last executing test programs: 1m1.507758238s ago: executing program 0 (id=204): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="46b8", 0x2, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) 1m1.42151186s ago: executing program 0 (id=205): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.357841382s ago: executing program 0 (id=206): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r0 = socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1m1.259468674s ago: executing program 0 (id=207): syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c6, &(0x7f00000006c0)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='fusectl\x00', 0x800, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m0.858456274s ago: executing program 0 (id=211): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3}, 0x2, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m0.536947833s ago: executing program 0 (id=213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 1m0.2482696s ago: executing program 32 (id=213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 3.673233447s ago: executing program 1 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0xffffffffffffffff, 0x6, 0x0) 3.355352815s ago: executing program 1 (id=543): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x810) 3.029843463s ago: executing program 1 (id=547): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) 2.870227857s ago: executing program 2 (id=548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) shutdown(r1, 0x0) 2.840706148s ago: executing program 1 (id=550): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.713065017s ago: executing program 3 (id=556): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) read(r3, &(0x7f0000000240)=""/97, 0x61) 1.601553739s ago: executing program 3 (id=557): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x2) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)="b5", 0x1}], 0x1, 0x3) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r0, 0x0, 0x0) 1.472675163s ago: executing program 2 (id=558): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES32], 0x1, 0xa0c, &(0x7f0000000280)="$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") mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 1.274064707s ago: executing program 3 (id=559): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x15, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) 1.261775208s ago: executing program 4 (id=567): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x1810090, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) 1.037040324s ago: executing program 3 (id=560): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 1.036863224s ago: executing program 4 (id=561): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 925.614327ms ago: executing program 4 (id=562): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20044010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 909.164627ms ago: executing program 2 (id=563): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r1 = fanotify_init(0x4, 0x2) fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) 755.463471ms ago: executing program 1 (id=564): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 673.267303ms ago: executing program 4 (id=565): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000280), 0x10) 410.50538ms ago: executing program 4 (id=566): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r2, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000740)=0x8, 0x4) 410.29542ms ago: executing program 2 (id=568): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1, 0x4d8, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "ca8cd7a89c39b65a"}}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4004000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) 331.889272ms ago: executing program 3 (id=569): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x80000000000000, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee811e1cd26c866d185839404f897800e2878c9cfa178c96130eb046eda93df39eefb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd767248286101ef1eecf07df3e45ad5d510f3ef31b353e7") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 268.379023ms ago: executing program 1 (id=570): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f00000010c0)={0x20, 0xd}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f40)={0x34, &(0x7f0000000d40)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) 161.017786ms ago: executing program 2 (id=571): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 21.51462ms ago: executing program 2 (id=572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 298.17µs ago: executing program 4 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000100)="dd35", 0x2) 0s ago: executing program 3 (id=574): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c3, 0x1, @qam={0x2, 0x0, 0xc}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 73.779061][ T5763] cgroup: Unknown subsys name 'net' [ 73.916016][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.349014][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.762253][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.776702][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.785894][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.794350][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.810499][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.829736][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.837288][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.846562][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.854909][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.861369][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.870958][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.871381][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.879489][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.886243][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.892372][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.899785][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.907251][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.923004][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.931346][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.939376][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.946835][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.956131][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.963984][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.982202][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.357670][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.420963][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 77.472343][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.542959][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 77.572023][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.580287][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.587674][ T5778] bridge_slave_0: entered allmulticast mode [ 77.594997][ T5778] bridge_slave_0: entered promiscuous mode [ 77.621743][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.630188][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.637569][ T5778] bridge_slave_1: entered allmulticast mode [ 77.645789][ T5778] bridge_slave_1: entered promiscuous mode [ 77.713137][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.720426][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.727654][ T5782] bridge_slave_0: entered allmulticast mode [ 77.734779][ T5782] bridge_slave_0: entered promiscuous mode [ 77.767597][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.774920][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.782433][ T5782] bridge_slave_1: entered allmulticast mode [ 77.789681][ T5782] bridge_slave_1: entered promiscuous mode [ 77.796270][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.803531][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.810923][ T5775] bridge_slave_0: entered allmulticast mode [ 77.817627][ T5775] bridge_slave_0: entered promiscuous mode [ 77.826683][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.834085][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.841740][ T5775] bridge_slave_1: entered allmulticast mode [ 77.848502][ T5775] bridge_slave_1: entered promiscuous mode [ 77.858336][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.899661][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.945502][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.969553][ T5778] team0: Port device team_slave_0 added [ 77.988532][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.009912][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.023362][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.034122][ T5778] team0: Port device team_slave_1 added [ 78.040981][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.048262][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.055992][ T5780] bridge_slave_0: entered allmulticast mode [ 78.062968][ T5780] bridge_slave_0: entered promiscuous mode [ 78.072294][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.079959][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.087244][ T5780] bridge_slave_1: entered allmulticast mode [ 78.095245][ T5780] bridge_slave_1: entered promiscuous mode [ 78.157768][ T5782] team0: Port device team_slave_0 added [ 78.175495][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.182667][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.211865][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.237508][ T5782] team0: Port device team_slave_1 added [ 78.246473][ T5775] team0: Port device team_slave_0 added [ 78.254301][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.261572][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.287814][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.301377][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.323627][ T5775] team0: Port device team_slave_1 added [ 78.358963][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.403594][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.411024][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.437274][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.450041][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.457004][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.490506][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.504971][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.512385][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.538599][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.587856][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.595609][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.622134][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.642926][ T5780] team0: Port device team_slave_0 added [ 78.652016][ T5780] team0: Port device team_slave_1 added [ 78.676376][ T5778] hsr_slave_0: entered promiscuous mode [ 78.682840][ T5778] hsr_slave_1: entered promiscuous mode [ 78.742066][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.749506][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.775537][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.823614][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.833229][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.859772][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.881182][ T5782] hsr_slave_0: entered promiscuous mode [ 78.887593][ T5782] hsr_slave_1: entered promiscuous mode [ 78.893951][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.901937][ T5782] Cannot create hsr debugfs directory [ 78.913663][ T5775] hsr_slave_0: entered promiscuous mode [ 78.923213][ T5775] hsr_slave_1: entered promiscuous mode [ 78.929549][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.937198][ T5775] Cannot create hsr debugfs directory [ 78.950500][ T5788] Bluetooth: hci1: command tx timeout [ 79.029034][ T5783] Bluetooth: hci3: command tx timeout [ 79.034866][ T5783] Bluetooth: hci0: command tx timeout [ 79.041341][ T5788] Bluetooth: hci2: command tx timeout [ 79.102399][ T5780] hsr_slave_0: entered promiscuous mode [ 79.108632][ T5780] hsr_slave_1: entered promiscuous mode [ 79.114985][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.123096][ T5780] Cannot create hsr debugfs directory [ 79.329348][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.352843][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.363404][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.392877][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.485416][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.498127][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.508588][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.520519][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.606056][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.622924][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.633696][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.646347][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.725905][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.760675][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.777046][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.786931][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.801949][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.842549][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.911863][ T2873] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.919459][ T2873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.936223][ T2873] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.943494][ T2873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.986985][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.057617][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.077649][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.108623][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.125546][ T2899] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.132795][ T2899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.149889][ T2873] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.157043][ T2873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.171132][ T2873] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.178452][ T2873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.196898][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.227095][ T2873] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.234264][ T2873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.286148][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.318761][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.325943][ T2894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.371051][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.378232][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.441700][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.452971][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.554843][ T5780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.570589][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.652445][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.762529][ T5778] veth0_vlan: entered promiscuous mode [ 80.817480][ T5778] veth1_vlan: entered promiscuous mode [ 80.888368][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.928604][ T5778] veth0_macvtap: entered promiscuous mode [ 80.953461][ T5778] veth1_macvtap: entered promiscuous mode [ 81.007573][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.030389][ T5783] Bluetooth: hci1: command tx timeout [ 81.035960][ T5775] veth0_vlan: entered promiscuous mode [ 81.062825][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.073784][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.083660][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.093191][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.102164][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.111692][ T5783] Bluetooth: hci0: command tx timeout [ 81.117451][ T5783] Bluetooth: hci2: command tx timeout [ 81.118899][ T5788] Bluetooth: hci3: command tx timeout [ 81.143351][ T5775] veth1_vlan: entered promiscuous mode [ 81.164686][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.226824][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.293419][ T5782] veth0_vlan: entered promiscuous mode [ 81.336322][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.351094][ T5782] veth1_vlan: entered promiscuous mode [ 81.367564][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.384395][ T5775] veth0_macvtap: entered promiscuous mode [ 81.404972][ T5775] veth1_macvtap: entered promiscuous mode [ 81.442669][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.447762][ T5780] veth0_vlan: entered promiscuous mode [ 81.456709][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.470972][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.482590][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.494126][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.508363][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.524600][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.535665][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.560498][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.569928][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.578649][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.587758][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.611389][ T5782] veth0_macvtap: entered promiscuous mode [ 81.626426][ T5780] veth1_vlan: entered promiscuous mode [ 81.644102][ T5782] veth1_macvtap: entered promiscuous mode [ 81.686739][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.700581][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.711870][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.723748][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.735922][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.762867][ T5838] syz.0.1[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.791998][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.811277][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.827795][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.845743][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.860232][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.900889][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.911154][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.925302][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.934813][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.947755][ T5780] veth0_macvtap: entered promiscuous mode [ 82.038058][ T5780] veth1_macvtap: entered promiscuous mode [ 82.059004][ T2873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.066882][ T2873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.110776][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.138763][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.148644][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.161097][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.171274][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.183054][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.195491][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.225364][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.238453][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.260972][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.281056][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.293492][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.317186][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.328044][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.338867][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.357490][ T5838] loop0: detected capacity change from 0 to 40427 [ 82.357615][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.396123][ T5838] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 82.406153][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.429908][ T5838] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 82.429918][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.438514][ T5838] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 82.466225][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.468957][ T5838] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 82.490053][ T5838] F2FS-fs (loop0): Image doesn't support compression [ 82.493228][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.512188][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.521385][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.532235][ T5838] F2FS-fs (loop0): invalid crc value [ 82.562850][ T5838] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.627094][ T2894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.665947][ T2894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.749735][ T5845] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 82.822340][ T5838] F2FS-fs (loop0): Start checkpoint disabled! [ 82.859452][ T5838] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 82.866875][ T5838] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 82.919956][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.933749][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.010545][ T5838] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x137a/0x4080 [ 83.109370][ T5788] Bluetooth: hci1: command tx timeout [ 83.165830][ T5838] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x137a/0x4080 [ 83.189534][ T51] Bluetooth: hci0: command tx timeout [ 83.191441][ T5783] Bluetooth: hci3: command tx timeout [ 83.195100][ T5788] Bluetooth: hci2: command tx timeout [ 83.205146][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.268114][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.488669][ T2960] kworker/u4:11: attempt to access beyond end of device [ 83.488669][ T2960] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 83.538186][ T2960] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 83.595668][ T2960] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 83.859606][ T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.896595][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.085760][ T8] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.128040][ T8] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.146940][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.163256][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.176026][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.213456][ T8] usb 2-1: config 0 descriptor?? [ 84.516214][ T5880] loop3: detected capacity change from 0 to 4096 [ 84.595499][ T5886] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.688244][ T8] mcp2221 0003:04D8:00DD.0001: unbalanced delimiter at end of report description [ 84.737204][ T8] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 84.759975][ T8] mcp2221: probe of 0003:04D8:00DD.0001 failed with error -22 [ 84.803191][ T5891] loop5: detected capacity change from 0 to 7 [ 84.815458][ T5891] Dev loop5: unable to read RDB block 7 [ 84.823396][ T5891] loop5: AHDI p1 p3 p4 [ 84.827665][ T5891] loop5: partition table partially beyond EOD, truncated [ 84.852814][ T5891] loop5: p1 size 100663296 extends beyond EOD, truncated [ 84.865118][ T5889] syz.3.16 (5889) used greatest stack depth: 20080 bytes left [ 84.886956][ T5891] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 84.916597][ T5894] loop0: detected capacity change from 0 to 512 [ 84.962724][ T5894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.966536][ T5892] Dev loop5: unable to read RDB block 7 [ 85.004160][ T5892] loop5: AHDI p1 p3 p4 [ 85.008404][ T5892] loop5: partition table partially beyond EOD, truncated [ 85.032584][ T5864] usb 2-1: USB disconnect, device number 2 [ 85.052379][ T5892] loop5: p1 size 100663296 extends beyond EOD, truncated [ 85.066616][ T5892] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 85.086194][ T5894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.100787][ T5894] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.189073][ T5788] Bluetooth: hci1: command tx timeout [ 85.268873][ T5788] Bluetooth: hci3: command tx timeout [ 85.269641][ T5783] Bluetooth: hci2: command tx timeout [ 85.274488][ T5788] Bluetooth: hci0: command tx timeout [ 85.403313][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 85.416194][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 85.709159][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.380164][ T5922] loop1: detected capacity change from 0 to 256 [ 86.395093][ T5922] ======================================================= [ 86.395093][ T5922] WARNING: The mand mount option has been deprecated and [ 86.395093][ T5922] and is ignored by this kernel. Remove the mand [ 86.395093][ T5922] option from the mount to silence this warning. [ 86.395093][ T5922] ======================================================= [ 86.707916][ T5925] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.31'. [ 87.601184][ T5945] loop3: detected capacity change from 0 to 4096 [ 87.641236][ T5945] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 87.796464][ T5945] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 87.842249][ T5945] ntfs3: loop3: Failed to load $Extend (-22). [ 87.858867][ T5945] ntfs3: loop3: Failed to initialize $Extend. [ 88.227111][ T5956] loop1: detected capacity change from 0 to 128 [ 88.304372][ T5956] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 88.373097][ T5956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.450388][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 88.512551][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.954923][ T5968] loop2: detected capacity change from 0 to 512 [ 88.985049][ T5968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.029142][ T5968] EXT4-fs: inline encryption not supported [ 89.064172][ T5968] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 89.158595][ T5968] EXT4-fs (loop2): 1 truncate cleaned up [ 89.180806][ T5968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.300006][ T5968] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 89.445820][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.678229][ T5981] mmap: syz.0.54 (5981) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.188968][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.371920][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.383524][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.395959][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.410689][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.421152][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.440211][ T23] usb 2-1: config 0 descriptor?? [ 90.884604][ T23] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 90.933448][ T23] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 90.997600][ T6009] netlink: 'syz.0.66': attribute type 7 has an invalid length. [ 91.047538][ T6009] netlink: 'syz.0.66': attribute type 7 has an invalid length. [ 91.057393][ T6009] Zero length message leads to an empty skb [ 91.235677][ T6016] loop0: detected capacity change from 0 to 128 [ 91.322977][ T6016] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 91.331965][ T6016] FAT-fs (loop0): Filesystem has been set read-only [ 91.339508][ T6016] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 92.038932][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.117126][ T6031] loop3: detected capacity change from 0 to 32768 [ 92.147531][ T6031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.75 (6031) [ 92.206890][ T6031] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.223838][ T6031] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 92.241323][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 92.257247][ T23] usb 1-1: string descriptor 0 read error: -22 [ 92.263916][ T6031] BTRFS info (device loop3): allowing degraded mounts [ 92.271377][ T23] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 92.281005][ T6031] BTRFS info (device loop3): turning on flush-on-commit [ 92.288089][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.297523][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 92.318057][ T6031] BTRFS info (device loop3): max_inline at 0 [ 92.334295][ T6031] BTRFS info (device loop3): setting nodatasum [ 92.344973][ T6031] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 92.377158][ T6031] BTRFS info (device loop3): force zstd compression, level 3 [ 92.400627][ T9] cfg80211: failed to load regulatory.db [ 92.406201][ T6031] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 92.423121][ T6031] BTRFS info (device loop3): trying to use backup root at mount time [ 92.431747][ T6031] BTRFS info (device loop3): turning on sync discard [ 92.451836][ T6031] BTRFS info (device loop3): using free space tree [ 92.549433][ T6031] BTRFS info (device loop3): enabling ssd optimizations [ 92.665094][ T6036] loop2: detected capacity change from 0 to 32768 [ 92.736681][ T6036] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 92.796429][ T23] hid (null): report_id 15267 is invalid [ 92.846974][ T6036] XFS (loop2): Ending clean mount [ 92.988367][ T23] topre 0003:0853:0148.0004: unknown main item tag 0x6 [ 93.024502][ T23] topre 0003:0853:0148.0004: unknown main item tag 0xe [ 93.057108][ T23] topre 0003:0853:0148.0004: unknown main item tag 0x7 [ 93.062242][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.067009][ T23] topre 0003:0853:0148.0004: unknown main item tag 0x5 [ 93.093296][ T23] topre 0003:0853:0148.0004: report_id 15267 is invalid [ 93.124416][ T23] topre 0003:0853:0148.0004: item 0 2 1 8 parsing failed [ 93.126485][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 93.148641][ T23] topre: probe of 0003:0853:0148.0004 failed with error -22 [ 93.158024][ T27] usb 2-1: USB disconnect, device number 3 [ 93.232953][ T23] usb 1-1: USB disconnect, device number 2 [ 93.758641][ T6070] loop1: detected capacity change from 0 to 1024 [ 93.899995][ T6070] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 93.962499][ T6075] loop3: detected capacity change from 0 to 32768 [ 94.035478][ T6075] JBD2: Ignoring recovery information on journal [ 94.088104][ T6070] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.82: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.117672][ T6075] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 94.141874][ T6070] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 94.198896][ T6070] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.82: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.274807][ T6070] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 94.296412][ T6075] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 94.319597][ T6075] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 94.329113][ T6070] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.82: Failed to acquire dquot type 0 [ 94.330010][ T6075] OCFS2: File system is now read-only. [ 94.345047][ T6087] lo speed is unknown, defaulting to 1000 [ 94.346141][ T6075] (syz.3.79,6075,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 94.361315][ T6075] (syz.3.79,6075,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 94.369060][ T6075] (syz.3.79,6075,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 94.369083][ T6087] lo speed is unknown, defaulting to 1000 [ 94.377307][ T6075] (syz.3.79,6075,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 94.377335][ T6075] (syz.3.79,6075,0):ocfs2_claim_metadata:2040 ERROR: status = -30 [ 94.377355][ T6075] (syz.3.79,6075,0):ocfs2_claim_metadata:2053 ERROR: status = -30 [ 94.402643][ T6070] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 94.407823][ T6075] (syz.3.79,6075,0):ocfs2_create_refcount_tree:595 ERROR: status = -30 [ 94.408066][ T6075] (syz.3.79,6075,0):ocfs2_reflink_remap_blocks:4658 ERROR: status = -30 [ 94.437116][ T6075] (syz.3.79,6075,0):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 94.487198][ T6084] loop0: detected capacity change from 0 to 8192 [ 94.498700][ T6070] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.82: mark_inode_dirty error [ 94.511438][ T6087] lo speed is unknown, defaulting to 1000 [ 94.543968][ T6087] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.552214][ T6070] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 94.578138][ T5766] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.592906][ T6087] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.596946][ T6070] EXT4-fs (loop1): 1 orphan inode deleted [ 94.650620][ T6070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.663500][ T2894] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.682875][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 94.712265][ T2894] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 94.757206][ T2894] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 94.784919][ T6087] lo speed is unknown, defaulting to 1000 [ 94.843429][ T6087] lo speed is unknown, defaulting to 1000 [ 94.884514][ T6087] lo speed is unknown, defaulting to 1000 [ 94.918266][ T6087] lo speed is unknown, defaulting to 1000 [ 94.943063][ T6087] lo speed is unknown, defaulting to 1000 [ 94.985471][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.015599][ T5782] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 95.020465][ T6091] loop0: detected capacity change from 0 to 128 [ 95.047348][ T5782] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 95.059576][ T6091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 95.074773][ T5782] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 95.106611][ T6091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.365567][ T6093] loop3: detected capacity change from 0 to 4096 [ 96.337504][ T6101] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.480482][ T6102] loop1: detected capacity change from 0 to 40427 [ 96.526435][ T6102] F2FS-fs (loop1): invalid crc value [ 96.549251][ T6102] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.646212][ T6102] F2FS-fs (loop1): Start checkpoint disabled! [ 96.687086][ T6102] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 96.879638][ T6102] syz.1.91: attempt to access beyond end of device [ 96.879638][ T6102] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.133034][ T2930] kworker/u4:10: attempt to access beyond end of device [ 97.133034][ T2930] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 97.164742][ T2930] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 97.176984][ T2930] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 97.391112][ T28] audit: type=1326 audit(1786052749.644:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3b9e0d9 code=0x7ffc0000 [ 97.418882][ T6133] capability: warning: `syz.3.102' uses deprecated v2 capabilities in a way that may be insecure [ 97.430761][ T28] audit: type=1326 audit(1786052749.694:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3b9e0d9 code=0x7ffc0000 [ 97.460252][ T6133] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 97.523654][ T28] audit: type=1326 audit(1786052749.704:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb4e3b9e0d9 code=0x7ffc0000 [ 97.570935][ T28] audit: type=1326 audit(1786052749.704:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3b9e0d9 code=0x7ffc0000 [ 97.639949][ T28] audit: type=1326 audit(1786052749.704:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3b9e0d9 code=0x7ffc0000 [ 97.700653][ T28] audit: type=1326 audit(1786052749.704:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4e3b9e0d9 code=0x7ffc0000 [ 97.758883][ T28] audit: type=1326 audit(1786052749.704:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e3b9e0d9 code=0x7ffc0000 [ 98.111515][ T6135] loop0: detected capacity change from 0 to 32768 [ 98.136710][ T6135] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.103 (6135) [ 98.174552][ T6135] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 98.211107][ T6135] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 98.251919][ T6135] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.292334][ T6135] BTRFS info (device loop0): use zstd compression, level 3 [ 98.318618][ T6135] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 98.334566][ T6135] BTRFS info (device loop0): use lzo compression, level 0 [ 98.348420][ T6135] BTRFS info (device loop0): using free space tree [ 98.474584][ T6135] BTRFS info (device loop0): enabling ssd optimizations [ 98.509596][ T6135] BTRFS info (device loop0): auto enabling async discard [ 99.091483][ T6190] loop3: detected capacity change from 0 to 128 [ 99.142454][ T6190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 99.147450][ T5778] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 99.156249][ T6190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.229163][ T6188] loop1: detected capacity change from 0 to 32768 [ 100.276047][ T6188] Mount JFS Failure: -5 [ 100.288956][ T6188] jfs_mount failed w/return code = -5 [ 100.330971][ T6188] 9pnet_virtio: no channels available for device syz [ 100.875077][ T6206] loop2: detected capacity change from 0 to 32768 [ 100.957657][ T6206] [ 100.957657][ T6206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.957657][ T6206] [ 101.044196][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 101.044218][ T28] audit: type=1800 audit(1786052753.294:12): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.126" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 101.072388][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.239223][ T6206] ERROR: (device loop2): xtSearch: stack overrun! [ 101.239223][ T6206] [ 101.345503][ T6206] ERROR: (device loop2): xtSearch: stack overrun! [ 101.345503][ T6206] [ 101.366124][ T6212] loop1: detected capacity change from 0 to 32768 [ 101.419794][ T6206] xtLookup: xtSearch returned -5 [ 101.424922][ T6206] ERROR: (device loop2): xtTruncate: stack overrun! [ 101.424922][ T6206] [ 101.444929][ T6212] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.503511][ T2894] [ 101.503511][ T2894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.503511][ T2894] [ 101.531776][ T2894] [ 101.531776][ T2894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.531776][ T2894] [ 101.571056][ T2894] [ 101.571056][ T2894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.571056][ T2894] [ 101.581984][ T2894] [ 101.581984][ T2894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.581984][ T2894] [ 101.607136][ T2894] JFS: metapage_get_blocks failed [ 101.612841][ T6212] XFS (loop1): Ending clean mount [ 101.617774][ T6230] capability: warning: `syz.3.130' uses 32-bit capabilities (legacy support in use) [ 101.628654][ T2894] [ 101.628654][ T2894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.628654][ T2894] [ 101.644460][ T5780] [ 101.644460][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.644460][ T5780] [ 101.708514][ T5780] [ 101.708514][ T5780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.708514][ T5780] [ 101.861407][ T6233] loop0: detected capacity change from 0 to 8 [ 102.153623][ T6235] loop3: detected capacity change from 0 to 1024 [ 102.190051][ T6235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.258030][ T6235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.325989][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.345148][ T6235] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.503098][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.249198][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.448076][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.467000][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.478921][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.479391][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.514937][ T23] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 103.526591][ T23] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 103.544422][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 103.557298][ T23] usb 3-1: config 1 interface 1 has no altsetting 0 [ 103.572413][ T23] usb 3-1: string descriptor 0 read error: -22 [ 103.583230][ T23] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 103.594302][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.687022][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.706834][ T5920] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 103.733227][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.786213][ T5920] as10x_usb: device has been detected [ 103.799837][ T5920] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 103.879001][ T5920] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 103.972901][ T5920] as10x_usb: error during firmware upload part1 [ 104.000090][ T5920] Registered device Abilis Systems DVB-Titan [ 104.639015][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.694769][ T23] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 104.711637][ T23] usb 3-1: Warning! Unlikely big volume range (=11051), cval->res is probably wrong. [ 104.731508][ T23] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/11051/1 [ 104.819219][ T23] usb 3-1: USB disconnect, device number 2 [ 104.840491][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.858975][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.881984][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.889048][ T173] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.917493][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.936647][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.960424][ T27] usb 2-1: Product: syz [ 104.964666][ T27] usb 2-1: Manufacturer: syz [ 104.979035][ T27] usb 2-1: SerialNumber: syz [ 104.987244][ T27] usb 2-1: config 0 descriptor?? [ 105.121788][ T173] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 105.131185][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.140252][ T173] usb 4-1: Product: syz [ 105.145017][ T173] usb 4-1: Manufacturer: syz [ 105.150714][ T173] usb 4-1: SerialNumber: syz [ 105.380892][ T173] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 105.429697][ T173] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 105.690799][ T6285] loop2: detected capacity change from 0 to 512 [ 105.755913][ T6285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.861000][ T9] usb 2-1: USB disconnect, device number 4 [ 105.913699][ T6285] EXT4-fs (loop2): shut down requested (1) [ 105.947332][ T5920] usb 1-1: USB disconnect, device number 3 [ 106.056466][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.056993][ T173] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 106.078438][ T5920] Unregistered device Abilis Systems DVB-Titan [ 106.095268][ T5920] as10x_usb: device has been disconnected [ 106.159005][ T173] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 106.193876][ T173] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 106.251691][ T173] lan78xx: probe of 4-1:1.0 failed with error -71 [ 106.309037][ T173] usb 4-1: USB disconnect, device number 2 [ 107.314325][ T6325] input: syz0 as /devices/virtual/input/input5 [ 107.425290][ T6321] loop3: detected capacity change from 0 to 40427 [ 107.454339][ T6321] F2FS-fs (loop3): invalid crc value [ 107.462405][ T6321] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.547185][ T6321] F2FS-fs (loop3): Start checkpoint disabled! [ 107.548460][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 107.576911][ T6331] netlink: 'syz.0.169': attribute type 9 has an invalid length. [ 107.586257][ T6321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 107.631148][ T6331] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.640930][ T6331] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.649820][ T6331] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.658556][ T6331] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.828313][ T2930] kworker/u4:10: attempt to access beyond end of device [ 107.828313][ T2930] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 107.858296][ T2930] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 107.881666][ T2930] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 108.339522][ T5814] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.529179][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 108.538952][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.547560][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.575176][ T5814] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 108.586285][ T5814] usb 1-1: can't read configurations, error -71 [ 108.657757][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 108.750975][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 108.771088][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 108.782810][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 108.808804][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.842098][ T23] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 108.857346][ T23] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 108.894412][ T6364] Bluetooth: MGMT ver 1.22 [ 108.914064][ T6363] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 109.167266][ T6375] fuse: Bad value for 'fd' [ 109.229441][ T6344] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 109.239918][ T6344] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 109.258405][ T6344] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 109.332902][ T6344] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 109.341098][ T6344] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32) [ 109.529550][ T6377] loop1: detected capacity change from 0 to 32768 [ 109.562114][ T6377] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.627651][ T6363] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.661664][ T6363] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.702614][ T6377] XFS (loop1): Ending clean mount [ 109.711299][ T6363] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.725894][ T6363] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.734347][ T6363] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.752615][ T6377] XFS (loop1): Quotacheck needed: Please wait. [ 109.761313][ T6363] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.784401][ T6363] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.802090][ T6363] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.840985][ T6363] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.847653][ T6363] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.876577][ T6363] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.896402][ T6377] XFS (loop1): Quotacheck: Done. [ 110.061685][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.396929][ T6393] loop1: detected capacity change from 0 to 2048 [ 110.452864][ T6393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.621341][ T6397] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 110.679051][ T6397] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1218 with error 28 [ 110.707048][ T6397] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.707048][ T6397] [ 110.735310][ T6397] EXT4-fs (loop1): Total free blocks count 0 [ 110.753300][ T6397] EXT4-fs (loop1): Free/Dirty block details [ 110.773715][ T6397] EXT4-fs (loop1): free_blocks=2415919504 [ 110.794081][ T6397] EXT4-fs (loop1): dirty_blocks=2944 [ 110.810721][ T6397] EXT4-fs (loop1): Block reservation details [ 110.825062][ T6397] EXT4-fs (loop1): i_reserved_data_blocks=209 [ 110.958827][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.988859][ T5783] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 111.007194][ T6391] loop0: detected capacity change from 0 to 40427 [ 111.079013][ T6391] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 111.151891][ T6391] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 111.197446][ T6391] F2FS-fs (loop0): invalid crc value [ 111.243048][ T6399] loop2: detected capacity change from 0 to 128 [ 111.248979][ T6391] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.294941][ T5814] usb 4-1: USB disconnect, device number 3 [ 111.317741][ T5814] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 111.353738][ T5814] spcp8x5 4-1:1.0: device disconnected [ 111.359604][ T6399] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 111.403072][ T6399] hpfs: filesystem error: improperly stopped [ 111.430746][ T6399] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 111.438553][ T6399] hpfs: You really don't want any checks? You are crazy... [ 111.479830][ T6399] hpfs: hpfs_map_sector(): read error [ 111.498821][ T6399] hpfs: code page support is disabled [ 111.505805][ T6391] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.521840][ T6399] hpfs: hpfs_map_4sectors(): unaligned read [ 111.528137][ T6399] hpfs: hpfs_map_4sectors(): unaligned read [ 111.540404][ T6391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.545345][ T6399] hpfs: filesystem error: unable to find root dir [ 111.551564][ T2930] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1218 with max blocks 2048 with error 28 [ 111.645727][ T6399] hpfs: hpfs_map_4sectors(): unaligned read [ 111.757334][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.830151][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.908961][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.918896][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.078826][ T789] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.121674][ T5814] usb 4-1: Using ep0 maxpacket: 32 [ 112.149786][ T5814] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.158293][ T5814] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.206440][ T5814] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.215784][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.226520][ T5814] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.266362][ T6414] loop1: detected capacity change from 0 to 512 [ 112.272948][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.302743][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.319782][ T5814] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.329089][ T789] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.350892][ T6414] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 112.362219][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.366832][ T6414] EXT4-fs (loop1): 1 truncate cleaned up [ 112.384096][ T6414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.400662][ T789] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.436498][ T5814] usb 4-1: config 0 descriptor?? [ 112.448569][ T789] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.511376][ T789] usb 3-1: config 1 interface 0 has no altsetting 0 [ 112.528520][ T789] usb 3-1: string descriptor 0 read error: -22 [ 112.535094][ T789] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.544737][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.710960][ T5814] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.715168][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.976000][ C0] usblp0: nonzero read bulk status received: -71 [ 112.988857][ T5920] usb 4-1: USB disconnect, device number 4 [ 113.008498][ T789] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 113.028968][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.038607][ T789] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0005/input/input6 [ 113.159193][ T5864] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.201281][ T789] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 113.219248][ T6405] usblp0: removed [ 113.258363][ T789] usb 3-1: USB disconnect, device number 3 [ 113.325879][ T6429] fido_id[6429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 113.380557][ T5864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.399401][ T5864] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.418833][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.444745][ T5864] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 113.476529][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 113.486846][ T5864] usb 2-1: Product: syz [ 113.502185][ T5864] usb 2-1: Manufacturer: syz [ 113.506833][ T5864] usb 2-1: SerialNumber: syz [ 113.735952][ T5864] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.835717][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.883024][ T6443] loop0: detected capacity change from 0 to 512 [ 113.909116][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.920564][ T6443] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 113.927984][ T6443] UDF-fs: Scanning with blocksize 512 failed [ 113.950355][ T6443] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 113.968068][ T6443] UDF-fs: Scanning with blocksize 1024 failed [ 113.988601][ T6443] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 113.996226][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.025602][ T6443] UDF-fs: Scanning with blocksize 2048 failed [ 114.037314][ T6443] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 114.067522][ T6443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.068434][ T789] usb 2-1: USB disconnect, device number 5 [ 114.119506][ T6422] usblp0: removed [ 114.582338][ T2894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.594092][ T2894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.723984][ T2894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.742040][ T2894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.877437][ T2894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.887918][ T6459] xt_hashlimit: size too large, truncated to 1048576 [ 114.920232][ T2894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.108929][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.120682][ T2894] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.172166][ T2894] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.602639][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.625017][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.637294][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.646799][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.655857][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.664691][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.988301][ T6473] lo speed is unknown, defaulting to 1000 [ 115.998966][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.069653][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.138453][ T6477] lo speed is unknown, defaulting to 1000 [ 117.094567][ T6501] loop1: detected capacity change from 0 to 256 [ 117.180357][ T6501] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 117.189158][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.233200][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 117.644196][ T2894] hsr_slave_0: left promiscuous mode [ 117.685096][ T2894] hsr_slave_1: left promiscuous mode [ 117.719985][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.747631][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.749027][ T51] Bluetooth: hci1: command tx timeout [ 117.780739][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.819070][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.834696][ T2894] bridge_slave_1: left allmulticast mode [ 117.859004][ T2894] bridge_slave_1: left promiscuous mode [ 117.867462][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.916961][ T2894] bridge_slave_0: left allmulticast mode [ 117.933067][ T2894] bridge_slave_0: left promiscuous mode [ 117.945652][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.086163][ T2894] veth1_macvtap: left promiscuous mode [ 118.093068][ T2894] veth0_macvtap: left promiscuous mode [ 118.110008][ T2894] veth1_vlan: left promiscuous mode [ 118.119623][ T2894] veth0_vlan: left promiscuous mode [ 118.476276][ T6525] loop2: detected capacity change from 0 to 512 [ 118.619086][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.699232][ T6525] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.026782][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.408744][ C1] sched: RT throttling activated [ 119.475433][ T6523] loop1: detected capacity change from 0 to 131072 [ 119.485436][ T6523] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 119.495014][ T6523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.511836][ T6523] F2FS-fs (loop1): invalid crc value [ 119.529548][ T6523] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.593209][ T6523] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.600598][ T6523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 119.689411][ T6523] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 119.712702][ T6523] F2FS-fs (loop1): checksum invalid, nid = 8, ino_of_node = 8, 2596626b vs. 43efc4 [ 119.831277][ T51] Bluetooth: hci1: command tx timeout [ 120.613477][ T2894] team0 (unregistering): Port device team_slave_1 removed [ 120.773782][ T2894] team0 (unregistering): Port device team_slave_0 removed [ 120.918358][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.059990][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.862735][ T2894] bond0 (unregistering): Released all slaves [ 121.908862][ T51] Bluetooth: hci1: command tx timeout [ 122.177180][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 122.288984][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.296196][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.328408][ T6473] bridge_slave_0: entered allmulticast mode [ 122.346050][ T6473] bridge_slave_0: entered promiscuous mode [ 122.368093][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.382383][ T6571] loop3: detected capacity change from 0 to 32768 [ 122.397316][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.411666][ T6571] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.241 (6571) [ 122.424033][ T6473] bridge_slave_1: entered allmulticast mode [ 122.425429][ T6473] bridge_slave_1: entered promiscuous mode [ 122.500202][ T6571] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 122.515288][ T6577] vfio-pci: probe of 0000:00:00.0 failed with error -22 [ 122.523797][ T6571] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.543023][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.552241][ T6571] BTRFS info (device loop3): using free space tree [ 122.599767][ T5814] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.608282][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.741381][ T6571] BTRFS info (device loop3): enabling ssd optimizations [ 122.749608][ T6571] BTRFS info (device loop3): auto enabling async discard [ 122.764054][ T6473] team0: Port device team_slave_0 added [ 122.798896][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 122.820244][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.842674][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.850898][ T6473] team0: Port device team_slave_1 added [ 122.877491][ T5814] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.897276][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.917561][ T5814] usb 3-1: Product: syz [ 122.927529][ T5814] usb 3-1: Manufacturer: syz [ 122.942745][ T5814] usb 3-1: SerialNumber: syz [ 123.034118][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.051413][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.115926][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.157348][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.179040][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.215525][ T5814] usb 3-1: 0:2 : does not exist [ 123.253433][ T5814] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 123.254586][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.350055][ T5814] usb 3-1: USB disconnect, device number 4 [ 123.498430][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.537492][ T5775] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 123.627232][ T6473] hsr_slave_0: entered promiscuous mode [ 123.653147][ T6473] hsr_slave_1: entered promiscuous mode [ 123.988842][ T51] Bluetooth: hci1: command tx timeout [ 124.564641][ T6627] loop3: detected capacity change from 0 to 2048 [ 124.596059][ T6473] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.616176][ T6473] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.637954][ T6627] loop3: p2 p3 < > p4 < p5 > [ 124.648289][ T6627] loop3: partition table partially beyond EOD, truncated [ 124.657531][ T6473] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.673834][ T6627] loop3: p2 start 53543428 is beyond EOD, truncated [ 124.694545][ T6473] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.710235][ T6627] loop3: p3 start 4284289 is beyond EOD, truncated [ 124.735253][ T6627] loop3: p5 start 53543428 is beyond EOD, truncated [ 125.177962][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.252093][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.290366][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.298594][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.333488][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.340758][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.443426][ T6639] loop3: detected capacity change from 0 to 4096 [ 125.539240][ T6639] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 125.593528][ T6639] ntfs3: loop3: Failed to load $Extend (-22). [ 125.620127][ T6639] ntfs3: loop3: Failed to initialize $Extend. [ 126.181199][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.951184][ T6473] veth0_vlan: entered promiscuous mode [ 127.022600][ T6473] veth1_vlan: entered promiscuous mode [ 127.136158][ T6473] veth0_macvtap: entered promiscuous mode [ 127.157271][ T28] audit: type=1800 audit(1786052779.414:13): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.267" name="enable" dev="configfs" ino=10545 res=0 errno=0 [ 127.183971][ T6473] veth1_macvtap: entered promiscuous mode [ 127.283088][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.304428][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.318285][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.329196][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.344681][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.359591][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.374711][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.412874][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 127.563143][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.589245][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.614298][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.638787][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.648674][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.688836][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.710535][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.745522][ T6473] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.770079][ T6473] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.783513][ T6473] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.792999][ T6473] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.052339][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.084642][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.184142][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.214623][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.883728][ T6715] loop2: detected capacity change from 0 to 32768 [ 128.900359][ T6715] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.273 (6715) [ 128.923968][ T6715] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.938190][ T6715] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 128.963989][ T6715] BTRFS info (device loop2): setting nodatasum [ 128.980276][ T6715] BTRFS info (device loop2): force zlib compression, level 3 [ 128.999874][ T6715] BTRFS info (device loop2): turning on flush-on-commit [ 129.018345][ T6715] BTRFS info (device loop2): max_inline at 4096 [ 129.049595][ T6715] BTRFS info (device loop2): using free space tree [ 129.089172][ T173] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.198044][ T6715] BTRFS info (device loop2): enabling ssd optimizations [ 129.328883][ T173] usb 2-1: Using ep0 maxpacket: 16 [ 129.346398][ T173] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.388819][ T173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.395550][ T173] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 129.406227][ T5920] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.440362][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.451737][ T173] usb 2-1: config 0 descriptor?? [ 129.604635][ T6764] loop4: detected capacity change from 0 to 256 [ 129.629058][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.654351][ T5920] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.691985][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.717541][ T5780] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.741857][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.758861][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.786132][ T5920] usb 4-1: Product: syz [ 129.791450][ T5920] usb 4-1: Manufacturer: syz [ 129.800908][ T5920] usb 4-1: SerialNumber: syz [ 129.882511][ T5920] hub 4-1:1.0: bad descriptor, ignoring hub [ 129.888556][ T5920] hub: probe of 4-1:1.0 failed with error -5 [ 129.947540][ T173] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 130.075930][ T5920] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.421440][ T6776] loop4: detected capacity change from 0 to 2048 [ 130.573075][ T6776] Alternate GPT is invalid, using primary GPT. [ 130.591314][ T6776] loop4: p1 p2 p3 [ 130.592328][ T6784] device-mapper: ioctl: device name cannot contain '/' [ 130.600737][ T6776] loop4: partition table partially beyond EOD, truncated [ 130.661974][ T6751] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 130.692554][ T6751] usb 4-1: device reset changed ep0 maxpacket size! [ 130.712518][ T5814] usb 4-1: USB disconnect, device number 5 [ 130.738022][ T5814] usblp0: removed [ 130.960449][ T5814] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.159598][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 131.177931][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.211375][ T5814] usb 4-1: config 0 has no interfaces? [ 131.231094][ T5814] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 131.254169][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.272245][ T5814] usb 4-1: Product: syz [ 131.279978][ T5814] usb 4-1: Manufacturer: syz [ 131.294287][ T5814] usb 4-1: SerialNumber: syz [ 131.315755][ T5814] usb 4-1: config 0 descriptor?? [ 131.597260][ T5814] usb 4-1: USB disconnect, device number 6 [ 131.874769][ T173] usb 2-1: USB disconnect, device number 6 [ 132.344874][ T6824] netlink: 48 bytes leftover after parsing attributes in process `syz.3.292'. [ 132.405771][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 132.536791][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 132.592546][ T6833] netlink: 144 bytes leftover after parsing attributes in process `syz.1.295'. [ 132.602817][ T6830] loop4: detected capacity change from 0 to 2048 [ 132.652345][ T6830] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 132.665864][ T6830] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 132.676620][ T6830] UDF-fs: Scanning with blocksize 512 failed [ 132.712641][ T6830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.849054][ T28] audit: type=1800 audit(1786052785.104:14): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name="file2" dev="loop4" ino=839 res=0 errno=0 [ 132.923580][ T6840] loop3: detected capacity change from 0 to 2048 [ 133.012620][ T6840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.215320][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.276004][ T2899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.356689][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.364275][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.471727][ T2899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.628339][ T2899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.769048][ T6862] loop3: detected capacity change from 0 to 2048 [ 133.779832][ T2899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.803115][ T6862] EXT4-fs: quotafile must be on filesystem root [ 134.298815][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.330822][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.341306][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.374403][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.401683][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 134.409444][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.638383][ T6858] loop1: detected capacity change from 0 to 40427 [ 134.653441][ T6869] lo speed is unknown, defaulting to 1000 [ 134.718858][ T6858] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 134.727439][ T6858] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 134.768230][ T6858] F2FS-fs (loop1): invalid crc value [ 134.833140][ T6858] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.035368][ T6858] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 135.053847][ T6858] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.070869][ T6870] loop3: detected capacity change from 0 to 32768 [ 135.141621][ T6870] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 135.184204][ T6870] XFS (loop3): Ending clean mount [ 135.640041][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.343733][ T6869] chnl_net:caif_netlink_parms(): no params data found [ 136.470368][ T51] Bluetooth: hci2: command tx timeout [ 136.929100][ T28] audit: type=1326 audit(1786052789.184:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 136.959767][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.966982][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.020170][ T6869] bridge_slave_0: entered allmulticast mode [ 137.027645][ T6869] bridge_slave_0: entered promiscuous mode [ 137.027683][ T28] audit: type=1326 audit(1786052789.184:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 137.084348][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.115348][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.139015][ T6869] bridge_slave_1: entered allmulticast mode [ 137.146416][ T6869] bridge_slave_1: entered promiscuous mode [ 137.164783][ T28] audit: type=1326 audit(1786052789.194:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 137.284186][ T28] audit: type=1326 audit(1786052789.194:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 137.329390][ T28] audit: type=1326 audit(1786052789.194:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 137.377418][ T28] audit: type=1326 audit(1786052789.194:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 137.460896][ T28] audit: type=1326 audit(1786052789.194:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 137.519703][ T2899] hsr_slave_0: left promiscuous mode [ 137.524307][ T28] audit: type=1326 audit(1786052789.194:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 137.559104][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.577145][ T28] audit: type=1326 audit(1786052789.194:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.317" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 137.577166][ T2899] hsr_slave_1: left promiscuous mode [ 137.617757][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.625579][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.653972][ T2899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.665310][ T2899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.683093][ T2899] bridge_slave_1: left allmulticast mode [ 137.693056][ T2899] bridge_slave_1: left promiscuous mode [ 137.703148][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.716806][ T2899] bridge_slave_0: left allmulticast mode [ 137.746432][ T2899] bridge_slave_0: left promiscuous mode [ 137.759118][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.815437][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 137.838439][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.866979][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.879820][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.896276][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.920551][ T9] usb 4-1: config 0 descriptor?? [ 137.928488][ T9] hub 4-1:0.0: USB hub found [ 137.950604][ T2899] veth1_macvtap: left promiscuous mode [ 137.956234][ T2899] veth0_macvtap: left promiscuous mode [ 137.964527][ T2899] veth1_vlan: left promiscuous mode [ 137.971730][ T2899] veth0_vlan: left promiscuous mode [ 138.138639][ T9] hub 4-1:0.0: 1 port detected [ 138.508269][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 138.524507][ T6964] netlink: 160 bytes leftover after parsing attributes in process `syz.1.323'. [ 138.549097][ T51] Bluetooth: hci2: command tx timeout [ 138.826017][ T8] hub 4-1:0.0: activate --> -90 [ 139.236053][ T9] usb 4-1: USB disconnect, device number 7 [ 139.330355][ T2899] team0 (unregistering): Port device team_slave_1 removed [ 139.426771][ T2899] team0 (unregistering): Port device team_slave_0 removed [ 139.486276][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 139.486294][ T28] audit: type=1800 audit(1786052791.744:28): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.329" name="is_nonrot" dev="configfs" ino=10994 res=0 errno=0 [ 139.580088][ T2899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.676275][ T2899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.318078][ T2899] bond0 (unregistering): Released all slaves [ 140.444397][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.492760][ T6956] warning: `syz.4.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.617713][ T5920] lo speed is unknown, defaulting to 1000 [ 140.638109][ T51] Bluetooth: hci2: command tx timeout [ 140.657618][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.848378][ T6869] team0: Port device team_slave_0 added [ 140.919391][ T6869] team0: Port device team_slave_1 added [ 140.967274][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.981943][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.048819][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.088515][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.103486][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.173241][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.430219][ T6869] hsr_slave_0: entered promiscuous mode [ 141.473098][ T6869] hsr_slave_1: entered promiscuous mode [ 141.489845][ T6869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.497475][ T6869] Cannot create hsr debugfs directory [ 141.800950][ T7035] loop1: detected capacity change from 0 to 4096 [ 141.876553][ T7041] ipip0: entered promiscuous mode [ 141.882512][ T7041] ipip0: entered allmulticast mode [ 142.227804][ T7050] syz.3.347 uses obsolete (PF_INET,SOCK_PACKET) [ 142.538167][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 142.708955][ T51] Bluetooth: hci2: command tx timeout [ 142.761832][ T173] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 142.785411][ T173] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.039998][ T7070] loop5: detected capacity change from 0 to 7 [ 143.077764][ T7070] Dev loop5: unable to read RDB block 7 [ 143.098203][ T7070] loop5: unable to read partition table [ 143.116304][ T7070] loop5: partition table beyond EOD, truncated [ 143.147857][ T7070] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 143.233229][ T6869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.259064][ T7072] loop5: detected capacity change from 7 to 0 [ 143.268446][ T6869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.353162][ T6869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.393880][ T6869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.665762][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.712744][ T6869] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.770645][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.777892][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.834670][ T2899] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.841899][ T2899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.446734][ T7079] loop3: detected capacity change from 0 to 40427 [ 144.489178][ T7079] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 144.496975][ T7079] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.535527][ T7081] loop4: detected capacity change from 0 to 32768 [ 144.563267][ T7079] F2FS-fs (loop3): invalid crc value [ 144.594927][ T7079] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.597020][ T6869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.699018][ T7081] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 144.764349][ T6869] veth0_vlan: entered promiscuous mode [ 144.778681][ T6869] veth1_vlan: entered promiscuous mode [ 144.812466][ T6869] veth0_macvtap: entered promiscuous mode [ 144.880218][ T6869] veth1_macvtap: entered promiscuous mode [ 144.886135][ T7081] XFS (loop4): Ending clean mount [ 144.928026][ T7079] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.959933][ T7079] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.015590][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.056851][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.088772][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.117862][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.148603][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.197194][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.233970][ T6473] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 145.259510][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.276777][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.298421][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.317139][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.383524][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.418836][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.458871][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.490517][ T6869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.590763][ T6869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.636607][ T6869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.662108][ T6869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.690560][ T6869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.735257][ T7101] loop1: detected capacity change from 0 to 32768 [ 145.854258][ T7101] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.007599][ T7101] XFS (loop1): Ending clean mount [ 146.073057][ T2884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.113918][ T2884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.201293][ T5814] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.246711][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.274052][ T28] audit: type=1800 audit(1786052798.524:29): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.357" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=6156 res=0 errno=0 [ 146.318612][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.432090][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.459521][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 146.466895][ T5814] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 146.489316][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.529235][ T5814] usb 5-1: config 0 descriptor?? [ 146.566994][ T5814] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 146.671790][ T7151] binder: 7148:7151 ioctl c0306201 200000000480 returned -14 [ 147.067987][ T7160] loop3: detected capacity change from 0 to 16 [ 147.068214][ T7158] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.097640][ T7160] erofs: (device loop3): mounted with root inode @ nid 36. [ 147.782822][ T5814] gspca_nw80x: reg_w err -71 [ 147.787591][ T5814] nw80x: probe of 5-1:0.0 failed with error -71 [ 147.809464][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 147.818300][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 147.830177][ T5814] usb 5-1: USB disconnect, device number 2 [ 147.888687][ T7187] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.898320][ T7187] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.907618][ T7187] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.916902][ T7187] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.412284][ T7209] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 148.539065][ T7214] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 149.685748][ T7251] loop4: detected capacity change from 0 to 4096 [ 149.745183][ T7251] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 149.878873][ T7251] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 149.939814][ T7251] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 150.335928][ T6473] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 150.546729][ T7285] loop4: detected capacity change from 0 to 1024 [ 150.623041][ T7285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.651775][ T7285] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.824061][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.876490][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.898289][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.933510][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.967892][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.998228][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 151.026158][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 151.046520][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 151.076927][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 151.107325][ T7284] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.390: lblock 0 mapped to illegal pblock 0 (length 1) [ 151.260195][ T6473] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.973834][ T7336] loop4: detected capacity change from 0 to 8 [ 152.076723][ T7336] SQUASHFS error: zlib decompression failed, data probably corrupt [ 152.112888][ T7336] SQUASHFS error: Failed to read block 0x13e: -5 [ 152.151063][ T7336] SQUASHFS error: Unable to read metadata cache entry [13c] [ 152.158420][ T7336] SQUASHFS error: Unable to read directory block [13c:26] [ 152.206841][ T7342] SQUASHFS error: Unable to read metadata cache entry [13c] [ 152.243766][ T7342] SQUASHFS error: Unable to read directory block [13c:26] [ 152.323099][ T7348] loop3: detected capacity change from 0 to 1024 [ 152.372728][ T7348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.459048][ T7348] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.627898][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 152.691290][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 152.750926][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 152.818972][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 152.882697][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 152.926171][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 152.967956][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.006290][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.052065][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.102845][ T7345] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.403: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.250356][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.294248][ T7381] loop5: detected capacity change from 0 to 7 [ 153.321365][ T7381] Dev loop5: unable to read RDB block 7 [ 153.333335][ T7381] loop5: AHDI p1 p3 p4 [ 153.339360][ T7381] loop5: partition table partially beyond EOD, truncated [ 153.353675][ T7381] loop5: p1 size 100663296 extends beyond EOD, truncated [ 153.366115][ T7381] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 153.433693][ T7384] Dev loop5: unable to read RDB block 7 [ 153.449359][ T7384] loop5: AHDI p1 p3 p4 [ 153.453592][ T7384] loop5: partition table partially beyond EOD, truncated [ 153.477304][ T7384] loop5: p1 size 100663296 extends beyond EOD, truncated [ 153.501356][ T7384] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 153.509316][ T789] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.667281][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 153.686346][ T6278] udevd[6278]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 153.697039][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 153.721292][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.775010][ T789] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 153.793089][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.867899][ T789] usb 2-1: config 0 descriptor?? [ 154.123325][ T789] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 154.216103][ T7410] overlayfs: upper fs does not support file handles, falling back to index=off. [ 154.465433][ T7419] loop2: detected capacity change from 0 to 4096 [ 154.548537][ T7422] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.671798][ T5814] usb 2-1: USB disconnect, device number 7 [ 154.966701][ T7434] loop5: detected capacity change from 0 to 7 [ 154.992359][ T7434] Dev loop5: unable to read RDB block 7 [ 155.001631][ T7434] loop5: AHDI p1 p3 p4 [ 155.005889][ T7434] loop5: partition table partially beyond EOD, truncated [ 155.014197][ T7434] loop5: p1 size 100663296 extends beyond EOD, truncated [ 155.041939][ T7434] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 155.148533][ T7441] Dev loop5: unable to read RDB block 7 [ 155.163697][ T7441] loop5: AHDI p1 p3 p4 [ 155.180518][ T7441] loop5: partition table partially beyond EOD, truncated [ 155.196888][ T7441] loop5: p1 size 100663296 extends beyond EOD, truncated [ 155.213694][ T7441] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 155.222670][ T7445] loop2: detected capacity change from 0 to 8 [ 155.311023][ T7445] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.347307][ T7445] SQUASHFS error: Failed to read block 0x13e: -5 [ 155.373702][ T7445] SQUASHFS error: Unable to read metadata cache entry [13c] [ 155.391949][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 155.407131][ T7445] SQUASHFS error: Unable to read directory block [13c:26] [ 155.419388][ T6278] udevd[6278]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 155.469250][ T7450] SQUASHFS error: Unable to read metadata cache entry [13c] [ 155.497499][ T7450] SQUASHFS error: Unable to read directory block [13c:26] [ 156.052642][ T7476] loop2: detected capacity change from 0 to 128 [ 156.079107][ T7476] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 156.122749][ T7476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.758941][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.960560][ T7483] loop1: detected capacity change from 0 to 32768 [ 156.973962][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 156.977482][ T7483] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.439 (7483) [ 156.985824][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.026360][ T23] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.040290][ T7483] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 157.052430][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.069899][ T7483] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 157.082667][ T23] usb 5-1: config 0 descriptor?? [ 157.100014][ T7483] BTRFS info (device loop1): using free space tree [ 157.220491][ T7483] BTRFS info (device loop1): enabling ssd optimizations [ 157.227573][ T7483] BTRFS info (device loop1): auto enabling async discard [ 157.321527][ T23] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 157.454895][ T5782] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 157.864000][ T23] usb 5-1: USB disconnect, device number 3 [ 158.586222][ T7537] loop3: detected capacity change from 0 to 128 [ 158.631212][ T7537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 158.648427][ T7537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.469770][ T7557] loop2: detected capacity change from 0 to 256 [ 159.477166][ T7557] exfat: Deprecated parameter 'utf8' [ 159.517970][ T7557] exfat: Deprecated parameter 'namecase' [ 159.541724][ T7557] exfat: Deprecated parameter 'namecase' [ 159.558870][ T7557] exfat: Deprecated parameter 'utf8' [ 159.643373][ T7557] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 160.085825][ T28] audit: type=1326 audit(1786052812.344:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.4.469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6daf79e0d9 code=0x0 [ 160.149168][ T7581] ip_tables: iptables: counters copy to user failed while replacing table [ 160.686492][ T7593] loop3: detected capacity change from 0 to 512 [ 160.742262][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.869372][ T28] audit: type=1800 audit(1786052813.124:31): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.471" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 160.926173][ T28] audit: type=1800 audit(1786052813.184:32): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.471" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 161.022778][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.316446][ T7591] loop2: detected capacity change from 0 to 40427 [ 161.334577][ T7591] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 161.343916][ T7591] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 161.370105][ T7591] F2FS-fs (loop2): invalid crc value [ 161.411370][ T7591] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.572113][ T7591] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 161.583842][ T7591] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.914745][ T7613] loop4: detected capacity change from 0 to 32768 [ 161.949157][ T7613] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.476 (7613) [ 161.958931][ T7617] loop3: detected capacity change from 0 to 128 [ 162.018614][ T7613] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 162.042335][ T28] audit: type=1800 audit(1786052814.304:33): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.478" name="bus" dev="loop3" ino=1048603 res=0 errno=0 [ 162.050072][ T7613] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 162.062976][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.171999][ T7613] BTRFS info (device loop4): using free space tree [ 162.240268][ T7622] Illegal XDP return value 65535 on prog (id 38) dev syz_tun, expect packet loss! [ 162.281104][ T7613] BTRFS info (device loop4): enabling ssd optimizations [ 162.290747][ T7613] BTRFS info (device loop4): auto enabling async discard [ 162.664840][ T6473] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 162.882169][ T7647] loop3: detected capacity change from 0 to 1024 [ 164.286894][ T7662] loop4: detected capacity change from 0 to 40427 [ 164.308646][ T7662] F2FS-fs (loop4): invalid crc value [ 164.331606][ T7662] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.457607][ T7662] F2FS-fs (loop4): Start checkpoint disabled! [ 164.508898][ T7662] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 164.580360][ T7662] syz.4.490: attempt to access beyond end of device [ 164.580360][ T7662] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.717948][ T28] audit: type=1326 audit(1786052816.974:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.3.495" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 164.747583][ T28] audit: type=1326 audit(1786052816.974:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.3.495" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 164.774182][ T2894] kworker/u4:7: attempt to access beyond end of device [ 164.774182][ T2894] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 164.803240][ T28] audit: type=1326 audit(1786052817.004:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.3.495" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 164.808968][ T2894] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 164.827074][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.848311][ T2894] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 164.870028][ T28] audit: type=1326 audit(1786052817.004:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.3.495" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 164.893992][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.900659][ T28] audit: type=1326 audit(1786052817.004:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.3.495" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 164.925942][ T28] audit: type=1326 audit(1786052817.034:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.3.495" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff09ad9e0d9 code=0x7ffc0000 [ 164.949763][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.357299][ T7679] loop2: detected capacity change from 0 to 32768 [ 165.429233][ T7679] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.567379][ T7679] XFS (loop2): Ending clean mount [ 165.627463][ T7684] loop1: detected capacity change from 0 to 32768 [ 165.636512][ T7684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.498 (7684) [ 165.667206][ T7684] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.684737][ T7684] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 165.762927][ T7684] BTRFS info (device loop1): setting nodatasum [ 165.799017][ T7684] BTRFS info (device loop1): force zlib compression, level 3 [ 165.806506][ T7684] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 165.844151][ T6869] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.846015][ T7684] BTRFS info (device loop1): use lzo compression, level 0 [ 165.889731][ T7684] BTRFS info (device loop1): turning on flush-on-commit [ 165.896799][ T7684] BTRFS info (device loop1): enabling auto defrag [ 165.911007][ T7684] BTRFS info (device loop1): max_inline at 4096 [ 165.917384][ T7684] BTRFS info (device loop1): using free space tree [ 166.241268][ T7684] BTRFS info (device loop1): enabling ssd optimizations [ 166.248323][ T7684] BTRFS info (device loop1): auto enabling async discard [ 166.510324][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 166.510341][ T28] audit: type=1800 audit(1786052818.764:44): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.498" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 166.754757][ T5782] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.511975][ T7750] loop1: detected capacity change from 0 to 128 [ 167.560578][ T7750] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 167.595637][ T7750] hpfs: filesystem error: improperly stopped [ 167.615056][ T7754] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.632124][ T7750] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.646019][ T7754] overlayfs: failed to set xattr on upper [ 167.652421][ T7750] hpfs: You really don't want any checks? You are crazy... [ 167.660168][ T7754] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.671052][ T7750] hpfs: hpfs_map_sector(): read error [ 167.676467][ T7750] hpfs: code page support is disabled [ 167.682987][ T7754] overlayfs: ...falling back to index=off. [ 167.689596][ T7754] overlayfs: ...falling back to uuid=null. [ 167.695708][ T7750] hpfs: hpfs_map_4sectors(): unaligned read [ 167.703424][ T7754] overlayfs: ...falling back to xino=off. [ 167.710044][ T7750] hpfs: hpfs_map_4sectors(): unaligned read [ 167.716140][ T7754] overlayfs: conflicting lowerdir path [ 167.723014][ T7750] hpfs: filesystem error: unable to find root dir [ 167.756453][ T7750] hpfs: hpfs_map_4sectors(): unaligned read [ 167.788582][ T7750] hpfs: hpfs_map_sector(): read error [ 167.840375][ T7750] hpfs: hpfs_map_4sectors(): unaligned read [ 167.847517][ T7750] hpfs: hpfs_map_sector(): read error [ 168.023273][ T7766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.521'. [ 168.837668][ T7762] loop2: detected capacity change from 0 to 40427 [ 168.872378][ T7762] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 168.893355][ T7780] process 'syz.1.528' launched './file1' with NULL argv: empty string added [ 168.906852][ T7762] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 168.922709][ T7762] F2FS-fs (loop2): invalid crc value [ 168.930910][ T7771] loop3: detected capacity change from 0 to 32768 [ 168.983552][ T7762] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.986452][ T7774] loop4: detected capacity change from 0 to 32768 [ 169.020903][ T7771] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 169.135638][ T7774] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 169.214614][ T7762] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 169.253145][ T7762] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 169.360751][ T6869] syz-executor: attempt to access beyond end of device [ 169.360751][ T6869] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.372427][ T7774] XFS (loop4): Ending clean mount [ 169.408074][ T6869] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 169.422217][ T7774] XFS (loop4): Quotacheck needed: Please wait. [ 169.482318][ T7771] XFS (loop3): Starting recovery (logdev: internal) [ 169.576133][ T7774] XFS (loop4): Quotacheck: Done. [ 169.587814][ T7771] XFS (loop3): Ending recovery (logdev: internal) [ 169.816076][ T6473] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 170.369276][ T5775] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 170.493710][ T7815] loop4: detected capacity change from 0 to 4096 [ 170.657093][ T7815] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 170.854605][ T28] audit: type=1800 audit(1786052823.074:45): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.536" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 171.806537][ T28] audit: type=1326 audit(1786052824.064:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.544" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff09ad9e0d9 code=0x0 [ 171.840220][ T7823] loop2: detected capacity change from 0 to 131072 [ 171.848928][ T7823] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 171.855662][ T7823] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 171.867335][ T7823] F2FS-fs (loop2): invalid crc value [ 171.893696][ T7823] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.956044][ T7823] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 171.963865][ T7823] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 172.621462][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.829408][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 172.836323][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.859140][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.868328][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.910029][ T23] usb 2-1: config 0 descriptor?? [ 173.156939][ T23] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 173.410774][ T7867] loop4: detected capacity change from 0 to 8192 [ 173.493591][ T6278] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.663706][ T23] usb 2-1: USB disconnect, device number 8 [ 173.713794][ T7882] loop2: detected capacity change from 0 to 1764 [ 174.238906][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 174.270987][ T7896] xfrm1: entered promiscuous mode [ 174.288960][ T7896] xfrm1: entered allmulticast mode [ 174.316215][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 174.744666][ T7908] syz_tun: entered allmulticast mode [ 174.775052][ T7908] pim6reg: entered allmulticast mode [ 174.819786][ T7910] pim6reg: left allmulticast mode [ 174.849045][ T7910] syz_tun: left allmulticast mode [ 175.118789][ T7922] ================================================================== [ 175.126915][ T7922] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 175.134565][ T7922] Read of size 8 at addr ffff888143264218 by task syz.3.574/7922 [ 175.142473][ T7922] [ 175.144828][ T7922] CPU: 1 PID: 7922 Comm: syz.3.574 Not tainted syzkaller #0 [ 175.152118][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.162192][ T7922] Call Trace: [ 175.165475][ T7922] [ 175.168402][ T7922] dump_stack_lvl+0x18c/0x250 [ 175.173185][ T7922] ? read_lock_is_recursive+0x20/0x20 [ 175.178573][ T7922] ? show_regs_print_info+0x20/0x20 [ 175.183892][ T7922] ? load_image+0x420/0x420 [ 175.188406][ T7922] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 175.193870][ T7922] ? __virt_addr_valid+0x10c/0x380 [ 175.198993][ T7922] ? __virt_addr_valid+0x10c/0x380 [ 175.204111][ T7922] ? __virt_addr_valid+0x10c/0x380 [ 175.209249][ T7922] print_report+0xa8/0x210 [ 175.213669][ T7922] ? dvb_device_open+0xc9/0x360 [ 175.218519][ T7922] kasan_report+0x117/0x150 [ 175.223020][ T7922] ? chrdev_open+0x385/0x600 [ 175.227606][ T7922] ? dvb_device_open+0xc9/0x360 [ 175.232454][ T7922] dvb_device_open+0xc9/0x360 [ 175.237137][ T7922] chrdev_open+0x58c/0x600 [ 175.241551][ T7922] ? cd_forget+0x160/0x160 [ 175.245964][ T7922] ? fsnotify_perm+0x3ed/0x5e0 [ 175.250732][ T7922] do_dentry_open+0x880/0x14b0 [ 175.255511][ T7922] ? cd_forget+0x160/0x160 [ 175.259918][ T7922] path_openat+0x284f/0x3270 [ 175.264533][ T7922] ? do_sys_openat2+0xda/0x1d0 [ 175.269309][ T7922] ? __x64_sys_openat+0x139/0x160 [ 175.274345][ T7922] ? verify_lock_unused+0x140/0x140 [ 175.279552][ T7922] ? do_filp_open+0x430/0x430 [ 175.284241][ T7922] do_filp_open+0x1f2/0x430 [ 175.288751][ T7922] ? vfs_tmpfile+0x620/0x620 [ 175.293344][ T7922] ? _raw_spin_unlock+0x28/0x40 [ 175.298299][ T7922] ? alloc_fd+0x590/0x640 [ 175.302636][ T7922] do_sys_openat2+0x134/0x1d0 [ 175.307320][ T7922] ? do_sys_open+0xe0/0xe0 [ 175.311733][ T7922] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 175.317709][ T7922] ? lock_chain_count+0x20/0x20 [ 175.322552][ T7922] ? lock_chain_count+0x20/0x20 [ 175.327399][ T7922] __x64_sys_openat+0x139/0x160 [ 175.332251][ T7922] do_syscall_64+0x55/0xb0 [ 175.336923][ T7922] ? clear_bhb_loop+0x40/0x90 [ 175.341591][ T7922] ? clear_bhb_loop+0x40/0x90 [ 175.346346][ T7922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.352240][ T7922] RIP: 0033:0x7ff09ad5e90e [ 175.356648][ T7922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.376985][ T7922] RSP: 002b:00007ff09bc73b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.392603][ T7922] RAX: ffffffffffffffda RBX: 00007ff09bc746c0 RCX: 00007ff09ad5e90e [ 175.400693][ T7922] RDX: 0000000000000202 RSI: 00007ff09bc73c00 RDI: ffffffffffffff9c [ 175.408708][ T7922] RBP: 00007ff09bc73c00 R08: 0000000000000000 R09: 0000000000000000 [ 175.416693][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 175.424747][ T7922] R13: 00007ff09b026038 R14: 00007ff09b025fa0 R15: 00007ffdba9c1988 [ 175.432726][ T7922] [ 175.435738][ T7922] [ 175.438081][ T7922] Allocated by task 7733: [ 175.442399][ T7922] kasan_set_track+0x4e/0x70 [ 175.446986][ T7922] __kasan_kmalloc+0x8f/0xa0 [ 175.451564][ T7922] __sta_info_destroy_part2+0x25b/0x410 [ 175.457102][ T7922] __sta_info_flush+0x3e6/0x4f0 [ 175.461945][ T7922] ieee80211_ibss_disconnect+0x25a/0x6f0 [ 175.467616][ T7922] ieee80211_ibss_leave+0x25/0x140 [ 175.472738][ T7922] __cfg80211_leave_ibss+0x1d2/0x400 [ 175.478014][ T7922] cfg80211_leave_ibss+0x5e/0x80 [ 175.482972][ T7922] cfg80211_change_iface+0x4d9/0xe20 [ 175.488257][ T7922] nl80211_set_interface+0x609/0x860 [ 175.493537][ T7922] genl_family_rcv_msg_doit+0x21a/0x310 [ 175.499073][ T7922] genl_rcv_msg+0x611/0x7a0 [ 175.503563][ T7922] netlink_rcv_skb+0x235/0x4c0 [ 175.508312][ T7922] genl_rcv+0x28/0x40 [ 175.512287][ T7922] netlink_unicast+0x7b1/0x930 [ 175.517045][ T7922] netlink_sendmsg+0x8d0/0xbf0 [ 175.521812][ T7922] ____sys_sendmsg+0x61b/0x980 [ 175.526577][ T7922] ___sys_sendmsg+0x2a6/0x360 [ 175.531253][ T7922] __se_sys_sendmsg+0x1d0/0x2c0 [ 175.536111][ T7922] do_syscall_64+0x55/0xb0 [ 175.540542][ T7922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.546438][ T7922] [ 175.548757][ T7922] Freed by task 7733: [ 175.552726][ T7922] kasan_set_track+0x4e/0x70 [ 175.557315][ T7922] kasan_save_free_info+0x28/0x40 [ 175.562421][ T7922] ____kasan_slab_free+0x126/0x1f0 [ 175.567542][ T7922] slab_free_freelist_hook+0x130/0x1a0 [ 175.573108][ T7922] __kmem_cache_free+0xba/0x1f0 [ 175.577951][ T7922] __sta_info_destroy_part2+0x313/0x410 [ 175.583500][ T7922] __sta_info_flush+0x3e6/0x4f0 [ 175.588360][ T7922] ieee80211_ibss_disconnect+0x25a/0x6f0 [ 175.593989][ T7922] ieee80211_ibss_leave+0x25/0x140 [ 175.599096][ T7922] __cfg80211_leave_ibss+0x1d2/0x400 [ 175.604374][ T7922] cfg80211_leave_ibss+0x5e/0x80 [ 175.609301][ T7922] cfg80211_change_iface+0x4d9/0xe20 [ 175.614576][ T7922] nl80211_set_interface+0x609/0x860 [ 175.619872][ T7922] genl_family_rcv_msg_doit+0x21a/0x310 [ 175.625410][ T7922] genl_rcv_msg+0x611/0x7a0 [ 175.630103][ T7922] netlink_rcv_skb+0x235/0x4c0 [ 175.634857][ T7922] genl_rcv+0x28/0x40 [ 175.638839][ T7922] netlink_unicast+0x7b1/0x930 [ 175.643602][ T7922] netlink_sendmsg+0x8d0/0xbf0 [ 175.648361][ T7922] ____sys_sendmsg+0x61b/0x980 [ 175.653201][ T7922] ___sys_sendmsg+0x2a6/0x360 [ 175.657866][ T7922] __se_sys_sendmsg+0x1d0/0x2c0 [ 175.662701][ T7922] do_syscall_64+0x55/0xb0 [ 175.667109][ T7922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.673085][ T7922] [ 175.675404][ T7922] The buggy address belongs to the object at ffff888143264200 [ 175.675404][ T7922] which belongs to the cache kmalloc-256 of size 256 [ 175.689452][ T7922] The buggy address is located 24 bytes inside of [ 175.689452][ T7922] freed 256-byte region [ffff888143264200, ffff888143264300) [ 175.703166][ T7922] [ 175.705502][ T7922] The buggy address belongs to the physical page: [ 175.711907][ T7922] page:ffffea00050c9900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143264 [ 175.722132][ T7922] head:ffffea00050c9900 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 175.731050][ T7922] ksm flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 175.739545][ T7922] page_type: 0xffffffff() [ 175.743906][ T7922] raw: 057ff00000000840 ffff888017c41b40 ffffea0000b03b00 0000000000000003 [ 175.752563][ T7922] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 175.761145][ T7922] page dumped because: kasan: bad access detected [ 175.767559][ T7922] page_owner tracks the page as allocated [ 175.773353][ T7922] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17032614476, free_ts 0 [ 175.793073][ T7922] post_alloc_hook+0x1c1/0x200 [ 175.797859][ T7922] get_page_from_freelist+0x2181/0x22a0 [ 175.803405][ T7922] __alloc_pages+0x1f0/0x460 [ 175.807987][ T7922] alloc_page_interleave+0x24/0x1e0 [ 175.813277][ T7922] alloc_slab_page+0x5d/0x180 [ 175.817945][ T7922] new_slab+0x87/0x2d0 [ 175.822003][ T7922] ___slab_alloc+0xc5c/0x12f0 [ 175.826666][ T7922] __kmem_cache_alloc_node+0x11f/0x250 [ 175.832118][ T7922] kmalloc_trace+0x2a/0xe0 [ 175.836555][ T7922] bus_add_driver+0x162/0x630 [ 175.841229][ T7922] driver_register+0x23a/0x310 [ 175.845981][ T7922] usb_register_driver+0x205/0x3c0 [ 175.851082][ T7922] do_one_initcall+0x242/0x790 [ 175.855838][ T7922] do_initcall_level+0x13d/0x1f0 [ 175.860773][ T7922] do_initcalls+0x69/0xd0 [ 175.865094][ T7922] kernel_init_freeable+0x3d9/0x560 [ 175.870289][ T7922] page_owner free stack trace missing [ 175.875639][ T7922] [ 175.877947][ T7922] Memory state around the buggy address: [ 175.883571][ T7922] ffff888143264100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 175.891719][ T7922] ffff888143264180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 175.899772][ T7922] >ffff888143264200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.907820][ T7922] ^ [ 175.912688][ T7922] ffff888143264280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.920731][ T7922] ffff888143264300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 175.928775][ T7922] ================================================================== [ 175.948960][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.959342][ T7922] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 175.966777][ T7922] CPU: 0 PID: 7922 Comm: syz.3.574 Not tainted syzkaller #0 [ 175.974086][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.984167][ T7922] Call Trace: [ 175.987468][ T7922] [ 175.990417][ T7922] dump_stack_lvl+0x18c/0x250 [ 175.995129][ T7922] ? show_regs_print_info+0x20/0x20 [ 176.000397][ T7922] ? load_image+0x420/0x420 [ 176.005123][ T7922] panic+0x2ca/0x720 [ 176.009067][ T7922] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.015257][ T7922] ? bpf_jit_dump+0xd0/0xd0 [ 176.019833][ T7922] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 176.025867][ T7922] ? _raw_spin_unlock+0x40/0x40 [ 176.030765][ T7922] ? dvb_device_open+0xc9/0x360 [ 176.035644][ T7922] check_panic_on_warn+0x84/0xa0 [ 176.040616][ T7922] ? dvb_device_open+0xc9/0x360 [ 176.045495][ T7922] end_report+0x6f/0x130 [ 176.049852][ T7922] kasan_report+0x128/0x150 [ 176.054362][ T7922] ? chrdev_open+0x385/0x600 [ 176.058952][ T7922] ? dvb_device_open+0xc9/0x360 [ 176.063806][ T7922] dvb_device_open+0xc9/0x360 [ 176.068482][ T7922] chrdev_open+0x58c/0x600 [ 176.072907][ T7922] ? cd_forget+0x160/0x160 [ 176.077416][ T7922] ? fsnotify_perm+0x3ed/0x5e0 [ 176.082276][ T7922] do_dentry_open+0x880/0x14b0 [ 176.087032][ T7922] ? cd_forget+0x160/0x160 [ 176.091440][ T7922] path_openat+0x284f/0x3270 [ 176.096481][ T7922] ? do_sys_openat2+0xda/0x1d0 [ 176.101244][ T7922] ? __x64_sys_openat+0x139/0x160 [ 176.106271][ T7922] ? verify_lock_unused+0x140/0x140 [ 176.111463][ T7922] ? do_filp_open+0x430/0x430 [ 176.116136][ T7922] do_filp_open+0x1f2/0x430 [ 176.120634][ T7922] ? vfs_tmpfile+0x620/0x620 [ 176.125231][ T7922] ? _raw_spin_unlock+0x28/0x40 [ 176.130074][ T7922] ? alloc_fd+0x590/0x640 [ 176.134573][ T7922] do_sys_openat2+0x134/0x1d0 [ 176.139244][ T7922] ? do_sys_open+0xe0/0xe0 [ 176.143654][ T7922] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 176.149634][ T7922] ? lock_chain_count+0x20/0x20 [ 176.154477][ T7922] ? lock_chain_count+0x20/0x20 [ 176.159316][ T7922] __x64_sys_openat+0x139/0x160 [ 176.164186][ T7922] do_syscall_64+0x55/0xb0 [ 176.168593][ T7922] ? clear_bhb_loop+0x40/0x90 [ 176.173271][ T7922] ? clear_bhb_loop+0x40/0x90 [ 176.177945][ T7922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.183827][ T7922] RIP: 0033:0x7ff09ad5e90e [ 176.188232][ T7922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.207838][ T7922] RSP: 002b:00007ff09bc73b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.216250][ T7922] RAX: ffffffffffffffda RBX: 00007ff09bc746c0 RCX: 00007ff09ad5e90e [ 176.224224][ T7922] RDX: 0000000000000202 RSI: 00007ff09bc73c00 RDI: ffffffffffffff9c [ 176.232282][ T7922] RBP: 00007ff09bc73c00 R08: 0000000000000000 R09: 0000000000000000 [ 176.240244][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 176.248204][ T7922] R13: 00007ff09b026038 R14: 00007ff09b025fa0 R15: 00007ffdba9c1988 [ 176.256173][ T7922] [ 176.259502][ T7922] Kernel Offset: disabled [ 176.263996][ T7922] Rebooting in 86400 seconds..