last executing test programs: 5m46.10420754s ago: executing program 3 (id=2028): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 5m44.994913284s ago: executing program 3 (id=2030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b4", 0x3a}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5m43.605983051s ago: executing program 3 (id=2032): r0 = io_uring_setup(0x7530, &(0x7f00000003c0)={0x0, 0x48d7, 0x800, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r2 = add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d", 0x8, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r6, 0xb, r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000100), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0xc0, 0x4) 5m42.927048967s ago: executing program 3 (id=2034): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m38.498923933s ago: executing program 3 (id=2042): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc44, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 5m36.444502928s ago: executing program 3 (id=2044): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000180)=0x2) 5m21.075560547s ago: executing program 32 (id=2044): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000180)=0x2) 7.508032209s ago: executing program 2 (id=2879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 7.343687912s ago: executing program 2 (id=2881): r0 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) connect$caif(r0, &(0x7f0000000780), 0x18) 5.286158967s ago: executing program 2 (id=2883): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) write$binfmt_script(r0, &(0x7f0000001d00)={'#! ', './file1', [], 0xa, "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"}, 0x401) 5.110116047s ago: executing program 0 (id=2885): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10011, r3, 0x78e17000) write$FUSE_GETXATTR(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.599612531s ago: executing program 0 (id=2887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x2000) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r9, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r3, 0x0}, 0x0, 0x0]) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000d80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00-'], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8000) 4.123095881s ago: executing program 2 (id=2888): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x24008051, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0x8, 0x0, 0x3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$PPPIOCCONNECT(r6, 0x40047435, &(0x7f00000002c0)=0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000340)) sendmmsg(r3, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.060335331s ago: executing program 4 (id=2889): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f000000ad00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f000000ae00)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@errors_remount}, {@usrquota}, {@nodiscard}, {@errors_remount}, {@nointegrity}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") 3.680626787s ago: executing program 1 (id=2891): socket$inet6(0xa, 0x1, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.466157342s ago: executing program 2 (id=2892): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x1, 0x0, 0x0, 0x9, @tick=0x5, {}, {}, @result}, {0x81, 0x0, 0x0, 0x0, @tick, {0x6}, {0x5, 0x7}, @control={0x0, 0x4}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5a5, {0x0, 0xf9}, {0x0, 0xff}, @note={0x0, 0x1, 0x3, 0x1, 0x3}}], 0x70) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4001, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.340926642s ago: executing program 0 (id=2893): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}]}}]}, 0x48}}, 0x0) 2.229392674s ago: executing program 2 (id=2894): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) socket(0x8000000010, 0x2, 0x0) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x1b700000) sendmsg$nl_generic(r3, 0x0, 0x2008014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) 2.190522808s ago: executing program 1 (id=2895): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x10011, r3, 0x78e17000) write$FUSE_GETXATTR(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.101965252s ago: executing program 4 (id=2896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0) 2.013073008s ago: executing program 0 (id=2897): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) write$binfmt_script(r0, &(0x7f0000001d00)={'#! ', './file1', [], 0xa, "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"}, 0x401) 1.024725102s ago: executing program 0 (id=2898): keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', 0x0, 0xfffffffffffffffc) 972.406043ms ago: executing program 1 (id=2899): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 971.684473ms ago: executing program 4 (id=2900): syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ff"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_DST_IF={0x8, 0xa, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 743.636315ms ago: executing program 0 (id=2901): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x40089, 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 656.49436ms ago: executing program 4 (id=2902): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 524.016008ms ago: executing program 1 (id=2903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0500000007000000080000000c00000000000000", @ANYBLOB="000000000000000000000000000000000000000070a2ff029cf14296ce9ed49df31ba275ce60459015fcec9f3bc40f86a7d99ae7a0473cf87de05d21a77838eb840f86ee2b5b8b636b1c70faf57ec03f29b65d7a090a12fd273fec60", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0xa80c3404ff4a4acd, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000ac0)={0x9, "76cb625ebc41b0e3d119c5a4569ae819d0751ce7e5fc6d0af1d94acae222f37f8511a9f1708f39f24f5a0185962ce7b354137358d70dc51dd6840b5e21a17c1e2280ef3caf4d54870def60c983b72ea7894c63b04b595d4dd411eb6ba7eb6c6b68715ebd6ca2902b1ec775cd1906dc2bc87d7a4d9029af4c9b6710e054802edc53d85247436e9050267397d5536c68c1027222c1c789f4a168b5cf9436edd4671e10dcea85c1b4fd5909d27533c552473b3fd06a1bf713618cf22ddd6c0aa6426feb85e12a9e7cf27d6c4d88e14772ec12b3499908ed7553dce759e1e0eab263835f31d4a35ca3c0ba2c806b23d849a6837c4cd960bb0027b60dce6af1cb8fe3ec27684467adb12b0b7247539692f695eef22d6ac9db140382608cbd8c21c8a8d4950a72e8558f4cacd33e7f079e1032c0363d882e55212c7d5057edc35835a96b37f316218cea5089662bfc67a49f308a417f825ea2d6c0d4434aac54dead6a403a2cbdac8e49ce2e6e09611c07691ab29af2dce27dab9a7c3aa9fdcfaa25f696b9261a79cf89260aa1f45baa94b0722c66c5a212c9b635589f11957b015476db6c83dc0987bdf35fbba75e0221513b4ef76ebc7548c2c3e1af3cecf99118c9671a5ed17fb651e15c153302af3925aeb1e58245aed3948f40694d82086e700c5d6f8537d950e63f81e669ce4d0ab4f8c1e42e7df0451f8abf641815039828d1"}) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4000044}, 0x40800) sendmsg(r1, &(0x7f0000000740)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000001400)=ANY=[], 0x5e8}, 0x8004) write$tun(0xffffffffffffffff, &(0x7f0000000d00)={@void, @val={0x2, 0x80, 0x7ff, 0x4, 0x4, 0x6}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @private=0xa010102, @multicast, @remote}}, 0x26) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000a80)=0x4, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x810) 437.951724ms ago: executing program 4 (id=2904): socket$inet6(0xa, 0x1, 0x84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 300.463581ms ago: executing program 1 (id=2905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8431", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x16, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x351, 0x0, 0x3}, {"11df"}}}}}}}, 0x0) 125.781051ms ago: executing program 1 (id=2906): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 0s ago: executing program 4 (id=2907): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x24, r3, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): in process `syz.1.1670'. [ 683.855402][T11183] loop1: detected capacity change from 0 to 2048 [ 684.345233][T11183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.335512][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 685.657151][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 686.334237][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.340620][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.310876][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'. [ 687.343318][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'. [ 692.868388][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1704'. [ 692.919326][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1704'. [ 694.577318][T11297] loop0: detected capacity change from 0 to 2048 [ 694.628837][T11297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 696.735525][T11307] netlink: 'syz.2.1713': attribute type 4 has an invalid length. [ 698.162100][T11324] loop2: detected capacity change from 0 to 2048 [ 698.191026][T11324] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 698.335398][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1716'. [ 698.383565][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1716'. [ 698.566532][T11331] loop3: detected capacity change from 0 to 1024 [ 698.613294][T11331] hfsplus: bad catalog entry type [ 698.721890][ T9522] hfsplus: b-tree write err: -5, ino 25 [ 698.735843][ T9522] hfsplus: b-tree write err: -5, ino 4 [ 698.780205][ T9522] hfsplus: b-tree write err: -5, ino 2 [ 698.808556][ T9522] hfsplus: b-tree write err: -5, ino 26 [ 699.543466][ T5815] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 700.040919][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 700.074187][ T5815] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 700.091509][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.105056][ T5815] usb 4-1: Product: syz [ 700.109313][ T5815] usb 4-1: Manufacturer: syz [ 700.115983][ T5815] usb 4-1: SerialNumber: syz [ 700.131183][ T5815] usb 4-1: config 0 descriptor?? [ 700.776337][ T5815] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 701.095228][ T5815] peak_usb: probe of 4-1:0.0 failed with error -71 [ 701.166222][ T5815] usb 4-1: USB disconnect, device number 26 [ 701.526655][T11368] fuse: Bad value for 'fd' [ 701.798301][T11373] serio: Serial port ptm0 [ 704.331792][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 704.531872][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 704.564253][ T8] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 704.578206][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.591200][ T8] usb 3-1: Product: syz [ 704.600263][ T8] usb 3-1: Manufacturer: syz [ 704.606443][ T8] usb 3-1: SerialNumber: syz [ 704.634579][ T8] usb 3-1: config 0 descriptor?? [ 704.837507][T11412] serio: Serial port ptm0 [ 705.616599][ T8] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 705.894161][ T8] peak_usb: probe of 3-1:0.0 failed with error -71 [ 705.911186][ T8] usb 3-1: USB disconnect, device number 24 [ 707.436007][T11440] mmap: syz.1.1755 (11440) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 707.798066][T11443] serio: Serial port ptm0 [ 707.975634][T11440] syz.1.1755 (11440) used greatest stack depth: 17864 bytes left [ 710.332121][T11459] netlink: 'syz.3.1762': attribute type 4 has an invalid length. [ 711.319017][T11467] loop2: detected capacity change from 0 to 2048 [ 711.399652][T11467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.103685][T11467] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 713.380119][T11478] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 716.697687][T11511] loop1: detected capacity change from 0 to 2048 [ 717.329005][T11511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 717.492325][T11511] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 719.230488][T11542] serio: Serial port ptm0 [ 720.711018][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1791'. [ 720.726041][T11549] loop3: detected capacity change from 0 to 2048 [ 720.756581][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1791'. [ 720.802979][T11549] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.932036][T11549] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 722.696575][T11580] netlink: 'syz.3.1802': attribute type 4 has an invalid length. [ 722.745690][T11581] serio: Serial port ptm0 [ 726.196275][T11621] serio: Serial port ptm0 [ 727.957926][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1816'. [ 727.983039][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1816'. [ 732.073703][T11667] serio: Serial port ptm0 [ 735.701770][T11675] loop0: detected capacity change from 0 to 40427 [ 735.726350][T11675] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 735.754078][T11675] F2FS-fs (loop0): invalid crc value [ 735.778721][T11675] F2FS-fs (loop0): Found nat_bits in checkpoint [ 735.882181][T11675] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 736.303175][T11705] serio: Serial port ptm0 [ 738.794831][ T5771] syz-executor: attempt to access beyond end of device [ 738.794831][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 738.844224][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 739.642796][T11733] loop1: detected capacity change from 0 to 128 [ 742.622071][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 743.069286][ T8] usb 4-1: device descriptor read/64, error -71 [ 743.185862][T11760] loop1: detected capacity change from 0 to 16 [ 743.210388][T11760] erofs: (device loop1): mounted with root inode @ nid 36. [ 743.349398][T11765] loop1: detected capacity change from 0 to 128 [ 743.359583][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 743.413218][T11765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 743.446179][T11765] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 743.478061][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.521799][ T8] usb 4-1: device descriptor read/64, error -71 [ 743.602032][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 743.645140][ T8] usb usb4-port1: attempt power cycle [ 743.689460][ T9608] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 743.902318][T11775] loop5: detected capacity change from 0 to 7 [ 743.917281][T10232] Dev loop5: unable to read RDB block 7 [ 743.924330][T10232] loop5: unable to read partition table [ 743.930248][T10232] loop5: partition table beyond EOD, truncated [ 743.947529][T11775] Dev loop5: unable to read RDB block 7 [ 743.957186][T11775] loop5: unable to read partition table [ 743.964693][T11775] loop5: partition table beyond EOD, truncated [ 743.971979][T11775] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 744.073235][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 744.124937][ T8] usb 4-1: device descriptor read/8, error -71 [ 744.141247][T11778] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1864'. [ 744.411754][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 744.452443][ T8] usb 4-1: device descriptor read/8, error -71 [ 744.554273][T11782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 744.560692][T11782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 744.572149][T11782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 744.586227][ T8] usb usb4-port1: unable to enumerate USB device [ 745.612127][T11799] loop5: detected capacity change from 0 to 7 [ 745.625872][T11799] Dev loop5: unable to read RDB block 7 [ 745.631848][T11799] loop5: unable to read partition table [ 745.638538][T11799] loop5: partition table beyond EOD, truncated [ 745.646861][T11799] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 746.357535][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 746.532477][T11806] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1873'. [ 746.591732][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 746.592454][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 746.942576][T11817] serio: Serial port ptm0 [ 747.663618][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.670092][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.956875][ T5936] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 749.421957][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 749.462723][T10841] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 749.499297][ T5936] usb 1-1: config 0 has no interfaces? [ 749.527626][ T5936] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 749.547088][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.576688][ T5936] usb 1-1: Product: syz [ 749.580951][ T5936] usb 1-1: Manufacturer: syz [ 749.591123][ T5936] usb 1-1: SerialNumber: syz [ 749.609037][ T5936] usb 1-1: config 0 descriptor?? [ 749.651745][T10841] usb 2-1: device descriptor read/64, error -71 [ 749.835229][ T27] usb 1-1: USB disconnect, device number 19 [ 749.935904][T10841] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 750.121875][T10841] usb 2-1: device descriptor read/64, error -71 [ 750.275137][T11846] loop5: detected capacity change from 0 to 7 [ 750.301883][T11846] Dev loop5: unable to read RDB block 7 [ 750.319497][T11846] loop5: unable to read partition table [ 750.346839][T11846] loop5: partition table beyond EOD, truncated [ 750.381336][T11846] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 750.448740][T10841] usb usb2-port1: attempt power cycle [ 750.871734][T10841] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 751.821973][T10841] usb 2-1: device descriptor read/8, error -71 [ 753.505733][T11862] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.515236][T11862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.530019][T11862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 754.005654][T11878] serio: Serial port ptm0 [ 754.231890][ T5812] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 754.271971][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 754.422190][ T5812] usb 4-1: device descriptor read/64, error -71 [ 754.761899][ T5812] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 755.061831][ T5812] usb 4-1: device descriptor read/64, error -71 [ 755.212073][ T5812] usb usb4-port1: attempt power cycle [ 755.551899][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 755.558151][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 755.872093][ T5812] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 756.044549][ T5812] usb 4-1: device descriptor read/8, error -71 [ 756.744462][T11889] loop0: detected capacity change from 0 to 32768 [ 756.782011][ T5812] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 756.867346][T11889] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 756.886465][ T5812] usb 4-1: device descriptor read/8, error -71 [ 757.029252][ T5812] usb usb4-port1: unable to enumerate USB device [ 757.064524][T11889] XFS (loop0): Ending clean mount [ 757.412565][T11906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 757.453579][T11906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 757.482122][T11906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 757.794493][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 758.243225][T11922] serio: Serial port ptm0 [ 759.103819][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 759.781786][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 759.787999][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 759.919371][T11914] loop3: detected capacity change from 0 to 32768 [ 759.947728][T11914] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1908 (11914) [ 760.001005][T11914] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 760.014157][T11914] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 760.038491][T11914] BTRFS info (device loop3): enabling auto defrag [ 760.050664][T11914] BTRFS info (device loop3): use no compression [ 760.069828][T11914] BTRFS info (device loop3): force clearing of disk cache [ 760.078643][T11914] BTRFS info (device loop3): max_inline at 4096 [ 760.098656][T11914] BTRFS info (device loop3): disabling free space tree [ 760.263079][ T5812] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 760.469963][T11914] BTRFS error (device loop3): open_ctree failed: -4 [ 760.479365][ T5812] usb 1-1: device descriptor read/64, error -71 [ 761.681744][ T5812] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 761.819248][T11933] loop2: detected capacity change from 0 to 32768 [ 761.862955][ T5812] usb 1-1: device descriptor read/64, error -71 [ 762.012561][ T5812] usb usb1-port1: attempt power cycle [ 762.085552][T11960] loop3: detected capacity change from 0 to 64 [ 762.451116][ T5812] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 763.402284][ T5812] usb 1-1: device not accepting address 22, error -71 [ 764.180389][T11978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 764.202673][T11978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 764.219805][T11978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 764.930600][T11994] loop2: detected capacity change from 0 to 512 [ 764.986270][T11995] vcan0: entered allmulticast mode [ 765.990118][T11994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.191798][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 766.272702][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 766.272719][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 766.427926][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.440062][T11984] loop0: detected capacity change from 0 to 32768 [ 766.500129][T11984] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 766.604306][T10841] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 766.668438][T11984] XFS (loop0): Ending clean mount [ 766.801749][T10841] usb 2-1: device descriptor read/64, error -71 [ 767.138145][T11984] XFS (loop0): Quotacheck needed: Please wait. [ 767.871975][T10841] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 769.246099][T11984] XFS (loop0): Quotacheck: Done. [ 769.271702][T10841] usb 2-1: device descriptor read/64, error -71 [ 769.331348][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 769.393906][T10841] usb usb2-port1: attempt power cycle [ 769.954900][T12029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 769.982267][T12029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 770.034991][T12029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.688279][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 772.688366][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 772.700564][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 773.202091][T12041] loop3: detected capacity change from 0 to 256 [ 775.448586][T12046] loop2: detected capacity change from 0 to 2048 [ 775.533944][T12046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 775.961769][ T5815] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 776.121796][ T5815] usb 4-1: device descriptor read/64, error -71 [ 776.401727][ T5815] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 776.572904][ T5815] usb 4-1: device descriptor read/64, error -71 [ 776.672155][T12061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 776.701488][T12061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 776.715876][ T5815] usb usb4-port1: attempt power cycle [ 776.726070][T12061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 777.867037][ T5815] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 777.920639][ T5815] usb 4-1: device descriptor read/8, error -71 [ 778.318674][ T5815] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 778.665300][T10228] Bluetooth: hci1: command 0x0406 tx timeout [ 778.858802][T10228] Bluetooth: hci3: command 0x0406 tx timeout [ 778.865234][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 779.399158][ T5815] usb 4-1: device descriptor read/8, error -71 [ 779.522206][ T5815] usb usb4-port1: unable to enumerate USB device [ 783.366400][T12092] loop0: detected capacity change from 0 to 2048 [ 783.534500][T12092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 783.711880][T12099] syz.2.1956 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 784.216474][T12095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 784.344849][T12095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 784.445168][T12095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 785.031910][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 785.275223][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 785.321684][ T8] usb 1-1: no configurations [ 785.374847][ T8] usb 1-1: can't read configurations, error -22 [ 785.551921][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 785.582008][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 785.781659][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 785.787975][ T8] usb 1-1: no configurations [ 785.795375][ T8] usb 1-1: can't read configurations, error -22 [ 785.809531][ T8] usb usb1-port1: attempt power cycle [ 786.216052][T12112] loop3: detected capacity change from 0 to 32768 [ 786.222969][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 786.237474][T12112] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1960 (12112) [ 786.265265][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 786.283262][ T8] usb 1-1: no configurations [ 786.298398][ T8] usb 1-1: can't read configurations, error -22 [ 786.313541][T12112] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 786.427671][T12112] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 786.436918][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 786.487396][T12112] BTRFS info (device loop3): using free space tree [ 786.511934][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 788.291691][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 788.444199][T12112] BTRFS info (device loop3): enabling ssd optimizations [ 788.455126][ T8] usb 1-1: device descriptor read/8, error -71 [ 788.461683][T12112] BTRFS info (device loop3): auto enabling async discard [ 788.599181][ T8] usb usb1-port1: unable to enumerate USB device [ 788.740692][T12138] loop0: detected capacity change from 0 to 2048 [ 788.824766][T12138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 789.136764][ T5781] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 789.295630][T12141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 789.329875][T12141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 789.352643][T12141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 790.887994][T12144] loop0: detected capacity change from 0 to 32768 [ 791.013243][T12144] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1967 (12144) [ 791.112021][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 791.170362][T12144] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 791.210099][T12144] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 791.403169][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 791.409835][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 791.545202][T12144] BTRFS info (device loop0): using free space tree [ 793.683101][T12144] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 793.684367][T12144] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 793.732765][T12144] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 793.774268][T12144] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 793.803828][T12144] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 793.861235][T12144] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 793.873388][T12144] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 793.908231][T12144] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 793.930013][T12144] BTRFS error (device loop0): open_ctree failed: -12 [ 794.061681][T11967] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 794.271754][T11967] usb 3-1: Using ep0 maxpacket: 32 [ 794.282472][T11967] usb 3-1: no configurations [ 794.287323][T11967] usb 3-1: can't read configurations, error -22 [ 794.491788][T11967] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 794.693552][T11967] usb 3-1: Using ep0 maxpacket: 32 [ 794.721735][T11967] usb 3-1: no configurations [ 794.726540][T11967] usb 3-1: can't read configurations, error -22 [ 794.749038][T11967] usb usb3-port1: attempt power cycle [ 795.181842][T11967] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 795.222483][T11967] usb 3-1: Using ep0 maxpacket: 32 [ 795.229157][T11967] usb 3-1: no configurations [ 795.235013][T11967] usb 3-1: can't read configurations, error -22 [ 795.254310][T12191] loop1: detected capacity change from 0 to 4 [ 795.268649][T12191] Dev loop1: unable to read RDB block 4 [ 795.277454][T12191] loop1: unable to read partition table [ 795.290627][T12191] loop1: partition table beyond EOD, truncated [ 795.309935][T12191] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 795.393047][T11967] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 795.455515][T12186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 795.474136][T12186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 795.483668][T11967] usb 3-1: Using ep0 maxpacket: 32 [ 795.485983][T11967] usb 3-1: no configurations [ 795.499625][T12186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 795.531793][T11967] usb 3-1: can't read configurations, error -22 [ 795.550354][T11967] usb usb3-port1: unable to enumerate USB device [ 799.256076][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 799.256105][T10228] Bluetooth: hci3: command 0x0406 tx timeout [ 799.262224][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 800.592298][T12224] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1991'. [ 800.729108][T12222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 800.736924][T12222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 800.768682][T12222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 802.591701][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 802.760110][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 802.831702][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 802.892472][T12240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 802.898874][T12240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 802.919405][T12240] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 803.268557][T12244] loop3: detected capacity change from 0 to 32768 [ 804.342815][T12263] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2001'. [ 804.872577][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 804.889622][T12252] loop1: detected capacity change from 0 to 32768 [ 804.931789][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 805.034264][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 805.126308][T12244] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 805.375867][T12252] (syz.1.2000,12252,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 805.632530][T12252] (syz.1.2000,12252,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 805.756364][T12244] XFS (loop3): Ending clean mount [ 805.807394][T12244] XFS (loop3): Quotacheck needed: Please wait. [ 807.451116][T12252] JBD2: Ignoring recovery information on journal [ 807.545829][T12252] JBD2: journal reset failed [ 807.561797][T12252] (syz.1.2000,12252,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 807.570761][T12252] (syz.1.2000,12252,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 807.666096][T12244] XFS (loop3): Quotacheck: Done. [ 807.739341][ T5781] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 808.168875][T12284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 808.176223][T12284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 808.216303][T12284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 809.334115][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.340504][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.548977][T12295] loop3: detected capacity change from 0 to 4096 [ 809.813275][T12297] kAFS: No cell specified [ 809.917269][T12295] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 809.925536][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 810.191716][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 810.335802][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 810.443735][T12295] ntfs3: loop3: Failed to load $Extend (-22). [ 810.450464][T12295] ntfs3: loop3: Failed to initialize $Extend. [ 810.711363][T12299] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2013'. [ 812.561857][ T5936] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 812.672007][T12319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 812.724992][T12319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 812.771642][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 812.790108][T12319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 813.596286][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.615144][ T5936] usb 1-1: config 0 has no interfaces? [ 813.642328][ T5936] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 813.656580][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.671644][ T5936] usb 1-1: Product: syz [ 813.675900][ T5936] usb 1-1: Manufacturer: syz [ 813.680545][ T5936] usb 1-1: SerialNumber: syz [ 813.705087][ T5936] usb 1-1: config 0 descriptor?? [ 815.472063][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 815.478506][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 815.478524][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 815.655657][ T5936] usb 1-1: USB disconnect, device number 28 [ 818.715392][T12340] loop0: detected capacity change from 0 to 32768 [ 818.953768][T12357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 818.986778][T12357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 819.009917][T12357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 821.138671][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 821.144839][T10228] Bluetooth: hci3: command 0x0406 tx timeout [ 821.150992][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 822.491728][T12384] serio: Serial port ptm0 [ 823.236584][T12392] loop1: detected capacity change from 0 to 1024 [ 823.448579][ T12] hfsplus: b-tree write err: -5, ino 25 [ 823.463434][ T12] hfsplus: b-tree write err: -5, ino 4 [ 823.469650][ T12] hfsplus: b-tree write err: -5, ino 2 [ 823.494604][ T12] hfsplus: b-tree write err: -5, ino 26 [ 825.957967][T12401] loop2: detected capacity change from 0 to 32768 [ 826.021184][T12401] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 826.203867][T12401] XFS (loop2): Ending clean mount [ 826.486739][ T5769] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 826.674753][T12414] netlink: 'syz.1.2043': attribute type 4 has an invalid length. [ 827.131764][T10841] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 827.322353][T10841] usb 2-1: Using ep0 maxpacket: 32 [ 827.335289][T10841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.345816][T10841] usb 2-1: config 0 has no interfaces? [ 827.354880][T10841] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 827.364427][T10841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.373084][T10841] usb 2-1: Product: syz [ 827.377842][T10841] usb 2-1: Manufacturer: syz [ 827.387199][T10841] usb 2-1: SerialNumber: syz [ 827.395199][T10841] usb 2-1: config 0 descriptor?? [ 827.658791][T12425] loop0: detected capacity change from 0 to 1024 [ 827.766073][ T12] hfsplus: b-tree write err: -5, ino 25 [ 827.773201][ T12] hfsplus: b-tree write err: -5, ino 4 [ 827.779179][ T12] hfsplus: b-tree write err: -5, ino 2 [ 827.786842][ T12] hfsplus: b-tree write err: -5, ino 26 [ 829.912162][ T5812] usb 2-1: USB disconnect, device number 28 [ 830.138807][T12448] loop1: detected capacity change from 0 to 4096 [ 830.319327][T12451] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 830.719454][T12445] loop0: detected capacity change from 0 to 32768 [ 830.791142][T12445] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 830.929757][T12445] XFS (loop0): Ending clean mount [ 831.179123][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 834.338497][T12486] 9pnet_fd: Insufficient options for proto=fd [ 835.748033][T12500] capability: warning: `syz.2.2066' uses deprecated v2 capabilities in a way that may be insecure [ 836.226183][T12495] loop0: detected capacity change from 0 to 32768 [ 836.273206][T12495] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 836.376214][T12495] XFS (loop0): Ending clean mount [ 836.582650][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 838.870938][T12524] loop2: detected capacity change from 0 to 256 [ 838.903651][T12524] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 841.644888][T12543] loop1: detected capacity change from 0 to 4096 [ 841.835661][T12543] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 842.077682][T12543] ntfs3: loop1: Failed to load $Extend (-22). [ 842.106276][T12543] ntfs3: loop1: Failed to initialize $Extend. [ 843.575675][T12550] loop1: detected capacity change from 0 to 512 [ 843.648607][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 843.659596][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 843.681938][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 843.703784][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 843.721926][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 843.733593][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 843.743216][ T3490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.815437][T12550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.835562][ T3490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.037555][ T9608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.112961][ T3490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.134906][ T3490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.303598][ T3490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.515335][ T3490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.508249][ T3490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.639920][ T3490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.761145][T12563] 9pnet_fd: Insufficient options for proto=fd [ 845.792167][T10228] Bluetooth: hci3: command tx timeout [ 847.055907][T12575] netlink: 'syz.0.2085': attribute type 4 has an invalid length. [ 847.339377][T12581] lo speed is unknown, defaulting to 1000 [ 847.340406][T12583] loop0: detected capacity change from 0 to 128 [ 847.369736][T12581] lo speed is unknown, defaulting to 1000 [ 847.695579][T12581] lo speed is unknown, defaulting to 1000 [ 847.786458][T12581] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 847.840781][T12551] chnl_net:caif_netlink_parms(): no params data found [ 847.871653][T10228] Bluetooth: hci3: command tx timeout [ 847.951428][T12581] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 848.177599][T12581] lo speed is unknown, defaulting to 1000 [ 848.309695][T12581] lo speed is unknown, defaulting to 1000 [ 849.293640][T12581] lo speed is unknown, defaulting to 1000 [ 849.301127][T12581] lo speed is unknown, defaulting to 1000 [ 849.442288][T12581] lo speed is unknown, defaulting to 1000 [ 849.611298][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.641762][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.663443][T12551] bridge_slave_0: entered allmulticast mode [ 849.693502][T12551] bridge_slave_0: entered promiscuous mode [ 849.823676][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.845518][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.859211][T12551] bridge_slave_1: entered allmulticast mode [ 849.872630][T12551] bridge_slave_1: entered promiscuous mode [ 849.944859][T12616] loop1: detected capacity change from 0 to 512 [ 849.952177][T10228] Bluetooth: hci3: command tx timeout [ 850.015690][T12551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.055630][T12616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.284559][ T9608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.368631][T12626] 9pnet_fd: Insufficient options for proto=fd [ 850.396202][T12551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.151362][T12636] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 852.581616][T10228] Bluetooth: hci3: command tx timeout [ 853.004028][T12551] team0: Port device team_slave_0 added [ 853.575038][T12551] team0: Port device team_slave_1 added [ 853.810019][ T3490] hsr_slave_0: left promiscuous mode [ 853.852006][ T3490] hsr_slave_1: left promiscuous mode [ 853.870566][T12651] loop2: detected capacity change from 0 to 1024 [ 853.883005][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.925277][ T3490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.966238][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.982193][ T3490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.016249][T12651] hfsplus: extend alloc file! (8192,512,17039360) [ 854.154773][ T3490] bridge_slave_1: left allmulticast mode [ 854.214512][ T3490] bridge_slave_1: left promiscuous mode [ 854.277736][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.470985][ T3490] bridge_slave_0: left allmulticast mode [ 854.552660][ T3490] bridge_slave_0: left promiscuous mode [ 854.624525][ T3490] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.350788][ T3490] veth1_macvtap: left promiscuous mode [ 855.361425][ T3490] veth0_macvtap: left promiscuous mode [ 855.368490][ T3490] veth1_vlan: left promiscuous mode [ 855.374416][ T3490] veth0_vlan: left promiscuous mode [ 855.474124][T12659] 9pnet_fd: Insufficient options for proto=fd [ 855.625802][T12661] loop0: detected capacity change from 0 to 512 [ 855.736367][T12661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.794418][ T3490] infiniband syz2: set down [ 855.840867][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.798117][T12678] loop0: detected capacity change from 0 to 32768 [ 860.811054][T12685] loop1: detected capacity change from 0 to 4096 [ 860.831704][T12678] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2106 (12678) [ 860.894671][T12678] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 860.924819][T12678] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 860.952816][T12678] BTRFS info (device loop0): setting nodatasum [ 860.960118][T12678] BTRFS info (device loop0): force zlib compression, level 3 [ 860.970886][T12685] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 860.985571][T12678] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 860.997019][ T3490] team0 (unregistering): Port device team_slave_1 removed [ 861.037577][T12685] ntfs3: loop1: Failed to load $Extend (-22). [ 861.045513][T12678] BTRFS info (device loop0): use lzo compression, level 0 [ 861.053620][T12685] ntfs3: loop1: Failed to initialize $Extend. [ 861.086885][T12678] BTRFS info (device loop0): turning on flush-on-commit [ 861.104617][T12678] BTRFS info (device loop0): enabling auto defrag [ 861.151647][T12678] BTRFS info (device loop0): max_inline at 4096 [ 861.157999][T12678] BTRFS info (device loop0): using free space tree [ 861.242532][ T3490] team0 (unregistering): Port device team_slave_0 removed [ 861.415313][T12678] BTRFS info (device loop0): enabling ssd optimizations [ 861.449572][ T3490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.582945][ T3490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.729526][ T6786] smc: removing ib device syz2 [ 861.936714][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 863.068302][ T3490] bond0 (unregistering): Released all slaves [ 863.338723][T12713] loop1: detected capacity change from 0 to 40427 [ 863.362572][T12713] F2FS-fs (loop1): invalid crc value [ 863.390919][T12713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 863.486658][T11967] infiniband syz2: ib_query_port failed (-19) [ 863.493820][T12713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 863.550783][T12551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.600436][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.633050][T12551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.695230][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.703239][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.830749][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.229891][T12551] hsr_slave_0: entered promiscuous mode [ 864.269244][T12551] hsr_slave_1: entered promiscuous mode [ 864.327441][T12551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 864.337721][T12723] loop2: detected capacity change from 0 to 1024 [ 864.350128][T12551] Cannot create hsr debugfs directory [ 864.452208][T12723] hfsplus: bad catalog entry type [ 864.590107][T10775] hfsplus: b-tree write err: -5, ino 25 [ 864.620470][T10775] hfsplus: b-tree write err: -5, ino 4 [ 864.638173][T10775] hfsplus: b-tree write err: -5, ino 2 [ 866.782407][T12730] loop1: detected capacity change from 0 to 32768 [ 867.161373][T12751] lo speed is unknown, defaulting to 1000 [ 867.253099][T12551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 867.357618][T12759] loop1: detected capacity change from 0 to 1024 [ 867.398543][T12551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 867.455861][T12551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 867.491695][ T5812] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 867.497172][T12551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 867.543865][ T3490] hfsplus: b-tree write err: -5, ino 25 [ 867.549735][ T3490] hfsplus: b-tree write err: -5, ino 4 [ 867.559998][ T3490] hfsplus: b-tree write err: -5, ino 2 [ 867.571038][ T3490] hfsplus: b-tree write err: -5, ino 26 [ 867.712925][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 867.722014][ T5812] usb 3-1: config 0 has no interfaces? [ 867.736820][ T5812] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 867.746545][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.758241][ T5812] usb 3-1: Product: syz [ 867.762824][ T5812] usb 3-1: Manufacturer: syz [ 867.767743][ T5812] usb 3-1: SerialNumber: syz [ 867.777591][ T5812] usb 3-1: config 0 descriptor?? [ 867.797906][T12766] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2127'. [ 867.813154][T12766] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2127'. [ 867.958779][T12551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.009362][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.056921][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.064243][ T6780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.081949][T12751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2124'. [ 868.107962][ T23] usb 3-1: USB disconnect, device number 29 [ 868.144290][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.151673][ T6797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.664770][T12551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.229674][T12804] loop2: detected capacity change from 0 to 764 [ 869.257063][T12800] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2135'. [ 869.739397][T12804] rock: directory entry would overflow storage [ 869.859525][T12804] rock: sig=0x4654, size=5, remaining=4 [ 870.097556][T12810] loop0: detected capacity change from 0 to 512 [ 870.202463][T12810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.294376][T12812] lo speed is unknown, defaulting to 1000 [ 870.387111][T12822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2138'. [ 870.498571][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.522213][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.528606][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.635640][T12824] lo speed is unknown, defaulting to 1000 [ 870.751985][ T23] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 870.912846][T12551] veth0_vlan: entered promiscuous mode [ 870.952098][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 870.975839][T12551] veth1_vlan: entered promiscuous mode [ 870.982196][ T23] usb 3-1: config 0 has no interfaces? [ 871.010967][ T23] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 871.038098][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.078710][ T23] usb 3-1: Product: syz [ 871.110181][ T23] usb 3-1: Manufacturer: syz [ 871.118207][T12551] veth0_macvtap: entered promiscuous mode [ 871.129152][ T23] usb 3-1: SerialNumber: syz [ 871.150902][ T23] usb 3-1: config 0 descriptor?? [ 871.245863][T12551] veth1_macvtap: entered promiscuous mode [ 871.308551][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.344936][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.368753][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.421756][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.441671][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.458439][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.470910][T12551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.493079][T12824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2140'. [ 871.543832][ T23] usb 3-1: USB disconnect, device number 30 [ 871.585192][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.605309][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.625295][T12551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.640622][T12551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.656540][T12551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.738455][T12551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.755941][T12551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.769565][T12551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.780123][T12551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.858987][T12834] loop1: detected capacity change from 0 to 32768 [ 871.931130][T12834] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2142 (12834) [ 871.997845][T12834] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 872.057804][T12834] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 872.091932][T12834] BTRFS info (device loop1): enabling auto defrag [ 872.098455][T12834] BTRFS info (device loop1): use no compression [ 872.138876][T12834] BTRFS info (device loop1): force clearing of disk cache [ 872.173190][T12834] BTRFS info (device loop1): max_inline at 4096 [ 872.179550][T12834] BTRFS info (device loop1): disabling free space tree [ 872.250765][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.285803][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.397838][T12834] BTRFS info (device loop1): enabling ssd optimizations [ 872.405966][T12834] BTRFS info (device loop1): auto enabling async discard [ 872.430243][T12859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2145'. [ 872.441339][T12859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2145'. [ 872.461276][T12834] BTRFS info (device loop1): rebuilding free space tree [ 872.509880][ T9522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.558811][ T9522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.696498][T12834] BTRFS info (device loop1): disabling free space tree [ 872.711375][T12834] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 872.767523][T12834] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 872.792867][T12878] loop0: detected capacity change from 0 to 512 [ 872.904200][T12878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 873.188478][ T28] audit: type=1326 audit(1772789631.431:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 873.452855][T12884] lo speed is unknown, defaulting to 1000 [ 873.780006][T12883] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 873.851711][ T28] audit: type=1326 audit(1772789631.431:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 873.942538][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.954820][ T28] audit: type=1326 audit(1772789631.431:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 873.996651][ T28] audit: type=1326 audit(1772789631.431:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 874.091902][ T28] audit: type=1326 audit(1772789631.431:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 874.159648][ T9608] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 874.219882][ T28] audit: type=1326 audit(1772789631.431:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 874.277107][ T28] audit: type=1326 audit(1772789631.441:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 874.381637][ T28] audit: type=1326 audit(1772789631.441:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 874.659030][T12758] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop1 scanned by udevd (12758) [ 874.898496][ T28] audit: type=1326 audit(1772789631.441:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 875.272511][ T28] audit: type=1326 audit(1772789631.441:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367539c799 code=0x7ffc0000 [ 875.577792][T12908] lo speed is unknown, defaulting to 1000 [ 875.742001][T10841] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 875.952186][T10841] usb 5-1: Using ep0 maxpacket: 16 [ 875.984243][T10841] usb 5-1: config 0 has no interfaces? [ 876.013417][T10841] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 876.031704][T10841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.050007][T10841] usb 5-1: Product: syz [ 876.080440][T10841] usb 5-1: Manufacturer: syz [ 876.085697][T10841] usb 5-1: SerialNumber: syz [ 876.103708][T10841] usb 5-1: config 0 descriptor?? [ 876.121730][T12911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 876.132197][T12911] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 876.182122][T12911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 876.191853][T12911] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 876.344128][T12911] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 876.404882][T12908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2152'. [ 876.433365][ T7709] usb 5-1: USB disconnect, device number 2 [ 876.536305][T12925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2154'. [ 876.616338][T12925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2154'. [ 876.746536][T12928] netlink: 'syz.2.2156': attribute type 4 has an invalid length. [ 876.914168][T12932] loop1: detected capacity change from 0 to 512 [ 877.245790][T12932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.897204][T10228] Bluetooth: hci1: command 0x0406 tx timeout [ 878.046276][ T9608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.192195][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 878.199038][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 878.324082][T12930] loop0: detected capacity change from 0 to 32768 [ 878.358138][T12930] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2157 (12930) [ 878.424464][T12930] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 878.460506][T12930] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 878.497181][T12930] BTRFS info (device loop0): enabling disk space caching [ 878.520172][T12930] BTRFS info (device loop0): force clearing of disk cache [ 878.542339][T12930] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 878.569978][T12930] BTRFS info (device loop0): use zstd compression, level 3 [ 878.591638][T12930] BTRFS info (device loop0): disk space caching is enabled [ 878.753827][T12964] loop1: detected capacity change from 0 to 4096 [ 878.800638][T12930] BTRFS info (device loop0): enabling ssd optimizations [ 878.842370][T12964] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 878.844492][T12930] BTRFS info (device loop0): auto enabling async discard [ 878.889609][T12930] BTRFS info (device loop0): rebuilding free space tree [ 878.910424][T12930] BTRFS info (device loop0): disabling free space tree [ 878.927550][T12930] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 878.945367][T12964] ntfs3: loop1: Failed to load $Extend (-22). [ 878.958599][T12964] ntfs3: loop1: Failed to initialize $Extend. [ 878.969642][T12930] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 879.309414][T12982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2166'. [ 879.352007][T12982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2166'. [ 879.399482][T12985] netlink: 'syz.1.2167': attribute type 4 has an invalid length. [ 879.515332][ T5771] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 879.621977][T12987] lo speed is unknown, defaulting to 1000 [ 879.755131][T12758] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop0 scanned by udevd (12758) [ 879.859386][ T5815] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 880.128533][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 880.140604][ T5815] usb 3-1: config 0 has no interfaces? [ 880.145130][ T5815] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 880.145163][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.145193][ T5815] usb 3-1: Product: syz [ 880.145208][ T5815] usb 3-1: Manufacturer: syz [ 880.145224][ T5815] usb 3-1: SerialNumber: syz [ 880.151120][ T5815] usb 3-1: config 0 descriptor?? [ 880.286937][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 880.425861][T12987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2168'. [ 880.558950][ T7709] usb 3-1: USB disconnect, device number 31 [ 880.794139][T13020] 9pnet_fd: Insufficient options for proto=fd [ 880.929660][T13025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2179'. [ 880.939866][T13025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2179'. [ 881.243330][T13028] lo speed is unknown, defaulting to 1000 [ 882.036218][T13032] netlink: 'syz.1.2180': attribute type 4 has an invalid length. [ 882.352898][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 883.626296][T13059] 9pnet_fd: Insufficient options for proto=fd [ 885.066719][T13065] lo speed is unknown, defaulting to 1000 [ 885.312231][T10841] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 886.397293][T10841] usb 3-1: Using ep0 maxpacket: 16 [ 886.414366][T10841] usb 3-1: config 0 has no interfaces? [ 886.430540][T10841] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 886.448271][T10841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.495701][T10841] usb 3-1: Product: syz [ 886.499943][T10841] usb 3-1: Manufacturer: syz [ 886.557859][T10841] usb 3-1: SerialNumber: syz [ 886.612739][T10841] usb 3-1: config 0 descriptor?? [ 886.881464][ T23] usb 3-1: USB disconnect, device number 32 [ 887.071657][T13096] 9pnet_fd: Insufficient options for proto=fd [ 887.288659][T13103] netlink: 'syz.4.2199': attribute type 4 has an invalid length. [ 887.489436][T13091] loop1: detected capacity change from 0 to 32768 [ 887.553067][T13091] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 887.768161][T13091] XFS (loop1): Ending clean mount [ 888.334271][ T9608] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 890.452224][T13151] 9pnet_fd: Insufficient options for proto=fd [ 891.224799][T13153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 891.254079][T13153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 891.532518][T13153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 892.489380][T13158] loop1: detected capacity change from 0 to 32768 [ 895.542920][T13196] loop2: detected capacity change from 0 to 512 [ 897.515665][T13158] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 897.539569][T10228] Bluetooth: hci1: command 0x0406 tx timeout [ 897.554981][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 897.576528][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 897.819925][T13196] EXT4-fs (loop2): filesystem is read-only [ 897.829962][T13196] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 897.842149][T13196] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 897.842582][T13196] EXT4-fs: failed to create workqueue [ 897.857548][T13196] EXT4-fs (loop2): mount failed [ 898.364233][T13208] 9pnet_fd: Insufficient options for proto=fd [ 898.511178][T13213] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 899.063797][T13216] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 899.070040][T13216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 899.127472][T13216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 899.976348][T13235] loop2: detected capacity change from 0 to 128 [ 900.392375][T13235] loop2: detected capacity change from 128 to 1 [ 900.401314][T13247] syz.2.2226: attempt to access beyond end of device [ 900.401314][T13247] loop2: rw=2049, sector=6, nr_sectors = 2 limit=1 [ 900.488873][T13247] Buffer I/O error on dev loop2, logical block 3, lost sync page write [ 900.575337][T13247] syz.2.2226: attempt to access beyond end of device [ 900.575337][T13247] loop2: rw=0, sector=6, nr_sectors = 2 limit=1 [ 900.621947][T13247] FAT-fs (loop2): Directory bread(block 3) failed [ 900.629044][T13247] syz.2.2226: attempt to access beyond end of device [ 900.629044][T13247] loop2: rw=2049, sector=8, nr_sectors = 2 limit=1 [ 900.671794][T13247] Buffer I/O error on dev loop2, logical block 4, lost sync page write [ 900.761998][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 900.912066][T12758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 901.071676][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 901.151635][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 901.237061][T13243] loop1: detected capacity change from 0 to 32768 [ 901.261193][T13259] loop2: detected capacity change from 0 to 764 [ 901.342701][T13243] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 901.374511][T13259] rock: directory entry would overflow storage [ 901.400382][T13259] rock: sig=0x4654, size=5, remaining=4 [ 901.465392][T13243] XFS (loop1): Ending clean mount [ 901.697237][ T9608] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 902.683510][T13277] 9pnet_fd: Insufficient options for proto=fd [ 903.442493][T13284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 903.448755][T13284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 903.474517][T13284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 903.918462][T13296] loop1: detected capacity change from 0 to 128 [ 903.959391][T13296] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 903.979217][T13296] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.670084][ T9608] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 904.925189][T13313] netlink: 'syz.1.2241': attribute type 4 has an invalid length. [ 905.322580][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 905.541801][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 905.554021][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 906.349890][T13320] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 906.379111][T13320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 906.391432][T13320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 906.904998][T10228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 906.917651][T10228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 906.928879][T10228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 906.939267][T10228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 906.947333][T10228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 906.954933][T10228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 907.107252][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.126279][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.335644][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.346514][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.377273][T13339] lo speed is unknown, defaulting to 1000 [ 907.519776][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.571568][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.685416][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 908.691768][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 908.942815][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.991594][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.002223][ T51] Bluetooth: hci1: command tx timeout [ 909.372567][T13359] loop0: detected capacity change from 0 to 1024 [ 909.448886][T13359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 909.519100][T13359] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.584267][T13359] EXT4-fs error (device loop0): ext4_free_blocks:6690: comm syz.0.2251: Freeing blocks not in datazone - block = 0, count = 16 [ 910.234153][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 910.680365][T13339] chnl_net:caif_netlink_parms(): no params data found [ 911.071871][ T51] Bluetooth: hci1: command tx timeout [ 911.382992][T13378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 911.389274][T13378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 911.420769][T13378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 911.429128][T13339] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.436812][T13378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 911.443238][T13339] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.450714][T13339] bridge_slave_0: entered allmulticast mode [ 911.463079][T13378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 911.471088][T13339] bridge_slave_0: entered promiscuous mode [ 911.564811][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.575359][T13339] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.608737][T13339] bridge_slave_1: entered allmulticast mode [ 911.651927][T13339] bridge_slave_1: entered promiscuous mode [ 911.844320][T13397] loop1: detected capacity change from 0 to 764 [ 911.940751][T13397] rock: directory entry would overflow storage [ 911.956762][T13397] rock: sig=0x4654, size=5, remaining=4 [ 912.164250][T13339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.195210][T13339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.579801][T13339] team0: Port device team_slave_0 added [ 912.625871][T13339] team0: Port device team_slave_1 added [ 912.949256][T13339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.956614][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.984758][T13339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.088174][T13339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.096515][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.127541][T13339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.358664][T13339] hsr_slave_0: entered promiscuous mode [ 913.382388][T13339] hsr_slave_1: entered promiscuous mode [ 913.391722][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 913.397995][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 913.423127][T13339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 913.430847][T13339] Cannot create hsr debugfs directory [ 913.472001][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 913.492247][ T12] hsr_slave_0: left promiscuous mode [ 913.498521][ T12] hsr_slave_1: left promiscuous mode [ 913.509572][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.521628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.664769][ T12] bridge_slave_1: left allmulticast mode [ 913.671075][ T12] bridge_slave_1: left promiscuous mode [ 913.678008][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.699143][ T12] bridge_slave_0: left allmulticast mode [ 913.716001][ T12] bridge_slave_0: left promiscuous mode [ 914.434491][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.711466][ T12] veth1_macvtap: left promiscuous mode [ 914.732066][ T12] veth0_macvtap: left promiscuous mode [ 914.772091][ T12] veth1_vlan: left promiscuous mode [ 914.812066][ T12] veth0_vlan: left promiscuous mode [ 914.950632][T13438] serio: Serial port ptm0 [ 915.559417][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 917.444047][ T12] team0 (unregistering): Port device team_slave_1 removed [ 917.518164][ T12] team0 (unregistering): Port device team_slave_0 removed [ 917.611235][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.631941][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 917.761198][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.507490][ T12] team0 (unregistering): Port device dummy0 removed [ 918.646595][ T12] bond0 (unregistering): Released all slaves [ 918.891744][T13431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 918.897977][T13431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 918.912093][T13431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 919.234242][T13464] loop0: detected capacity change from 0 to 512 [ 919.272723][T13464] EXT4-fs: Ignoring removed bh option [ 919.310687][T13464] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 919.437147][T13464] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.2268: corrupted in-inode xattr: e_value size too large [ 919.533503][T13464] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.2268: couldn't read orphan inode 15 (err -117) [ 919.573446][T13464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.667300][T13464] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 919.816289][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.332655][T13339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 920.353496][T13339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 920.383756][T13339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 920.410133][T13339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 920.739154][T13339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.748124][T13487] loop1: detected capacity change from 0 to 2048 [ 920.813713][T13339] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.821371][T13487] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 920.835975][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.843308][ T9787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.863026][T13487] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 920.876985][T13487] UDF-fs: Scanning with blocksize 512 failed [ 920.905838][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.913116][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.932986][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 920.939087][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 920.963397][T13487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 920.991720][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 921.166871][T13339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 921.783289][T13506] serio: Serial port ptm0 [ 923.433062][T13339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.541120][T13339] veth0_vlan: entered promiscuous mode [ 923.577817][T13339] veth1_vlan: entered promiscuous mode [ 923.769878][T13339] veth0_macvtap: entered promiscuous mode [ 923.852962][T13339] veth1_macvtap: entered promiscuous mode [ 923.917650][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.942681][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.957342][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.981889][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.018351][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.039145][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.074922][T13339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.114618][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.147171][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.175619][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.220509][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.239005][T13339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.260880][T13339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.308591][T13339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.345219][T13339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.390022][T13339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.402973][T13339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.423875][T13339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.619284][T13536] netlink: 'syz.0.2282': attribute type 4 has an invalid length. [ 924.689462][ T6786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.726115][ T6786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.753935][T13518] loop1: detected capacity change from 0 to 40427 [ 924.811756][T13518] F2FS-fs (loop1): invalid crc value [ 924.835462][T13518] F2FS-fs (loop1): Found nat_bits in checkpoint [ 924.838488][ T6797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.871602][ T6797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.950529][T13518] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 925.152590][T13547] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 925.733185][T13554] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 925.746338][T13554] F2FS-fs (loop1): Stopped filesystem due to reason: 4 [ 928.249937][T13572] netlink: 'syz.0.2291': attribute type 4 has an invalid length. [ 929.567479][T13581] loop1: detected capacity change from 0 to 64 [ 929.889189][T13586] overlay: filesystem on ./file0 not supported as upperdir [ 930.940763][T13594] loop2: detected capacity change from 0 to 512 [ 930.949511][T13594] EXT4-fs: Ignoring removed nobh option [ 930.955988][T13594] EXT4-fs: Ignoring removed nobh option [ 930.963989][T13594] EXT4-fs: Ignoring removed orlov option [ 931.126685][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.126685][ T9787] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 931.189923][ T9787] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 931.212353][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.212353][ T9787] loop1: rw=1, sector=66, nr_sectors = 1 limit=64 [ 931.251854][ T9787] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 931.267481][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.267481][ T9787] loop1: rw=1, sector=67, nr_sectors = 1 limit=64 [ 931.292708][ T9787] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 931.301292][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.301292][ T9787] loop1: rw=1, sector=68, nr_sectors = 1 limit=64 [ 931.360780][ T9787] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 931.389910][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.389910][ T9787] loop1: rw=1, sector=72, nr_sectors = 1 limit=64 [ 931.425047][ T9787] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 931.529587][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.529587][ T9787] loop1: rw=1, sector=73, nr_sectors = 1 limit=64 [ 931.572756][ T9787] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 931.593865][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.593865][ T9787] loop1: rw=1, sector=76, nr_sectors = 1 limit=64 [ 931.649841][ T9787] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 931.683012][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.683012][ T9787] loop1: rw=1, sector=77, nr_sectors = 1 limit=64 [ 931.741612][ T9787] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 931.780118][ T9787] kworker/u4:3: attempt to access beyond end of device [ 931.780118][ T9787] loop1: rw=1, sector=78, nr_sectors = 1608 limit=64 [ 931.962798][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.945526][T13622] serio: Serial port ptm0 [ 934.574523][T13619] loop2: detected capacity change from 0 to 512 [ 934.611635][T13621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2305'. [ 934.631451][T13619] EXT4-fs: Ignoring removed bh option [ 934.675072][T13624] netlink: 'syz.4.2305': attribute type 5 has an invalid length. [ 934.713161][T13624] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.722059][T13624] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.730941][T13624] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.740816][T13624] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.768677][T13619] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 935.121139][T13619] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.2306: corrupted in-inode xattr: e_value size too large [ 935.150233][T13624] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.159981][T13624] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.169343][T13624] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.178511][T13624] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.211096][T13619] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2306: couldn't read orphan inode 15 (err -117) [ 935.240062][T13619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 935.345299][T13625] netlink: 'syz.4.2305': attribute type 5 has an invalid length. [ 935.414428][T13625] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.423840][T13625] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.432659][T13625] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.441422][T13625] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.499858][T13339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.519207][T13625] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.528372][T13625] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.537601][T13625] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.546588][T13625] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.916934][T13637] loop0: detected capacity change from 0 to 64 [ 936.031579][T13634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 936.088123][T13634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 936.121837][T13634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 937.541510][T13655] loop0: detected capacity change from 0 to 512 [ 937.560271][T13655] EXT4-fs: Ignoring removed orlov option [ 937.745800][T13655] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 937.837352][T13655] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 937.871900][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 937.987791][T13662] serio: Serial port ptm0 [ 938.214069][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 938.231202][T13655] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.2315: corrupted in-inode xattr: e_value size too large [ 938.305637][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 938.542828][T13655] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.2315: couldn't read orphan inode 15 (err -117) [ 938.624994][T13655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.102083][T13669] xfrm1: entered promiscuous mode [ 940.817227][T13676] loop1: detected capacity change from 0 to 512 [ 940.856775][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.867324][T13676] EXT4-fs: Ignoring removed bh option [ 940.899204][T13676] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 941.118005][T13676] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.2319: corrupted in-inode xattr: e_value size too large [ 941.483992][T13676] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.2319: couldn't read orphan inode 15 (err -117) [ 941.516878][T13676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 941.604544][T13684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 941.613510][T13684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 941.620035][T13684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 941.726675][ T9608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.927727][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2325'. [ 943.706492][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 943.773587][T10228] Bluetooth: hci1: command 0x0419 tx timeout [ 943.779918][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 944.422834][T13722] loop2: detected capacity change from 0 to 512 [ 944.434513][T13722] EXT4-fs: Ignoring removed bh option [ 944.551874][T13723] loop0: detected capacity change from 0 to 512 [ 944.739369][T13723] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 944.749709][T13723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 944.763038][T13723] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 944.773006][T13723] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 944.782253][T13723] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 944.792970][T13723] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 944.813003][T13722] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 945.093633][T13722] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.2332: corrupted in-inode xattr: e_value size too large [ 945.235116][T13722] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2332: couldn't read orphan inode 15 (err -117) [ 945.275786][T13722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.331874][T13716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 945.350822][T13716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 945.361657][T13716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 945.372254][T13722] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 945.494486][T13339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.591850][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 947.540205][T10228] Bluetooth: hci1: command 0x0419 tx timeout [ 947.546891][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 947.767889][T13747] 9pnet_fd: Insufficient options for proto=fd [ 948.539779][T13759] serio: Serial port ptm0 [ 949.024997][T13758] loop0: detected capacity change from 0 to 512 [ 949.177373][T13758] EXT4-fs: Ignoring removed bh option [ 949.203024][T13758] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 949.232147][T13758] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.2345: corrupted in-inode xattr: e_value size too large [ 949.260263][T13758] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.2345: couldn't read orphan inode 15 (err -117) [ 949.310469][T13758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.483124][T13758] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 949.573323][T13763] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 949.599001][T13763] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 949.614605][T13763] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 949.632683][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.686669][T13770] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2347'. [ 951.003358][T13786] 9pnet_fd: Insufficient options for proto=fd [ 951.614241][T10228] Bluetooth: hci2: command 0x0406 tx timeout [ 951.829828][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 951.835940][T10228] Bluetooth: hci1: command 0x0419 tx timeout [ 953.109062][T13798] serio: Serial port ptm0 [ 954.969027][T13816] 9pnet_fd: Insufficient options for proto=fd [ 955.036961][T13806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 955.065499][T13806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 955.237175][T13806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 955.445129][T13824] xfrm1: entered promiscuous mode [ 956.187811][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 956.440656][T13834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.617362][T13829] loop2: detected capacity change from 0 to 32768 [ 956.633469][T13829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2368 (13829) [ 956.647352][ T5812] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 956.659945][T13829] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 956.672553][T13829] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 956.681869][T13829] BTRFS info (device loop2): setting nodatasum [ 956.688212][T13829] BTRFS info (device loop2): force zlib compression, level 3 [ 956.696279][T13829] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 956.706417][T13829] BTRFS info (device loop2): use lzo compression, level 0 [ 956.715421][T13829] BTRFS info (device loop2): turning on flush-on-commit [ 956.722624][T13829] BTRFS info (device loop2): enabling auto defrag [ 956.729265][T13829] BTRFS info (device loop2): max_inline at 4096 [ 956.737229][T13829] BTRFS info (device loop2): using free space tree [ 956.818393][T13829] BTRFS info (device loop2): enabling ssd optimizations [ 956.862337][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 956.882671][ T5812] usb 5-1: config index 0 descriptor too short (expected 6701, got 45) [ 956.911072][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.943568][ T5812] usb 5-1: config 0 has no interfaces? [ 956.956965][ T5812] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 956.996234][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.026170][ T5812] usb 5-1: config 0 descriptor?? [ 957.125185][T13339] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 957.288519][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 957.480905][T13859] serio: Serial port ptm0 [ 957.485597][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 959.697542][ T23] usb 5-1: USB disconnect, device number 3 [ 959.817170][T13879] 9pnet_fd: Insufficient options for proto=fd [ 959.886005][T13866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 959.916738][T13866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 959.947210][T13866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 962.272401][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 962.278839][T10228] Bluetooth: hci1: command 0x0419 tx timeout [ 962.285290][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 963.306957][T13898] serio: Serial port ptm0 [ 964.421617][T13911] 9pnet_fd: Insufficient options for proto=fd [ 964.889047][T13914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 964.908092][T13914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 964.919062][T13914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 965.435624][T13915] loop0: detected capacity change from 0 to 32768 [ 965.465268][T13915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2389 (13915) [ 965.631701][T13915] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 965.661341][T13915] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 965.695965][T13915] BTRFS info (device loop0): setting nodatasum [ 965.719917][T13915] BTRFS info (device loop0): force zlib compression, level 3 [ 965.727496][T13915] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 965.755993][T13915] BTRFS info (device loop0): use lzo compression, level 0 [ 965.766874][T13915] BTRFS info (device loop0): turning on flush-on-commit [ 965.775032][T13915] BTRFS info (device loop0): enabling auto defrag [ 965.794606][T13915] BTRFS info (device loop0): max_inline at 4096 [ 965.820006][T13915] BTRFS info (device loop0): using free space tree [ 965.992679][T13915] BTRFS info (device loop0): enabling ssd optimizations [ 966.006374][T13958] fuse: Bad value for 'fd' [ 966.272867][T13965] 9pnet_fd: Insufficient options for proto=fd [ 966.366540][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 966.581071][T12758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (12758) [ 968.248489][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 968.248512][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 968.255463][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 970.698338][T14003] fuse: Bad value for 'fd' [ 970.894268][T14007] 9pnet_fd: Insufficient options for proto=fd [ 975.903171][T14043] 9pnet_fd: Insufficient options for proto=fd [ 976.430761][T14052] loop0: detected capacity change from 0 to 512 [ 976.467968][T14052] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 976.477648][T14052] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 976.487646][T14052] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 976.496933][T14052] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 976.506678][T14052] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 978.920652][T14060] input: syz1 as /devices/virtual/input/input23 [ 978.967889][T14064] kernel profiling enabled (shift: 9) [ 979.721932][T14068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 979.733515][T14068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 979.742284][T14068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 983.169445][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 983.175721][T10228] Bluetooth: hci1: command 0x0419 tx timeout [ 983.182344][T10228] Bluetooth: hci3: command 0x0c1a tx timeout [ 984.434664][T14102] syz.0.2437 (14102): drop_caches: 2 [ 984.837168][T14100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 985.054095][T14100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 985.148278][T14100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 985.898823][T14113] 9pnet_fd: Insufficient options for proto=fd [ 986.686037][T14092] Bluetooth: hci2: command 0x0406 tx timeout [ 987.604013][T14092] Bluetooth: hci3: command 0x0c1a tx timeout [ 987.610310][T14092] Bluetooth: hci1: command 0x0419 tx timeout [ 994.050835][T14092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 994.065550][T14092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 994.075867][T14092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 994.169543][T14092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 994.183232][T14092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 994.208061][T14092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 994.416492][T14155] lo speed is unknown, defaulting to 1000 [ 994.665765][T14155] chnl_net:caif_netlink_parms(): no params data found [ 994.944864][T14155] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.952535][T14155] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.960400][T14155] bridge_slave_0: entered allmulticast mode [ 994.968625][T14155] bridge_slave_0: entered promiscuous mode [ 994.978831][T14155] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.986257][T14155] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.994405][T14155] bridge_slave_1: entered allmulticast mode [ 995.002400][T14155] bridge_slave_1: entered promiscuous mode [ 995.103921][T14155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.196908][T14155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.526310][ T51] Bluetooth: hci2: command tx timeout [ 996.687168][T14155] team0: Port device team_slave_0 added [ 996.723590][T14155] team0: Port device team_slave_1 added [ 996.835594][T14155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.848777][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.880750][T14155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.925476][T14155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.051957][T14155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.081125][T14155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.810647][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.226222][T14155] hsr_slave_0: entered promiscuous mode [ 998.249049][T14155] hsr_slave_1: entered promiscuous mode [ 998.271978][T14155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 998.300000][T14155] Cannot create hsr debugfs directory [ 999.307792][ T51] Bluetooth: hci2: command tx timeout [ 1000.648492][T14155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.674475][T14155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.496631][ T51] Bluetooth: hci2: command tx timeout [ 1001.708709][T14155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.721883][T14155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.913386][T14155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.925147][T14155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.173760][T14155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.192435][T14155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.713148][T14155] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1002.726131][T14155] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1002.741287][T14155] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1002.754840][T14155] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1003.739225][ T51] Bluetooth: hci2: command tx timeout [ 1004.021000][T14155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.068491][T14259] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2483'. [ 1004.092926][T14155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.130627][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.137940][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.250335][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.257682][ T6786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.932248][T14155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.997509][T14155] veth0_vlan: entered promiscuous mode [ 1005.021187][T14155] veth1_vlan: entered promiscuous mode [ 1005.055753][ T7709] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1005.119009][T14155] veth0_macvtap: entered promiscuous mode [ 1005.150027][T14155] veth1_macvtap: entered promiscuous mode [ 1005.222046][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.244419][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.259420][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.279888][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.301012][ T7709] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.322242][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.336051][ T7709] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1005.346785][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.357226][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.369735][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.380921][ T7709] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.390296][ T7709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.403512][T14155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.441049][ T7709] usb 2-1: Product: syz [ 1005.445302][ T7709] usb 2-1: Manufacturer: syz [ 1005.473682][ T7709] usb 2-1: SerialNumber: syz [ 1005.485142][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.509616][ T7709] cdc_mbim 2-1:1.0: skipping garbage [ 1005.532055][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.548866][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.560741][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.573648][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.591371][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.606012][T14155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.619777][T14155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.638131][T14155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.699922][T14155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.732442][T14267] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1005.754506][T14155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.787289][T14155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.850556][T14155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.429359][T14267] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1007.000678][ T7709] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 1007.007491][ T7709] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1007.016191][ T7709] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1007.036698][ T9787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.046848][ T7709] wwan wwan0: port wwan0mbim0 attached [ 1007.084917][ T9787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.108425][ T7709] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 7e:01:1b:7a:d4:7d [ 1007.321178][ T9787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.360366][ T9787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.536693][T14295] loop2: detected capacity change from 0 to 512 [ 1007.681179][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.801684][T14295] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1007.811281][T14295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1007.822849][T14295] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1007.832262][T14295] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 1007.842448][T14295] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1008.019007][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.624885][T14297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1008.640520][T14297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1008.663925][T14297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1008.702117][T14297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1008.999502][T14297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1009.431473][ T23] usb 2-1: USB disconnect, device number 29 [ 1009.443822][ T23] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1009.630129][ T23] wwan wwan0: port wwan0mbim0 disconnected [ 1012.200672][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1012.215190][T14092] Bluetooth: hci1: command 0x0419 tx timeout [ 1012.221420][T14092] Bluetooth: hci2: command 0x0c1a tx timeout [ 1012.904204][T14353] input: syz1 as /devices/virtual/input/input27 [ 1014.792348][T14092] Bluetooth: hci2: command 0x0c1a tx timeout [ 1017.023876][T14092] Bluetooth: hci2: command 0x0c1a tx timeout [ 1017.474733][T14400] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2513'. [ 1019.768581][T14407] input: syz1 as /devices/virtual/input/input28 [ 1024.453903][T14441] loop0: detected capacity change from 0 to 512 [ 1024.524371][T14441] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1024.534039][T14441] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1024.543967][T14441] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1024.553119][T14441] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 1024.563476][T14441] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1024.638080][T12758] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1025.059593][T14453] input: syz1 as /devices/virtual/input/input29 [ 1026.257085][T14464] fuse: Bad value for 'group_id' [ 1026.332462][T14466] 9pnet_fd: Insufficient options for proto=fd [ 1026.481370][T14469] can0: slcan on ptm0. [ 1026.717811][T14467] can0 (unregistered): slcan off ptm0. [ 1029.610927][ T6786] Bluetooth: (null): Invalid header checksum [ 1031.340308][ T6786] Bluetooth: (null): Invalid header checksum [ 1032.569008][T14498] loop0: detected capacity change from 0 to 128 [ 1032.720482][T14498] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1032.831093][T14498] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.953220][T14506] fuse: Bad value for 'group_id' [ 1033.394848][T14155] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1033.570909][T14521] loop1: detected capacity change from 0 to 4096 [ 1033.620080][T14521] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1035.474510][T14521] ntfs3: loop1: Failed to load $Extend (-22). [ 1035.506248][T14521] ntfs3: loop1: Failed to initialize $Extend. [ 1035.873735][ T5812] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1036.087652][ T5812] usb 5-1: Using ep0 maxpacket: 8 [ 1036.120060][ T5812] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 1036.191389][ T5812] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 1036.234182][ T5812] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1036.280423][T14550] fuse: Bad value for 'group_id' [ 1036.296374][ T5812] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1036.372395][ T5812] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1036.420560][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1036.428653][ T5812] usb 5-1: SerialNumber: syz [ 1036.475151][T14532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1036.493452][T14532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1038.911643][T14532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1038.964457][T14532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1039.463246][ T5812] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1039.704479][ T5812] usb 5-1: USB disconnect, device number 4 [ 1039.717083][ T5812] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 1042.778514][T14605] input: syz1 as /devices/virtual/input/input30 [ 1043.234844][T14615] loop0: detected capacity change from 0 to 4096 [ 1045.673265][T14627] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2574'. [ 1050.722328][T14655] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2584'. [ 1051.144228][ T5815] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1051.435878][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 1051.711139][ T5815] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1051.740708][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.782513][ T5815] usb 3-1: Product: syz [ 1051.812608][ T5815] usb 3-1: Manufacturer: syz [ 1051.848176][ T5815] usb 3-1: SerialNumber: syz [ 1051.876085][ T5815] usb 3-1: config 0 descriptor?? [ 1051.944543][ T5815] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1052.374024][T14676] xfrm1: entered promiscuous mode [ 1052.723292][ T5815] usb 3-1: USB disconnect, device number 33 [ 1052.800972][ T6797] usb 3-1: Failed to submit usb control message: -71 [ 1053.021976][ T6797] usb 3-1: unable to send the bmi data to the device: -71 [ 1053.041701][ T6797] usb 3-1: unable to get target info from device [ 1053.063739][ T6797] usb 3-1: could not get target info (-71) [ 1053.090345][ T6797] usb 3-1: could not probe fw (-71) [ 1053.699631][T14689] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2594'. [ 1055.926097][T14716] 9pnet: Could not find request transport: fd0x0000000000000005 [ 1056.823934][T14725] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2604'. [ 1059.037457][T14737] loop1: detected capacity change from 0 to 512 [ 1059.170748][T14092] Bluetooth: hci2: command 0x0c1a tx timeout [ 1059.182081][T14737] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1059.191635][T14737] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1059.201642][T14737] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1059.210703][T14737] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 1059.220348][T14737] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1059.487963][T14739] loop0: detected capacity change from 0 to 128 [ 1059.560346][T14739] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1059.688275][T14739] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.497619][T14155] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1061.658102][T14760] Cannot find add_set index 0 as target [ 1062.948850][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1063.298535][T14764] loop2: detected capacity change from 0 to 32768 [ 1063.309442][T14764] XFS (loop2): Invalid device [./bus], error=-15 [ 1068.948417][T14791] loop1: detected capacity change from 0 to 512 [ 1069.005344][T14791] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1069.015467][T14791] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1069.025438][T14791] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1069.034669][T14791] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 1069.044459][T14791] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1074.042404][T14822] loop2: detected capacity change from 0 to 128 [ 1074.073779][T14822] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1074.119302][T14822] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.309243][T13339] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1074.817822][T14838] loop2: detected capacity change from 0 to 512 [ 1075.130933][T14838] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.2640: bg 0: block 4: invalid block bitmap [ 1075.383619][T14838] EXT4-fs (loop2): Remounting filesystem read-only [ 1075.466217][T14838] EXT4-fs (loop2): 1 truncate cleaned up [ 1075.572800][T14838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.153751][ T5815] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1077.349540][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1077.852947][ T5815] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1077.861615][ T5815] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.872260][ T5815] usb 3-1: config 63 has no interface number 0 [ 1077.878648][ T5815] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1077.931014][ T5815] usb 3-1: string descriptor 0 read error: -71 [ 1077.937773][ T5815] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1077.947055][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.966048][ T5815] usb 3-1: can't set config #63, error -71 [ 1077.976875][ T5815] usb 3-1: USB disconnect, device number 34 [ 1077.991241][T13339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.368319][T14857] loop0: detected capacity change from 0 to 4096 [ 1079.064775][T14863] loop2: detected capacity change from 0 to 128 [ 1079.481216][T14863] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1079.547860][T14863] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.619004][T14869] loop1: detected capacity change from 0 to 64 [ 1080.518200][T13339] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1084.573292][T14899] loop2: detected capacity change from 0 to 32768 [ 1084.609725][T14899] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1084.775258][T14904] loop1: detected capacity change from 0 to 32768 [ 1084.823437][T14904] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1084.882226][T10232] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 1086.056662][T12758] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1086.840706][T14933] serio: Serial port ptm0 [ 1087.404117][ T7709] IPVS: starting estimator thread 0... [ 1087.410412][T14942] loop0: detected capacity change from 0 to 256 [ 1087.485398][T14942] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1087.545843][T14940] IPVS: using max 20 ests per chain, 48000 per kthread [ 1087.636556][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1087.636574][ T28] audit: type=1800 audit(1772789836.217:46): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2675" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 1087.728678][T14942] syz.0.2675: attempt to access beyond end of device [ 1087.728678][T14942] loop0: rw=34817, sector=200, nr_sectors = 104 limit=256 [ 1093.657301][T14987] loop0: detected capacity change from 0 to 32768 [ 1096.006897][T14994] loop1: detected capacity change from 0 to 512 [ 1096.028377][T14994] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1096.038466][T14994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1096.048830][T14994] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1096.058357][T14994] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 1096.068815][T14994] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1098.064286][T14998] loop1: detected capacity change from 0 to 32768 [ 1098.076355][T14998] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1098.176485][T12758] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1103.652065][T15042] IPVS: Scheduler module ip_vs_sip not found [ 1103.670116][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 1103.683033][T15049] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2713'. [ 1103.751081][T15040] IPVS: length: 8 != 5312 [ 1104.055270][T15051] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1104.383012][T15056] syzkaller0: entered promiscuous mode [ 1104.388654][T15056] syzkaller0: entered allmulticast mode [ 1104.756004][ T5812] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1106.348016][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 1106.370039][ T5812] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1106.388481][T15057] loop1: detected capacity change from 0 to 32768 [ 1106.396558][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.412149][ T5812] usb 1-1: Product: syz [ 1106.419945][ T5812] usb 1-1: Manufacturer: syz [ 1106.430738][ T5812] usb 1-1: SerialNumber: syz [ 1106.445045][T15057] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1106.447943][ T5812] usb 1-1: config 0 descriptor?? [ 1106.762965][T12758] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 1106.977277][ T5812] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1107.492645][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1107.567232][ T5812] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1107.619719][ T5812] usb 1-1: media controller created [ 1107.734744][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.816469][ T5812] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1107.827195][ T5812] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1107.854674][T15084] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1108.184644][ T5812] usb 1-1: USB disconnect, device number 29 [ 1108.318914][ T5812] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1109.696781][T14092] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1109.920473][T15108] overlayfs: upper fs does not support tmpfile. [ 1110.665190][T15130] bad cache= option: lo [ 1110.665190][T15130] [ 1110.688170][T15130] CIFS: VFS: bad cache= option: lo [ 1110.742540][T15125] kvm: kvm [15123]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100001043 [ 1110.757142][T15125] kvm: kvm [15123]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1110.770607][T15125] kvm: kvm [15123]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xd160 [ 1110.787638][T15125] kvm: kvm [15123]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x613d [ 1110.798740][T15125] kvm_intel: kvm [15123]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x820a [ 1110.835423][T15125] kvm: kvm [15123]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x615c [ 1110.847610][T15125] kvm: kvm [15123]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa276 [ 1111.737452][T15138] loop7: detected capacity change from 0 to 1 [ 1111.757638][T15138] autofs4:pid:15138:autofs_fill_super: called with bogus options [ 1111.832580][T15138] loop7: detected capacity change from 1 to 0 [ 1112.997159][T15151] kAFS: No cell specified [ 1114.866393][T15173] loop0: detected capacity change from 0 to 32768 [ 1114.895122][T15173] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2754 (15173) [ 1115.564581][T15174] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1115.768598][T15173] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1115.779108][T15173] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1115.788073][T15173] BTRFS info (device loop0): enabling disk space caching [ 1115.795664][T15173] BTRFS info (device loop0): force clearing of disk cache [ 1115.802962][T15173] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1115.812520][T15173] BTRFS info (device loop0): use zstd compression, level 3 [ 1115.821381][T15173] BTRFS info (device loop0): disk space caching is enabled [ 1116.037732][T15173] BTRFS info (device loop0): enabling ssd optimizations [ 1116.044875][T15173] BTRFS info (device loop0): auto enabling async discard [ 1116.061119][T15173] BTRFS info (device loop0): rebuilding free space tree [ 1116.077033][T15190] loop2: detected capacity change from 0 to 1024 [ 1116.128336][T15173] BTRFS info (device loop0): disabling free space tree [ 1116.135373][T15173] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1116.145226][T15173] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1116.175970][T15190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.115636][T13339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.264317][T14155] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1118.837883][T15222] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1119.201929][T15231] loop2: detected capacity change from 0 to 512 [ 1119.242234][T15231] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1119.252136][T15231] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1119.262097][T15231] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1119.271238][T15231] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 1119.280893][T15231] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1119.398239][T12758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1120.244223][T15248] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1121.757052][T15255] syzkaller0: entered promiscuous mode [ 1121.818176][T15255] syzkaller0: entered allmulticast mode [ 1124.329063][T15275] loop0: detected capacity change from 0 to 512 [ 1124.374003][T15275] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 1124.384062][T15275] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1124.394555][T15275] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1124.403767][T15275] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 1124.414464][T15275] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1126.625929][ T5812] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1127.401630][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 1127.420392][ T5812] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.452952][ T5812] usb 3-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 1127.488057][ T5812] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1127.686502][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.722488][ T5812] usb 3-1: Product: syz [ 1128.640269][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1128.703529][ T5812] usb 3-1: Manufacturer: syz [ 1128.708338][ T5812] usb 3-1: SerialNumber: syz [ 1128.846800][ T5812] usb 3-1: can't set config #251, error -71 [ 1128.901760][ T5812] usb 3-1: USB disconnect, device number 35 [ 1131.259792][T15304] loop0: detected capacity change from 0 to 32768 [ 1136.262178][T15352] syzkaller0: entered promiscuous mode [ 1136.303351][T15352] syzkaller0: entered allmulticast mode [ 1137.314996][T15373] trusted_key: encrypted_key: insufficient parameters specified [ 1137.668413][T15377] loop0: detected capacity change from 0 to 256 [ 1137.779239][T15377] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1139.940179][T15409] loop2: detected capacity change from 0 to 128 [ 1139.954195][T15409] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1139.979430][T15409] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1140.878002][ T6797] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1141.072923][T15415] syzkaller0: entered promiscuous mode [ 1141.078913][T15415] syzkaller0: entered allmulticast mode [ 1141.296216][ T5812] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1141.509023][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 1141.540697][ T5812] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1141.575079][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.602093][ T5812] usb 1-1: config 0 has no interface number 0 [ 1141.617637][ T5812] usb 1-1: too many endpoints for config 0 interface 188 altsetting 14: 99, using maximum allowed: 30 [ 1141.639110][ T5812] usb 1-1: config 0 interface 188 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 1141.676221][ T5812] usb 1-1: config 0 interface 188 has no altsetting 0 [ 1141.700728][ T5812] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1141.718952][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.727133][ T5812] usb 1-1: Product: syz [ 1141.741059][ T5812] usb 1-1: Manufacturer: syz [ 1141.745928][ T5812] usb 1-1: SerialNumber: syz [ 1141.794028][ T5812] usb 1-1: config 0 descriptor?? [ 1143.195095][ T5812] asix: probe of 1-1:0.188 failed with error -22 [ 1143.577006][ T7709] usb 1-1: USB disconnect, device number 30 [ 1143.588257][T15449] fuse: Bad value for 'fd' [ 1145.321506][T15478] overlayfs: failed to resolve './file0': -2 [ 1147.419607][T15501] loop2: detected capacity change from 0 to 128 [ 1147.785131][T15501] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1148.057477][T15501] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.438421][T13339] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1150.649572][T15549] serio: Serial port ptm0 [ 1153.003941][T15592] loop1: detected capacity change from 0 to 128 [ 1153.105275][T15592] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1153.147270][T15592] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.351312][T15603] loop2: detected capacity change from 0 to 128 [ 1153.531756][ T9608] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1153.577566][T15605] serio: Serial port ptm0 [ 1156.887002][T15633] loop2: detected capacity change from 0 to 128 [ 1157.150812][T15633] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1157.211783][T15633] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.048043][T13339] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1158.328598][T15652] serio: Serial port ptm0 [ 1160.121860][T15678] loop0: detected capacity change from 0 to 128 [ 1160.241542][T15678] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1160.308487][T15678] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.060740][T14155] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1161.329959][T15688] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2900'. [ 1162.977027][T15696] loop0: detected capacity change from 0 to 32768 [ 1162.996654][T15713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2907'. [ 1163.027590][T15713] ------------[ cut here ]------------ [ 1163.033761][T15713] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 1163.055971][T15696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2901 (15696) [ 1163.153320][T15696] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1163.167466][T15713] WARNING: CPU: 1 PID: 15713 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 1163.176962][T15713] Modules linked in: [ 1163.180945][T15713] CPU: 1 PID: 15713 Comm: syz.4.2907 Not tainted syzkaller #0 [ 1163.188590][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1163.199824][T15713] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 1163.205188][T15713] Code: f8 eb 59 e8 78 4f d9 f8 c6 05 51 c9 c7 05 01 b9 10 00 00 00 48 c7 c7 40 4f c7 8b 4c 89 f6 48 c7 c2 c0 4f c7 8b e8 96 09 a3 f8 <0f> 0b e9 86 f0 ff ff e8 4a 4f d9 f8 eb 24 e8 43 4f d9 f8 c6 05 f4 [ 1163.223732][T15696] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1163.228909][T15713] RSP: 0018:ffffc9000584ed40 EFLAGS: 00010246 [ 1163.240707][T15713] RAX: 6da44927fb043300 RBX: ffff88805eb4cc00 RCX: 0000000000080000 [ 1163.248745][T15713] RDX: ffffc9000e205000 RSI: 0000000000005c9c RDI: 0000000000005c9d [ 1163.257064][T15713] RBP: ffffc9000584eef8 R08: ffffc9000584e947 R09: 1ffff92000b09d28 [ 1163.265216][T15713] R10: dffffc0000000000 R11: fffff52000b09d29 R12: ffff88801df62000 [ 1163.273372][T15713] R13: ffff88801df620e8 R14: 0000000000000020 R15: ffff88803046d940 [ 1163.281430][T15713] FS: 00007f6a0ad846c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1163.290508][T15713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1163.297235][T15713] CR2: 00007f6a09fe9e80 CR3: 000000005f563000 CR4: 00000000003506e0 [ 1163.305589][T15713] Call Trace: [ 1163.309931][T15713] [ 1163.312925][T15713] ? tc_new_tfilter+0x8c6/0x1640 [ 1163.318528][T15713] ? u32_get+0x370/0x370 [ 1163.323052][T15713] tc_new_tfilter+0xe4f/0x1640 [ 1163.328029][T15713] ? tcf_proto_signal_destroying+0x240/0x240 [ 1163.334111][T15713] ? rcu_read_unlock+0x8c/0xa0 [ 1163.339150][T15713] ? tcf_proto_signal_destroying+0x240/0x240 [ 1163.345215][T15713] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1163.350509][T15713] ? tcf_proto_signal_destroying+0x240/0x240 [ 1163.356591][T15713] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 1163.361848][T15713] ? lockdep_hardirqs_on+0x98/0x150 [ 1163.367205][T15713] ? rtnetlink_bind+0x80/0x80 [ 1163.372013][T15713] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1163.378083][T15713] ? lock_chain_count+0x20/0x20 [ 1163.383081][T15713] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1163.388577][T15713] ? lockdep_hardirqs_on+0x98/0x150 [ 1163.394059][T15713] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1163.399490][T15713] ? _local_bh_enable+0xa0/0xa0 [ 1163.404506][T15713] ? __dev_queue_xmit+0x265/0x3660 [ 1163.409761][T15713] ? __dev_queue_xmit+0x265/0x3660 [ 1163.415040][T15713] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1163.421353][T15713] ? __dev_queue_xmit+0x265/0x3660 [ 1163.427151][T15713] ? ref_tracker_free+0x690/0x840 [ 1163.432284][T15713] netlink_rcv_skb+0x241/0x4d0 [ 1163.434658][T15696] BTRFS info (device loop0): using free space tree [ 1163.437392][T15713] ? rtnetlink_bind+0x80/0x80 [ 1163.448616][T15713] ? netlink_ack+0x1180/0x1180 [ 1163.453572][T15713] ? __lock_acquire+0x7d40/0x7d40 [ 1163.458809][T15713] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.464105][T15713] netlink_unicast+0x751/0x8d0 [ 1163.469109][T15713] netlink_sendmsg+0x8d0/0xbf0 [ 1163.474001][T15713] ? netlink_getsockopt+0x590/0x590 [ 1163.479633][T15713] ? aa_sock_msg_perm+0x94/0x150 [ 1163.484735][T15713] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1163.490154][T15713] ? security_socket_sendmsg+0x80/0xa0 [ 1163.495687][T15713] ? netlink_getsockopt+0x590/0x590 [ 1163.501056][T15713] ____sys_sendmsg+0x5ba/0x960 [ 1163.505970][T15713] ? __asan_memset+0x22/0x40 [ 1163.511021][T15713] ? __sys_sendmsg_sock+0x30/0x30 [ 1163.516119][T15713] ? __import_iovec+0x5f2/0x850 [ 1163.521151][T15713] ? import_iovec+0x73/0xa0 [ 1163.525729][T15713] ___sys_sendmsg+0x2a6/0x360 [ 1163.531567][T15713] ? __sys_sendmsg+0x2a0/0x2a0 [ 1163.536470][T15713] __sys_sendmmsg+0x2ca/0x510 [ 1163.541875][T15713] ? __ia32_sys_sendmsg+0x90/0x90 [ 1163.546993][T15713] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1163.553237][T15713] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1163.559303][T15713] ? lock_chain_count+0x20/0x20 [ 1163.564425][T15713] __x64_sys_sendmmsg+0xa0/0xb0 [ 1163.569354][T15713] do_syscall_64+0x55/0xa0 [ 1163.574079][T15713] ? clear_bhb_loop+0x40/0x90 [ 1163.578916][T15713] ? clear_bhb_loop+0x40/0x90 [ 1163.583748][T15713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1163.589733][T15713] RIP: 0033:0x7f6a09f9c799 [ 1163.594363][T15713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.614122][T15713] RSP: 002b:00007f6a0ad84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1163.622807][T15713] RAX: ffffffffffffffda RBX: 00007f6a0a216090 RCX: 00007f6a09f9c799 [ 1163.630920][T15713] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1163.640073][T15713] RBP: 00007f6a0a032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1163.648949][T15713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.657082][T15713] R13: 00007f6a0a216128 R14: 00007f6a0a216090 R15: 00007ffd639f2418 [ 1163.665430][T15713] [ 1163.668565][T15713] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1163.675905][T15713] CPU: 1 PID: 15713 Comm: syz.4.2907 Not tainted syzkaller #0 [ 1163.683588][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1163.694482][T15713] Call Trace: [ 1163.697896][T15713] [ 1163.701058][T15713] dump_stack_lvl+0x18c/0x250 [ 1163.705906][T15713] ? show_regs_print_info+0x20/0x20 [ 1163.711184][T15713] ? load_image+0x400/0x400 [ 1163.715805][T15713] panic+0x2dc/0x730 [ 1163.719780][T15713] ? bpf_jit_dump+0xd0/0xd0 [ 1163.724364][T15713] __warn+0x2e0/0x470 [ 1163.728405][T15713] ? u32_change+0x1c5a/0x24f0 [ 1163.733185][T15713] ? u32_change+0x1c5a/0x24f0 [ 1163.737948][T15713] report_bug+0x2be/0x4f0 [ 1163.742750][T15713] ? u32_change+0x1c5a/0x24f0 [ 1163.747503][T15713] ? u32_change+0x1c5a/0x24f0 [ 1163.752242][T15713] ? u32_change+0x1c5c/0x24f0 [ 1163.756964][T15713] handle_bug+0xcf/0x120 [ 1163.761276][T15713] exc_invalid_op+0x1a/0x50 [ 1163.765879][T15713] asm_exc_invalid_op+0x1a/0x20 [ 1163.770807][T15713] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 1163.776186][T15713] Code: f8 eb 59 e8 78 4f d9 f8 c6 05 51 c9 c7 05 01 b9 10 00 00 00 48 c7 c7 40 4f c7 8b 4c 89 f6 48 c7 c2 c0 4f c7 8b e8 96 09 a3 f8 <0f> 0b e9 86 f0 ff ff e8 4a 4f d9 f8 eb 24 e8 43 4f d9 f8 c6 05 f4 [ 1163.795963][T15713] RSP: 0018:ffffc9000584ed40 EFLAGS: 00010246 [ 1163.802068][T15713] RAX: 6da44927fb043300 RBX: ffff88805eb4cc00 RCX: 0000000000080000 [ 1163.810158][T15713] RDX: ffffc9000e205000 RSI: 0000000000005c9c RDI: 0000000000005c9d [ 1163.818169][T15713] RBP: ffffc9000584eef8 R08: ffffc9000584e947 R09: 1ffff92000b09d28 [ 1163.826282][T15713] R10: dffffc0000000000 R11: fffff52000b09d29 R12: ffff88801df62000 [ 1163.834296][T15713] R13: ffff88801df620e8 R14: 0000000000000020 R15: ffff88803046d940 [ 1163.842690][T15713] ? tc_new_tfilter+0x8c6/0x1640 [ 1163.847718][T15713] ? u32_get+0x370/0x370 [ 1163.852291][T15713] tc_new_tfilter+0xe4f/0x1640 [ 1163.857133][T15713] ? tcf_proto_signal_destroying+0x240/0x240 [ 1163.863187][T15713] ? rcu_read_unlock+0x8c/0xa0 [ 1163.868025][T15713] ? tcf_proto_signal_destroying+0x240/0x240 [ 1163.874077][T15713] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1163.879232][T15713] ? tcf_proto_signal_destroying+0x240/0x240 [ 1163.885267][T15713] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 1163.890625][T15713] ? lockdep_hardirqs_on+0x98/0x150 [ 1163.895960][T15713] ? rtnetlink_bind+0x80/0x80 [ 1163.900718][T15713] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1163.906801][T15713] ? lock_chain_count+0x20/0x20 [ 1163.911726][T15713] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1163.917153][T15713] ? lockdep_hardirqs_on+0x98/0x150 [ 1163.922615][T15713] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1163.928391][T15713] ? _local_bh_enable+0xa0/0xa0 [ 1163.933282][T15713] ? __dev_queue_xmit+0x265/0x3660 [ 1163.938797][T15713] ? __dev_queue_xmit+0x265/0x3660 [ 1163.944320][T15713] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1163.949653][T15713] ? __dev_queue_xmit+0x265/0x3660 [ 1163.954806][T15713] ? ref_tracker_free+0x690/0x840 [ 1163.959904][T15713] netlink_rcv_skb+0x241/0x4d0 [ 1163.964712][T15713] ? rtnetlink_bind+0x80/0x80 [ 1163.969429][T15713] ? netlink_ack+0x1180/0x1180 [ 1163.974239][T15713] ? __lock_acquire+0x7d40/0x7d40 [ 1163.979315][T15713] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.984554][T15713] netlink_unicast+0x751/0x8d0 [ 1163.989447][T15713] netlink_sendmsg+0x8d0/0xbf0 [ 1163.994340][T15713] ? netlink_getsockopt+0x590/0x590 [ 1163.999574][T15713] ? aa_sock_msg_perm+0x94/0x150 [ 1164.004579][T15713] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1164.010026][T15713] ? security_socket_sendmsg+0x80/0xa0 [ 1164.015511][T15713] ? netlink_getsockopt+0x590/0x590 [ 1164.020743][T15713] ____sys_sendmsg+0x5ba/0x960 [ 1164.025540][T15713] ? __asan_memset+0x22/0x40 [ 1164.030160][T15713] ? __sys_sendmsg_sock+0x30/0x30 [ 1164.035223][T15713] ? __import_iovec+0x5f2/0x850 [ 1164.040207][T15713] ? import_iovec+0x73/0xa0 [ 1164.044745][T15713] ___sys_sendmsg+0x2a6/0x360 [ 1164.049455][T15713] ? __sys_sendmsg+0x2a0/0x2a0 [ 1164.054283][T15713] __sys_sendmmsg+0x2ca/0x510 [ 1164.058999][T15713] ? __ia32_sys_sendmsg+0x90/0x90 [ 1164.064071][T15713] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1164.070006][T15713] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1164.076126][T15713] ? lock_chain_count+0x20/0x20 [ 1164.081031][T15713] __x64_sys_sendmmsg+0xa0/0xb0 [ 1164.086018][T15713] do_syscall_64+0x55/0xa0 [ 1164.090492][T15713] ? clear_bhb_loop+0x40/0x90 [ 1164.095558][T15713] ? clear_bhb_loop+0x40/0x90 [ 1164.100394][T15713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1164.106318][T15713] RIP: 0033:0x7f6a09f9c799 [ 1164.110780][T15713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.130465][T15713] RSP: 002b:00007f6a0ad84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1164.138924][T15713] RAX: ffffffffffffffda RBX: 00007f6a0a216090 RCX: 00007f6a09f9c799 [ 1164.146951][T15713] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1164.155045][T15713] RBP: 00007f6a0a032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1164.163049][T15713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.171051][T15713] R13: 00007f6a0a216128 R14: 00007f6a0a216090 R15: 00007ffd639f2418 [ 1164.179065][T15713] [ 1164.182683][T15713] Kernel Offset: disabled [ 1164.187045][T15713] Rebooting in 86400 seconds..