last executing test programs: 3m29.011498741s ago: executing program 2 (id=1527): unshare(0x22020600) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 3m28.927092792s ago: executing program 2 (id=1528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000fcdbdf2505000000080003002cfd"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 3m28.776929045s ago: executing program 2 (id=1530): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000013580)="0dd2", 0x2}, {&(0x7f0000000100)="c578", 0x2}, {&(0x7f0000000080)='H', 0x1}, {&(0x7f00000001c0)='n', 0x1}, {&(0x7f0000000240)='?', 0x1}, {&(0x7f0000000300)="e25b", 0x2}, {&(0x7f0000000380)="e5", 0x1}, {&(0x7f00000003c0)="b993", 0x2}], 0x8, 0x8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 3m28.616396208s ago: executing program 2 (id=1531): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 3m28.376437103s ago: executing program 2 (id=1532): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x67, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x40, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) 3m27.688165105s ago: executing program 2 (id=1537): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100000000000000000000000000010500030080ff00000900020073"], 0x64}}, 0x4800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0) 3m27.405654311s ago: executing program 32 (id=1537): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100000000000000000000000000010500030080ff00000900020073"], 0x64}}, 0x4800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0) 3m6.495416211s ago: executing program 0 (id=1666): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x1}, 0x1c) sendto$inet(r0, &(0x7f0000000040)="0acd53ceb3250b6d2001001000000000e8439a8177b6b76c87b021c4858b1f2133d49624ad432c12", 0x28, 0x0, 0x0, 0x0) 3m6.260254185s ago: executing program 0 (id=1669): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsync(r0) 3m5.264311293s ago: executing program 0 (id=1678): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x20, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) 3m5.181824155s ago: executing program 0 (id=1680): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@dax_inode}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3m4.681316045s ago: executing program 0 (id=1685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)={0x4c, r1, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}]}, 0x4c}}, 0x0) 3m3.980272058s ago: executing program 0 (id=1687): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000280)="f40fc24077021c9b084c60ffc26fd06301176d36c2f546f1162626edb4a5e1cc09ed8c58ca4fe84b94a7b700000000000000000100000000000000dd3d0df936a10285ecc1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b57f5b606a43e50874c90143034142cd5e1bd9b4d27d8b57fbccb69ba4376b97b7feb75b9138dde818a3c6b96dd8000000000000000", 0xc1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000003f00)=""/4101, 0x1005, 0x0) 3m3.361553359s ago: executing program 33 (id=1687): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000280)="f40fc24077021c9b084c60ffc26fd06301176d36c2f546f1162626edb4a5e1cc09ed8c58ca4fe84b94a7b700000000000000000100000000000000dd3d0df936a10285ecc1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b57f5b606a43e50874c90143034142cd5e1bd9b4d27d8b57fbccb69ba4376b97b7feb75b9138dde818a3c6b96dd8000000000000000", 0xc1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000003f00)=""/4101, 0x1005, 0x0) 1m27.88027784s ago: executing program 1 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1000}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}]}, 0x3c}}, 0x0) 1m26.888639009s ago: executing program 1 (id=2589): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m26.695070202s ago: executing program 1 (id=2591): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) 1m26.513533096s ago: executing program 1 (id=2592): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 1m25.328210408s ago: executing program 1 (id=2596): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000253,discard,fmask=00000000000000000003752,utf8,iocharset=macroman,allow_utime=00000000000000000147070,\x00'], 0x1, 0x152e, &(0x7f00000034c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m24.516212953s ago: executing program 1 (id=2597): r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.951600663s ago: executing program 34 (id=2597): r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m11.409212078s ago: executing program 6 (id=2697): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0xc, &(0x7f0000001fc0)={0x19, 0x1, 0xc}, 0x0) 1m11.347207859s ago: executing program 6 (id=2698): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1m11.255632271s ago: executing program 6 (id=2699): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f0000000080)) 1m10.649495791s ago: executing program 6 (id=2705): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@resgid}, {@auto_da_alloc}, {@jqfmt_vfsv0}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x47b, &(0x7f0000001280)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 1m10.254720079s ago: executing program 6 (id=2709): r0 = syz_io_uring_setup(0x445e, &(0x7f0000000080)={0x0, 0x5f3f, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 1m9.738426979s ago: executing program 6 (id=2714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1}, 0x8) 1m9.300199367s ago: executing program 35 (id=2714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1}, 0x8) 18.864195637s ago: executing program 3 (id=3207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, 0x0) 18.749038919s ago: executing program 3 (id=3208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf257700000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 18.572297453s ago: executing program 3 (id=3210): r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40002002}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000480)="7e9adf65e9c6bafa", 0x8}], 0x1) 18.474873425s ago: executing program 3 (id=3212): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 18.22747619s ago: executing program 3 (id=3214): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1) 17.737886639s ago: executing program 5 (id=3220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) lremovexattr(0x0, 0x0) 17.455424034s ago: executing program 5 (id=3225): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xfca12000) chdir(&(0x7f0000000200)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 17.383718465s ago: executing program 5 (id=3227): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17.332214036s ago: executing program 7 (id=3228): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x1a9) renameat2(r0, &(0x7f00000001c0)='./file0/file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x2) 17.143640209s ago: executing program 7 (id=3229): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000280)={[{@uid}, {}, {@gid}, {@part={'part', 0x3d, 0x400}}, {@codepage={'codepage', 0x3d, 'cp861'}}, {}, {@file_umask={'file_umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "b6b72a44"}}, {@gid}]}, 0x4, 0x337, &(0x7f0000000540)="$eJzs3U1r1EAYB/D/ZN9tqbGtVDxWC55KWw+KCIr05hfwIMXabqE0VrAVrChWzyLeBMGjN8+iX0Ev4hfQUw/Fk16KSCMzmWRntzPZTV82u/T/g+7rPJlnkkwysxIDIjq2bsz+eH9xS/6JEoACgCuAB6AKFAGcxlj14er68npQX0xbUEFFyD+BKFLsKbOwWreFyjgVofnyXRGD5md0NMIwDH+2LfW7K7lQfkTU9/fwgIruner7atcz25fNDgpUupNKDzG2sNjBDh5hKM90iIgof/r87+mzxKAev3seMKHH4f10/o+ZM4im8c0O8ORk9/PpGcn534veh0KuH7VGRGO+p6Zwch168SzRtizrPhE2VncZ0Z7VtAFEu1mlysWrLS0H9clNtYAXuKYZxUbV4yLihiiubMvR07hlbpoire3pBlQbSrINJUf+I5lr/LyNN/bq5r52kJP4Ir6JOeHjLRaT8V8xFHLlqPXjAzUzIMp/yr1E1Uo/KtXUykbvO6UqORtvgU8fGq2sudZrFQWZi41cimgdv/txnq/L7igMNx8UdOum3a1TUSPWqJnk/V9r1GhrVG2pFNQnF+4HqT+lHBrrjE68ErfEOH7hI2aN8b8nS0/A3TOberlQJfWekdqeoirp2I5NVAe+l6lnEvAvjGQMe4m7uIyhtY3HK/NBUH+Q/4u4q/RIPtGOqHdH+Yl8NsqgKl+UABxapbthGFq/KuIQqijHqbpyLqmmXnqXNFkdZvVPKQerHZvROjS+uu4u3Dhsyk/iI0LGSlX4syRKni2yhP/Rta9t2HdIYWRYPtodMq5qPgjOJBuugEpHPaW2j0pvPl2ZD/ZzLKJ+Y/SXsdvbV/NOh7pPjrtENP8z5itT6qgjH/yU2UjbUYexxGnHDGhYPZ7obAaXLNY5ThyIXwT1mbQ517kLwPmWGj3ENT5vXayv80Qv/qtkxZZWLS1CzOI77vD3fyIiIiIiIiIiIiIiIiIiIiIiIiKifpP1agT35QS7+jok+5UYDVvH8D/eICIiIiIiIiIiIiIiIiIiIiIiIiIiIiI6GOP+v0BB3TGmnPv9fwsd3P9XtL3FJxG18T8AAP//uTRlfg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 17.052548561s ago: executing program 4 (id=3230): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x6}) 16.880193505s ago: executing program 4 (id=3231): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setuid(0xee00) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) 16.879516054s ago: executing program 7 (id=3232): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES64=r0], 0x48) 16.802324866s ago: executing program 4 (id=3233): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f00000006c0)={{@local, 0x64}, {}, 0x400, "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"}, 0x418, 0x7fffffff}) 16.793830176s ago: executing program 7 (id=3234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001140)=ANY=[@ANYBLOB="0100000000000000000100c0"]) 16.688280838s ago: executing program 4 (id=3235): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 16.687289178s ago: executing program 5 (id=3236): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 16.656189169s ago: executing program 7 (id=3237): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 16.56336576s ago: executing program 5 (id=3238): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) readv(r0, &(0x7f0000003200)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) 16.562863631s ago: executing program 4 (id=3239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 16.480194822s ago: executing program 7 (id=3240): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) 16.479816342s ago: executing program 3 (id=3241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/73, 0x49, 0x0) 16.456653713s ago: executing program 4 (id=3242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x5, 0x6, 0x1, 0x9, 0x4, 0x9}}, {0xffffffffffffffaf, 0x2, [0x28, 0xfa0e, 0x1000, 0x4c4, 0xaf, 0x5707, 0x60, 0x9ac0, 0x7fd]}}]}]}, 0x78}}, 0x10) 16.358266214s ago: executing program 5 (id=3243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x38, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac0b, 0xfac0a, 0xfac0d]}]]}, 0x38}}, 0x0) 1.115814789s ago: executing program 36 (id=3243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x38, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac0b, 0xfac0a, 0xfac0d]}]]}, 0x38}}, 0x0) 1.004195751s ago: executing program 37 (id=3240): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) 295.824824ms ago: executing program 38 (id=3242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x5, 0x6, 0x1, 0x9, 0x4, 0x9}}, {0xffffffffffffffaf, 0x2, [0x28, 0xfa0e, 0x1000, 0x4c4, 0xaf, 0x5707, 0x60, 0x9ac0, 0x7fd]}}]}]}, 0x78}}, 0x10) 0s ago: executing program 39 (id=3241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/73, 0x49, 0x0) kernel console output (not intermixed with test programs): ge from 0 to 32768 [ 338.701068][T12411] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 338.756294][T12413] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 338.838262][T12411] XFS (loop1): Ending clean mount [ 338.873151][T12411] XFS (loop1): Quotacheck needed: Please wait. [ 338.999483][T12411] XFS (loop1): Quotacheck: Done. [ 339.147219][T12413] XFS (loop5): Ending clean mount [ 339.169323][ T5781] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 339.179652][T12413] XFS (loop5): Quotacheck needed: Please wait. [ 339.320610][T12413] XFS (loop5): Quotacheck: Done. [ 339.478066][T10261] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.544200][T12435] loop3: detected capacity change from 0 to 32768 [ 339.564694][T12435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2573 (12435) [ 339.606291][T12435] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 339.623494][T12435] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 339.660866][T12435] BTRFS info (device loop3): setting nodatacow, compression disabled [ 339.675722][T12435] BTRFS info (device loop3): max_inline at 0 [ 339.681752][T12435] BTRFS info (device loop3): enabling disk space caching [ 339.695178][T12435] BTRFS info (device loop3): turning off barriers [ 339.701751][T12435] BTRFS info (device loop3): turning on flush-on-commit [ 339.712712][T12435] BTRFS info (device loop3): doing ref verification [ 339.783368][T12435] BTRFS info (device loop3): force clearing of disk cache [ 339.829779][T12435] BTRFS info (device loop3): enabling ssd optimizations [ 339.850082][T12443] loop5: detected capacity change from 0 to 128 [ 339.878439][T12435] BTRFS info (device loop3): max_inline at 4096 [ 339.930659][T12435] BTRFS info (device loop3): disk space caching is enabled [ 340.011404][T12441] loop1: detected capacity change from 0 to 4096 [ 340.039086][ T7096] udevd[7096]: symlink '../../loop5' '/dev/disk/by-diskseq/942.tmp-b7:5' failed: Read-only file system [ 340.056638][T12452] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.089802][ T7096] udevd[7096]: symlink '../../loop5' '/dev/disk/by-diskseq/942.tmp-b7:5' failed: Read-only file system [ 340.136792][T12439] loop4: detected capacity change from 0 to 32768 [ 340.213291][ T8657] udevd[8657]: symlink '../../loop1' '/dev/disk/by-diskseq/944.tmp-b7:1' failed: Read-only file system [ 340.225437][T12439] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.2575 (12439) [ 340.238241][T12441] overlayfs: upper fs does not support tmpfile. [ 340.248536][T12435] BTRFS info (device loop3): auto enabling async discard [ 340.250104][ T8657] udevd[8657]: symlink '../../loop1' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:1' failed: Read-only file system [ 340.274153][T12441] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 340.293798][T12441] overlayfs: failed to set xattr on upper [ 340.299559][T12441] overlayfs: ...falling back to redirect_dir=nofollow. [ 340.308749][T12435] BTRFS info (device loop3): rebuilding free space tree [ 340.352576][T12441] overlayfs: ...falling back to metacopy=off. [ 340.381553][T12435] BTRFS info (device loop3): disabling free space tree [ 340.390841][T12441] overlayfs: ...falling back to index=off. [ 340.408657][T12435] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 340.424942][T12441] overlayfs: ...falling back to uuid=null. [ 340.430951][T12435] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 340.466589][ T7096] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (7096) [ 340.488236][ T7096] udevd[7096]: symlink '../../loop4' '/dev/disk/by-diskseq/945.tmp-b7:4' failed: Read-only file system [ 340.518503][ T7096] udevd[7096]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system [ 340.550910][T10193] udevd[10193]: symlink '../../loop3' '/dev/disk/by-diskseq/940.tmp-b7:3' failed: Read-only file system [ 340.574840][T10193] udevd[10193]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system [ 340.751869][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system [ 340.777016][ T7096] udevd[7096]: symlink '../../loop4' '/dev/disk/by-diskseq/945.tmp-b7:4' failed: Read-only file system [ 340.945906][ T8] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 340.961757][T12469] loop4: detected capacity change from 0 to 512 [ 340.963905][ T8] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 340.992302][ T8] Remounting filesystem read-only [ 341.007565][ T8] NILFS (loop1): error -5 truncating bmap (ino=12) [ 341.014130][T12469] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2581: bad orphan inode 11 [ 341.032476][ T5784] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.042879][T12469] ext4_test_bit(bit=10, block=4) = 1 [ 341.050142][T12469] is_bad_inode(inode)=0 [ 341.054371][T12469] NEXT_ORPHAN(inode)=2080374784 [ 341.059857][T12469] max_ino=32 [ 341.063263][T12469] i_nlink=0 [ 341.067654][T12469] EXT4-fs (loop4): 1 truncate cleaned up [ 341.083625][T12469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.096709][ T5781] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 341.103409][ T5781] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 341.124103][ T5781] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 341.170567][ T5781] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 341.203270][ T5781] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 341.237367][ T5781] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 341.266420][ T9749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.906234][T12468] loop5: detected capacity change from 0 to 32768 [ 341.964228][T12468] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 342.037980][T12468] XFS (loop5): Ending clean mount [ 342.241764][T12475] loop4: detected capacity change from 0 to 40427 [ 342.271066][T12475] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 342.285999][T10261] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 342.314171][T12475] F2FS-fs (loop4): invalid crc value [ 342.331215][T12475] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.452937][T12474] loop1: detected capacity change from 0 to 40427 [ 342.464115][T12475] F2FS-fs (loop4): Start checkpoint disabled! [ 342.492656][T12474] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 342.511650][T12474] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 342.536117][T12477] loop3: detected capacity change from 0 to 32768 [ 342.559284][T12475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 342.580622][T12474] F2FS-fs (loop1): invalid crc value [ 342.586390][T12477] (syz.3.2582,12477,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 342.650690][T12477] (syz.3.2582,12477,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 342.711474][T12474] F2FS-fs (loop1): Found nat_bits in checkpoint [ 342.730722][T12477] JBD2: Ignoring recovery information on journal [ 342.869628][ T4448] kworker/u4:9: attempt to access beyond end of device [ 342.869628][ T4448] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 342.884936][ T4448] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 342.892025][ T4448] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 342.963698][T12474] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 342.976991][T12477] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 343.013820][T12474] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 343.319795][ T4448] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 343.330129][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 343.342198][ T4448] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 343.902245][T12494] loop5: detected capacity change from 0 to 40427 [ 343.929552][T12494] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 343.965259][T12494] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 343.976109][T12494] F2FS-fs (loop5): invalid crc value [ 343.988857][T12494] F2FS-fs (loop5): Found nat_bits in checkpoint [ 344.091768][T12494] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 344.112312][T12494] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 344.258019][T10261] syz-executor: attempt to access beyond end of device [ 344.258019][T10261] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 344.288943][T10261] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 344.358507][T12498] loop4: detected capacity change from 0 to 32768 [ 344.415793][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2589'. [ 345.110153][T10193] udevd[10193]: symlink '../../loop5' '/dev/disk/by-diskseq/962.tmp-b7:5' failed: Read-only file system [ 345.172541][ T7096] udevd[7096]: symlink '../../loop4' '/dev/disk/by-diskseq/961.tmp-b7:4' failed: Read-only file system [ 345.223453][T10193] udevd[10193]: symlink '../../loop5' '/dev/disk/by-diskseq/962.tmp-b7:5' failed: Read-only file system [ 345.238448][T12500] loop3: detected capacity change from 0 to 65536 [ 345.279868][T12500] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 345.421614][T12512] loop1: detected capacity change from 0 to 32768 [ 345.438691][T12500] XFS (loop3): Ending clean mount [ 345.450150][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-diskseq/963.tmp-b7:3' failed: Read-only file system [ 345.505303][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-uuid/d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2.tmp-b7:3' failed: Read-only file system [ 345.506677][T12512] overlayfs: upper fs needs to support d_type. [ 345.580819][ T5784] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 345.595051][T12512] overlayfs: upper fs does not support tmpfile. [ 345.686891][T12512] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 345.737628][T10193] udevd[10193]: symlink '../../loop1' '/dev/disk/by-diskseq/964.tmp-b7:1' failed: Read-only file system [ 345.785105][T10193] udevd[10193]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 345.837289][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-diskseq/963.tmp-b7:3' failed: Read-only file system [ 345.878971][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-uuid/d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2.tmp-b7:3' failed: Read-only file system [ 346.044056][ T5869] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 346.061623][T10193] udevd[10193]: symlink '../../loop1' '/dev/disk/by-diskseq/964.tmp-b7:1' failed: Read-only file system [ 346.243946][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 346.251243][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 346.272123][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 346.297570][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 346.314432][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 346.352448][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 346.389632][ T5869] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 346.435630][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.459444][T12518] loop4: detected capacity change from 0 to 40427 [ 346.473981][ T5869] usb 4-1: config 0 descriptor?? [ 346.505773][T12518] F2FS-fs (loop4): Invalid segment count (1) [ 346.511814][T12518] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 346.522776][T12528] loop5: detected capacity change from 0 to 40427 [ 346.539547][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.556790][T12518] F2FS-fs (loop4): heap/no_heap options were deprecated [ 346.572024][T12528] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 346.591664][T12518] F2FS-fs (loop4): invalid crc value [ 346.597165][T12528] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 346.615852][T12528] F2FS-fs (loop5): invalid crc value [ 346.657044][T12518] F2FS-fs (loop4): Found nat_bits in checkpoint [ 346.697602][T12528] F2FS-fs (loop5): Found nat_bits in checkpoint [ 346.725280][ T5869] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 346.807520][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.829660][T12518] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 346.849789][T12518] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 346.936503][T12528] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 346.964259][T12528] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 347.000797][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.156588][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.936779][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.950578][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.968144][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.983350][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.991696][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.999751][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.122821][T12549] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2603'. [ 348.146308][T12549] nbd: illegal input index -65456 [ 348.431527][T12561] loop9: detected capacity change from 0 to 7 [ 348.454109][T12561] Dev loop9: unable to read RDB block 7 [ 348.463182][T12561] loop9: unable to read partition table [ 348.469876][T12561] loop9: partition table beyond EOD, truncated [ 348.479808][T12561] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 348.479808][T12561] ) failed (rc=-5) [ 348.508182][T12563] Dev loop9: unable to read RDB block 7 [ 348.538699][T12563] loop9: unable to read partition table [ 348.562148][T12563] loop9: partition table beyond EOD, truncated [ 348.780557][ T5869] usb 4-1: USB disconnect, device number 23 [ 348.826793][ T5869] usblp0: removed [ 348.858119][T12568] loop4: detected capacity change from 0 to 256 [ 348.951506][T12542] chnl_net:caif_netlink_parms(): no params data found [ 348.994624][T12568] FAT-fs (loop4): Directory bread(block 64) failed [ 349.001201][T12568] FAT-fs (loop4): Directory bread(block 65) failed [ 349.040335][T12568] FAT-fs (loop4): Directory bread(block 66) failed [ 349.048049][T12568] FAT-fs (loop4): Directory bread(block 67) failed [ 349.056197][T12568] FAT-fs (loop4): Directory bread(block 68) failed [ 349.062899][T12568] FAT-fs (loop4): Directory bread(block 69) failed [ 349.072788][T12568] FAT-fs (loop4): Directory bread(block 70) failed [ 349.088637][T12568] FAT-fs (loop4): Directory bread(block 71) failed [ 349.095827][T12568] FAT-fs (loop4): Directory bread(block 72) failed [ 349.102413][T12568] FAT-fs (loop4): Directory bread(block 73) failed [ 349.285948][ T48] hsr_slave_0: left promiscuous mode [ 349.339257][ T48] hsr_slave_1: left promiscuous mode [ 349.360092][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.378271][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.388458][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.396598][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.423466][ T48] bridge_slave_1: left allmulticast mode [ 349.431593][ T48] bridge_slave_1: left promiscuous mode [ 349.448916][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.473530][ T48] bridge_slave_0: left allmulticast mode [ 349.487857][ T48] bridge_slave_0: left promiscuous mode [ 349.493779][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.586694][ T48] veth1_macvtap: left promiscuous mode [ 349.594253][ T48] veth0_macvtap: left promiscuous mode [ 349.605592][ T48] veth1_vlan: left promiscuous mode [ 349.616507][ T48] veth0_vlan: left promiscuous mode [ 349.690522][T12585] loop4: detected capacity change from 0 to 4096 [ 349.721300][T12585] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 349.746846][T12585] ntfs3: loop4: It is recommened to use chkdsk. [ 349.829775][T12585] ntfs3: loop4: failed to convert "076c" to cp857 [ 349.851325][T12585] ntfs3: loop4: ino=5, "/" directory corrupted [ 350.111168][T12583] loop5: detected capacity change from 0 to 32768 [ 350.119448][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 350.127557][ T5795] Bluetooth: hci0: command tx timeout [ 350.131493][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 350.135927][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:4' failed: Read-only file system [ 350.298180][ T8973] udevd[8973]: symlink '../../loop3' '/dev/disk/by-diskseq/965.tmp-b7:3' failed: Read-only file system [ 350.318705][T12590] loop3: detected capacity change from 0 to 4096 [ 350.340934][T12590] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 350.389256][T12590] ntfs: volume version 3.1. [ 350.402399][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/975.tmp-b7:4' failed: Read-only file system [ 350.472844][ T7096] udevd[7096]: symlink '../../loop5' '/dev/disk/by-diskseq/976.tmp-b7:5' failed: Read-only file system [ 350.483865][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/975.tmp-b7:4' failed: Read-only file system [ 350.548530][ T7096] udevd[7096]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 350.565609][ T8657] udevd[8657]: symlink '../../loop3' '/dev/disk/by-diskseq/978.tmp-b7:3' failed: Read-only file system [ 350.624909][ T8657] udevd[8657]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 350.657527][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/977.tmp-b7:4' failed: Read-only file system [ 350.901819][T12597] kvm: kvm [12596]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000061) [ 351.316585][T12610] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 351.636553][ T48] team0 (unregistering): Port device team_slave_1 removed [ 351.729833][ T48] team0 (unregistering): Port device team_slave_0 removed [ 351.796378][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.908133][T12621] loop5: detected capacity change from 0 to 2048 [ 351.918301][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.935425][T12621] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 351.971504][T12621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.005549][T12621] EXT4-fs error (device loop5): ext4_read_inline_dir:1565: inode #12: block 9: comm syz.5.2634: path /212/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 352.082990][T12621] EXT4-fs (loop5): Remounting filesystem read-only [ 352.150105][T10261] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.195388][ T50] Bluetooth: hci0: command tx timeout [ 352.368276][T12628] loop3: detected capacity change from 0 to 512 [ 352.377844][T12628] EXT4-fs: Ignoring removed nobh option [ 352.391499][T12628] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2636: iget: bad i_size value: 38620345925642 [ 352.424226][T12628] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2636: couldn't read orphan inode 15 (err -117) [ 352.445159][T12628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.586823][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.949185][T12637] loop3: detected capacity change from 0 to 4096 [ 353.243098][ T48] bond0 (unregistering): Released all slaves [ 353.518150][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.542432][T12542] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.564247][T12542] bridge_slave_0: entered allmulticast mode [ 353.571580][T12542] bridge_slave_0: entered promiscuous mode [ 353.635532][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.642662][T12542] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.675873][T12542] bridge_slave_1: entered allmulticast mode [ 353.703440][T12542] bridge_slave_1: entered promiscuous mode [ 353.822794][T12542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.853701][T12542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.021153][T12542] team0: Port device team_slave_0 added [ 354.046199][T12655] loop5: detected capacity change from 0 to 4096 [ 354.065051][T12542] team0: Port device team_slave_1 added [ 354.102702][T12659] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.104561][T12655] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 354.168366][T12542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.185489][T12655] NILFS (loop5): mounting fs with errors [ 354.198596][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.278505][ T50] Bluetooth: hci0: command tx timeout [ 354.292294][T12542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.376276][T12542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.383250][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.454044][T12542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.546738][ T48] IPVS: stop unused estimator thread 0... [ 354.688351][T12542] hsr_slave_0: entered promiscuous mode [ 354.710064][T12542] hsr_slave_1: entered promiscuous mode [ 354.726876][T12542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.736922][T12542] Cannot create hsr debugfs directory [ 355.033266][T12673] loop4: detected capacity change from 0 to 1024 [ 355.139308][ T7096] udevd[7096]: symlink '../../loop5' '/dev/disk/by-diskseq/988.tmp-b7:5' failed: Read-only file system [ 355.180657][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/989.tmp-b7:4' failed: Read-only file system [ 355.187970][ T8657] udevd[8657]: symlink '../../loop3' '/dev/disk/by-diskseq/986.tmp-b7:3' failed: Read-only file system [ 355.237223][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 355.277437][T12679] loop3: detected capacity change from 0 to 1024 [ 355.288997][T12542] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 355.295611][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:4' failed: Read-only file system [ 355.325414][T12542] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 355.366798][T12542] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 355.392891][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-diskseq/990.tmp-b7:3' failed: Read-only file system [ 355.406105][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/989.tmp-b7:4' failed: Read-only file system [ 355.415299][T12542] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 355.431718][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 355.452006][ T2897] hfsplus: b-tree write err: -5, ino 4 [ 355.460324][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/989.tmp-b7:4' failed: Read-only file system [ 355.469912][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:3' failed: Read-only file system [ 355.654750][T12693] +}[@ calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 355.693504][T12542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.722507][T12542] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.750725][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.757948][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.790377][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.797572][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.894713][T12696] loop4: detected capacity change from 0 to 2048 [ 355.932409][T12542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.978571][T12696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.355402][ T50] Bluetooth: hci0: command tx timeout [ 356.452681][T12542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.471665][ T50] block nbd1: Receive control failed (result -32) [ 357.060729][T12542] veth0_vlan: entered promiscuous mode [ 357.091897][T12542] veth1_vlan: entered promiscuous mode [ 357.150762][T12542] veth0_macvtap: entered promiscuous mode [ 357.180064][T12724] loop3: detected capacity change from 0 to 32768 [ 357.199230][T12542] veth1_macvtap: entered promiscuous mode [ 357.205565][T12724] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2671 (12724) [ 357.242483][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.261631][T12724] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 357.272930][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.283003][T12724] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 357.313829][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.325286][T12724] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 357.357994][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.368456][T12724] BTRFS info (device loop3): use zstd compression, level 3 [ 357.385070][T12724] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 357.397141][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.421400][T12724] BTRFS info (device loop3): use lzo compression, level 0 [ 357.428917][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.443342][T12724] BTRFS info (device loop3): using free space tree [ 357.456234][T12542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.496582][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.532235][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.604032][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.644096][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.655481][T12542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.666692][T12542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.677719][T12724] BTRFS info (device loop3): enabling ssd optimizations [ 357.679107][T12542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.697230][T12542] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.706385][T12542] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.719519][T12542] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.728674][T12542] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.945356][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.987701][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.036111][T12724] BTRFS warning (device loop3): failed to trim 1 device(s), last error -512 [ 358.075037][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.104720][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.240858][ T5784] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 358.614403][T12789] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 358.614403][T12789] The task syz.6.2598 (12789) triggered the difference, watch for misbehavior. [ 358.892629][T12793] loop4: detected capacity change from 0 to 4096 [ 358.954999][T12796] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.518441][T12812] loop3: detected capacity change from 0 to 16 [ 359.535629][T12812] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 359.550621][T12812] cramfs: empty filesystem [ 359.559398][T12814] loop6: detected capacity change from 0 to 16 [ 359.651283][T12814] erofs: (device loop6): mounted with root inode @ nid 36. [ 359.967804][T12827] syz.5.2700[12827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.969157][T12827] syz.5.2700[12827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.984607][ T787] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 360.224028][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 360.245039][ T787] usb 4-1: config 0 has no interfaces? [ 360.246969][T10193] udevd[10193]: symlink '../../loop5' '/dev/disk/by-diskseq/988.tmp-b7:5' failed: Read-only file system [ 360.250552][ T787] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 360.300388][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.320588][ T7096] udevd[7096]: symlink '../../loop4' '/dev/disk/by-diskseq/998.tmp-b7:4' failed: Read-only file system [ 360.334492][ T787] usb 4-1: config 0 descriptor?? [ 360.421038][T12839] loop4: detected capacity change from 0 to 2048 [ 360.441645][T12839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.502932][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/1003.tmp-b7:4' failed: Read-only file system [ 360.534270][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system [ 360.550226][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system [ 360.568696][ T8] usb 4-1: USB disconnect, device number 24 [ 360.612887][T10199] udevd[10199]: symlink '../../loop6' '/dev/disk/by-diskseq/1002.tmp-b7:6' failed: Read-only file system [ 360.619367][ T7096] udevd[7096]: symlink '../../loop4' '/dev/disk/by-diskseq/1003.tmp-b7:4' failed: Read-only file system [ 360.637460][T12841] loop6: detected capacity change from 0 to 512 [ 360.645766][T12841] EXT4-fs: Ignoring removed nobh option [ 360.665303][ T7096] udevd[7096]: symlink '../../loop4' '/dev/disk/by-diskseq/1003.tmp-b7:4' failed: Read-only file system [ 360.682289][T12841] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 360.705608][T12841] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.2705: attempt to clear invalid blocks 2 len 1 [ 360.713101][T10193] udevd[10193]: symlink '../../loop6' '/dev/disk/by-diskseq/1005.tmp-b7:6' failed: Read-only file system [ 360.726799][T12841] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 360.732061][T10193] udevd[10193]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 360.750396][T12841] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2705: invalid indirect mapped block 1819239214 (level 0) [ 360.772096][T12841] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2705: invalid indirect mapped block 1819239214 (level 1) [ 360.790208][T12841] EXT4-fs (loop6): 1 truncate cleaned up [ 360.807385][T12841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.855480][T12841] EXT4-fs: user quota file already specified [ 360.922426][T12542] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 360.968941][T12542] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 360.987408][T12542] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 361.405608][T12542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.484208][ T787] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 361.574988][ T2897] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.724242][ T787] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.734789][ T787] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 361.758855][ T2897] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.776674][ T787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.794383][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.810754][ T787] usb 6-1: Product: syz [ 361.824138][ T787] usb 6-1: Manufacturer: syz [ 361.833823][ T787] usb 6-1: SerialNumber: syz [ 361.885805][T12851] loop4: detected capacity change from 0 to 40427 [ 361.909063][T12851] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 361.928310][T12851] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 361.955387][T12851] F2FS-fs (loop4): build fault injection attr: rate: 18446, type: 0x7ffff [ 361.961137][ T2897] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.991362][T12851] F2FS-fs (loop4): invalid crc value [ 362.040084][T12851] F2FS-fs (loop4): Found nat_bits in checkpoint [ 362.058466][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.095237][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.141930][ T2897] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.155578][ T787] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 362.187068][ T787] usb 6-1: USB disconnect, device number 9 [ 362.252239][T12851] F2FS-fs (loop4): Start checkpoint disabled! [ 362.279755][T12851] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 362.310876][T12851] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 362.654200][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.676078][ T4448] kworker/u4:9: attempt to access beyond end of device [ 362.676078][ T4448] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 362.677794][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.700548][ T4448] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 362.708998][ T4448] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 362.721761][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.732335][ T4448] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 362.767831][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.775491][ T787] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 362.785928][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 362.793631][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.990362][ T787] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 363.009623][ T787] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 363.037182][ T787] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.055937][ T787] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 363.094128][ T787] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.112597][ T787] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.136973][ T787] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.149551][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.383475][ T787] usb 6-1: usb_control_msg returned -71 [ 363.412505][ T787] usbtmc 6-1:16.0: can't read capabilities [ 363.430141][ T787] usbtmc 6-1:16.0: Failed to submit iin_urb [ 363.452316][ T787] usbtmc: probe of 6-1:16.0 failed with error -90 [ 363.504620][ T787] usb 6-1: USB disconnect, device number 10 [ 363.617332][T12884] loop3: detected capacity change from 0 to 32768 [ 363.665484][T12884] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 363.706000][T12884] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 363.750210][T12884] (syz.3.2721,12884,1):ocfs2_double_lock:1190 ERROR: status = -2 [ 363.862101][T12875] chnl_net:caif_netlink_parms(): no params data found [ 363.887523][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 364.502301][T12900] loop5: detected capacity change from 0 to 32768 [ 364.533186][T12898] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 364.533749][T12900] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 364.557891][T12898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.565910][T12898] IPv6: NLM_F_CREATE should be set when creating new route [ 364.791535][T10261] ocfs2: Unmounting device (7,5) on (node local) [ 364.851721][ T5785] Bluetooth: hci0: command tx timeout [ 365.171510][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.192283][T12875] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.202410][T12875] bridge_slave_0: entered allmulticast mode [ 365.225156][T12875] bridge_slave_0: entered promiscuous mode [ 365.258828][T10193] udevd[10193]: symlink '../../loop5' '/dev/disk/by-diskseq/1012.tmp-b7:5' failed: Read-only file system [ 365.324816][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-diskseq/1010.tmp-b7:3' failed: Read-only file system [ 365.333668][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/1008.tmp-b7:4' failed: Read-only file system [ 365.360567][T12875] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.373589][T12875] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.381510][T12875] bridge_slave_1: entered allmulticast mode [ 365.415446][T12875] bridge_slave_1: entered promiscuous mode [ 365.430428][T12924] netlink: 'syz.3.2732': attribute type 1 has an invalid length. [ 365.459956][T10193] udevd[10193]: symlink '../../loop5' '/dev/disk/by-diskseq/1012.tmp-b7:5' failed: Read-only file system [ 365.520106][ T7096] udevd[7096]: symlink '../../loop4' '/dev/disk/by-diskseq/1008.tmp-b7:4' failed: Read-only file system [ 365.573779][T10193] udevd[10193]: symlink '../../loop3' '/dev/disk/by-diskseq/1010.tmp-b7:3' failed: Read-only file system [ 365.622965][ T2897] hsr_slave_0: left promiscuous mode [ 365.650383][ T2897] hsr_slave_1: left promiscuous mode [ 365.700982][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.713802][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.725915][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/1008.tmp-b7:4' failed: Read-only file system [ 365.738633][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.752736][ T7096] udevd[7096]: symlink '../../loop5' '/dev/disk/by-diskseq/1012.tmp-b7:5' failed: Read-only file system [ 365.765152][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.779240][ T2897] bridge_slave_1: left allmulticast mode [ 365.791675][ T2897] bridge_slave_1: left promiscuous mode [ 365.794420][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/1008.tmp-b7:4' failed: Read-only file system [ 365.805101][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.838058][ T2897] bridge_slave_0: left allmulticast mode [ 365.840818][T10193] udevd[10193]: symlink '../../loop5' '/dev/disk/by-diskseq/1012.tmp-b7:5' failed: Read-only file system [ 365.845829][ T2897] bridge_slave_0: left promiscuous mode [ 365.873581][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.935296][ T2897] veth1_macvtap: left promiscuous mode [ 365.940951][ T2897] veth0_macvtap: left promiscuous mode [ 365.952509][ T2897] veth1_vlan: left promiscuous mode [ 365.961103][ T2897] veth0_vlan: left promiscuous mode [ 366.284189][ T788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 366.469047][ T788] usb 5-1: Using ep0 maxpacket: 8 [ 366.499781][ T788] usb 5-1: config 0 has no interfaces? [ 366.507899][ T788] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 366.530276][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.548345][ T788] usb 5-1: Product: syz [ 366.552524][ T788] usb 5-1: Manufacturer: syz [ 366.569918][ T788] usb 5-1: SerialNumber: syz [ 366.577714][ T788] usb 5-1: config 0 descriptor?? [ 366.678363][ T2897] team0 (unregistering): Port device team_slave_1 removed [ 366.733985][ T2897] team0 (unregistering): Port device team_slave_0 removed [ 366.781060][ T2897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.793467][ T8655] usb 5-1: USB disconnect, device number 9 [ 366.848684][ T2897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.924783][ T5785] Bluetooth: hci0: command tx timeout [ 367.401175][T12945] loop4: detected capacity change from 0 to 512 [ 367.434752][T12945] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 367.474392][T12945] EXT4-fs (loop4): 1 truncate cleaned up [ 367.480809][T12945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.591185][ T2897] bond0 (unregistering): Released all slaves [ 367.618529][ T9749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.723375][T12875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.739873][T12875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.919505][T12875] team0: Port device team_slave_0 added [ 367.922962][T12951] loop4: detected capacity change from 0 to 2048 [ 367.949172][T12875] team0: Port device team_slave_1 added [ 367.986026][T12951] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.117443][T12875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.143776][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.232086][T12875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.262772][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2747'. [ 368.284986][T12957] netlink: 39 bytes leftover after parsing attributes in process `syz.5.2747'. [ 368.365011][T12875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.396627][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.456477][T12875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.475940][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 368.583909][T12875] hsr_slave_0: entered promiscuous mode [ 368.601497][T12875] hsr_slave_1: entered promiscuous mode [ 368.627814][T12875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.645065][T12875] Cannot create hsr debugfs directory [ 369.005201][ T5785] Bluetooth: hci0: command tx timeout [ 369.069534][T12875] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.081771][T12875] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.108446][T12875] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.122633][T12875] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.270141][T12964] sctp: [Deprecated]: syz.5.2750 (pid 12964) Use of int in maxseg socket option. [ 369.270141][T12964] Use struct sctp_assoc_value instead [ 369.337765][T12875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.376601][T12875] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.408902][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.416084][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.461483][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.468669][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.739056][T12989] loop3: detected capacity change from 0 to 4096 [ 369.794523][T12989] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 369.831995][T12976] loop4: detected capacity change from 0 to 32768 [ 369.846173][T12976] XFS: noikeep mount option is deprecated. [ 369.941496][T12976] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 370.032810][T12875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.296390][T12976] XFS (loop4): Ending clean mount [ 370.307224][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-diskseq/1019.tmp-b7:3' failed: Read-only file system [ 370.331016][T12976] XFS (loop4): Quotacheck needed: Please wait. [ 370.377745][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/1018.tmp-b7:4' failed: Read-only file system [ 370.412649][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:4' failed: Read-only file system [ 370.417260][T12976] XFS (loop4): Quotacheck: Done. [ 370.521332][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-diskseq/1019.tmp-b7:3' failed: Read-only file system [ 370.554065][ T5869] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 370.580125][ T9749] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 370.602939][ T5773] kernel write not supported for file /1584/attr/sockcreate (pid: 5773 comm: kworker/1:3) [ 370.646609][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/1018.tmp-b7:4' failed: Read-only file system [ 370.685503][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:4' failed: Read-only file system [ 370.724158][T12875] veth0_vlan: entered promiscuous mode [ 370.767557][T12875] veth1_vlan: entered promiscuous mode [ 370.784369][ T5869] usb 6-1: config 0 has no interfaces? [ 370.789887][ T5869] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 370.797251][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-diskseq/1019.tmp-b7:3' failed: Read-only file system [ 370.834332][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.878224][ T5869] usb 6-1: config 0 descriptor?? [ 370.918748][T12875] veth0_macvtap: entered promiscuous mode [ 370.953542][T12875] veth1_macvtap: entered promiscuous mode [ 370.981804][ T7096] udevd[7096]: symlink '../../loop3' '/dev/disk/by-diskseq/1019.tmp-b7:3' failed: Read-only file system [ 371.011301][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.031606][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.042653][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.053442][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.069955][T13028] loop3: detected capacity change from 0 to 512 [ 371.077843][ T5785] Bluetooth: hci0: command tx timeout [ 371.083371][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.092539][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/1018.tmp-b7:4' failed: Read-only file system [ 371.107118][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.133327][T12875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.147705][ T5869] usb 6-1: USB disconnect, device number 11 [ 371.147754][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.166390][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.180936][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.200794][T10193] udevd[10193]: symlink '../../loop4' '/dev/disk/by-diskseq/1018.tmp-b7:4' failed: Read-only file system [ 371.212947][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.238271][T13028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 371.255453][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.268461][T13028] ext4 filesystem being mounted at /767/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.302126][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.346143][T12875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.372856][T13028] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 371.390424][T12875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.409765][T13028] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 371.411107][T12875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.421123][T13028] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2768: Failed to acquire dquot type 0 [ 371.442306][T12875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.456477][T12875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.503288][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 371.605807][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.613758][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.659118][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.708778][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.807022][T13036] CIFS mount error: No usable UNC path provided in device string! [ 371.807022][T13036] [ 371.883953][T13036] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 371.984356][ T5774] printk: udevd: 2432 output lines suppressed due to ratelimiting [ 372.024789][ T28] audit: type=1326 audit(1752656154.089:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 372.097756][ T28] audit: type=1326 audit(1752656154.089:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 372.164668][ T28] audit: type=1326 audit(1752656154.109:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 372.208768][ T28] audit: type=1326 audit(1752656154.129:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 372.242337][ T28] audit: type=1326 audit(1752656154.129:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 372.313878][ T28] audit: type=1326 audit(1752656154.129:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 372.374849][ T28] audit: type=1326 audit(1752656154.129:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 372.438602][ T28] audit: type=1326 audit(1752656154.129:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.7.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92cbb858e7 code=0x7ffc0000 [ 372.631259][ T5785] Bluetooth: hci0: ISO packet too small [ 372.678492][T13038] loop5: detected capacity change from 0 to 32768 [ 372.737015][T13038] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 372.776509][T13070] loop3: detected capacity change from 0 to 64 [ 372.787192][T13072] loop4: detected capacity change from 0 to 256 [ 372.797966][T13070] hfs: unable to locate alternate MDB [ 372.803562][T13072] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 372.813623][T13070] hfs: continuing without an alternate MDB [ 372.815804][T13072] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 372.835199][T13070] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 372.836265][T13072] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 372.930130][T10261] (syz-executor,10261,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 372.948224][T10261] ocfs2: Unmounting device (7,5) on (node local) [ 373.002358][T13074] loop7: detected capacity change from 0 to 4096 [ 373.493069][T13083] loop5: detected capacity change from 0 to 8192 [ 373.641707][T13088] loop7: detected capacity change from 0 to 256 [ 373.677811][T13088] FAT-fs (loop7): bogus number of FAT sectors [ 373.687096][T13088] FAT-fs (loop7): Can't find a valid FAT filesystem [ 374.023566][T13079] loop4: detected capacity change from 0 to 32768 [ 374.038611][T13079] XFS: noikeep mount option is deprecated. [ 374.072893][T13079] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 374.234852][T13079] XFS (loop4): Ending clean mount [ 374.260511][T13079] XFS (loop4): Quotacheck needed: Please wait. [ 374.364876][T13090] loop3: detected capacity change from 0 to 32768 [ 374.374264][T13090] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2793 (13090) [ 374.387523][T13079] XFS (loop4): Quotacheck: Done. [ 374.413630][T13090] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 374.445632][T13090] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 374.475220][T13090] BTRFS info (device loop3): enabling disk space caching [ 374.491740][T13090] BTRFS info (device loop3): turning off barriers [ 374.503508][T13090] BTRFS info (device loop3): force clearing of disk cache [ 374.511179][T13090] BTRFS info (device loop3): enabling ssd optimizations [ 374.519579][T13090] BTRFS info (device loop3): using spread ssd allocation scheme [ 374.530495][ T9749] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 374.573209][T13090] BTRFS info (device loop3): enabling free space tree [ 374.588797][T13090] BTRFS info (device loop3): using free space tree [ 374.725630][ T4448] tipc: Subscription rejected, illegal request [ 374.861851][T13090] BTRFS info (device loop3): rebuilding free space tree [ 374.933681][T13090] BTRFS info (device loop3): checking UUID tree [ 375.000232][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2799'. [ 375.138195][T13132] loop4: detected capacity change from 0 to 1024 [ 375.146417][ T5784] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.236914][T12758] hfsplus: b-tree write err: -5, ino 4 [ 375.719701][T13151] loop5: detected capacity change from 0 to 1024 [ 375.782903][T13151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.868197][T10261] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.056597][T13138] loop4: detected capacity change from 0 to 32768 [ 376.085315][T13138] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 376.101703][T13166] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2815'. [ 376.160081][T13138] XFS (loop4): Ending clean mount [ 376.170324][T13138] XFS (loop4): Quotacheck needed: Please wait. [ 376.271298][T13138] XFS (loop4): Quotacheck: Done. [ 376.291086][T13178] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 376.302318][T13178] syzkaller1: linktype set to 780 [ 376.338662][ T9749] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 376.426987][T13180] loop7: detected capacity change from 0 to 1024 [ 376.443665][T13182] loop5: detected capacity change from 0 to 64 [ 376.475798][T13184] binder_alloc: binder_alloc_mmap_handler: 13183 200000ffc000-200001000000 already mapped failed -16 [ 376.558706][T13180] hfsplus: request for non-existent node 33554434 in B*Tree [ 376.600924][T13180] hfsplus: request for non-existent node 33554434 in B*Tree [ 376.610003][T13180] hfsplus: request for non-existent node 33554434 in B*Tree [ 376.624543][T13180] hfsplus: request for non-existent node 33554434 in B*Tree [ 376.645090][T13186] hfsplus: request for non-existent node 33554434 in B*Tree [ 376.653236][T13186] hfsplus: request for non-existent node 33554434 in B*Tree [ 376.750313][ T2953] hfsplus: request for non-existent node 33554434 in B*Tree [ 376.774400][ T2953] hfsplus: request for non-existent node 33554434 in B*Tree [ 377.071429][T13202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.184606][ T5773] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 377.341569][T13208] loop3: detected capacity change from 0 to 1024 [ 377.355007][T10436] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 377.374482][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 377.386117][ T5773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.407401][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 377.407414][ T28] audit: type=1800 audit(1752656927.463:229): pid=13208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2830" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 377.434947][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.446954][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.457019][ T5773] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 377.467017][ T5773] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.489250][ T5773] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.499059][ T5773] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.509203][ T5773] usb 6-1: Manufacturer: syz [ 377.521051][ T5773] usb 6-1: config 0 descriptor?? [ 377.529490][T12758] hfsplus: b-tree write err: -5, ino 4 [ 377.544354][T10436] usb 5-1: Using ep0 maxpacket: 32 [ 377.552388][T10436] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 377.564358][T10436] usb 5-1: config 0 has no interface number 0 [ 377.580271][T10436] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.619513][T10436] usb 5-1: config 0 interface 85 has no altsetting 0 [ 377.627860][ T28] audit: type=1326 audit(1752656927.683:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77eb8e929 code=0x7ffc0000 [ 377.635022][T10436] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 377.683779][T10436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.702154][T10436] usb 5-1: Product: syz [ 377.709077][T10436] usb 5-1: Manufacturer: syz [ 377.714462][ T28] audit: type=1326 audit(1752656927.713:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd77eb8e929 code=0x7ffc0000 [ 377.744478][T10436] usb 5-1: SerialNumber: syz [ 377.760300][T10436] usb 5-1: config 0 descriptor?? [ 377.794823][ T28] audit: type=1326 audit(1752656927.713:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.3.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77eb8e929 code=0x7ffc0000 [ 377.864456][ T5773] rc_core: IR keymap rc-hauppauge not found [ 377.870406][ T5773] Registered IR keymap rc-empty [ 377.899421][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 377.944529][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 377.985399][ T5773] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 378.025213][ T5773] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 378.057814][T13218] loop4: detected capacity change from 0 to 524255232 [ 378.065737][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.074874][ C1] mceusb 6-1:0.0: long-range (0x1) receiver active [ 378.129677][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.174551][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.204752][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.244137][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.294598][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.349701][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.380109][T13223] loop7: detected capacity change from 0 to 4096 [ 378.394534][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.411371][T10436] appletouch 5-1:0.85: Geyser mode initialized. [ 378.426079][T10436] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input18 [ 378.429064][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.483634][ T5773] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 378.535879][ T5773] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 378.561515][ T5773] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 378.584822][ T5773] usb 6-1: USB disconnect, device number 12 [ 378.618370][ T5869] usb 5-1: USB disconnect, device number 10 [ 378.664302][ T5869] appletouch 5-1:0.85: input: appletouch disconnected [ 378.715987][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2841'. [ 378.760514][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.772532][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.154199][T13243] loop5: detected capacity change from 0 to 4096 [ 379.219033][T13243] ntfs: volume version 3.1. [ 379.413736][T13237] loop3: detected capacity change from 0 to 32768 [ 379.454045][ T28] audit: type=1800 audit(1752656929.503:233): pid=13237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2843" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 379.788594][T13255] loop4: detected capacity change from 0 to 128 [ 379.798447][T13254] loop5: detected capacity change from 0 to 164 [ 379.880638][T13254] rock: directory entry would overflow storage [ 379.888407][T13254] rock: sig=0x66, size=4, remaining=3 [ 380.300344][T13263] loop4: detected capacity change from 0 to 256 [ 380.400937][T13265] loop5: detected capacity change from 0 to 164 [ 380.417343][T13265] Unable to read rock-ridge attributes [ 380.452327][T13265] Unable to read rock-ridge attributes [ 380.489417][T13265] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 380.653756][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2862'. [ 380.732747][T13281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 380.904991][T10436] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 381.094914][T10436] usb 4-1: Using ep0 maxpacket: 32 [ 381.110892][T13283] loop4: detected capacity change from 0 to 32768 [ 381.122174][T10436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 381.145027][T13283] [ 381.145027][T13283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.145027][T13283] [ 381.159168][T10436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 381.173292][T10436] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 381.180818][T13283] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 381.182710][T10436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.199694][T10436] usb 4-1: Product: syz [ 381.203976][T10436] usb 4-1: Manufacturer: syz [ 381.209954][T10436] usb 4-1: SerialNumber: syz [ 381.222075][T10436] usb 4-1: config 0 descriptor?? [ 381.235427][T10436] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 381.247920][ T2953] [ 381.247920][ T2953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.247920][ T2953] [ 381.262069][ T2953] [ 381.262069][ T2953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.262069][ T2953] [ 381.273749][ T9749] [ 381.273749][ T9749] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.273749][ T9749] [ 381.287623][ T112] [ 381.287623][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.287623][ T112] [ 381.299712][ T9749] [ 381.299712][ T9749] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 381.299712][ T9749] [ 381.442403][T10436] usb 4-1: USB disconnect, device number 25 [ 381.934712][T13300] loop4: detected capacity change from 0 to 32768 [ 381.943923][T13300] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2871 (13300) [ 381.961807][T13300] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 381.972187][T13300] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 381.986588][T13300] BTRFS info (device loop4): use no compression [ 381.992916][T13300] BTRFS info (device loop4): doing ref verification [ 382.003865][T13300] BTRFS info (device loop4): force clearing of disk cache [ 382.011154][T13300] BTRFS info (device loop4): turning off barriers [ 382.017917][T13300] BTRFS info (device loop4): setting nodatasum [ 382.024237][T13300] BTRFS info (device loop4): enabling ssd optimizations [ 382.031607][T13300] BTRFS info (device loop4): using spread ssd allocation scheme [ 382.039735][T13300] BTRFS info (device loop4): not using ssd optimizations [ 382.046956][T13300] BTRFS info (device loop4): not using spread ssd allocation scheme [ 382.073831][T13300] BTRFS info (device loop4): using free space tree [ 382.132418][T13300] BTRFS info (device loop4): rebuilding free space tree [ 382.217555][T13300] BTRFS error (device loop4): target device is invalid! [ 382.261011][ T9749] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 382.271895][ T5773] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 382.284530][T13341] ax25_connect(): syz.5.2885 uses autobind, please contact jreuter@yaina.de [ 382.480646][ T5773] usb 8-1: config 160 has an invalid interface number: 200 but max is 0 [ 382.494976][ T5773] usb 8-1: config 160 has no interface number 0 [ 382.505009][ T5773] usb 8-1: config 160 interface 200 has no altsetting 0 [ 382.528167][ T5773] usb 8-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 382.544995][ T5773] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.575105][ T5773] usb 8-1: Product: syz [ 382.579431][ T5773] usb 8-1: Manufacturer: syz [ 382.584043][ T5773] usb 8-1: SerialNumber: syz [ 382.760994][T13347] loop5: detected capacity change from 0 to 8192 [ 382.774618][T13347] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 382.794257][T13347] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 382.804444][T13347] REISERFS (device loop5): using ordered data mode [ 382.811215][T13347] reiserfs: using flush barriers [ 382.821203][T13347] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 382.833448][ T5773] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 382.851980][T13347] REISERFS (device loop5): checking transaction log (loop5) [ 382.863979][ T5773] usb 8-1: MIDIStreaming interface descriptor not found [ 382.963831][ T5773] usb 8-1: USB disconnect, device number 2 [ 382.993296][T13347] REISERFS (device loop5): Using tea hash to sort names [ 383.008114][T13347] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 383.570725][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 383.589572][T13376] vlan2: entered allmulticast mode [ 383.639536][T13379] bridge0: port 3(ipvlan2) entered blocking state [ 383.658376][T13379] bridge0: port 3(ipvlan2) entered disabled state [ 383.666533][T13379] ipvlan2: entered allmulticast mode [ 383.672462][T13379] bridge0: entered allmulticast mode [ 383.684586][T13379] ipvlan2: left allmulticast mode [ 383.705124][T13379] bridge0: left allmulticast mode [ 384.081622][T13391] loop4: detected capacity change from 0 to 512 [ 384.172981][T13391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.195769][T13391] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 384.287634][T13391] EXT4-fs (loop4): shut down requested (2) [ 384.417241][ T9749] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.475706][T13406] loop7: detected capacity change from 0 to 256 [ 384.533881][T13406] FAT-fs (loop7): Directory bread(block 64) failed [ 384.568962][T13406] FAT-fs (loop7): Directory bread(block 65) failed [ 384.593104][T13406] FAT-fs (loop7): Directory bread(block 66) failed [ 384.607529][T13406] FAT-fs (loop7): Directory bread(block 67) failed [ 384.614320][T13406] FAT-fs (loop7): Directory bread(block 68) failed [ 384.624538][T13406] FAT-fs (loop7): Directory bread(block 69) failed [ 384.634074][T13406] FAT-fs (loop7): Directory bread(block 70) failed [ 384.648724][T13406] FAT-fs (loop7): Directory bread(block 71) failed [ 384.657657][T13406] FAT-fs (loop7): Directory bread(block 72) failed [ 384.664340][T13406] FAT-fs (loop7): Directory bread(block 73) failed [ 384.901668][T13419] loop5: detected capacity change from 0 to 512 [ 384.970698][T13419] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 384.990029][ T42] kworker/u4:2: attempt to access beyond end of device [ 384.990029][ T42] loop7: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 385.024247][ T42] kworker/u4:2: attempt to access beyond end of device [ 385.024247][ T42] loop7: rw=1, sector=1864, nr_sectors = 408 limit=256 [ 385.038286][T13419] EXT4-fs (loop5): invalid journal inode [ 385.038364][T13419] EXT4-fs (loop5): can't get journal size [ 385.056046][T13419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 385.064181][T13419] System zones: 1-12, 13-13 [ 385.147977][T13419] EXT4-fs (loop5): 1 truncate cleaned up [ 385.184405][T13419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.302833][T10261] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.394153][T13433] loop4: detected capacity change from 0 to 1024 [ 385.475489][ T8655] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 385.484270][T13432] hfsplus: invalid extended attribute record [ 385.561971][ T2953] hfsplus: b-tree write err: -5, ino 4 [ 385.678226][ T8655] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.695618][ T8655] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.713005][ T8655] usb 8-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 385.723173][ T8655] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.747702][ T8655] usb 8-1: config 0 descriptor?? [ 385.782561][T13447] netlink: 'syz.3.2930': attribute type 11 has an invalid length. [ 385.791291][T13447] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 385.801033][T13447] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.2930'. [ 385.825527][ T5773] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 386.027889][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.041185][ T4448] wlan1: Trigger new scan to find an IBSS to join [ 386.064098][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.085566][ T5773] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 386.094648][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.120344][ T5773] usb 6-1: config 0 descriptor?? [ 386.165765][ T8655] uclogic 0003:28BD:0075.0029: interface is invalid, ignoring [ 386.373560][ T5869] usb 8-1: USB disconnect, device number 3 [ 386.407163][ T9749] cgroup: fork rejected by pids controller in /syz4 [ 386.541827][ T5773] uclogic 0003:5543:0522.002A: No inputs registered, leaving [ 386.550545][ T5773] uclogic 0003:5543:0522.002A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input0 [ 386.708498][ T5823] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 386.737375][ T4448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.754542][ T8655] usb 6-1: USB disconnect, device number 13 [ 386.838055][ T4448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.926051][ T5823] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 386.956257][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.972653][ T5823] usb 4-1: config 0 descriptor?? [ 387.026672][ T4448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.142315][ T4448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.224976][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.236201][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.246226][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.254962][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.262993][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 387.270635][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.832954][T13491] loop5: detected capacity change from 0 to 256 [ 387.856479][ T5823] usb 4-1: Cannot set autoneg [ 387.861349][ T5823] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 387.877620][ T5823] usb 4-1: USB disconnect, device number 26 [ 387.894888][T13478] chnl_net:caif_netlink_parms(): no params data found [ 388.133412][T13478] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.140879][T13478] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.148307][T13478] bridge_slave_0: entered allmulticast mode [ 388.155800][T13478] bridge_slave_0: entered promiscuous mode [ 388.165168][T13478] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.173910][T13478] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.181513][T13478] bridge_slave_1: entered allmulticast mode [ 388.189043][T13478] bridge_slave_1: entered promiscuous mode [ 388.229777][T13503] netlink: 'syz.7.2954': attribute type 10 has an invalid length. [ 388.303142][T13478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.328485][ T5823] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 388.337753][T13478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.473115][T13478] team0: Port device team_slave_0 added [ 388.482126][T13478] team0: Port device team_slave_1 added [ 388.545936][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.578645][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.591327][T13478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.606057][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.606562][ T5823] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 388.663460][T13478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.683287][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.701019][ T5823] usb 6-1: config 0 descriptor?? [ 388.777080][T13478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.784077][T13478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.812461][T13478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.051138][T13478] hsr_slave_0: entered promiscuous mode [ 389.069308][T13478] hsr_slave_1: entered promiscuous mode [ 389.086041][T13478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.093733][T13478] Cannot create hsr debugfs directory [ 389.129528][ T4448] hsr_slave_0: left promiscuous mode [ 389.145562][ T4448] hsr_slave_1: left promiscuous mode [ 389.155991][ T5823] pyra 0003:1E7D:2CF6.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 389.187158][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.194644][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.203359][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.212059][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.222686][ T4448] bridge_slave_1: left allmulticast mode [ 389.228568][ T4448] bridge_slave_1: left promiscuous mode [ 389.234293][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.248070][ T4448] bridge_slave_0: left promiscuous mode [ 389.254271][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.256277][T13528] loop7: detected capacity change from 0 to 256 [ 389.269232][T13528] exfat: Deprecated parameter 'namecase' [ 389.284199][T13528] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 389.322381][ T4448] veth1_macvtap: left promiscuous mode [ 389.332381][ T4448] veth0_macvtap: left promiscuous mode [ 389.340974][ T4448] veth1_vlan: left promiscuous mode [ 389.351855][ T4448] veth0_vlan: left promiscuous mode [ 389.396243][ T50] Bluetooth: hci2: command tx timeout [ 389.411490][T13530] loop7: detected capacity change from 0 to 64 [ 389.548167][ T5823] pyra 0003:1E7D:2CF6.002B: couldn't init struct pyra_device [ 389.555606][ T5823] pyra 0003:1E7D:2CF6.002B: couldn't install mouse [ 389.587846][ T5823] pyra: probe of 0003:1E7D:2CF6.002B failed with error -71 [ 389.600057][ T5823] usb 6-1: USB disconnect, device number 14 [ 390.308573][T13549] loop7: detected capacity change from 0 to 512 [ 390.449164][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 390.550310][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 390.643602][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.721449][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.076526][ T58] wlan1: Trigger new scan to find an IBSS to join [ 391.352129][ T4448] bond0 (unregistering): Released all slaves [ 391.450735][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2976'. [ 391.450814][ T787] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.477196][ T50] Bluetooth: hci2: command tx timeout [ 391.661241][T13567] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.982054][T13576] loop7: detected capacity change from 0 to 512 [ 392.008788][T13576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.025462][T13576] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.043286][ T4448] wlan1: Creating new IBSS network, BSSID 02:a7:d9:d4:02:5d [ 392.043523][T13576] EXT4-fs error (device loop7): ext4_do_update_inode:5230: inode #2: comm syz.7.2987: corrupted inode contents [ 392.067766][T13576] EXT4-fs error (device loop7): ext4_dirty_inode:6106: inode #2: comm syz.7.2987: mark_inode_dirty error [ 392.084822][T13576] EXT4-fs error (device loop7): ext4_do_update_inode:5230: inode #2: comm syz.7.2987: corrupted inode contents [ 392.097203][T13576] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #2: comm syz.7.2987: mark_inode_dirty error [ 392.135860][T12875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.365914][T13478] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.379108][T13478] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.392513][T13478] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.411893][T13478] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.532813][T13478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.561852][T13478] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.581842][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.588954][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.623749][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.631017][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.758834][T13600] netlink: 'syz.7.2994': attribute type 1 has an invalid length. [ 392.927400][T13609] netlink: 'syz.7.2997': attribute type 9 has an invalid length. [ 392.946794][T13609] netlink: 61951 bytes leftover after parsing attributes in process `syz.7.2997'. [ 393.007801][T13612] netlink: 'syz.5.2998': attribute type 39 has an invalid length. [ 393.148161][T13478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.556664][ T50] Bluetooth: hci2: command tx timeout [ 393.730277][T13478] veth0_vlan: entered promiscuous mode [ 393.751351][T13478] veth1_vlan: entered promiscuous mode [ 393.775800][T13632] loop5: detected capacity change from 0 to 4096 [ 393.802766][T13632] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 393.818015][T13478] veth0_macvtap: entered promiscuous mode [ 393.831837][T13478] veth1_macvtap: entered promiscuous mode [ 393.864146][T13638] loop7: detected capacity change from 0 to 128 [ 393.868265][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.881443][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.891536][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.898789][T13632] ntfs3: loop5: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 393.902014][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.902033][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.954037][T13638] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 393.964776][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.978355][T13478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.996930][T13632] ntfs3: loop5: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 394.004456][T13638] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 394.045795][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.060224][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.073392][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.111982][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.131238][T13478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.142006][T13478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.153590][ T48] ntfs3: loop5: ino=1e, failed to parse mft record [ 394.154770][T13478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.181174][T13478] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.190103][T13478] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.199122][T13478] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.210384][T13478] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.436415][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.444272][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.512705][T13642] loop5: detected capacity change from 0 to 4096 [ 394.534019][T13642] ntfs3: Unknown parameter 'measure' [ 394.535647][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.565349][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.693140][T13636] loop3: detected capacity change from 0 to 40427 [ 394.714461][T13636] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 394.736466][T13636] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 394.749560][T13636] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 394.784712][T13636] F2FS-fs (loop3): Found nat_bits in checkpoint [ 394.884081][T13636] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 394.906720][T13636] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 394.954210][T13636] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 394.999889][T13636] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 395.051470][T13660] loop7: detected capacity change from 0 to 4096 [ 395.077443][T13660] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 395.123488][T13660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.381207][T13656] loop4: detected capacity change from 0 to 32768 [ 395.390132][T12875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.395589][T13656] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3013 (13656) [ 395.399446][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.425206][T13656] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 395.448938][T13656] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 395.467392][T13656] BTRFS info (device loop4): using free space tree [ 395.622428][T13656] BTRFS info (device loop4): enabling ssd optimizations [ 395.636701][ T50] Bluetooth: hci2: command tx timeout [ 395.646622][T13656] BTRFS info (device loop4): auto enabling async discard [ 395.821868][T13478] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 396.001163][T13690] loop3: detected capacity change from 0 to 256 [ 396.082384][T13664] loop5: detected capacity change from 0 to 32768 [ 396.146306][T13690] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 396.173932][T13664] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 396.255591][T13683] loop7: detected capacity change from 0 to 40427 [ 396.271389][T13683] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 396.279538][T13683] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 396.309426][T13683] F2FS-fs (loop7): invalid crc value [ 396.365618][T13683] F2FS-fs (loop7): Found nat_bits in checkpoint [ 396.427512][T10261] ocfs2: Unmounting device (7,5) on (node local) [ 396.448547][T13701] loop4: detected capacity change from 0 to 128 [ 396.496410][T13701] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 396.509361][T13683] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 396.516442][T13683] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 396.567813][T13701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.675839][T13704] veth0_to_bond: entered allmulticast mode [ 397.096505][T13699] loop3: detected capacity change from 0 to 32768 [ 397.113128][T13699] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3023 (13699) [ 397.166186][T13699] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 397.187238][T13699] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 397.207051][T13699] BTRFS info (device loop3): setting nodatacow, compression disabled [ 397.221691][T13699] BTRFS info (device loop3): setting datacow [ 397.232794][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3035'. [ 397.244847][T13699] BTRFS info (device loop3): doing ref verification [ 397.252595][T13699] BTRFS info (device loop3): force clearing of disk cache [ 397.275175][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3035'. [ 397.284195][T13699] BTRFS info (device loop3): turning off barriers [ 397.307006][T13699] BTRFS info (device loop3): enabling ssd optimizations [ 397.326266][T13699] BTRFS info (device loop3): using spread ssd allocation scheme [ 397.348152][T13699] BTRFS info (device loop3): using free space tree [ 397.458658][T13699] BTRFS info (device loop3): rebuilding free space tree [ 397.687327][ T5784] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 397.976317][T13725] loop4: detected capacity change from 0 to 32768 [ 397.998406][T13725] XFS: ikeep mount option is deprecated. [ 398.081492][T13725] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 398.191151][T13757] netlink: 'syz.3.3040': attribute type 6 has an invalid length. [ 398.293408][T13725] XFS (loop4): Ending clean mount [ 398.327257][T13725] XFS (loop4): Quotacheck needed: Please wait. [ 398.433151][T13725] XFS (loop4): Quotacheck: Done. [ 398.519612][T13478] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 398.553287][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.566723][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.576580][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.585241][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.599610][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 398.613161][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 398.970775][T13777] loop4: detected capacity change from 0 to 256 [ 399.082974][T13763] chnl_net:caif_netlink_parms(): no params data found [ 399.408720][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.435529][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.473083][T13763] bridge_slave_0: entered allmulticast mode [ 399.492867][T13763] bridge_slave_0: entered promiscuous mode [ 399.529157][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.536319][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.594907][T13763] bridge_slave_1: entered allmulticast mode [ 399.619857][T13763] bridge_slave_1: entered promiscuous mode [ 399.729144][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.753634][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.822483][T13781] loop4: detected capacity change from 0 to 32768 [ 399.830988][T13763] team0: Port device team_slave_0 added [ 399.841926][T13763] team0: Port device team_slave_1 added [ 399.860809][T13781] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 399.937363][T13781] XFS (loop4): Ending clean mount [ 399.960245][T13781] XFS (loop4): Quotacheck needed: Please wait. [ 399.975722][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.990794][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.016744][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.080087][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.103513][T13781] XFS (loop4): Quotacheck: Done. [ 400.116975][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.144958][T13781] syz.4.3049: attempt to access beyond end of device [ 400.144958][T13781] loop4: rw=4096, sector=137438953479, nr_sectors = 1 limit=32768 [ 400.160614][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.194680][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.229894][T13478] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 400.284690][T13763] hsr_slave_0: entered promiscuous mode [ 400.308615][T13763] hsr_slave_1: entered promiscuous mode [ 400.316013][T13763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.327139][T13763] Cannot create hsr debugfs directory [ 400.605613][T13813] loop7: detected capacity change from 0 to 512 [ 400.670141][T13813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 400.691322][ T50] Bluetooth: hci3: command tx timeout [ 400.726458][T13763] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.727488][T13813] System zones: 1-12 [ 400.772762][T13813] EXT4-fs error (device loop7): ext4_xattr_inode_iget:445: comm syz.7.3059: error while reading EA inode 32 err=-116 [ 400.797211][T13813] EXT4-fs (loop7): Remounting filesystem read-only [ 400.804517][T13813] EXT4-fs warning (device loop7): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 400.817495][T13813] EXT4-fs (loop7): 1 orphan inode deleted [ 400.831019][T13813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.941921][T13763] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.993622][T12875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.111373][T13763] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.326179][T13763] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.392869][T13820] loop3: detected capacity change from 0 to 32768 [ 401.522612][T13820] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 401.637100][T13826] loop4: detected capacity change from 0 to 32768 [ 401.693289][T13763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 401.731621][T13763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 401.762025][T13763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 401.777529][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 401.790150][T13763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 401.929676][T13763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.963031][T13763] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.980904][T13832] loop7: detected capacity change from 0 to 32768 [ 401.983712][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.994552][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.003305][T13832] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop7 scanned by syz.7.3066 (13832) [ 402.043567][T13832] BTRFS info (device loop7): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 402.043822][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.061005][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.067457][T13832] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 402.107369][T13832] BTRFS info (device loop7): using free space tree [ 402.227591][T13832] BTRFS info (device loop7): enabling ssd optimizations [ 402.234586][T13832] BTRFS info (device loop7): auto enabling async discard [ 402.458650][T12875] BTRFS info (device loop7): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 402.518825][T13763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.767307][ T50] Bluetooth: hci3: command tx timeout [ 402.806860][T13882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3076'. [ 403.093701][T13889] loop7: detected capacity change from 0 to 64 [ 403.230141][T13763] veth0_vlan: entered promiscuous mode [ 403.256637][T13763] veth1_vlan: entered promiscuous mode [ 403.334039][T13763] veth0_macvtap: entered promiscuous mode [ 403.345810][T13763] veth1_macvtap: entered promiscuous mode [ 403.370582][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.391781][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.406460][T13895] loop4: detected capacity change from 0 to 512 [ 403.413961][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.442619][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.463508][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.475726][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.486864][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.498179][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.509967][T13763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.535918][T13895] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 403.555244][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.576149][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.582139][T13895] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 403.586538][T13885] loop3: detected capacity change from 0 to 32768 [ 403.604609][T13895] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3080: Failed to acquire dquot type 1 [ 403.607113][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.616046][T13885] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.3077 (13885) [ 403.618887][T13885] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 403.636143][T13895] EXT4-fs (loop4): 1 truncate cleaned up [ 403.640454][T13885] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 403.657083][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.664547][T13885] BTRFS info (device loop3): using free space tree [ 403.682696][T13895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.686933][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.696591][T13895] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.714091][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.727713][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 403.746020][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.757373][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.769288][T13763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.780497][T13478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.794046][T13763] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.803511][T13763] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.834760][T13763] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.844010][T13763] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.890820][T13885] BTRFS info (device loop3): enabling ssd optimizations [ 403.905965][T13885] BTRFS info (device loop3): auto enabling async discard [ 404.072752][ T2897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.088543][ T2897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.156130][T12758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.170126][T13922] loop7: detected capacity change from 0 to 8192 [ 404.170382][ T5784] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 404.185441][T12758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.218828][T13922] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 404.265823][T13922] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 404.287663][T13922] REISERFS (device loop7): using ordered data mode [ 404.306139][T13922] reiserfs: using flush barriers [ 404.353321][T13922] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 404.378546][T13922] REISERFS (device loop7): checking transaction log (loop7) [ 404.397076][T13930] loop4: detected capacity change from 0 to 64 [ 404.577428][T13922] REISERFS (device loop7): Using tea hash to sort names [ 404.614114][T13922] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 404.660909][T13935] loop5: detected capacity change from 0 to 256 [ 404.697038][T13935] exfat: Deprecated parameter 'namecase' [ 404.746427][T13938] loop3: detected capacity change from 0 to 256 [ 404.777868][T13935] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 404.840154][ T50] Bluetooth: hci3: command tx timeout [ 405.190277][T13952] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 405.196253][T13952] syzkaller0: linktype set to 778 [ 405.528077][ T787] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 405.720140][T13980] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge0 [ 405.751086][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.766261][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 405.788015][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 405.807972][ T787] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 405.839525][ T787] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 405.852697][ T787] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 405.871085][ T787] usb 5-1: Manufacturer: syz [ 405.888436][ T787] usb 5-1: config 0 descriptor?? [ 406.070064][T13993] loop3: detected capacity change from 0 to 128 [ 406.138481][T13993] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.166287][T13993] ext4 filesystem being mounted at /853/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 406.212723][T13993] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x18) [ 406.229027][T14001] input: syz1 as /devices/virtual/input/input23 [ 406.308689][ T787] rc_core: IR keymap rc-hauppauge not found [ 406.317878][ T787] Registered IR keymap rc-empty [ 406.322892][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.339455][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.381758][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.438870][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 406.479489][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 406.538916][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.588293][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.628017][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.669837][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.719250][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.758643][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.815802][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.857984][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.908005][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.920079][ T50] Bluetooth: hci3: command tx timeout [ 406.941051][ T787] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 406.991311][ T787] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 407.013537][ T787] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 407.032217][ T787] usb 5-1: USB disconnect, device number 11 [ 407.158663][ T5837] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 407.348136][ T5837] usb 8-1: Using ep0 maxpacket: 8 [ 407.362093][ T5837] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.392415][ T5837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.419742][ T5837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.440504][ T5837] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.454250][ T5837] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.463825][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.687241][ T5837] usb 8-1: GET_CAPABILITIES returned 0 [ 407.696950][ T5837] usbtmc 8-1:16.0: can't read capabilities [ 407.897549][ T5837] usb 8-1: USB disconnect, device number 4 [ 408.132865][T14063] loop5: detected capacity change from 0 to 32768 [ 408.161829][T14063] [ 408.161829][T14063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 408.161829][T14063] [ 408.214867][T14063] read_mapping_page failed! [ 408.223400][T14063] ERROR: (device loop5): txCommit: [ 408.223400][T14063] [ 408.227971][T14061] loop4: detected capacity change from 0 to 40427 [ 408.234366][T14061] F2FS-fs (loop4): invalid crc value [ 408.253459][T14061] F2FS-fs (loop4): Found nat_bits in checkpoint [ 408.259558][T14063] read_mapping_page failed! [ 408.264265][T14063] ERROR: (device loop5): txCommit: [ 408.264265][T14063] [ 408.324195][T14061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 408.333625][T13763] [ 408.333625][T13763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 408.333625][T13763] [ 408.345106][T13763] [ 408.345106][T13763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 408.345106][T13763] [ 408.472830][T13478] syz-executor: attempt to access beyond end of device [ 408.472830][T13478] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 408.535005][T13478] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 408.568545][ T28] audit: type=1326 audit(1752656958.619:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 408.621574][ T28] audit: type=1326 audit(1752656958.619:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 408.682747][ T28] audit: type=1326 audit(1752656958.649:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 408.778151][ T28] audit: type=1326 audit(1752656958.649:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 408.830002][ T28] audit: type=1326 audit(1752656958.649:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 408.881786][T14078] loop7: detected capacity change from 0 to 256 [ 408.892242][ T28] audit: type=1326 audit(1752656958.659:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 408.896271][T14065] loop3: detected capacity change from 0 to 40427 [ 408.931900][T14065] F2FS-fs (loop3): heap/no_heap options were deprecated [ 408.939179][T14065] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 408.972270][T14065] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x77e8c [ 408.977161][ T28] audit: type=1326 audit(1752656958.659:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 408.991885][T14065] F2FS-fs (loop3): invalid crc value [ 409.041071][T14065] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 409.068566][ T28] audit: type=1326 audit(1752656958.659:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 409.108545][T14065] F2FS-fs (loop3): Found nat_bits in checkpoint [ 409.119203][T14085] erspan0: entered promiscuous mode [ 409.164910][ T28] audit: type=1326 audit(1752656958.659:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.7.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cbb8e929 code=0x7ffc0000 [ 409.185396][T14065] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 409.218635][T14087] loop7: detected capacity change from 0 to 1024 [ 409.263929][T14065] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 409.324022][T14065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 409.388918][T14065] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 409.438523][T14065] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_map_blocks+0x338f/0x3c00 [ 409.474893][T14065] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 409.503147][T14093] loop7: detected capacity change from 0 to 4096 [ 409.623871][T14101] netlink: 'syz.4.3163': attribute type 1 has an invalid length. [ 409.639342][T14101] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3163'. [ 409.786872][T14103] loop5: detected capacity change from 0 to 4096 [ 410.148850][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3162'. [ 410.339067][ T5773] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 410.531558][T14139] tun0: tun_chr_ioctl cmd 2147767521 [ 410.549915][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 410.570906][ T5773] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.587468][ T5773] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.597722][ T5773] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 410.614018][ T5773] usb 6-1: config 0 interface 0 has no altsetting 0 [ 410.620838][ T5773] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 410.631383][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.649563][ T5773] usb 6-1: config 0 descriptor?? [ 410.798511][T14147] loop4: detected capacity change from 0 to 4096 [ 410.830888][T14147] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 410.926983][T14147] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 410.947178][T14151] loop7: detected capacity change from 0 to 4096 [ 410.986168][T14152] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.100510][ T5773] hid (null): global environment stack underflow [ 411.118459][ T5773] hid (null): invalid report_count 107748025 [ 411.216354][T14156] loop4: detected capacity change from 0 to 512 [ 411.287638][ T5773] usb 6-1: USB disconnect, device number 15 [ 412.026137][T14191] loop5: detected capacity change from 0 to 8 [ 412.154340][T14193] loop3: detected capacity change from 0 to 4096 [ 412.476484][T14183] loop7: detected capacity change from 0 to 40427 [ 412.527532][T14183] F2FS-fs (loop7): Found nat_bits in checkpoint [ 412.624371][T14206] loop4: detected capacity change from 0 to 64 [ 412.637267][T14183] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 412.689384][T12875] syz-executor: attempt to access beyond end of device [ 412.689384][T12875] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 412.719065][T12875] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 412.793867][T14212] loop3: detected capacity change from 0 to 24 [ 412.816620][T14212] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 412.842038][T14212] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 412.898778][T14212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.938322][T14214] loop4: detected capacity change from 0 to 4096 [ 412.999539][T14214] NILFS (loop4): invalid segment: Checksum error in segment payload [ 413.027921][T14214] NILFS (loop4): trying rollback from an earlier position [ 413.071904][T14214] NILFS (loop4): recovery complete [ 413.097522][T14217] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.301922][T14226] loop5: detected capacity change from 0 to 64 [ 413.328742][T10436] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 413.511086][T10436] usb 4-1: Using ep0 maxpacket: 32 [ 413.519075][T10436] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 413.543755][T10436] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 413.544755][T13763] hfs: node 4:3 still has 2 user(s)! [ 413.574261][T10436] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.598116][T10436] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 413.617737][T10436] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 413.638453][T10436] usb 4-1: Product: syz [ 413.645077][T10436] usb 4-1: Manufacturer: syz [ 413.655442][T10436] usb 4-1: SerialNumber: syz [ 413.685490][T10436] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input24 [ 413.890514][T14248] loop7: detected capacity change from 0 to 512 [ 413.891212][ T788] usb 4-1: USB disconnect, device number 27 [ 413.897545][T14248] EXT4-fs: Ignoring removed nobh option [ 413.920709][ T788] appletouch 4-1:1.0: input: appletouch disconnected [ 413.953449][T14248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.057360][T12875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.223125][T14256] loop7: detected capacity change from 0 to 64 [ 414.554915][T14269] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 431.006168][ T5795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.019572][ T5795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.028264][ T5795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.050665][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 431.064352][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 431.082852][ T5795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.090476][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 431.098725][ T5795] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 431.107660][ T5795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.115361][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 431.124877][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 431.133404][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.225973][ T5795] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 432.243718][ T5795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 432.257137][ T5795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 432.273122][ T5795] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 432.283420][ T5795] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 432.297800][ T5795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 432.481350][ T5795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 432.498450][ T5795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 432.507756][ T5795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 432.527788][ T5795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 432.542276][ T5795] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 432.556699][ T5795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 433.057156][T14281] chnl_net:caif_netlink_parms(): no params data found [ 433.125242][T14278] chnl_net:caif_netlink_parms(): no params data found [ 433.239138][ T5795] Bluetooth: hci5: command tx timeout [ 433.245955][ T5795] Bluetooth: hci4: command tx timeout [ 434.359091][ T5795] Bluetooth: hci7: command tx timeout [ 434.599159][ T5795] Bluetooth: hci6: command tx timeout [ 435.318998][ T5793] Bluetooth: hci5: command tx timeout [ 435.325681][ T5795] Bluetooth: hci4: command tx timeout [ 436.439102][ T5795] Bluetooth: hci7: command tx timeout [ 436.679141][ T5795] Bluetooth: hci6: command tx timeout [ 437.399017][ T5793] Bluetooth: hci5: command tx timeout [ 437.405558][ T5795] Bluetooth: hci4: command tx timeout [ 438.518974][ T5795] Bluetooth: hci7: command tx timeout [ 438.759071][ T5795] Bluetooth: hci6: command tx timeout [ 439.479173][ T5793] Bluetooth: hci5: command tx timeout [ 439.484645][ T5795] Bluetooth: hci4: command tx timeout [ 440.599032][ T5795] Bluetooth: hci7: command tx timeout [ 440.847817][ T5793] Bluetooth: hci6: command tx timeout [ 491.838563][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 491.858363][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 491.867564][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 491.878706][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 491.886454][ T50] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 491.894196][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 492.810484][ T5795] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 492.823798][ T5795] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 492.832871][ T5795] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 492.841538][ T5795] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 492.849673][ T5795] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 492.857100][ T5795] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 492.917935][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 492.937194][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 492.948397][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 492.965987][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 492.976180][ T50] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 492.996570][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 493.065013][ T5793] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 493.084273][ T5793] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 493.097316][ T5793] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 493.114390][ T5793] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 493.127761][ T5793] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 493.147106][ T5793] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 493.959225][ T5793] Bluetooth: hci9: command tx timeout [ 494.919039][ T5793] Bluetooth: hci10: command tx timeout [ 495.080325][ T5793] Bluetooth: hci8: command tx timeout [ 495.239016][ T5793] Bluetooth: hci11: command tx timeout [ 496.044040][ T5793] Bluetooth: hci9: command tx timeout [ 496.998991][ T5793] Bluetooth: hci10: command tx timeout [ 497.161717][ T50] Bluetooth: hci8: command tx timeout [ 497.319080][ T5793] Bluetooth: hci11: command tx timeout [ 498.119279][ T5793] Bluetooth: hci9: command tx timeout [ 499.079158][ T5793] Bluetooth: hci10: command tx timeout [ 499.239149][ T5793] Bluetooth: hci8: command tx timeout [ 499.399014][ T5793] Bluetooth: hci11: command tx timeout [ 500.204174][ T5793] Bluetooth: hci9: command tx timeout [ 501.158929][ T5793] Bluetooth: hci10: command tx timeout [ 501.321280][ T5793] Bluetooth: hci8: command tx timeout [ 501.478956][ T5793] Bluetooth: hci11: command tx timeout [ 519.678761][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 519.685743][ C1] rcu: 0-...0: (0 ticks this GP) idle=057c/1/0x4000000000000000 softirq=61985/61985 fqs=5245 [ 519.698156][ C1] rcu: hardirqs softirqs csw/system [ 519.704581][ C1] rcu: number: 0 0 0 [ 519.710992][ C1] rcu: cputime: 0 0 0 ==> 52510(ms) [ 519.718795][ C1] rcu: (detected by 1, t=10502 jiffies, g=73569, q=1754 ncpus=2) [ 519.726621][ C1] Sending NMI from CPU 1 to CPUs 0: [ 519.731853][ C0] NMI backtrace for cpu 0 [ 519.731875][ C0] CPU: 0 PID: 12875 Comm: syz-executor Not tainted 6.6.98-syzkaller #0 [ 519.731891][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.731903][ C0] RIP: 0010:timerqueue_del+0x5/0x100 [ 519.731930][ C0] Code: e8 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a0 6b 26 f7 0f 0b e9 78 fe ff ff 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 [ 519.731943][ C0] RSP: 0018:ffffc90000007d30 EFLAGS: 00000002 [ 519.731957][ C0] RAX: ffffffff8175bbc4 RBX: ffff8880b8e2ba88 RCX: 0000000000010000 [ 519.731969][ C0] RDX: ffff88801a6e3c00 RSI: ffff88805e4b4340 RDI: ffff8880b8e2ba90 [ 519.731980][ C0] RBP: ffffc90000007e90 R08: ffffffff8e4a936f R09: 1ffffffff1c9526d [ 519.731992][ C0] R10: dffffc0000000000 R11: fffffbfff1c9526e R12: ffff88805e4b4340 [ 519.732003][ C0] R13: dffffc0000000000 R14: ffff8880b8e2b940 R15: 0000000000000001 [ 519.732014][ C0] FS: 000055558d089500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 519.732029][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.732040][ C0] CR2: 00007f92cbd7f2d8 CR3: 00000000502dc000 CR4: 00000000003506f0 [ 519.732053][ C0] Call Trace: [ 519.732060][ C0] [ 519.732072][ C0] __hrtimer_run_queues+0x374/0xc40 [ 519.732093][ C0] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 519.732117][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 519.732132][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 519.732155][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 519.732184][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 519.732205][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 519.732222][ C0] [ 519.732227][ C0] [ 519.732232][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 519.732251][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 519.732268][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 519.732280][ C0] RSP: 0018:ffffc9000443f7a0 EFLAGS: 00000206 [ 519.732292][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ad739d4172018b00 [ 519.732301][ C0] RDX: 0000000000000000 RSI: ffffffff8aaacac0 RDI: ffffffff8afc7880 [ 519.732311][ C0] RBP: ffffc9000443f8a8 R08: dffffc0000000000 R09: 1ffffffff21b4caa [ 519.732322][ C0] R10: dffffc0000000000 R11: fffffbfff21b4cab R12: 1ffff92000887f00 [ 519.732332][ C0] R13: ffff88807f0c4420 R14: 0000000000000246 R15: dffffc0000000000 [ 519.732354][ C0] ? alloc_counters+0x612/0x690 [ 519.732369][ C0] ? __might_sleep+0xe0/0xe0 [ 519.732386][ C0] ? read_lock_is_recursive+0x20/0x20 [ 519.732405][ C0] ? compat_copy_entries_to_user+0x510/0x510 [ 519.732421][ C0] ? __might_fault+0xaa/0x120 [ 519.732437][ C0] __might_fault+0xc6/0x120 [ 519.732453][ C0] ? __might_fault+0xaa/0x120 [ 519.732469][ C0] _copy_to_user+0x2a/0xa0 [ 519.732487][ C0] do_ip6t_get_ctl+0xbf8/0x1150 [ 519.732508][ C0] ? do_ip6t_set_ctl+0xcd0/0xcd0 [ 519.732541][ C0] ? nf_getsockopt+0x21f/0x280 [ 519.732559][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 519.732573][ C0] ? rcu_is_watching+0x15/0xb0 [ 519.732591][ C0] ? trace_contention_end+0x39/0xe0 [ 519.732605][ C0] ? __mutex_lock+0x304/0xcc0 [ 519.732633][ C0] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 519.732654][ C0] ? mutex_unlock+0x10/0x10 [ 519.732675][ C0] ? __might_fault+0xaa/0x120 [ 519.732691][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 519.732708][ C0] nf_getsockopt+0x262/0x280 [ 519.732728][ C0] ipv6_getsockopt+0x216/0x2c0 [ 519.732751][ C0] ? ipv6_getsockopt_sticky+0x190/0x190 [ 519.732770][ C0] ? __might_fault+0xaa/0x120 [ 519.732785][ C0] ? __might_fault+0xc6/0x120 [ 519.732799][ C0] ? __might_fault+0xaa/0x120 [ 519.732815][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 519.732836][ C0] ? sock_recv_errqueue+0x510/0x510 [ 519.732853][ C0] do_sock_getsockopt+0x38d/0x660 [ 519.732877][ C0] ? __ia32_sys_setsockopt+0x250/0x250 [ 519.732896][ C0] ? local_clock_noinstr+0xd0/0xd0 [ 519.732911][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 519.732932][ C0] __x64_sys_getsockopt+0x1d6/0x280 [ 519.732952][ C0] ? local_clock_noinstr+0xd0/0xd0 [ 519.732966][ C0] ? local_clock_noinstr+0xd0/0xd0 [ 519.732981][ C0] do_syscall_64+0x55/0xb0 [ 519.732999][ C0] ? clear_bhb_loop+0x40/0x90 [ 519.733016][ C0] ? clear_bhb_loop+0x40/0x90 [ 519.733033][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.733049][ C0] RIP: 0033:0x7f92cbb9066a [ 519.733068][ C0] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 519.733079][ C0] RSP: 002b:00007ffc1919fdc8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 519.733094][ C0] RAX: ffffffffffffffda RBX: 00007ffc1919fe50 RCX: 00007f92cbb9066a [ 519.733105][ C0] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 519.733114][ C0] RBP: 0000000000000003 R08: 00007ffc1919fdec R09: 0079746972756365 [ 519.733124][ C0] R10: 00007ffc1919fe50 R11: 0000000000000216 R12: 00007f92cbd81340 [ 519.733134][ C0] R13: 00007ffc1919fdec R14: 0000000000000000 R15: 00007f92cbd82e40 [ 519.733152][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)