][ T5886] option from the mount to silence this warning. [ 83.669884][ T5886] ======================================================= [ 83.685027][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.720492][ T5886] EXT4-fs: inline encryption not supported [ 83.737168][ T5886] EXT4-fs: Ignoring removed i_version option [ 83.780160][ T5886] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.876528][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.886904][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.941581][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.118166][ T5895] netlink: 'syz.1.2': attribute type 11 has an invalid length. [ 84.227067][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.350314][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.950260][ T5907] loop2: detected capacity change from 0 to 8192 [ 85.047208][ T5893] loop3: detected capacity change from 0 to 40427 [ 85.085512][ T5893] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 85.105158][ T5893] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.239446][ T5893] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.353683][ T5789] Bluetooth: hci0: command tx timeout [ 85.433525][ T5789] Bluetooth: hci2: command tx timeout [ 85.444324][ T5789] Bluetooth: hci1: command tx timeout [ 85.444769][ T5792] Bluetooth: hci3: command tx timeout [ 85.465638][ T5893] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.509691][ T5893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.951460][ T5927] Zero length message leads to an empty skb [ 86.241304][ T5936] loop0: detected capacity change from 0 to 512 [ 86.328679][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.373752][ T5936] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.644423][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.867214][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 87.047010][ T8] cfg80211: failed to load regulatory.db [ 87.291288][ T5959] Illegal XDP return value 4294967274 on prog (id 7) dev syz_tun, expect packet loss! [ 87.344315][ T5841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.558292][ T5841] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.584761][ T5841] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.603057][ T5969] mmap: syz.2.37 (5969) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.620501][ T5841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.644379][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 87.683516][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 87.699842][ T5841] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.714379][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.733063][ T5841] usb 2-1: Product: syz [ 87.740627][ T5841] usb 2-1: Manufacturer: syz [ 87.825444][ T5841] cdc_wdm 2-1:1.0: skipping garbage [ 87.831081][ T5841] cdc_wdm 2-1:1.0: skipping garbage [ 87.893682][ T5841] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 87.911062][ T5841] cdc_wdm 2-1:1.0: Unknown control protocol [ 88.598174][ T27] usb 2-1: USB disconnect, device number 2 [ 89.307895][ T5995] tipc: Started in network mode [ 89.325797][ T5995] tipc: Node identity ff75fd7589343b37, cluster identity 4711 [ 89.363642][ T5995] tipc: Enabling of bearer rejected, failed to enable media [ 89.579659][ T5991] loop2: detected capacity change from 0 to 32768 [ 89.768884][ T5991] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.013678][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.036302][ T28] audit: type=1804 audit(1755713559.262:2): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.47" name="/newroot/15/file1/file1" dev="loop2" ino=17058 res=1 errno=0 [ 90.140614][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 90.233994][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 90.255500][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.293221][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.312019][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.334715][ T5855] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.350120][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.372873][ T5855] usb 4-1: config 0 descriptor?? [ 90.386505][ T5792] block nbd1: Receive control failed (result -107) [ 90.467684][ T5797] block nbd1: shutting down sockets [ 90.648484][ T28] audit: type=1326 audit(1755713559.872:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.1.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x0 [ 90.852124][ T5855] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 90.956980][ T6030] loop0: detected capacity change from 0 to 128 [ 90.975314][ T6030] EXT4-fs: Ignoring removed nobh option [ 91.002925][ T6030] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.021947][ T6030] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.042563][ T5855] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 91.066794][ T5855] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 91.079023][ T5855] microsoft 0003:045E:07DA.0001: no inputs found [ 91.085999][ T5855] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 91.101298][ T5855] usb 4-1: USB disconnect, device number 2 [ 91.158834][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.397209][ T6039] warning: `syz.0.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.412816][ T6035] fido_id[6035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 92.064112][ T1190] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.101557][ T6057] loop1: detected capacity change from 0 to 64 [ 92.257727][ T1190] usb 3-1: config 0 has no interfaces? [ 92.266410][ T1190] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.283380][ T1190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.302251][ T1190] usb 3-1: SerialNumber: syz [ 92.318351][ T1190] usb 3-1: config 0 descriptor?? [ 93.151638][ T5855] usb 3-1: USB disconnect, device number 2 [ 93.226332][ T6074] loop1: detected capacity change from 0 to 2048 [ 93.262512][ T6074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.303389][ T6076] mmap: syz.2.82 (6076): VmData 29118464 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 93.979207][ T6091] loop3: detected capacity change from 0 to 1024 [ 94.058848][ T6091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.117563][ T6091] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.286408][ T6091] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 94.354055][ T6091] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28 [ 94.398643][ T6091] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.398643][ T6091] [ 94.438657][ T6091] EXT4-fs (loop3): Total free blocks count 0 [ 94.464824][ T6091] EXT4-fs (loop3): Free/Dirty block details [ 94.493354][ T6091] EXT4-fs (loop3): free_blocks=4293918720 [ 94.499436][ T6091] EXT4-fs (loop3): dirty_blocks=48 [ 94.523017][ T6091] EXT4-fs (loop3): Block reservation details [ 94.579059][ T6091] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 94.747259][ T3466] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 4: comm kworker/u4:12: lblock 36 mapped to illegal pblock 4 (length 12) [ 94.749036][ T6102] input: syz1 as /devices/virtual/input/input5 [ 94.791429][ T3466] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 12 with error 117 [ 95.629025][ T6119] netlink: 'syz.2.100': attribute type 34 has an invalid length. [ 96.343090][ T6109] loop3: detected capacity change from 0 to 40427 [ 96.371359][ T6109] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 96.420024][ T6109] F2FS-fs (loop3): invalid crc value [ 96.462780][ T6109] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.616214][ T6109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.645281][ T6118] loop0: detected capacity change from 0 to 32768 [ 96.647179][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.739948][ T6118] [ 96.739948][ T6118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.739948][ T6118] [ 96.848552][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 96.874731][ T786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 96.887267][ T6128] f2fs_ckpt-7:3: attempt to access beyond end of device [ 96.887267][ T6128] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 96.922859][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.958428][ T6128] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.967389][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.984437][ T6128] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 97.003349][ T786] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.034130][ T786] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.052492][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.262415][ T5788] [ 97.262415][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.262415][ T5788] [ 97.289547][ T5788] [ 97.289547][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.289547][ T5788] [ 97.298575][ T786] usb 3-1: GET_CAPABILITIES returned 0 [ 97.312444][ T786] usbtmc 3-1:16.0: can't read capabilities [ 97.647859][ T786] usb 3-1: USB disconnect, device number 3 [ 97.882559][ T786] kernel write not supported for file bpf-prog (pid: 786 comm: kworker/1:2) [ 98.073429][ T6151] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.360983][ T6157] program syz.2.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.405152][ T6160] loop3: detected capacity change from 0 to 256 [ 98.436435][ T6160] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.462004][ T6160] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 98.516783][ T6160] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 98.575257][ T6162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.137500][ T6171] loop3: detected capacity change from 0 to 8192 [ 99.176153][ T6171] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.194377][ T6171] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 99.204106][ T6171] REISERFS (device loop3): using ordered data mode [ 99.211133][ T6171] reiserfs: using flush barriers [ 99.224201][ T6171] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.318179][ T6171] REISERFS (device loop3): checking transaction log (loop3) [ 99.389632][ T6171] REISERFS (device loop3): Using r5 hash to sort names [ 99.455936][ T6171] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 99.895922][ T6174] loop1: detected capacity change from 0 to 65536 [ 99.988240][ T6174] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 100.060281][ T6169] loop2: detected capacity change from 0 to 32768 [ 100.165602][ T6174] XFS (loop1): Ending clean mount [ 100.191818][ T6174] XFS (loop1): Quotacheck needed: Please wait. [ 100.258065][ T6169] find_entry called with index = 0 [ 100.293210][ T6169] read_mapping_page failed! [ 100.310259][ T6169] ERROR: (device loop2): txCommit: [ 100.310259][ T6169] [ 100.332209][ T6174] XFS (loop1): Quotacheck: Done. [ 100.373493][ T6169] ERROR: (device loop2): remounting filesystem as read-only [ 100.409800][ T6185] read_mapping_page failed! [ 100.438655][ T6185] ERROR: (device loop2): txCommit: [ 100.438655][ T6185] [ 100.465051][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 100.524223][ T6174] XFS (loop1): syz.1.123 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 100.622154][ T5785] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 101.736815][ T6189] loop3: detected capacity change from 0 to 32768 [ 101.861823][ T28] audit: type=1800 audit(1755713571.092:4): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 101.913590][ T6189] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 101.913590][ T6189] [ 101.965257][ T6189] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 101.965257][ T6189] [ 102.032414][ T6213] loop1: detected capacity change from 0 to 512 [ 102.180776][ T6213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.278817][ T6220] loop0: detected capacity change from 0 to 512 [ 102.283479][ T6213] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.363161][ T6198] loop2: detected capacity change from 0 to 32768 [ 102.401434][ T6198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.130 (6198) [ 102.487843][ T6220] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.520440][ T6220] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.138: corrupted in-inode xattr: invalid ea_ino [ 102.538356][ T6220] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.138: couldn't read orphan inode 15 (err -117) [ 102.565845][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.566649][ T6220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.593646][ T6198] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.623414][ T6198] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 102.667760][ T6198] BTRFS info (device loop2): force clearing of disk cache [ 102.675558][ T6198] BTRFS info (device loop2): enabling auto defrag [ 102.682091][ T6198] BTRFS info (device loop2): max_inline at 0 [ 102.708894][ T6198] BTRFS info (device loop2): enabling disk space caching [ 102.744965][ T6198] BTRFS info (device loop2): disk space caching is enabled [ 102.805047][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.973978][ T6198] BTRFS info (device loop2): enabling ssd optimizations [ 103.021918][ T6198] BTRFS info (device loop2): rebuilding free space tree [ 103.063538][ T786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.172042][ T6198] BTRFS info (device loop2): disabling free space tree [ 103.191707][ T6198] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.215011][ T6198] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.299294][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 103.321642][ T786] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 103.351667][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.433457][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.445909][ T786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 103.464529][ T3466] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 103.482419][ T786] pvrusb2: ********** [ 103.499000][ T786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 103.539878][ T786] pvrusb2: Important functionality might not be entirely working. [ 103.573907][ T786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 103.617374][ T786] pvrusb2: ********** [ 103.633419][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 103.647099][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 103.656297][ T2322] pvrusb2: Invalid write control endpoint [ 103.676166][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.707167][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.734328][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.747884][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.793364][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.822096][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.862549][ T5786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.865916][ T2322] pvrusb2: Invalid write control endpoint [ 103.907378][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 103.919099][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 103.927755][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 103.939673][ T2322] pvrusb2: Device being rendered inoperable [ 103.949746][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 103.959520][ T786] usb 2-1: USB disconnect, device number 3 [ 103.977992][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 104.029695][ T2322] pvrusb2: Attached sub-driver cx25840 [ 104.035868][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 104.054955][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 104.110756][ T8] usb 4-1: usb_control_msg returned -32 [ 104.139253][ T8] usbtmc 4-1:16.0: can't read capabilities [ 104.427204][ T6258] capability: warning: `syz.0.146' uses deprecated v2 capabilities in a way that may be insecure [ 104.583650][ T6261] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 104.596638][ T5777] usb 4-1: USB disconnect, device number 3 [ 104.692327][ T6265] loop2: detected capacity change from 0 to 128 [ 104.724894][ T28] audit: type=1326 audit(1755713573.962:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 104.728766][ T6265] qnx4: no qnx4 filesystem (no root dir). [ 104.767503][ T28] audit: type=1326 audit(1755713573.962:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 104.800947][ T28] audit: type=1326 audit(1755713574.002:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 104.844212][ T28] audit: type=1326 audit(1755713574.002:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 104.903561][ T28] audit: type=1326 audit(1755713574.002:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 105.023557][ T28] audit: type=1326 audit(1755713574.002:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 105.028305][ T6271] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.113645][ T28] audit: type=1326 audit(1755713574.122:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 105.149138][ T28] audit: type=1326 audit(1755713574.142:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 105.245587][ T28] audit: type=1326 audit(1755713574.172:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 105.586564][ T6288] loop3: detected capacity change from 0 to 64 [ 105.794159][ T6294] loop0: detected capacity change from 0 to 4096 [ 107.033384][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.100149][ T6326] loop2: detected capacity change from 0 to 8192 [ 107.127058][ T6326] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.167435][ T6326] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 107.209018][ T6326] REISERFS (device loop2): using ordered data mode [ 107.229155][ T6326] reiserfs: using flush barriers [ 107.236628][ T6326] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.286152][ T6326] REISERFS (device loop2): checking transaction log (loop2) [ 107.307585][ T6326] REISERFS (device loop2): Using r5 hash to sort names [ 107.327430][ T6326] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 107.443532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.446795][ T6326] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 293, free_space(entry_count) 2 [ 107.452105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.492964][ T6336] loop1: detected capacity change from 0 to 8 [ 107.562555][ T6336] SQUASHFS error: Failed to read block 0x4e8: -5 [ 107.572116][ T6326] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 107.598485][ T6336] SQUASHFS error: Failed to read block 0x4de: -5 [ 107.605794][ T6326] REISERFS (device loop2): Remounting filesystem read-only [ 107.628755][ T6336] SQUASHFS error: Failed to read block 0x4de: -5 [ 107.635537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.643531][ T6326] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 107.680450][ T6336] SQUASHFS error: Failed to read block 0x4de: -5 [ 107.695746][ T6337] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 293, free_space(entry_count) 2 [ 107.715989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.737342][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 107.737354][ T28] audit: type=1800 audit(1755713576.972:19): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.178" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 107.784575][ T6337] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 107.906986][ T6323] loop3: detected capacity change from 0 to 40427 [ 107.997862][ T6323] F2FS-fs (loop3): Image doesn't support compression [ 108.032438][ T6323] F2FS-fs (loop3): invalid crc value [ 108.080108][ T6323] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.263464][ T6323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.281955][ T6347] loop0: detected capacity change from 0 to 256 [ 108.497682][ T5787] syz-executor: attempt to access beyond end of device [ 108.497682][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 108.539407][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 108.554976][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 109.410730][ T6362] MTD: Couldn't look up './file0': -15 [ 109.417096][ T6362] ./file0: Can't lookup blockdev [ 109.495536][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 109.533647][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 109.561694][ T6364] gretap0: entered promiscuous mode [ 109.578312][ T6364] macsec1: entered promiscuous mode [ 109.613681][ T6364] macsec1: entered allmulticast mode [ 109.625785][ T6364] gretap0: entered allmulticast mode [ 109.705919][ T6353] loop2: detected capacity change from 0 to 32768 [ 109.720076][ T6368] loop0: detected capacity change from 0 to 128 [ 109.773109][ T6353] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.979525][ T6353] XFS (loop2): Ending clean mount [ 109.984659][ T6383] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.003367][ T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.188620][ T6353] process 'syz.2.183' launched './file1' with NULL argv: empty string added [ 110.217809][ T786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.243577][ T786] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 110.265326][ T786] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.283309][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.291667][ T786] usb 4-1: Product: syz [ 110.304566][ T786] usb 4-1: Manufacturer: syz [ 110.309257][ T786] usb 4-1: SerialNumber: syz [ 110.315334][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.350383][ T786] cdc_mbim 4-1:1.0: skipping garbage [ 110.593905][ T6372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.963473][ T5777] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.163342][ T5777] usb 1-1: Using ep0 maxpacket: 8 [ 111.174937][ T5777] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 111.193421][ T5777] usb 1-1: config 179 has no interface number 0 [ 111.200603][ T5777] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 111.233362][ T5777] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 111.245809][ T6372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.252845][ T6402] loop2: detected capacity change from 0 to 32768 [ 111.253203][ T5777] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.259982][ T786] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 111.271063][ T5777] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 111.271111][ T5777] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 111.271154][ T5777] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 111.271176][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.283836][ T6393] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.305412][ T6402] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.200 (6402) [ 111.382171][ T6402] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.409925][ T6402] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 111.435978][ T6402] BTRFS info (device loop2): setting nodatacow, compression disabled [ 111.451772][ T6402] BTRFS info (device loop2): max_inline at 0 [ 111.459948][ T6402] BTRFS info (device loop2): enabling disk space caching [ 111.467836][ T6402] BTRFS info (device loop2): turning off barriers [ 111.478207][ T786] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 111.487785][ T786] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 111.492060][ T6402] BTRFS info (device loop2): turning on flush-on-commit [ 111.501580][ T6402] BTRFS info (device loop2): doing ref verification [ 111.510048][ T6402] BTRFS info (device loop2): use zlib compression, level 3 [ 111.525898][ T6402] BTRFS info (device loop2): force clearing of disk cache [ 111.545204][ T786] wwan wwan0: port wwan0mbim0 attached [ 111.546462][ T6402] BTRFS info (device loop2): enabling ssd optimizations [ 111.559010][ T6402] BTRFS info (device loop2): max_inline at 4096 [ 111.566441][ T6402] BTRFS info (device loop2): disk space caching is enabled [ 111.596862][ T786] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 0e:5c:da:21:4c:b8 [ 111.647022][ T786] usb 4-1: USB disconnect, device number 4 [ 111.681687][ T786] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 111.824559][ T5777] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 111.880678][ T6402] BTRFS info (device loop2): auto enabling async discard [ 111.926225][ T786] wwan wwan0: port wwan0mbim0 disconnected [ 111.970843][ T6402] BTRFS info (device loop2): rebuilding free space tree [ 112.164700][ T6402] BTRFS info (device loop2): disabling free space tree [ 112.168117][ T5777] kernel write not supported for file bpf-prog (pid: 5777 comm: kworker/0:3) [ 112.191213][ T6402] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.230849][ T5777] usb 1-1: USB disconnect, device number 2 [ 112.230914][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 112.242178][ T6402] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.246225][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 112.271871][ T5777] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 112.777901][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.963431][ T5777] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.102085][ T6436] loop0: detected capacity change from 0 to 164 [ 113.179705][ T5777] usb 4-1: Using ep0 maxpacket: 16 [ 113.254618][ T6436] Unable to read rock-ridge attributes [ 113.288293][ T5777] usb 4-1: device descriptor read/all, error -71 [ 113.332636][ T6436] Unable to read rock-ridge attributes [ 113.564707][ T28] audit: type=1326 audit(1755713582.802:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.604181][ T28] audit: type=1326 audit(1755713582.802:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.627368][ T28] audit: type=1326 audit(1755713582.822:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.650975][ T28] audit: type=1326 audit(1755713582.822:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.685685][ T28] audit: type=1326 audit(1755713582.822:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.708543][ T28] audit: type=1326 audit(1755713582.822:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.737970][ T28] audit: type=1326 audit(1755713582.832:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.761838][ T28] audit: type=1326 audit(1755713582.832:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.784463][ T28] audit: type=1326 audit(1755713582.832:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 113.806833][ T28] audit: type=1326 audit(1755713582.832:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b8d8ebe9 code=0x7ffc0000 [ 114.065132][ T6461] io-wq is not configured for unbound workers [ 114.589956][ T6471] loop0: detected capacity change from 0 to 2048 [ 114.611425][ T6471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.684612][ T5777] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.878361][ T6469] loop1: detected capacity change from 0 to 40427 [ 114.903629][ T6469] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 114.908893][ T5777] usb 4-1: Using ep0 maxpacket: 16 [ 114.917142][ T6469] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.935619][ T6469] F2FS-fs (loop1): build fault injection attr: rate: 18446, type: 0x7ffff [ 114.945515][ T5777] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 114.962340][ T6469] F2FS-fs (loop1): invalid crc value [ 114.969952][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.975363][ T6469] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.993486][ T5777] usb 4-1: Product: syz [ 114.997814][ T5777] usb 4-1: Manufacturer: syz [ 115.012803][ T5777] usb 4-1: SerialNumber: syz [ 115.034265][ T5777] usb 4-1: config 0 descriptor?? [ 115.045802][ T5777] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 115.060686][ T5777] usb 4-1: Detected FT232H [ 115.089760][ T6469] F2FS-fs (loop1): Start checkpoint disabled! [ 115.102807][ T6469] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.110131][ T6469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 115.266614][ T5777] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 115.269039][ T11] kworker/u4:0: attempt to access beyond end of device [ 115.269039][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 115.290873][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 115.298701][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 115.650889][ T6490] loop1: detected capacity change from 0 to 4096 [ 115.696760][ T5777] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.710398][ T6491] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.783172][ T6490] syz.1.229 (6490) used greatest stack depth: 19440 bytes left [ 115.956148][ T5777] usb 4-1: USB disconnect, device number 7 [ 115.999202][ T5777] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.025486][ T5777] ftdi_sio 4-1:0.0: device disconnected [ 116.047077][ T6497] loop1: detected capacity change from 0 to 64 [ 116.072044][ T6501] loop2: detected capacity change from 0 to 128 [ 116.334018][ T5855] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.401887][ T6513] loop2: detected capacity change from 0 to 736 [ 116.543824][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 116.554168][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.583463][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.604264][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.627813][ T5855] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.637291][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.663843][ T5786] Symlink component flag not implemented [ 116.677750][ T5855] usb 1-1: config 0 descriptor?? [ 117.069717][ T6528] ip6gre1: entered promiscuous mode [ 117.075528][ T6528] ip6gre1: entered allmulticast mode [ 117.142650][ T5855] HID 045e:07da: Invalid code 65791 type 1 [ 117.167366][ T5855] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input7 [ 117.203608][ T5855] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 117.398462][ T5855] usb 1-1: USB disconnect, device number 3 [ 117.532378][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.656808][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 117.679607][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 117.721742][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.867386][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.997193][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.112682][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.124230][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.133068][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.143161][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.152574][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.161257][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.396928][ T6551] loop1: detected capacity change from 0 to 1024 [ 118.483882][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.591774][ T6543] loop3: detected capacity change from 0 to 32768 [ 118.601213][ T6543] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.257 (6543) [ 118.632805][ T6543] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.670006][ T6543] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 118.681449][ T6551] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 118.709856][ T6543] BTRFS info (device loop3): turning on sync discard [ 118.729484][ T6551] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 118.732715][ T6543] BTRFS info (device loop3): setting nodatacow, compression disabled [ 118.745522][ T6551] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.745522][ T6551] [ 118.761205][ T6551] EXT4-fs (loop1): Total free blocks count 0 [ 118.790299][ T6543] BTRFS info (device loop3): turning off barriers [ 118.810784][ T6543] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 118.823422][ T6551] EXT4-fs (loop1): Free/Dirty block details [ 118.828437][ T6543] BTRFS info (device loop3): trying to use backup root at mount time [ 118.839386][ T6543] BTRFS info (device loop3): metadata ratio 3 [ 118.841445][ T6551] EXT4-fs (loop1): free_blocks=68451041280 [ 118.846456][ T6543] BTRFS info (device loop3): enabling auto defrag [ 118.858604][ T6543] BTRFS info (device loop3): doing ref verification [ 118.867789][ T6543] BTRFS info (device loop3): max_inline at 0 [ 118.874396][ T6543] BTRFS info (device loop3): using free space tree [ 118.882999][ T6551] EXT4-fs (loop1): dirty_blocks=16 [ 118.913896][ T6551] EXT4-fs (loop1): Block reservation details [ 118.921058][ T6551] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 118.986396][ T48] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 119.025491][ T6543] BTRFS error (device loop3): failed to load root extent [ 119.032692][ T6543] BTRFS warning (device loop3): try to load backup roots slot 1 [ 119.053016][ T48] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 119.077598][ T6543] BTRFS warning (device loop3): couldn't read tree root [ 119.080587][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.085872][ T6543] BTRFS warning (device loop3): try to load backup roots slot 2 [ 119.122500][ T1315] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 119.162862][ T6543] BTRFS warning (device loop3): couldn't read tree root [ 119.170385][ T6543] BTRFS warning (device loop3): try to load backup roots slot 3 [ 119.230304][ T6543] BTRFS info (device loop3): enabling ssd optimizations [ 119.245774][ T6543] BTRFS info (device loop3): rebuilding free space tree [ 119.259342][ T6546] chnl_net:caif_netlink_parms(): no params data found [ 119.314010][ T6543] BTRFS info (device loop3): checking UUID tree [ 119.318163][ T6582] loop1: detected capacity change from 0 to 2048 [ 119.332186][ T6582] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.349285][ T6582] NILFS (loop1): mounting unchecked fs [ 119.418140][ T6582] NILFS (loop1): recovery complete [ 119.461083][ T6586] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.590426][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.600463][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.658786][ T6546] bridge_slave_0: entered allmulticast mode [ 119.698176][ T6546] bridge_slave_0: entered promiscuous mode [ 119.808429][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.828236][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.867194][ T6546] bridge_slave_1: entered allmulticast mode [ 119.881811][ T6546] bridge_slave_1: entered promiscuous mode [ 119.898581][ T6591] syzkaller1: entered promiscuous mode [ 119.909972][ T6591] syzkaller1: entered allmulticast mode [ 119.924895][ T5787] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.233603][ T5792] Bluetooth: hci0: command tx timeout [ 120.415517][ T6546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.457327][ T6546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.758170][ T6546] team0: Port device team_slave_0 added [ 120.809913][ T6546] team0: Port device team_slave_1 added [ 120.929867][ T11] hsr_slave_0: left promiscuous mode [ 120.955326][ T11] hsr_slave_1: left promiscuous mode [ 120.973471][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.997538][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.021021][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.043346][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.067642][ T11] bridge_slave_1: left allmulticast mode [ 121.083374][ T11] bridge_slave_1: left promiscuous mode [ 121.091444][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.131385][ T11] bridge_slave_0: left allmulticast mode [ 121.143394][ T11] bridge_slave_0: left promiscuous mode [ 121.153677][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.237758][ T11] veth1_macvtap: left promiscuous mode [ 121.253637][ T11] veth0_macvtap: left promiscuous mode [ 121.263526][ T11] veth1_vlan: left promiscuous mode [ 121.269227][ T11] veth0_vlan: left promiscuous mode [ 121.338277][ T6607] loop1: detected capacity change from 0 to 32768 [ 121.415041][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 121.415059][ T28] audit: type=1800 audit(1755713590.642:52): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.272" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 121.693114][ T6624] loop3: detected capacity change from 0 to 1024 [ 121.705053][ T6624] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.719333][ T6624] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.791796][ T6624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.935171][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.313547][ T5792] Bluetooth: hci0: command tx timeout [ 122.532863][ T11] team0 (unregistering): Port device team_slave_1 removed [ 122.587929][ T11] team0 (unregistering): Port device team_slave_0 removed [ 122.639127][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.696650][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.743411][ T786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.933644][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.945706][ T786] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.955342][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.980749][ T786] usb 4-1: config 0 descriptor?? [ 123.001751][ T786] pwc: Askey VC010 type 2 USB webcam detected. [ 123.357622][ T11] bond0 (unregistering): Released all slaves [ 123.453703][ T786] pwc: recv_control_msg error -32 req 02 val 2b00 [ 123.461622][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.463416][ T786] pwc: recv_control_msg error -32 req 02 val 2700 [ 123.470276][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.506938][ T6546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.540626][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.550748][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.578414][ T6546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.682524][ T786] pwc: recv_control_msg error -71 req 04 val 1000 [ 123.704312][ T786] pwc: recv_control_msg error -71 req 04 val 1300 [ 123.713410][ T786] pwc: recv_control_msg error -71 req 04 val 1400 [ 123.739933][ T786] pwc: recv_control_msg error -71 req 02 val 2000 [ 123.747444][ T6546] hsr_slave_0: entered promiscuous mode [ 123.756981][ T786] pwc: recv_control_msg error -71 req 02 val 2100 [ 123.765280][ T6546] hsr_slave_1: entered promiscuous mode [ 123.772930][ T786] pwc: recv_control_msg error -71 req 04 val 1500 [ 123.783771][ T786] pwc: recv_control_msg error -71 req 02 val 2500 [ 123.819542][ T786] pwc: recv_control_msg error -71 req 02 val 2400 [ 123.833726][ T786] pwc: recv_control_msg error -71 req 02 val 2600 [ 123.850993][ T786] pwc: recv_control_msg error -71 req 02 val 2900 [ 123.873392][ T786] pwc: recv_control_msg error -71 req 02 val 2800 [ 123.898883][ T786] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.918886][ T786] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.957138][ T786] pwc: Registered as video103. [ 123.990282][ T786] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 124.050876][ T786] usb 4-1: USB disconnect, device number 8 [ 124.271466][ T6653] loop1: detected capacity change from 0 to 1024 [ 124.335383][ T6546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.347915][ T6653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.364659][ T6546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.402011][ T6546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.404047][ T5792] Bluetooth: hci0: command tx timeout [ 124.432116][ T6546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.538917][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.754063][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.812671][ T6546] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.848474][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.855858][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.931554][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.938803][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.242666][ T6689] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 125.445922][ T6546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.762336][ T6546] veth0_vlan: entered promiscuous mode [ 125.776135][ T6546] veth1_vlan: entered promiscuous mode [ 125.810817][ T6546] veth0_macvtap: entered promiscuous mode [ 125.820941][ T6546] veth1_macvtap: entered promiscuous mode [ 125.838239][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.851621][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.861656][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.873351][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.883600][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.896184][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.908050][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.923026][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.936207][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.947615][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.960829][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.971323][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.982248][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.997082][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.046161][ T6546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.078677][ T6546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.088898][ T6546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.104790][ T6546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.242101][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.263351][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.311148][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.322886][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.388957][ T6714] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 126.424614][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.487575][ T5792] Bluetooth: hci0: command tx timeout [ 126.613374][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 126.620906][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 126.633364][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.658738][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 126.667345][ T8] pvrusb2: ********** [ 126.671527][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 126.682047][ T8] pvrusb2: Important functionality might not be entirely working. [ 126.690256][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 126.702103][ T8] pvrusb2: ********** [ 126.763464][ T786] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.881530][ T2322] pvrusb2: Invalid write control endpoint [ 126.961798][ T2322] pvrusb2: Invalid write control endpoint [ 126.969709][ T786] usb 5-1: Using ep0 maxpacket: 8 [ 126.978964][ T6724] loop1: detected capacity change from 0 to 32768 [ 126.983316][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 126.996577][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 127.005071][ T786] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 127.008275][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 127.024453][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.024483][ T786] usb 5-1: Product: syz [ 127.024498][ T786] usb 5-1: Manufacturer: syz [ 127.024514][ T786] usb 5-1: SerialNumber: syz [ 127.026889][ T786] usb 5-1: config 0 descriptor?? [ 127.039195][ T2322] pvrusb2: Device being rendered inoperable [ 127.059056][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 127.066387][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 127.068639][ T786] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 127.075993][ T2322] pvrusb2: Attached sub-driver cx25840 [ 127.101164][ T28] audit: type=1800 audit(1755713596.332:53): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.309" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 127.128302][ T6712] pvrusb2: Attempted to execute control transfer when device not ok [ 127.138466][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 127.151400][ T8] usb 1-1: USB disconnect, device number 4 [ 127.161943][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 127.453857][ T6724] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root [ 127.453857][ T6724] [ 127.468056][ T6724] ERROR: (device loop1): remounting filesystem as read-only [ 127.582664][ T5785] ------------[ cut here ]------------ [ 127.588837][ T5785] kernel BUG at fs/jfs/inode.c:169! [ 127.596545][ T5785] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 127.602693][ T5785] CPU: 0 PID: 5785 Comm: syz-executor Not tainted 6.6.102-syzkaller #0 [ 127.611265][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.621435][ T5785] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 127.627183][ T5785] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 19 d5 e3 fe e9 0a fe ff ff e8 ff 8d 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 127.648086][ T5785] RSP: 0018:ffffc9000453fac0 EFLAGS: 00010293 [ 127.654368][ T5785] RAX: ffffffff82f8fd21 RBX: ffff88805b6e8430 RCX: ffff888027fcda00 [ 127.662647][ T5785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805b6e8430 [ 127.671203][ T5785] RBP: 0000000000000001 R08: ffffffff90da3637 R09: 1ffffffff21b46c6 [ 127.679389][ T5785] R10: dffffc0000000000 R11: fffffbfff21b46c7 R12: dffffc0000000000 [ 127.687674][ T5785] R13: dffffc0000000000 R14: ffff88805b6e80b8 R15: ffff88805b6e8600 [ 127.695938][ T5785] FS: 0000555577e91500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 127.704994][ T5785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.711696][ T5785] CR2: 0000555577eac5c8 CR3: 00000000630c9000 CR4: 00000000003506f0 [ 127.719693][ T5785] Call Trace: [ 127.723115][ T5785] [ 127.726154][ T5785] ? evict+0x480/0x870 [ 127.730282][ T5785] ? jfs_write_inode+0x220/0x220 [ 127.735265][ T5785] evict+0x486/0x870 [ 127.739202][ T5785] ? proc_nr_inodes+0x230/0x230 [ 127.744218][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 127.749722][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 127.755235][ T5785] evict_inodes+0x5fe/0x690 [ 127.759843][ T5785] ? clear_inode+0x150/0x150 [ 127.764615][ T5785] generic_shutdown_super+0x97/0x2b0 [ 127.770019][ T5785] kill_block_super+0x44/0x90 [ 127.774832][ T5785] deactivate_locked_super+0x97/0x100 [ 127.780425][ T5785] cleanup_mnt+0x429/0x4c0 [ 127.785162][ T5785] task_work_run+0x1ce/0x250 [ 127.789895][ T5785] ? task_work_cancel+0x240/0x240 [ 127.795156][ T5785] ? exit_to_user_mode_loop+0x3b/0x110 [ 127.800762][ T5785] exit_to_user_mode_loop+0xe6/0x110 [ 127.806061][ T5785] exit_to_user_mode_prepare+0xb1/0x140 [ 127.811625][ T5785] syscall_exit_to_user_mode+0x1a/0x50 [ 127.817105][ T5785] do_syscall_64+0x61/0xb0 [ 127.821543][ T5785] ? clear_bhb_loop+0x40/0x90 [ 127.826224][ T5785] ? clear_bhb_loop+0x40/0x90 [ 127.830923][ T5785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.836971][ T5785] RIP: 0033:0x7f00b8d8ff17 [ 127.841411][ T5785] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 127.861286][ T5785] RSP: 002b:00007ffcfecced18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 127.869797][ T5785] RAX: 0000000000000000 RBX: 00007f00b8e11c05 RCX: 00007f00b8d8ff17 [ 127.877854][ T5785] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfeccedd0 [ 127.885834][ T5785] RBP: 00007ffcfeccedd0 R08: 0000000000000000 R09: 0000000000000000 [ 127.893961][ T5785] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcfeccfe60 [ 127.902586][ T5785] R13: 00007f00b8e11c05 R14: 000000000001f1ec R15: 00007ffcfeccfea0 [ 127.910651][ T5785] [ 127.913691][ T5785] Modules linked in: [ 127.924247][ T5785] ---[ end trace 0000000000000000 ]--- [ 127.929859][ T5785] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 127.935484][ T5785] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 19 d5 e3 fe e9 0a fe ff ff e8 ff 8d 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 127.955702][ T5785] RSP: 0018:ffffc9000453fac0 EFLAGS: 00010293 [ 127.961820][ T5785] RAX: ffffffff82f8fd21 RBX: ffff88805b6e8430 RCX: ffff888027fcda00 [ 127.970138][ T5785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805b6e8430 [ 127.978190][ T5785] RBP: 0000000000000001 R08: ffffffff90da3637 R09: 1ffffffff21b46c6 [ 127.986342][ T5785] R10: dffffc0000000000 R11: fffffbfff21b46c7 R12: dffffc0000000000 [ 127.995164][ T5785] R13: dffffc0000000000 R14: ffff88805b6e80b8 R15: ffff88805b6e8600 [ 128.003182][ T5785] FS: 0000555577e91500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 128.012616][ T5785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.020134][ T5785] CR2: 0000555577eac5c8 CR3: 00000000630c9000 CR4: 00000000003506f0 [ 128.028399][ T5785] Kernel panic - not syncing: Fatal exception [ 128.034835][ T5785] Kernel Offset: disabled [ 128.039262][ T5785] Rebooting in 86400 seconds..