last executing test programs: 50.879614855s ago: executing program 1 (id=228): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_LOCK(r1, 0x6405) close_range(r0, 0xffffffffffffffff, 0x0) 50.62712091s ago: executing program 1 (id=229): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0x1, 0x240, &(0x7f0000000a80)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000002018000180140002006e657464657673696d300000000000000800080000100000080009"], 0x44}}, 0x0) 48.755087987s ago: executing program 1 (id=236): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) 47.725221126s ago: executing program 1 (id=244): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2101000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 46.194483936s ago: executing program 1 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000180)={0x2, r2, 0xffffffff}) 45.143567766s ago: executing program 1 (id=249): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) lseek(r0, 0x8000000000000002, 0x0) sendfile(r0, r0, 0x0, 0x1) 44.504849359s ago: executing program 32 (id=249): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) lseek(r0, 0x8000000000000002, 0x0) sendfile(r0, r0, 0x0, 0x1) 24.605752394s ago: executing program 4 (id=368): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 24.367075359s ago: executing program 4 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x50, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 24.143192633s ago: executing program 4 (id=371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x65, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x11, 0x5, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x36, 0x8, 0x0, "66665c32e568b2a9a54639606054ab98b515ad40e2d075030a277e8087a946f33227d640b88c0057401d34dcf0b85dfbfc7956"}, @window={0x3, 0x3, 0x2}, @sack={0x5, 0xa, [0xe, 0xfffffffc]}, @generic={0x5, 0xe, "95274f8355671699ccde6060"}]}}}}}}}, 0x0) 23.916946058s ago: executing program 4 (id=372): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 23.590612554s ago: executing program 4 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 22.803632869s ago: executing program 4 (id=380): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe83) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 22.335423818s ago: executing program 33 (id=380): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe83) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 4.14067541s ago: executing program 2 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000059020000000001000000000073"]) 3.477281764s ago: executing program 2 (id=507): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.253746057s ago: executing program 0 (id=509): syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x1a1081, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 3.251078368s ago: executing program 2 (id=510): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) 2.999477883s ago: executing program 0 (id=512): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) 2.874358985s ago: executing program 0 (id=515): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 2.723659388s ago: executing program 0 (id=517): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xf31, @empty, 0x2}, {0xa, 0x4e24, 0xb66, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}}}, 0x48) 2.222737558s ago: executing program 2 (id=519): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000000900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) 2.031480061s ago: executing program 5 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.857628135s ago: executing program 5 (id=521): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) 1.781177126s ago: executing program 0 (id=522): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e26, 0x7, @remote}, 0x1c) 1.743638967s ago: executing program 2 (id=523): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000100)={[{@lazytime}, {@lazytime}, {@filestreams}, {@pqnoenforce}, {@prjquota}]}, 0x1, 0x968c, &(0x7f000001c340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0205826, &(0x7f0000000000)={0xc5, 0x68f1, 0x4000000001000, 0x6, 0x26e5, 0x100a}) 1.5912373s ago: executing program 3 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) 1.03967895s ago: executing program 0 (id=525): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)={0x20, 0x15, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 967.594962ms ago: executing program 3 (id=526): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast, 0x3}, {@broadcast}]}]}}}}}}}, 0x0) 889.582593ms ago: executing program 3 (id=528): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) 526.66378ms ago: executing program 2 (id=529): ioprio_set$pid(0x2, 0x0, 0x4004) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82002, 0xf) sendfile(r1, r0, 0x0, 0x80000001) 507.625911ms ago: executing program 3 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}]}}}]}, 0x44}}, 0x0) 427.061572ms ago: executing program 3 (id=531): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe7f5, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 368.768503ms ago: executing program 3 (id=532): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0xd0, 0x0, 0x0, 0x0}], 0x1}) 255.838846ms ago: executing program 5 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 135.077808ms ago: executing program 5 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0xffffffff, {0x7, 0x0, 0x0, r2, 0x0, 0x20}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}]}, 0x34}}, 0x488c2) 73.576269ms ago: executing program 5 (id=535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x805c6103, &(0x7f0000000040)={0xd0}) 0s ago: executing program 5 (id=536): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, 'hfs\x00', 0x3a, '#! ', 0x3a, './file2'}, 0x2e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts. syzkaller login: [ 76.682845][ T5775] cgroup: Unknown subsys name 'net' [ 76.821776][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.493217][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.128070][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.138142][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.146199][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.182859][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.190438][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.203017][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.204768][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.211209][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.218258][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.232206][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.233066][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.240802][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.248156][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.254314][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.268600][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.269709][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.276167][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.284548][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.290491][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.297401][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.310910][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.323016][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.336745][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.345484][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.822155][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 80.905155][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 81.030863][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.038168][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.045690][ T5790] bridge_slave_0: entered allmulticast mode [ 81.052944][ T5790] bridge_slave_0: entered promiscuous mode [ 81.065210][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 81.086654][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.093993][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.101124][ T5790] bridge_slave_1: entered allmulticast mode [ 81.108341][ T5790] bridge_slave_1: entered promiscuous mode [ 81.192431][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.199738][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.207097][ T5784] bridge_slave_0: entered allmulticast mode [ 81.214612][ T5784] bridge_slave_0: entered promiscuous mode [ 81.226156][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.233501][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.240683][ T5784] bridge_slave_1: entered allmulticast mode [ 81.247973][ T5784] bridge_slave_1: entered promiscuous mode [ 81.257845][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.285778][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 81.310322][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.384473][ T5790] team0: Port device team_slave_0 added [ 81.405262][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.429818][ T5790] team0: Port device team_slave_1 added [ 81.464071][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.490645][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.498258][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.505992][ T5787] bridge_slave_0: entered allmulticast mode [ 81.513422][ T5787] bridge_slave_0: entered promiscuous mode [ 81.552496][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.559607][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.585709][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.598979][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.606764][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.614139][ T5787] bridge_slave_1: entered allmulticast mode [ 81.621095][ T5787] bridge_slave_1: entered promiscuous mode [ 81.630784][ T5784] team0: Port device team_slave_0 added [ 81.656512][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.663620][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.689602][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.735237][ T5784] team0: Port device team_slave_1 added [ 81.810832][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.842591][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.855832][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.865913][ T5794] bridge_slave_0: entered allmulticast mode [ 81.877423][ T5794] bridge_slave_0: entered promiscuous mode [ 81.893894][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.903779][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.910740][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.937526][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.955686][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.963059][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.989285][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.001272][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.008997][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.020830][ T5794] bridge_slave_1: entered allmulticast mode [ 82.028519][ T5794] bridge_slave_1: entered promiscuous mode [ 82.128988][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.173997][ T5787] team0: Port device team_slave_0 added [ 82.188829][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.241199][ T5784] hsr_slave_0: entered promiscuous mode [ 82.253902][ T5784] hsr_slave_1: entered promiscuous mode [ 82.264167][ T5787] team0: Port device team_slave_1 added [ 82.287947][ T5790] hsr_slave_0: entered promiscuous mode [ 82.294879][ T5790] hsr_slave_1: entered promiscuous mode [ 82.301314][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.309846][ T5790] Cannot create hsr debugfs directory [ 82.331119][ T5794] team0: Port device team_slave_0 added [ 82.353622][ T5785] Bluetooth: hci2: command tx timeout [ 82.353641][ T5797] Bluetooth: hci3: command tx timeout [ 82.353911][ T5797] Bluetooth: hci0: command tx timeout [ 82.391146][ T5794] team0: Port device team_slave_1 added [ 82.423325][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.430698][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.456923][ T5797] Bluetooth: hci1: command tx timeout [ 82.463584][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.480667][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.487792][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.513889][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.537477][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.544561][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.570531][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.583206][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.590191][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.616838][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.709605][ T5787] hsr_slave_0: entered promiscuous mode [ 82.716588][ T5787] hsr_slave_1: entered promiscuous mode [ 82.724361][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.732038][ T5787] Cannot create hsr debugfs directory [ 82.847136][ T5794] hsr_slave_0: entered promiscuous mode [ 82.854298][ T5794] hsr_slave_1: entered promiscuous mode [ 82.860637][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.868648][ T5794] Cannot create hsr debugfs directory [ 83.163438][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.175628][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.186562][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.202646][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.269545][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.291799][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.304112][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.315290][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.405095][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.416224][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.444442][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.455091][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.528106][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.548019][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.558124][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.580288][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.719164][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.746818][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.788884][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.805022][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.831622][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.841428][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.848782][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.868558][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.875741][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.891739][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.898913][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.914227][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.941892][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.949152][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.968664][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.975851][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.010813][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.018032][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.054088][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.106621][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.147980][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.155176][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.190424][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.197893][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.358646][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.437294][ T5797] Bluetooth: hci0: command tx timeout [ 84.437320][ T50] Bluetooth: hci2: command tx timeout [ 84.443008][ T5785] Bluetooth: hci3: command tx timeout [ 84.516697][ T5785] Bluetooth: hci1: command tx timeout [ 84.729759][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.807265][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.825686][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.871623][ T5790] veth0_vlan: entered promiscuous mode [ 84.904925][ T5790] veth1_vlan: entered promiscuous mode [ 84.960098][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.975275][ T5787] veth0_vlan: entered promiscuous mode [ 85.018771][ T5787] veth1_vlan: entered promiscuous mode [ 85.091902][ T5790] veth0_macvtap: entered promiscuous mode [ 85.109209][ T5794] veth0_vlan: entered promiscuous mode [ 85.120175][ T5784] veth0_vlan: entered promiscuous mode [ 85.132576][ T5790] veth1_macvtap: entered promiscuous mode [ 85.176993][ T5784] veth1_vlan: entered promiscuous mode [ 85.188222][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.198417][ T5794] veth1_vlan: entered promiscuous mode [ 85.221652][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.247265][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.256468][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.265714][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.275063][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.289286][ T5787] veth0_macvtap: entered promiscuous mode [ 85.300485][ T5787] veth1_macvtap: entered promiscuous mode [ 85.351721][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.363973][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.375857][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.406336][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.418647][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.432410][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.462629][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.471850][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.480985][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.490069][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.507298][ T5784] veth0_macvtap: entered promiscuous mode [ 85.536928][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.553960][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.568227][ T5784] veth1_macvtap: entered promiscuous mode [ 85.577725][ T5794] veth0_macvtap: entered promiscuous mode [ 85.616826][ T5794] veth1_macvtap: entered promiscuous mode [ 85.661940][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.676061][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.691263][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.706486][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.720877][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.732065][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.744621][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.768127][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.784278][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.795756][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.806403][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.817942][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.831838][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.842513][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.858220][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.869122][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.880941][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.891621][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.911769][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.969011][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.980497][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.995967][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.007435][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.037351][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.048490][ T5874] syz.1.2[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.049830][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.073380][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.085889][ T5874] loop1: detected capacity change from 0 to 1024 [ 86.088635][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.096597][ T5874] EXT4-fs: Ignoring removed orlov option [ 86.117670][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.141872][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.156878][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.170420][ T5874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.183422][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.191280][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.237605][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.248024][ T28] audit: type=1326 audit(1757454151.669:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d678ebe9 code=0x7ffc0000 [ 86.264732][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.270642][ T28] audit: type=1326 audit(1757454151.669:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d678ebe9 code=0x7ffc0000 [ 86.290665][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.312560][ T28] audit: type=1326 audit(1757454151.669:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe0d678d457 code=0x7ffc0000 [ 86.337568][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.342787][ T28] audit: type=1326 audit(1757454151.719:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d678ebe9 code=0x7ffc0000 [ 86.375716][ T28] audit: type=1326 audit(1757454151.719:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fe0d678ebe9 code=0x7ffc0000 [ 86.401135][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.406772][ T28] audit: type=1326 audit(1757454151.719:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d678ebe9 code=0x7ffc0000 [ 86.462999][ T28] audit: type=1326 audit(1757454151.719:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d678ebe9 code=0x7ffc0000 [ 86.513353][ T5785] Bluetooth: hci3: command tx timeout [ 86.518174][ T5797] Bluetooth: hci0: command tx timeout [ 86.518793][ T5785] Bluetooth: hci2: command tx timeout [ 86.560360][ T5880] loop1: detected capacity change from 0 to 512 [ 86.592993][ T5785] Bluetooth: hci1: command tx timeout [ 86.613502][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.621419][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.641085][ T5880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.683790][ T5880] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.833468][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.841348][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.895977][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.926472][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.936048][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.970719][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.980035][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.072404][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.084443][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.379061][ T5892] loop3: detected capacity change from 0 to 128 [ 87.396912][ T5890] loop1: detected capacity change from 0 to 8192 [ 87.425232][ T5894] tipc: Started in network mode [ 87.430231][ T5894] tipc: Node identity 74725f6c656e3a2, cluster identity 4711 [ 87.445259][ T5894] tipc: Enabling of bearer rejected, failed to enable media [ 87.578963][ T5896] loop2: detected capacity change from 0 to 4096 [ 88.092145][ T5904] loop0: detected capacity change from 0 to 1024 [ 88.118302][ T5904] ======================================================= [ 88.118302][ T5904] WARNING: The mand mount option has been deprecated and [ 88.118302][ T5904] and is ignored by this kernel. Remove the mand [ 88.118302][ T5904] option from the mount to silence this warning. [ 88.118302][ T5904] ======================================================= [ 88.179523][ T5902] loop3: detected capacity change from 0 to 4096 [ 88.233685][ T5904] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.321277][ T5904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.364881][ T5902] ntfs: volume version 3.1. [ 88.557407][ T5911] loop2: detected capacity change from 0 to 128 [ 88.593250][ T5785] Bluetooth: hci2: command tx timeout [ 88.598745][ T50] Bluetooth: hci0: command tx timeout [ 88.599173][ T5797] Bluetooth: hci3: command tx timeout [ 88.609951][ T5911] EXT4-fs (loop2): Test dummy encryption mode enabled [ 88.625308][ T5911] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.630624][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.640160][ T5911] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.689096][ T5797] Bluetooth: hci1: command tx timeout [ 89.218828][ T5911] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 89.343625][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.686086][ T5944] loop3: detected capacity change from 0 to 1024 [ 89.710392][ T5944] EXT4-fs: Ignoring removed orlov option [ 89.764322][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.804156][ T5944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.987475][ T28] audit: type=1800 audit(1757454155.429:9): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.25" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 90.138702][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.319492][ T5946] loop0: detected capacity change from 0 to 32768 [ 90.361626][ T5946] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 90.418618][ T5946] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 90.797416][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.852915][ T5970] loop1: detected capacity change from 0 to 4096 [ 91.301118][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 91.616653][ T5983] loop1: detected capacity change from 0 to 4096 [ 91.962202][ T788] cfg80211: failed to load regulatory.db [ 92.268869][ T5996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.322229][ T5996] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 92.676665][ T5987] loop3: detected capacity change from 0 to 40427 [ 92.749359][ T5987] F2FS-fs (loop3): invalid crc value [ 92.809912][ T5987] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.983013][ T5987] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 93.187014][ T5987] syz.3.43: attempt to access beyond end of device [ 93.187014][ T5987] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.224199][ T5987] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 93.396900][ T6000] loop0: detected capacity change from 0 to 40427 [ 93.486125][ T6000] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.616572][ T6000] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.652328][ T6012] loop1: detected capacity change from 0 to 32768 [ 93.990990][ T6014] loop2: detected capacity change from 0 to 32768 [ 94.080165][ T6014] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 94.228663][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 94.773462][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 95.012503][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 95.024442][ T6038] netlink: 39 bytes leftover after parsing attributes in process `syz.3.61'. [ 95.162216][ T6042] loop1: detected capacity change from 0 to 512 [ 95.213601][ T6042] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.63: iget: bad i_size value: 38620345925642 [ 95.263222][ T6042] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.63: couldn't read orphan inode 15 (err -117) [ 95.314885][ T6042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.359959][ T6042] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 95.439475][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.504795][ T788] kernel read not supported for file /dsp (pid: 788 comm: kworker/0:2) [ 96.608899][ T6086] loop3: detected capacity change from 0 to 128 [ 97.482514][ T6080] loop2: detected capacity change from 0 to 32768 [ 97.912190][ T6106] loop1: detected capacity change from 0 to 1024 [ 98.086257][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.100837][ T6096] loop0: detected capacity change from 0 to 32768 [ 98.109994][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.151455][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.234389][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.249932][ T6096] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.263290][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.270971][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.281412][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.290039][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.299011][ T6110] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.346798][ T6110] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.402992][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.463751][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.479485][ T6096] XFS (loop0): Ending clean mount [ 98.517184][ T6110] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.620551][ T6110] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.647808][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.676990][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.703746][ T6096] syz.0.86 (6096) used greatest stack depth: 18576 bytes left [ 98.723142][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.731337][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.779776][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.787739][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.802050][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.832342][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.839904][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.841270][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.847554][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.863755][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.871084][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.883364][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.890710][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.899036][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.908391][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.916255][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.934028][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.967144][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.007209][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.063176][ T35] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.080931][ T35] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.162560][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.188376][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.208704][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.224087][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.231691][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.248582][ T6106] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.263452][ T28] audit: type=1800 audit(1757454164.699:10): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.90" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 99.465324][ T6140] loop0: detected capacity change from 0 to 256 [ 99.465632][ T6138] netlink: 52 bytes leftover after parsing attributes in process `syz.1.102'. [ 99.508970][ T6140] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 99.731785][ T6130] loop2: detected capacity change from 0 to 32768 [ 99.778092][ T6145] misc userio: Begin command sent, but we're already running [ 99.810077][ T6130] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.166769][ T6130] XFS (loop2): Ending clean mount [ 100.239898][ T6130] XFS (loop2): Quotacheck needed: Please wait. [ 100.375777][ T6130] XFS (loop2): Quotacheck: Done. [ 100.570642][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.881771][ T6169] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 101.403536][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 101.874220][ T6174] loop2: detected capacity change from 0 to 40427 [ 101.908352][ T6174] F2FS-fs (loop2): invalid crc value [ 101.934210][ T6174] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.045437][ T6174] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.221457][ T5787] syz-executor: attempt to access beyond end of device [ 102.221457][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.250968][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 102.377061][ T6197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.568645][ T6198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.616558][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 103.638549][ T6206] loop3: detected capacity change from 0 to 32768 [ 103.732919][ T6206] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.088912][ T6206] XFS (loop3): Ending clean mount [ 104.107452][ T6206] XFS (loop3): Quotacheck needed: Please wait. [ 104.202120][ T6206] XFS (loop3): Quotacheck: Done. [ 104.263706][ T6240] loop1: detected capacity change from 0 to 64 [ 104.420471][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.750293][ T6247] loop2: detected capacity change from 0 to 512 [ 104.787869][ T6247] EXT4-fs: inline encryption not supported [ 104.844274][ T6247] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.140: corrupted in-inode xattr: invalid ea_ino [ 104.884841][ T6247] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.140: couldn't read orphan inode 15 (err -117) [ 104.923717][ T6247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.969680][ T6247] EXT4-fs (loop2): shut down requested (1) [ 105.015962][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.020498][ T6253] loop3: detected capacity change from 0 to 8 [ 105.432471][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 105.549145][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 105.797988][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 106.155013][ T6275] loop3: detected capacity change from 0 to 8192 [ 106.818846][ T6289] loop0: detected capacity change from 0 to 256 [ 106.844354][ T6289] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.883024][ T6289] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 106.927365][ T6289] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 106.972762][ T28] audit: type=1800 audit(1757454172.409:11): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.155" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 107.054486][ T28] audit: type=1800 audit(1757454172.419:12): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.155" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 107.458993][ T2191] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.492859][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.677728][ T2191] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.697379][ T2191] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.712184][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.726675][ T9] usb 1-1: config 0 has no interface number 0 [ 107.740289][ T2191] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.749810][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.760966][ T2191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.769247][ T2191] usb 3-1: SerialNumber: syz [ 107.779526][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.797558][ T9] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.827246][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 107.836770][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.850751][ T9] usb 1-1: config 0 descriptor?? [ 108.061457][ T2191] usb 3-1: 0:2 : does not exist [ 108.140964][ T2191] usb 3-1: USB disconnect, device number 2 [ 108.526729][ T9] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0001/input/input6 [ 108.609733][ T6323] loop1: detected capacity change from 0 to 128 [ 108.694036][ T9] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 108.704018][ T6323] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.729565][ T9] usb 1-1: USB disconnect, device number 2 [ 108.747639][ T6323] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.971545][ T5790] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.987959][ T6330] fido_id[6330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 109.645462][ T6347] loop1: detected capacity change from 0 to 22 [ 109.675747][ T6347] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 109.694917][ T6347] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 109.937380][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'. [ 110.245973][ T6363] loop3: detected capacity change from 0 to 64 [ 110.583671][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.795804][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 110.824588][ T788] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 110.832654][ T788] usb 3-1: config 0 has no interface number 0 [ 110.838692][ T6386] netlink: 60 bytes leftover after parsing attributes in process `syz.3.197'. [ 110.864045][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'. [ 110.867844][ T788] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.891134][ T788] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 110.897603][ T6389] loop1: detected capacity change from 0 to 64 [ 110.905266][ T788] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 110.935222][ T788] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 110.960802][ T788] usb 3-1: Product: syz [ 110.985658][ T788] usb 3-1: SerialNumber: syz [ 111.006044][ T788] usb 3-1: config 0 descriptor?? [ 111.025878][ T788] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 111.060406][ T6389] Trying to free block not in datazone [ 111.069346][ T788] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 [ 111.242601][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 111.462816][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.470710][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.479658][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.489154][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.496878][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.504115][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.511352][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.518658][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.527989][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.535710][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 111.543476][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 111.552510][ T5850] usb 3-1: USB disconnect, device number 3 [ 111.574554][ T5850] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 111.652138][ T5794] cgroup: fork rejected by pids controller in /syz3 [ 111.842068][ T6408] kvm: kvm [6405]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 111.945934][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 112.264712][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.422170][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.606930][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.737369][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.801586][ T6413] loop1: detected capacity change from 0 to 32768 [ 112.877379][ T6413] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 112.913181][ T5850] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.972169][ T6413] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.097571][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 113.130192][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.172317][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.190478][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.191892][ T5850] usb 3-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 113.208949][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.212768][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.225311][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.235642][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.250652][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.255963][ T5850] usb 3-1: config 0 descriptor?? [ 113.264663][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.330432][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 113.735107][ T5850] logitech-hidpp-device 0003:046D:C343.0002: hidraw0: USB HID v3.0e Device [HID 046d:c343] on usb-dummy_hcd.2-1/input0 [ 113.988693][ T5850] usb 3-1: USB disconnect, device number 4 [ 114.457421][ T6454] loop0: detected capacity change from 0 to 8192 [ 114.494828][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 115.232810][ T6472] loop0: detected capacity change from 0 to 1764 [ 115.273377][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.301629][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.324224][ T6427] bridge_slave_0: entered allmulticast mode [ 115.333523][ T5797] Bluetooth: hci3: command tx timeout [ 115.339870][ T6427] bridge_slave_0: entered promiscuous mode [ 115.407016][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.414404][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.422553][ T6427] bridge_slave_1: entered allmulticast mode [ 115.435961][ T6427] bridge_slave_1: entered promiscuous mode [ 115.592271][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.647991][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.764850][ T6427] team0: Port device team_slave_0 added [ 115.783237][ T2191] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.798542][ T11] hsr_slave_0: left promiscuous mode [ 115.805389][ T11] hsr_slave_1: left promiscuous mode [ 115.828710][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.839906][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.859943][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.869314][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.882083][ T11] bridge_slave_1: left allmulticast mode [ 115.888915][ T11] bridge_slave_1: left promiscuous mode [ 115.904904][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.920611][ T11] bridge_slave_0: left allmulticast mode [ 115.938672][ T11] bridge_slave_0: left promiscuous mode [ 115.949064][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.993527][ T2191] usb 3-1: Using ep0 maxpacket: 8 [ 116.021271][ T2191] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 116.042432][ T11] veth1_macvtap: left promiscuous mode [ 116.045994][ T2191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.050779][ T11] veth0_macvtap: left promiscuous mode [ 116.076572][ T11] veth1_vlan: left promiscuous mode [ 116.084678][ T2191] pvrusb2: Hardware description: Terratec Grabster AV400 [ 116.093834][ T2191] pvrusb2: ********** [ 116.099402][ T11] veth0_vlan: left promiscuous mode [ 116.101277][ T2191] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 116.132796][ T2191] pvrusb2: Important functionality might not be entirely working. [ 116.152724][ T2191] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 116.172819][ T2191] pvrusb2: ********** [ 116.301285][ T2320] pvrusb2: Invalid write control endpoint [ 116.473299][ T2320] pvrusb2: Invalid write control endpoint [ 116.480555][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 116.514466][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 116.531899][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 116.550772][ T2320] pvrusb2: Device being rendered inoperable [ 116.569052][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 116.588248][ T55] usb 3-1: USB disconnect, device number 5 [ 116.594610][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 116.610724][ T6485] loop0: detected capacity change from 0 to 40427 [ 116.622812][ T2320] pvrusb2: Attached sub-driver cx25840 [ 116.628552][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 116.639465][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 116.652967][ T6485] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 116.679192][ T6485] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.721655][ T6485] F2FS-fs (loop0): invalid crc value [ 116.763739][ T6485] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.849224][ T6485] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 116.869827][ T6485] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.048554][ T6499] loop1: detected capacity change from 0 to 16 [ 117.069286][ T28] audit: type=1800 audit(1757454182.489:13): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.227" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 117.137280][ T6499] erofs: (device loop1): mounted with root inode @ nid 36. [ 117.400311][ T5797] Bluetooth: hci3: command tx timeout [ 117.628837][ T11] team0 (unregistering): Port device team_slave_1 removed [ 117.719439][ T11] team0 (unregistering): Port device team_slave_0 removed [ 117.789155][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.846387][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.963836][ T6506] support for cryptoloop has been removed. Use dm-crypt instead. [ 118.090843][ T6508] netlink: 'syz.0.232': attribute type 11 has an invalid length. [ 118.601160][ T11] bond0 (unregistering): Released all slaves [ 118.692326][ T6427] team0: Port device team_slave_1 added [ 119.010560][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.022136][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.048444][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.104912][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.133745][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.187967][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.371597][ T6427] hsr_slave_0: entered promiscuous mode [ 119.426541][ T6427] hsr_slave_1: entered promiscuous mode [ 119.461430][ T6427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.473155][ T5797] Bluetooth: hci3: command tx timeout [ 119.478582][ T6427] Cannot create hsr debugfs directory [ 119.650237][ T6536] pimreg: tun_chr_ioctl cmd 1074025677 [ 119.668897][ T6536] pimreg: linktype set to 780 [ 120.099149][ T6546] loop2: detected capacity change from 0 to 4096 [ 120.214900][ T6546] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 120.303518][ T6546] ntfs3: loop2: Failed to load $Extend (-22). [ 120.339603][ T6546] ntfs3: loop2: Failed to initialize $Extend. [ 120.467807][ T28] audit: type=1800 audit(1757454185.909:14): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.243" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 120.743644][ T6535] loop0: detected capacity change from 0 to 40427 [ 120.798480][ T6535] F2FS-fs (loop0): invalid crc value [ 120.827680][ T6535] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.945498][ T6548] loop1: detected capacity change from 0 to 32768 [ 121.035544][ T6548] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 121.057931][ T6427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.061428][ T6535] F2FS-fs (loop0): Start checkpoint disabled! [ 121.076762][ T6427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.089306][ T6427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.101477][ T6427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 121.144108][ T6535] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 121.368265][ T5790] (syz-executor,5790,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 121.476916][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.562962][ T5797] Bluetooth: hci3: command tx timeout [ 121.712419][ T12] kworker/u4:1: attempt to access beyond end of device [ 121.712419][ T12] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 121.750700][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 121.759551][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.783578][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.787531][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 121.790867][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.849405][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 121.895856][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.950299][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.957580][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.169926][ T6562] loop2: detected capacity change from 0 to 32768 [ 122.186199][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.239299][ T6562] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.407198][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.528162][ T6427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.546097][ T6562] XFS (loop2): Ending clean mount [ 122.721414][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.763586][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.731490][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.962865][ T6591] loop0: detected capacity change from 0 to 40427 [ 123.984732][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.007635][ T6591] F2FS-fs (loop0): invalid crc value [ 124.013485][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.029996][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.057370][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.071870][ T6591] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.071879][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.090661][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.353405][ T6591] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 124.429619][ T6427] veth0_vlan: entered promiscuous mode [ 124.515561][ T6591] syz.0.248: attempt to access beyond end of device [ 124.515561][ T6591] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.551030][ T6591] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 124.663200][ T6427] veth1_vlan: entered promiscuous mode [ 125.039436][ T6427] veth0_macvtap: entered promiscuous mode [ 125.252090][ T35] hsr_slave_0: left promiscuous mode [ 125.272308][ T35] hsr_slave_1: left promiscuous mode [ 125.298765][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.311621][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.327628][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.348865][ T6629] loop2: detected capacity change from 0 to 32768 [ 125.351251][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.384034][ T35] bridge_slave_1: left allmulticast mode [ 125.389933][ T6629] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.399964][ T35] bridge_slave_1: left promiscuous mode [ 125.421174][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.469727][ T35] bridge_slave_0: left allmulticast mode [ 125.514335][ T35] bridge_slave_0: left promiscuous mode [ 125.520222][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.592090][ T6629] XFS (loop2): Ending clean mount [ 125.679113][ T35] veth1_macvtap: left promiscuous mode [ 125.689251][ T35] veth0_macvtap: left promiscuous mode [ 125.705815][ T35] veth1_vlan: left promiscuous mode [ 125.724824][ T35] veth0_vlan: left promiscuous mode [ 125.740304][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.008362][ T6661] loop0: detected capacity change from 0 to 128 [ 126.050566][ T6661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 126.059573][ T6661] System zones: 1-3, 19-19, 35-36 [ 126.067537][ T6661] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 126.090610][ T6661] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.196140][ T5797] Bluetooth: hci2: command tx timeout [ 126.290580][ T6661] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 126.422867][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.510948][ T35] team0 (unregistering): Port device team_slave_1 removed [ 127.645580][ T35] team0 (unregistering): Port device team_slave_0 removed [ 127.724381][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.741878][ T6698] loop0: detected capacity change from 0 to 64 [ 127.825748][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.866479][ T6698] hfs: unable to load codepage "iso8" [ 127.873096][ T6698] hfs: unable to parse mount options [ 128.273807][ T5797] Bluetooth: hci2: command tx timeout [ 128.403458][ T35] bond0 (unregistering): Released all slaves [ 128.512033][ T6702] erspan0: entered promiscuous mode [ 128.584402][ T6427] veth1_macvtap: entered promiscuous mode [ 128.700078][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.711597][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.746190][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.768330][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.791045][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.802511][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.815275][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.826061][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.841097][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.860170][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.882023][ T6611] chnl_net:caif_netlink_parms(): no params data found [ 129.065300][ T6427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.095176][ T6427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.112713][ T6427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.121573][ T6427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.291799][ T6722] warning: `syz.2.278' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.433863][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.441076][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.503183][ T6611] bridge_slave_0: entered allmulticast mode [ 129.511621][ T6611] bridge_slave_0: entered promiscuous mode [ 129.566227][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.583030][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.590316][ T6611] bridge_slave_1: entered allmulticast mode [ 129.609395][ T6611] bridge_slave_1: entered promiscuous mode [ 129.702475][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.727500][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.744970][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.772860][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.867113][ T6611] team0: Port device team_slave_0 added [ 129.925602][ T6611] team0: Port device team_slave_1 added [ 129.996554][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.013432][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.074946][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.097663][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.107597][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.114554][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.128783][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.157810][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.353361][ T55] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.362616][ T5797] Bluetooth: hci2: command tx timeout [ 130.426699][ T6611] hsr_slave_0: entered promiscuous mode [ 130.457659][ T6611] hsr_slave_1: entered promiscuous mode [ 130.478171][ T6611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.503079][ T6611] Cannot create hsr debugfs directory [ 130.563259][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 130.593611][ T55] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.612787][ T55] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.652716][ T55] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.659505][ T55] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 130.673304][ T5850] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.693304][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.713187][ T55] usb 3-1: config 0 descriptor?? [ 130.882764][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 130.890594][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.903126][ T5850] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 130.912278][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.966029][ T5850] usb 4-1: config 0 descriptor?? [ 131.028761][ T6611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.042290][ T6611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.060893][ T6611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.090327][ T6611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.208441][ T55] cougar 0003:060B:500A.0003: unexpected long global item [ 131.237472][ T55] cougar 0003:060B:500A.0003: parse failed [ 131.255519][ T55] cougar: probe of 0003:060B:500A.0003 failed with error -22 [ 131.394884][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.401658][ T5850] hid (null): unknown global tag 0xd [ 131.406910][ T5851] usb 3-1: USB disconnect, device number 6 [ 131.457293][ T5850] hid (null): global environment stack underflow [ 131.467054][ T6611] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.504369][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.511566][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.556727][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.564768][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.638205][ T6611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.657043][ T6611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.682048][ T23] usb 4-1: USB disconnect, device number 2 [ 131.932903][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.044406][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.155708][ T5909] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.175731][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.203883][ T5909] usb 1-1: config 0 descriptor?? [ 132.229106][ T5909] cp210x 1-1:0.0: cp210x converter detected [ 132.434277][ T5797] Bluetooth: hci2: command tx timeout [ 132.506347][ T6801] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 132.580573][ T6801] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 132.656012][ T5909] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 132.709808][ T5909] usb 1-1: cp210x converter now attached to ttyUSB0 [ 132.841846][ T6611] veth0_vlan: entered promiscuous mode [ 132.912079][ T6611] veth1_vlan: entered promiscuous mode [ 132.920818][ T5909] usb 1-1: USB disconnect, device number 3 [ 132.933606][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940214][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.953215][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 132.966184][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.980587][ T6809] netlink: 'syz.3.292': attribute type 21 has an invalid length. [ 132.987538][ T5909] cp210x 1-1:0.0: device disconnected [ 133.067157][ T6611] veth0_macvtap: entered promiscuous mode [ 133.114948][ T6611] veth1_macvtap: entered promiscuous mode [ 133.136631][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 133.167633][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.179101][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.190492][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.201423][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.215688][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.252761][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.286712][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.329880][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.350413][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.364093][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.378394][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.390335][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.406574][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.420262][ T6817] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 133.437177][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.504975][ T6611] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.556768][ T6611] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.602789][ T6611] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.612026][ T6611] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.962889][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.988459][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.087388][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.116562][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.453699][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 134.659050][ T6848] loop0: detected capacity change from 0 to 128 [ 134.779371][ T6850] loop4: detected capacity change from 0 to 1024 [ 134.861608][ T6826] loop3: detected capacity change from 0 to 32768 [ 134.926970][ T6826] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.295 (6826) [ 135.126511][ T6826] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.171126][ T6826] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 135.218337][ T6826] BTRFS info (device loop3): setting nodatacow, compression disabled [ 135.265193][ T6826] BTRFS info (device loop3): max_inline at 0 [ 135.287882][ T6826] BTRFS info (device loop3): enabling disk space caching [ 135.311589][ T6826] BTRFS info (device loop3): turning off barriers [ 135.329103][ T6826] BTRFS info (device loop3): turning on flush-on-commit [ 135.383338][ T6826] BTRFS info (device loop3): doing ref verification [ 135.413594][ T6826] BTRFS info (device loop3): force clearing of disk cache [ 135.429817][ T6865] program syz.0.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.432727][ T6826] BTRFS info (device loop3): enabling ssd optimizations [ 135.462908][ T6826] BTRFS info (device loop3): max_inline at 4096 [ 135.502590][ T6826] BTRFS info (device loop3): disk space caching is enabled [ 135.798791][ T6826] BTRFS info (device loop3): auto enabling async discard [ 135.854497][ T6826] BTRFS info (device loop3): rebuilding free space tree [ 136.058324][ T6826] BTRFS info (device loop3): disabling free space tree [ 136.088067][ T6826] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.127198][ T6826] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.513008][ T6914] loop2: detected capacity change from 0 to 8 [ 136.937455][ T6427] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.366018][ T6959] loop2: detected capacity change from 0 to 512 [ 140.436266][ T7017] loop4: detected capacity change from 0 to 4096 [ 140.464593][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.472326][ T7017] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 140.672791][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 140.693967][ T55] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.720509][ T55] usb 4-1: config 0 has no interface number 0 [ 140.744938][ T55] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.786512][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.816935][ T55] usb 4-1: Product: syz [ 140.821200][ T55] usb 4-1: Manufacturer: syz [ 140.827384][ T7017] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 140.855071][ T55] usb 4-1: SerialNumber: syz [ 140.883544][ T55] usb 4-1: config 0 descriptor?? [ 140.905351][ T7017] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 140.909110][ T55] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.090026][ T1318] ntfs3: loop4: ino=1e, failed to parse mft record [ 141.143230][ T55] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.213468][ T55] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.534038][ T7036] loop2: detected capacity change from 0 to 256 [ 141.658936][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.661020][ T5851] usb 4-1: USB disconnect, device number 3 [ 141.695167][ T5851] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.757725][ T5851] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.801905][ T5851] quatech2 4-1:0.51: device disconnected [ 142.001155][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.357'. [ 142.043072][ T7044] nvme_fabrics: missing parameter 'transport=%s' [ 142.057116][ T7044] nvme_fabrics: missing parameter 'nqn=%s' [ 142.240639][ T7050] netlink: 100 bytes leftover after parsing attributes in process `syz.0.358'. [ 142.752854][ T5825] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.771851][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.365'. [ 142.946958][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.988330][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.020565][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.067187][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.089291][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.120835][ T5825] usb 4-1: config 0 descriptor?? [ 143.554843][ T7084] loop0: detected capacity change from 0 to 4096 [ 143.627137][ T5825] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xe [ 143.663292][ T5825] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 143.683697][ T5825] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 143.694092][ T7084] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 143.768935][ T5825] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 144.114904][ T9] usb 4-1: USB disconnect, device number 4 [ 144.127280][ T7094] fido_id[7094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 144.306264][ T7100] loop2: detected capacity change from 0 to 512 [ 144.393478][ T7100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.455704][ T7100] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.480070][ T7100] EXT4-fs (loop2): shut down requested (1) [ 144.637281][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.822611][ T7111] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.378'. [ 144.842737][ T7111] openvswitch: netlink: Flow key attribute not present in set flow. [ 144.920719][ T7113] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.047161][ T995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.177599][ T995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.279438][ T995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.366819][ T7119] loop3: detected capacity change from 0 to 16 [ 145.402845][ T7119] erofs: (device loop3): mounted with root inode @ nid 36. [ 145.452772][ T28] audit: type=1800 audit(1757454210.889:15): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.383" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 145.503049][ T995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.264266][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.279853][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.288172][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.300623][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.323143][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.341113][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.835874][ T7151] loop2: detected capacity change from 0 to 1024 [ 146.976314][ T28] audit: type=1800 audit(1757454212.419:16): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.392" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 147.060866][ T7156] loop0: detected capacity change from 0 to 4096 [ 147.124420][ T7151] hfsplus: b-tree write err: -5, ino 3 [ 147.144155][ T7156] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 147.180514][ T7156] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 147.211010][ T7156] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 147.262887][ T7156] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.335127][ T35] hfsplus: bad catalog file entry [ 147.350874][ T7156] ntfs: volume version 3.1. [ 147.372768][ T7156] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 147.409441][ T7156] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 147.590612][ T7156] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-2. You might want to try to use the mount option nls=utf8. [ 147.644480][ T7156] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 147.780115][ T5825] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.984026][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 148.012998][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 148.042162][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.054214][ T5825] usb 3-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 148.063723][ T7135] chnl_net:caif_netlink_parms(): no params data found [ 148.065352][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.094229][ T5825] usb 3-1: config 0 descriptor?? [ 148.322804][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 148.433057][ T5797] Bluetooth: hci2: command tx timeout [ 148.530316][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.573696][ T5825] wacom 0003:056A:00ED.0006: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.2-1/input0 [ 148.585227][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.586367][ T9] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 148.592511][ T7135] bridge_slave_0: entered allmulticast mode [ 148.616851][ T7135] bridge_slave_0: entered promiscuous mode [ 148.627229][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.634825][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.644180][ T7135] bridge_slave_1: entered allmulticast mode [ 148.650675][ T9] usb 4-1: config 0 has no interface number 0 [ 148.652010][ T7135] bridge_slave_1: entered promiscuous mode [ 148.665603][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 148.684620][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.712169][ T9] usb 4-1: Product: syz [ 148.718592][ T9] usb 4-1: Manufacturer: syz [ 148.734185][ T9] usb 4-1: SerialNumber: syz [ 148.747292][ T995] hsr_slave_0: left promiscuous mode [ 148.748438][ T9] usb 4-1: config 0 descriptor?? [ 148.783134][ T995] hsr_slave_1: left promiscuous mode [ 148.789910][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.808559][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.818077][ T5825] usb 3-1: USB disconnect, device number 7 [ 148.858304][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.877744][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.899111][ T995] bridge_slave_1: left allmulticast mode [ 148.911644][ T995] bridge_slave_1: left promiscuous mode [ 148.922022][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.934314][ T995] bridge_slave_0: left allmulticast mode [ 148.940024][ T995] bridge_slave_0: left promiscuous mode [ 148.948816][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.019834][ T995] veth1_macvtap: left promiscuous mode [ 149.025600][ T995] veth0_macvtap: left promiscuous mode [ 149.037179][ T995] veth1_vlan: left promiscuous mode [ 149.044077][ T995] veth0_vlan: left promiscuous mode [ 149.198010][ T9] usb 4-1: Firmware: major: 0, minor: 64, hardware type: ATUSB (0) [ 149.417678][ T9] usb 4-1: failed to fetch extended address, random address set [ 150.014102][ T995] team0 (unregistering): Port device team_slave_1 removed [ 150.152193][ T995] team0 (unregistering): Port device team_slave_0 removed [ 150.396204][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.504379][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.515827][ T5797] Bluetooth: hci2: command tx timeout [ 150.598129][ T7219] loop3: detected capacity change from 0 to 32768 [ 150.679159][ T7219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 150.813174][ T7219] (syz.3.410,7219,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 150.928950][ T6427] ocfs2: Unmounting device (7,3) on (node local) [ 151.362221][ T995] bond0 (unregistering): Released all slaves [ 151.541670][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.575192][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.589070][ T9] usb 4-1: USB disconnect, device number 5 [ 152.049419][ T5800] udevd[5800]: failed to send result of seq 12804 to main daemon: Connection refused [ 152.061218][ T7135] team0: Port device team_slave_0 added [ 152.084835][ T7135] team0: Port device team_slave_1 added [ 152.117557][ T5909] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.166986][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.189151][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.217202][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.231135][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.243108][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.277674][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.395831][ T7135] hsr_slave_0: entered promiscuous mode [ 152.408271][ T7135] hsr_slave_1: entered promiscuous mode [ 152.416105][ T7135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.427964][ T7135] Cannot create hsr debugfs directory [ 152.566130][ T7252] loop0: detected capacity change from 0 to 2048 [ 152.592205][ T7252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.601902][ T5797] Bluetooth: hci2: command tx timeout [ 152.704985][ T7135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.715697][ T7135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.733395][ T7135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.751107][ T7135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.823539][ T788] kernel write not supported for file /snd/midiC2D0 (pid: 788 comm: kworker/0:2) [ 152.935043][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.984477][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.023664][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.030969][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.076649][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.083927][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.088320][ T7269] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 153.170410][ T7135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.244598][ T7273] loop0: detected capacity change from 0 to 512 [ 153.268309][ T7273] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 153.521387][ T7281] loop3: detected capacity change from 0 to 128 [ 153.547656][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.557657][ T7281] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.616430][ T7281] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.816096][ T6427] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.956089][ T7135] veth0_vlan: entered promiscuous mode [ 153.973354][ T7135] veth1_vlan: entered promiscuous mode [ 154.038489][ T7135] veth0_macvtap: entered promiscuous mode [ 154.069402][ T7135] veth1_macvtap: entered promiscuous mode [ 154.098969][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.111670][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.131651][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.142966][ T55] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.161187][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.171803][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.186902][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.199287][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.215562][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.232504][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.250074][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.261750][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.283609][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.299706][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.312165][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.343408][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 154.357354][ T7135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.380609][ T7135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.380797][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.408572][ T7135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.418148][ T7135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.427738][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.446648][ T55] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.477346][ T55] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.507975][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.567323][ T55] usb 1-1: config 0 descriptor?? [ 154.626241][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.634331][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.673367][ T50] Bluetooth: hci2: command tx timeout [ 154.694696][ T7307] loop3: detected capacity change from 0 to 64 [ 154.748038][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.771563][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.807057][ T7307] syz.3.438: attempt to access beyond end of device [ 154.807057][ T7307] loop3: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 154.856406][ T7307] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 154.888337][ T7307] syz.3.438: attempt to access beyond end of device [ 154.888337][ T7307] loop3: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 154.912002][ T7307] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 154.933058][ T7307] syz.3.438: attempt to access beyond end of device [ 154.933058][ T7307] loop3: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 154.962898][ T7307] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 154.990888][ T7307] syz.3.438: attempt to access beyond end of device [ 154.990888][ T7307] loop3: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 154.999139][ T55] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 155.023587][ T55] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 155.027548][ T7307] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 155.046962][ T55] microsoft 0003:045E:07DA.0007: no inputs found [ 155.058796][ T7305] loop2: detected capacity change from 0 to 32768 [ 155.066293][ T7307] syz.3.438: attempt to access beyond end of device [ 155.066293][ T7307] loop3: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 155.069522][ T55] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 155.096248][ T7307] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 155.108847][ T7305] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.437 (7305) [ 155.118441][ T7307] syz.3.438: attempt to access beyond end of device [ 155.118441][ T7307] loop3: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 155.141304][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.5.439'. [ 155.152557][ T7307] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 155.153909][ T7312] netlink: 3 bytes leftover after parsing attributes in process `syz.5.439'. [ 155.170547][ T7305] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 155.171269][ T7307] syz.3.438: attempt to access beyond end of device [ 155.171269][ T7307] loop3: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 155.182372][ T7305] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 155.204314][ T7307] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 155.213561][ T7307] syz.3.438: attempt to access beyond end of device [ 155.213561][ T7307] loop3: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 155.233118][ T7305] BTRFS info (device loop2): force zlib compression, level 3 [ 155.240564][ T7305] BTRFS info (device loop2): force clearing of disk cache [ 155.250120][ T7307] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 155.282787][ T7305] BTRFS info (device loop2): turning off barriers [ 155.290194][ T5825] usb 1-1: USB disconnect, device number 4 [ 155.300383][ T7305] BTRFS info (device loop2): doing ref verification [ 155.320785][ T7305] BTRFS info (device loop2): enabling disk space caching [ 155.348967][ T7305] BTRFS info (device loop2): disk space caching is enabled [ 155.471985][ T7305] BTRFS info (device loop2): enabling ssd optimizations [ 155.482803][ T7305] BTRFS info (device loop2): auto enabling async discard [ 155.517097][ T7305] BTRFS info (device loop2): rebuilding free space tree [ 155.584787][ T7305] BTRFS info (device loop2): disabling free space tree [ 155.602178][ T7305] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.633401][ T7305] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.742931][ T7320] loop5: detected capacity change from 0 to 32768 [ 155.760223][ T7305] BTRFS info (device loop2): balance: start -d -m [ 155.782568][ T7305] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 155.789980][ T7320] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 156.005772][ T7305] BTRFS info (device loop2): balance: paused [ 156.013403][ T7135] ocfs2: Unmounting device (7,5) on (node local) [ 156.098078][ T5787] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 156.142756][ T5825] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.342894][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 156.355624][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.392791][ T5825] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 156.413093][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.431953][ T5825] usb 4-1: config 0 descriptor?? [ 156.751749][ T7346] loop0: detected capacity change from 0 to 32768 [ 156.763249][ T50] Bluetooth: hci2: command tx timeout [ 156.771501][ T7346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.447 (7346) [ 156.806401][ T7346] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.817009][ T7346] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 156.825883][ T7346] BTRFS info (device loop0): use zlib compression, level 3 [ 156.833941][ T7346] BTRFS info (device loop0): using free space tree [ 156.892455][ T5825] kye 0003:0458:4018.0008: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 156.910598][ T7361] netlink: 'syz.2.449': attribute type 5 has an invalid length. [ 156.982797][ T7346] BTRFS info (device loop0): enabling ssd optimizations [ 156.989851][ T7346] BTRFS info (device loop0): auto enabling async discard [ 157.039504][ T7371] loop2: detected capacity change from 0 to 1024 [ 157.122033][ T7348] loop5: detected capacity change from 0 to 32768 [ 157.129749][ T7371] hfsplus: catalog searching failed [ 157.138817][ T5825] usb 4-1: USB disconnect, device number 6 [ 157.147892][ T7348] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.445 (7348) [ 157.188605][ T61] hfsplus: b-tree write err: -5, ino 3 [ 157.189018][ T7348] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.208362][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.222881][ T7348] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 157.245919][ T7348] BTRFS info (device loop5): enabling disk space caching [ 157.259273][ T7348] BTRFS info (device loop5): enabling auto defrag [ 157.268724][ T7348] BTRFS info (device loop5): doing ref verification [ 157.281033][ T7348] BTRFS info (device loop5): use no compression [ 157.291310][ T7348] BTRFS info (device loop5): force clearing of disk cache [ 157.305871][ T7348] BTRFS info (device loop5): disabling disk space caching [ 157.333544][ T7373] loop2: detected capacity change from 0 to 1024 [ 157.352002][ T7373] EXT4-fs: Ignoring removed orlov option [ 157.368993][ T7373] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.400901][ T7373] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 157.467173][ T7373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.523451][ T7348] BTRFS info (device loop5): enabling ssd optimizations [ 157.533808][ T7348] BTRFS info (device loop5): auto enabling async discard [ 157.553402][ T7348] BTRFS info (device loop5): rebuilding free space tree [ 157.585132][ T7348] BTRFS info (device loop5): disabling free space tree [ 157.595339][ T7348] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.609763][ T7348] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.649533][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.658740][ T28] audit: type=1800 audit(1757454223.089:17): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.445" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 157.741525][ T7135] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.883483][ T5851] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 158.094972][ T5851] usb 1-1: config 0 has no interfaces? [ 158.100720][ T5851] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 158.142850][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.163602][ T5851] usb 1-1: config 0 descriptor?? [ 158.408467][ T5850] usb 1-1: USB disconnect, device number 5 [ 158.608636][ T7399] loop3: detected capacity change from 0 to 40427 [ 158.620362][ T7399] F2FS-fs (loop3): invalid crc value [ 158.642076][ T7399] F2FS-fs (loop3): Found nat_bits in checkpoint [ 158.762849][ T7399] F2FS-fs (loop3): Start checkpoint disabled! [ 158.782781][ T7399] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 158.859223][ T7399] syz.3.455: attempt to access beyond end of device [ 158.859223][ T7399] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 159.062710][ T28] audit: type=1326 audit(1757454224.489:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc702b8ebe9 code=0x0 [ 159.072438][ T7410] loop5: detected capacity change from 0 to 40427 [ 159.104875][ T7410] F2FS-fs (loop5): invalid crc value [ 159.107633][ T1318] kworker/u4:7: attempt to access beyond end of device [ 159.107633][ T1318] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 159.116042][ T7421] netlink: 1 bytes leftover after parsing attributes in process `syz.0.464'. [ 159.131615][ T1318] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 159.143508][ T1318] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 159.151183][ T7410] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.267914][ T7410] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 159.384725][ T7135] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 159.463577][ T7428] loop0: detected capacity change from 0 to 8192 [ 159.484284][ T7428] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.512758][ T7428] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 159.522210][ T7428] REISERFS (device loop0): using ordered data mode [ 159.532898][ T7428] reiserfs: using flush barriers [ 159.551194][ T7428] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.588641][ T7431] Bluetooth: MGMT ver 1.22 [ 159.596112][ T7428] REISERFS (device loop0): checking transaction log (loop0) [ 159.628659][ T7428] REISERFS (device loop0): Using r5 hash to sort names [ 159.668817][ T7428] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 160.199434][ T7450] loop2: detected capacity change from 0 to 64 [ 160.299862][ T7452] program syz.0.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.751587][ T7465] loop5: detected capacity change from 0 to 8192 [ 160.768133][ T7465] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.807791][ T7465] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 160.817216][ T7465] REISERFS (device loop5): using ordered data mode [ 160.825235][ T7465] reiserfs: using flush barriers [ 160.833697][ T7465] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.851642][ T7465] REISERFS (device loop5): checking transaction log (loop5) [ 160.861066][ T7465] REISERFS (device loop5): Using r5 hash to sort names [ 160.866567][ T7449] loop3: detected capacity change from 0 to 40427 [ 160.874632][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.875213][ T7465] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 160.892911][ T7449] F2FS-fs (loop3): invalid crc value [ 160.939278][ T7449] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.062951][ T7449] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 161.072552][ T5909] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.092094][ T5909] usb 1-1: config 0 has no interface number 0 [ 161.101527][ T5909] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 161.117944][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.132906][ T5909] usb 1-1: Product: syz [ 161.142741][ T5909] usb 1-1: Manufacturer: syz [ 161.147379][ T5909] usb 1-1: SerialNumber: syz [ 161.173902][ T5909] usb 1-1: config 0 descriptor?? [ 161.203023][ T7449] F2FS-fs (loop3): Corrupted max_depth of 3: 4294967295 [ 161.388545][ T5909] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 161.424592][ T5909] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.453523][ T5909] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 161.473453][ T5909] usb 1-1: media controller created [ 161.521745][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.654961][ T5909] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 161.753157][ T5909] usb 1-1: USB disconnect, device number 6 [ 161.801107][ T7483] program syz.2.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.857726][ T7478] loop5: detected capacity change from 0 to 32768 [ 161.874565][ T7478] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.485 (7478) [ 161.900700][ T7478] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.919727][ T7478] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 161.928578][ T7478] BTRFS info (device loop5): doing ref verification [ 161.940007][ T7478] BTRFS info (device loop5): use no compression [ 161.946527][ T7478] BTRFS info (device loop5): using free space tree [ 162.036556][ T7478] BTRFS info (device loop5): auto enabling async discard [ 162.069789][ T7478] BTRFS info (device loop5): checking UUID tree [ 162.476902][ T7506] loop2: detected capacity change from 0 to 32768 [ 162.512337][ T7506] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 162.634568][ T7135] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.666699][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 162.989062][ T7509] loop3: detected capacity change from 0 to 32768 [ 163.012567][ T7509] XFS: ikeep mount option is deprecated. [ 163.076546][ T7509] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.108699][ T7528] tipc: Started in network mode [ 163.124974][ T7528] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 163.166328][ T7528] tipc: Enabling of bearer rejected, failed to enable media [ 163.337096][ T7509] XFS (loop3): Ending clean mount [ 163.347650][ T7509] XFS (loop3): Quotacheck needed: Please wait. [ 163.429674][ T7509] XFS (loop3): Quotacheck: Done. [ 163.519678][ T7543] loop5: detected capacity change from 0 to 512 [ 163.529717][ T7509] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x244b dinode [ 163.548842][ T7543] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 163.562247][ T7509] XFS (loop3): Unmount and run xfs_repair [ 163.570252][ T7509] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 163.578744][ T7543] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.589608][ T7509] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 163.599096][ T7509] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.614959][ T7509] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.624597][ T7509] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.637387][ T7509] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.647282][ T7509] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.657714][ T7509] 00000060: ff ff ff ff e6 8a f7 29 00 00 00 00 00 00 00 00 .......)........ [ 163.659673][ T7543] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.503: corrupted in-inode xattr: bad e_name length [ 163.667842][ T7509] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 163.689769][ T7509] XFS (loop3): Internal error xfs_trans_cancel at line 1096 of file fs/xfs/xfs_trans.c. Caller xfs_create+0x774/0xe60 [ 163.702345][ T7509] CPU: 0 PID: 7509 Comm: syz.3.492 Not tainted syzkaller #0 [ 163.709663][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.719840][ T7509] Call Trace: [ 163.723141][ T7509] [ 163.726092][ T7509] dump_stack_lvl+0x16c/0x230 [ 163.730806][ T7509] ? show_regs_print_info+0x20/0x20 [ 163.736028][ T7509] ? xfs_ialloc_inode_init+0xb30/0xb30 [ 163.741518][ T7509] ? xfs_trans_reserve_quota_icreate+0xa0/0xe0 [ 163.747709][ T7509] ? xfs_error_report+0x92/0xd0 [ 163.752580][ T7509] ? xfs_create+0x774/0xe60 [ 163.757103][ T7509] ? xfs_create+0x774/0xe60 [ 163.761631][ T7509] xfs_trans_cancel+0x1b8/0x3c0 [ 163.766497][ T7509] ? xfs_create+0x774/0xe60 [ 163.771036][ T7509] xfs_create+0x774/0xe60 [ 163.775384][ T7509] ? mb_cache_destroy+0x2c0/0x2c0 [ 163.780437][ T7509] ? xfs_inode_inherit_flags2+0x320/0x320 [ 163.786178][ T7509] ? get_inode_acl+0x30/0x30 [ 163.790787][ T7509] ? xfs_ip2xflags+0x1c0/0x1c0 [ 163.795569][ T7509] ? current_umask+0x16/0x70 [ 163.800170][ T7509] ? posix_acl_create+0x169/0x440 [ 163.805234][ T7509] xfs_generic_create+0x32d/0xa00 [ 163.810311][ T7509] ? xfs_vn_tmpfile+0xd0/0xd0 [ 163.815029][ T7509] ? from_kgid+0x15d/0x680 [ 163.819531][ T7509] ? inode_permission+0xf3/0x480 [ 163.824497][ T7509] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 163.829535][ T7509] ? security_inode_mkdir+0xb7/0x100 [ 163.834852][ T7509] vfs_mkdir+0x296/0x440 [ 163.839129][ T7509] do_mkdirat+0x1d4/0x440 [ 163.843495][ T7509] ? vfs_mkdir+0x440/0x440 [ 163.847943][ T7509] __x64_sys_mkdirat+0x89/0xa0 [ 163.852757][ T7509] do_syscall_64+0x55/0xb0 [ 163.857203][ T7509] ? clear_bhb_loop+0x40/0x90 [ 163.861993][ T7509] ? clear_bhb_loop+0x40/0x90 [ 163.866687][ T7509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.872603][ T7509] RIP: 0033:0x7fcbabb8d457 [ 163.877036][ T7509] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.896662][ T7509] RSP: 002b:00007fcbac969e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 163.905094][ T7509] RAX: ffffffffffffffda RBX: 00007fcbac969ef0 RCX: 00007fcbabb8d457 [ 163.913091][ T7509] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 00000000ffffff9c [ 163.921074][ T7509] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000 [ 163.929056][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 163.937041][ T7509] R13: 00007fcbac969eb0 R14: 0000000000000000 R15: 0000000000000000 [ 163.945062][ T7509] [ 163.973073][ T7543] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.503: couldn't read orphan inode 15 (err -117) [ 163.994553][ T7543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.017561][ T7509] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1d1/0x3c0 (fs/xfs/xfs_trans.c:1097). Shutting down filesystem. [ 164.042718][ T7509] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 164.120416][ T7553] loop0: detected capacity change from 0 to 64 [ 164.141183][ T6427] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.224426][ T7555] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.235006][ T7555] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.243938][ T7555] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.252774][ T7555] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.265761][ T7555] Zero length message leads to an empty skb [ 164.390831][ T7135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.572028][ T7564] loop0: detected capacity change from 0 to 256 [ 164.598595][ T7564] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 164.612540][ T7564] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 164.891540][ T7575] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 165.294443][ T7571] loop3: detected capacity change from 0 to 32768 [ 165.301919][ T7571] XFS: noikeep mount option is deprecated. [ 165.336839][ T7571] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.426335][ T7577] loop0: detected capacity change from 0 to 40427 [ 165.427289][ T7589] loop5: detected capacity change from 0 to 128 [ 165.456294][ T7591] loop2: detected capacity change from 0 to 512 [ 165.464871][ T7591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.479526][ T7571] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 165.498879][ T7577] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.500906][ T7591] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.519: corrupted in-inode xattr: bad e_name length [ 165.532431][ T7591] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.519: couldn't read orphan inode 15 (err -117) [ 165.565350][ T7577] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 165.566796][ T7591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.610821][ T7571] XFS (loop3): Starting recovery (logdev: internal) [ 165.627995][ T7577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.640999][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.520'. [ 165.680311][ T7571] XFS (loop3): Ending recovery (logdev: internal) [ 165.809515][ T5784] bio_check_eod: 1 callbacks suppressed [ 165.809531][ T5784] syz-executor: attempt to access beyond end of device [ 165.809531][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.831752][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 165.848111][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.861630][ T7601] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_bnobt block 0x8 [ 165.882519][ T7601] XFS (loop3): Unmount and run xfs_repair [ 165.996598][ T6427] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.073033][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 166.283136][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 166.299416][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 166.314160][ T9] usb 6-1: config 0 has no interface number 0 [ 166.342092][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.372790][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.414284][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 166.424581][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 166.440698][ T9] usb 6-1: Product: syz [ 166.445104][ T9] usb 6-1: SerialNumber: syz [ 166.455130][ T9] usb 6-1: config 0 descriptor?? [ 166.467670][ T9] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 166.486253][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input12 [ 166.669863][ T7603] loop2: detected capacity change from 0 to 32768 [ 166.709931][ T7603] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.779088][ C0] cm109_urb_ctl_callback: 3 callbacks suppressed [ 166.779110][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 166.780497][ T5850] usb 6-1: USB disconnect, device number 2 [ 166.785499][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 166.826446][ T7603] XFS (loop2): Ending clean mount [ 166.838623][ T5850] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 acpid: input device has been disconnected, fd 10 [ 166.876657][ T7603] XFS (loop2): Quotacheck needed: Please wait. [ 166.894088][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 166.937014][ T7603] XFS (loop2): Quotacheck: Done. [ 167.054861][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.100895][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 167.112703][ T9] usb 1-1: config 0 has no interface number 0 [ 167.121784][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 167.137880][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.146310][ T9] usb 1-1: Product: syz [ 167.150922][ T9] usb 1-1: Manufacturer: syz [ 167.164769][ T9] usb 1-1: SerialNumber: syz [ 167.171915][ T9] usb 1-1: config 0 descriptor?? [ 167.367769][ T7631] bond0: entered promiscuous mode [ 167.373815][ T7631] bond_slave_0: entered promiscuous mode [ 167.379679][ T7631] bond_slave_1: entered promiscuous mode [ 167.387835][ T7631] dummy0: entered promiscuous mode [ 167.398475][ T7631] hsr1: entered promiscuous mode [ 167.513468][ T5851] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.609589][ T7637] loop5: detected capacity change from 0 to 64 [ 167.644629][ T7637] [ 167.647009][ T7637] ====================================================== [ 167.654035][ T7637] WARNING: possible circular locking dependency detected [ 167.661083][ T7637] syzkaller #0 Not tainted [ 167.665511][ T7637] ------------------------------------------------------ [ 167.672539][ T7637] syz.5.536/7637 is trying to acquire lock: [ 167.678448][ T7637] ffff88807ae08778 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 167.689293][ T7637] [ 167.689293][ T7637] but task is already holding lock: [ 167.696668][ T7637] ffff88807c3520b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 167.702749][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 167.706457][ T7637] [ 167.706457][ T7637] which lock already depends on the new lock. [ 167.706457][ T7637] [ 167.706465][ T7637] [ 167.706465][ T7637] the existing dependency chain (in reverse order) is: [ 167.706472][ T7637] [ 167.706472][ T7637] -> #1 ( [ 167.722751][ T5851] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 167.731020][ T7637] &tree->tree_lock#2/1){+.+.}-{3:3}: [ 167.731055][ T7637] __mutex_lock+0x129/0xcc0 [ 167.731083][ T7637] hfs_find_init+0x17e/0x1f0 [ 167.731127][ T7637] hfs_extend_file+0x2ef/0x1220 [ 167.731155][ T7637] hfs_bmap_reserve+0x107/0x430 [ 167.731181][ T7637] hfs_cat_create+0x1b4/0x620 [ 167.745511][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.750606][ T7637] hfs_create+0x66/0xd0 [ 167.750642][ T7637] path_openat+0x1277/0x3190 [ 167.761210][ T5851] usb 4-1: config 0 descriptor?? [ 167.766141][ T7637] do_filp_open+0x1c5/0x3d0 [ 167.766175][ T7637] do_sys_openat2+0x12c/0x1c0 [ 167.766195][ T7637] __x64_sys_openat+0x139/0x160 [ 167.766215][ T7637] do_syscall_64+0x55/0xb0 [ 167.766236][ T7637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.766266][ T7637] [ 167.766266][ T7637] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 167.766298][ T7637] __lock_acquire+0x2ddb/0x7c80 [ 167.766317][ T7637] lock_acquire+0x197/0x410 [ 167.766335][ T7637] __mutex_lock+0x129/0xcc0 [ 167.766358][ T7637] hfs_extend_file+0xdb/0x1220 [ 167.856783][ T7637] hfs_bmap_reserve+0x107/0x430 [ 167.862207][ T7637] __hfs_ext_write_extent+0x1fa/0x470 [ 167.868143][ T7637] __hfs_ext_cache_extent+0x6b/0x9b0 [ 167.874005][ T7637] hfs_extend_file+0x317/0x1220 [ 167.879433][ T7637] hfs_get_block+0x3d8/0xbd0 [ 167.884599][ T7637] __block_write_begin_int+0x566/0x1ad0 [ 167.890720][ T7637] block_write_begin+0x9a/0x1e0 [ 167.896142][ T7637] cont_write_begin+0x5c8/0x7e0 [ 167.901557][ T7637] hfs_write_begin+0x8b/0xd0 [ 167.906696][ T7637] generic_perform_write+0x2fb/0x5b0 [ 167.912538][ T7637] generic_file_write_iter+0xaf/0x2e0 [ 167.918490][ T7637] vfs_write+0x43b/0x940 [ 167.923303][ T7637] ksys_write+0x147/0x250 [ 167.928196][ T7637] do_syscall_64+0x55/0xb0 [ 167.933172][ T7637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.939643][ T7637] [ 167.939643][ T7637] other info that might help us debug this: [ 167.939643][ T7637] [ 167.949920][ T7637] Possible unsafe locking scenario: [ 167.949920][ T7637] [ 167.957415][ T7637] CPU0 CPU1 [ 167.962816][ T7637] ---- ---- [ 167.968224][ T7637] lock(&tree->tree_lock#2/1); [ 167.973132][ T7637] lock(&HFS_I(tree->inode)->extents_lock); [ 167.981671][ T7637] lock(&tree->tree_lock#2/1); [ 167.986781][ T5851] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 167.989075][ T7637] lock(&HFS_I(tree->inode)->extents_lock); [ 167.989095][ T7637] [ 167.989095][ T7637] *** DEADLOCK *** [ 167.989095][ T7637] [ 167.989100][ T7637] 5 locks held by syz.5.536/7637: [ 167.989113][ T7637] #0: [ 168.000984][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 168.001938][ T7637] ffff88802ca9ed48 (&f->f_pos_lock){+.+.}-{3:3} [ 168.025003][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.028047][ T7637] , at: __fdget_pos+0x2a3/0x330 [ 168.043197][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 168.043491][ T7637] #1: ffff88807c350418 [ 168.048638][ T9] asix: probe of 1-1:0.251 failed with error -71 [ 168.058664][ T7637] (sb_writers#23){.+.+}-{0:0}, at: vfs_write+0x20e/0x940 [ 168.058730][ T7637] #2: ffff88807cf11cb8 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: generic_file_write_iter+0x83/0x2e0 [ 168.058788][ T7637] #3: ffff88807cf11af8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 168.058848][ T7637] #4: ffff88807c3520b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 168.058914][ T7637] [ 168.058914][ T7637] stack backtrace: [ 168.058920][ T7637] CPU: 1 PID: 7637 Comm: syz.5.536 Not tainted syzkaller #0 [ 168.058938][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.058949][ T7637] Call Trace: [ 168.058957][ T7637] [ 168.058965][ T7637] dump_stack_lvl+0x16c/0x230 [ 168.058991][ T7637] ? load_image+0x3b0/0x3b0 [ 168.059009][ T7637] ? show_regs_print_info+0x20/0x20 [ 168.059038][ T7637] ? print_circular_bug+0x12b/0x1a0 [ 168.059064][ T7637] check_noncircular+0x2bd/0x3c0 [ 168.059088][ T7637] ? look_up_lock_class+0x75/0x140 [ 168.059120][ T7637] ? print_deadlock_bug+0x5d0/0x5d0 [ 168.059142][ T7637] ? lockdep_lock+0xe0/0x220 [ 168.059163][ T7637] ? mark_lock+0x94/0x320 [ 168.059186][ T7637] ? _find_first_zero_bit+0xd3/0x100 [ 168.059219][ T7637] __lock_acquire+0x2ddb/0x7c80 [ 168.059258][ T7637] ? verify_lock_unused+0x140/0x140 [ 168.059282][ T7637] ? __lock_acquire+0x1260/0x7c80 [ 168.059306][ T7637] ? look_up_lock_class+0x75/0x140 [ 168.059342][ T7637] lock_acquire+0x197/0x410 [ 168.059362][ T7637] ? hfs_extend_file+0xdb/0x1220 [ 168.059398][ T7637] ? __might_sleep+0xe0/0xe0 [ 168.059420][ T7637] ? __lock_acquire+0x1334/0x7c80 [ 168.059441][ T7637] ? read_lock_is_recursive+0x20/0x20 [ 168.059477][ T7637] __mutex_lock+0x129/0xcc0 [ 168.059504][ T7637] ? hfs_extend_file+0xdb/0x1220 [ 168.059534][ T7637] ? lock_chain_count+0x20/0x20 [ 168.059557][ T7637] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 168.059576][ T7637] ? hfs_extend_file+0xdb/0x1220 [ 168.059606][ T7637] ? verify_lock_unused+0x140/0x140 [ 168.059628][ T7637] ? mutex_lock_nested+0x20/0x20 [ 168.059653][ T7637] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 168.059672][ T7637] ? _raw_spin_unlock+0x40/0x40 [ 168.074618][ T5851] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 168.077279][ T7637] ? stack_trace_save+0x9c/0xe0 [ 168.106981][ T5851] usb 4-1: media controller created [ 168.109124][ T7637] ? stack_trace_snprint+0xf0/0xf0 [ 168.119155][ T9] usb 1-1: USB disconnect, device number 7 [ 168.122321][ T7637] hfs_extend_file+0xdb/0x1220 [ 168.167454][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.168293][ T7637] ? hfs_get_block+0xbd0/0xbd0 [ 168.191084][ T5851] az6027: usb out operation failed. (-71) [ 168.192648][ T7637] ? __mutex_trylock_common+0x153/0x250 [ 168.192688][ T7637] ? trace_raw_output_contention_end+0xd0/0xd0 [ 168.192724][ T7637] ? rcu_is_watching+0x15/0xb0 [ 168.192750][ T7637] ? hfs_brec_find+0x18f/0x500 [ 168.192778][ T7637] ? __mutex_lock+0x304/0xcc0 [ 168.192807][ T7637] hfs_bmap_reserve+0x107/0x430 [ 168.192847][ T7637] __hfs_ext_write_extent+0x1fa/0x470 [ 168.192882][ T7637] __hfs_ext_cache_extent+0x6b/0x9b0 [ 168.192902][ T7637] ? hfs_find_init+0x17e/0x1f0 [ 168.192931][ T7637] hfs_extend_file+0x317/0x1220 [ 168.207941][ T5851] az6027: usb out operation failed. (-71) [ 168.208308][ T7637] ? filemap_get_folios+0xe5/0x7b0 [ 168.220779][ T5851] stb0899_attach: Driver disabled by Kconfig [ 168.222366][ T7637] ? hfs_get_block+0xbd0/0xbd0 [ 168.228431][ T5851] az6027: no front-end attached [ 168.228431][ T5851] [ 168.232776][ T7637] ? find_lock_entries+0xfe0/0xfe0 [ 168.232810][ T7637] ? clean_bdev_aliases+0x55f/0x630 [ 168.232842][ T7637] hfs_get_block+0x3d8/0xbd0 [ 168.232880][ T7637] ? hfs_free_extents+0x430/0x430 [ 168.232914][ T7637] ? _raw_spin_unlock+0x28/0x40 [ 168.232933][ T7637] ? folio_add_lru+0x320/0xd50 [ 168.232958][ T7637] __block_write_begin_int+0x566/0x1ad0 [ 168.233000][ T7637] ? hfs_free_extents+0x430/0x430 [ 168.248453][ T5851] az6027: usb out operation failed. (-71) [ 168.253281][ T7637] ? folio_zero_new_buffers+0x550/0x550 [ 168.253323][ T7637] ? hfs_free_extents+0x430/0x430 [ 168.253355][ T7637] block_write_begin+0x9a/0x1e0 [ 168.253384][ T7637] ? hfs_free_extents+0x430/0x430 [ 168.253415][ T7637] cont_write_begin+0x5c8/0x7e0 [ 168.253458][ T7637] ? generic_cont_expand_simple+0x200/0x200 [ 168.253491][ T7637] ? fault_in_readable+0xcb/0x160 [ 168.253516][ T7637] ? fault_in_readable+0xd0/0x160 [ 168.265285][ T5851] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 168.268675][ T7637] hfs_write_begin+0x8b/0xd0 [ 168.279109][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 168.279425][ T7637] ? hfs_free_extents+0x430/0x430 [ 168.289678][ T5851] dvb-usb: schedule remote query interval to 400 msecs. [ 168.291397][ T7637] generic_perform_write+0x2fb/0x5b0 [ 168.299385][ T5851] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 168.301813][ T7637] ? generic_file_direct_write+0x3e0/0x3e0 [ 168.314518][ T5851] usb 4-1: USB disconnect, device number 7 [ 168.320974][ T7637] ? __generic_file_write_iter+0xf7/0x230 [ 168.321001][ T7637] ? generic_file_write_iter+0x9b/0x2e0 [ 168.569020][ T7637] generic_file_write_iter+0xaf/0x2e0 [ 168.574417][ T7637] vfs_write+0x43b/0x940 [ 168.578704][ T7637] ? file_end_write+0x250/0x250 [ 168.583575][ T7637] ? __fget_files+0x44a/0x4d0 [ 168.588267][ T7637] ? __fdget_pos+0x2a3/0x330 [ 168.592876][ T7637] ? ksys_write+0x75/0x250 [ 168.597321][ T7637] ksys_write+0x147/0x250 [ 168.601658][ T7637] ? __ia32_sys_read+0x90/0x90 [ 168.606458][ T7637] ? lockdep_hardirqs_on+0x98/0x150 [ 168.611668][ T7637] do_syscall_64+0x55/0xb0 [ 168.616091][ T7637] ? clear_bhb_loop+0x40/0x90 [ 168.620772][ T7637] ? clear_bhb_loop+0x40/0x90 [ 168.625456][ T7637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.631362][ T7637] RIP: 0033:0x7fc8deb8ebe9 [ 168.635780][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.655402][ T7637] RSP: 002b:00007fc8df971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.663857][ T7637] RAX: ffffffffffffffda RBX: 00007fc8dedc5fa0 RCX: 00007fc8deb8ebe9 [ 168.671856][ T7637] RDX: 000000000000fea7 RSI: 0000200000000040 RDI: 0000000000000004 [ 168.679872][ T7637] RBP: 00007fc8dec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 168.687866][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.695842][ T7637] R13: 00007fc8dedc6038 R14: 00007fc8dedc5fa0 R15: 00007ffe4b10aec8 [ 168.703827][ T7637] [ 168.777560][ T5851] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.