last executing test programs: 7.003887905s ago: executing program 1 (id=448): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x1d, 0x0, 0xf5, {0x2, 0xff}, 0xff}, 0x18, &(0x7f0000000680)={0x0, 0x3b}, 0x1, 0x0, 0x0, 0xc811}, 0x4004) 6.858259339s ago: executing program 1 (id=449): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b707000000ff00004870000000000000400000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72f85304ef8d14f8bbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d3682a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd56eee5798041358a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cca6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed154be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9000000006a370e9eb56b3d790b98f2bd0db1e5de6a3040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce993c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436362dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73a20aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe601fb695a9769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 6.718761592s ago: executing program 1 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 6.609369175s ago: executing program 1 (id=452): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="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"/308], 0x1, 0x152b, &(0x7f0000002f80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 6.262844854s ago: executing program 1 (id=454): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000402f17340000000000000109022400010000001109040003010300000009210800050122610309058103"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000080001006401010108000f0001002756"], 0x2c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.789673586s ago: executing program 1 (id=457): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 4.80076516s ago: executing program 32 (id=457): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 4.370034811s ago: executing program 0 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nop', 0x3) 4.125900787s ago: executing program 0 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/r', 0x14) 3.830436264s ago: executing program 0 (id=466): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x50}}, 0x0) 3.512697932s ago: executing program 0 (id=467): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000040)=0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ef, &(0x7f0000000200)=0x1) 3.255637409s ago: executing program 0 (id=468): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5508, &(0x7f0000002480)="$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") r0 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x81) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) 1.753471776s ago: executing program 3 (id=472): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000400)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000780)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002540)='.\x00', 0x181400, 0x108) getdents64(r0, &(0x7f0000002580)=""/4096, 0x1000) 1.566322001s ago: executing program 2 (id=473): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.449044934s ago: executing program 3 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 1.408615095s ago: executing program 0 (id=475): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 1.223490199s ago: executing program 2 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/priority\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x5) 1.002369615s ago: executing program 3 (id=477): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x20000000, 0x3, 0x403}}]}, {0x20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) 797.32968ms ago: executing program 2 (id=478): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000001000a18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000080007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000001400000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="f8e10d00000000000000a56a88ca", 0x0, 0x9943, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 728.091662ms ago: executing program 3 (id=479): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 495.925628ms ago: executing program 2 (id=480): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 414.58792ms ago: executing program 3 (id=481): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, 0x0, 0x101180, 0x0, 0x7be, 0x0, 0x0}, {[0xf, 0x7bc, 0x283, 0x4]}, 0x6, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000480)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000c000000180001801400020076657468305f746f5f626f6e640000000c0103800400010004010380"], 0x138}}, 0x0) 241.163174ms ago: executing program 2 (id=482): prlimit64(0x0, 0xf, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) futex(0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0) 66.822269ms ago: executing program 3 (id=483): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 0s ago: executing program 2 (id=484): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0x3}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 75.149623][ T5764] cgroup: Unknown subsys name 'net' [ 75.284512][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.690047][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.561241][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.576160][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.585361][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.618303][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.627528][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.627642][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.635714][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.646191][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.653062][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.667949][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.675756][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.684730][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.685271][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.704067][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.713855][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.721480][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.724081][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.736479][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.746718][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.754015][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.762009][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.771776][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.789720][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.806420][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.819791][ T5779] (null): rxe_set_mtu: Set mtu to 1024 [ 78.835580][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.858411][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.865727][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.884060][ T5776] (null): rxe_set_mtu: Set mtu to 1024 [ 78.894649][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 78.902703][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 78.909772][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.917287][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.924679][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.112448][ T5779] infiniband rxe0: set active [ 79.122351][ T5766] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.146578][ T5779] infiniband rxe0: added rxe_eth0 [ 79.222026][ T5779] RDS/IB: rxe0: added [ 79.258336][ T5779] smc: adding ib device rxe0 with port count 1 [ 79.265210][ T5779] smc: ib device rxe0 port 1 has pnetid [ 79.279108][ T56] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.302318][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.432883][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 79.464531][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 79.592549][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 79.641724][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.815015][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.826624][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.834184][ T5786] bridge_slave_0: entered allmulticast mode [ 79.844393][ T5786] bridge_slave_0: entered promiscuous mode [ 79.909210][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.919715][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.927755][ T5786] bridge_slave_1: entered allmulticast mode [ 79.935152][ T5786] bridge_slave_1: entered promiscuous mode [ 79.955400][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.962873][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.970699][ T5776] bridge_slave_0: entered allmulticast mode [ 79.979009][ T5776] bridge_slave_0: entered promiscuous mode [ 79.989005][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.998674][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.005921][ T5776] bridge_slave_1: entered allmulticast mode [ 80.019163][ T5776] bridge_slave_1: entered promiscuous mode [ 80.027951][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.140257][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.174787][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.193796][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.204612][ T5782] bridge_slave_0: entered allmulticast mode [ 80.215744][ T5782] bridge_slave_0: entered promiscuous mode [ 80.225977][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.236096][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.245037][ T5782] bridge_slave_1: entered allmulticast mode [ 80.255232][ T5782] bridge_slave_1: entered promiscuous mode [ 80.270279][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.294288][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.331608][ T5779] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.341727][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.392167][ T5786] team0: Port device team_slave_0 added [ 80.402782][ T5786] team0: Port device team_slave_1 added [ 80.430888][ T5776] team0: Port device team_slave_0 added [ 80.443888][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.458107][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.504539][ T5776] team0: Port device team_slave_1 added [ 80.543295][ T5782] team0: Port device team_slave_0 added [ 80.560641][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.567855][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.594948][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.609212][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.616202][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.642346][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.668489][ T5782] team0: Port device team_slave_1 added [ 80.684465][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.691692][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.717667][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.728410][ T5778] Bluetooth: hci1: command tx timeout [ 80.756462][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.763535][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.789603][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.806641][ T5778] Bluetooth: hci0: command tx timeout [ 80.806658][ T5788] Bluetooth: hci2: command tx timeout [ 80.833213][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.840493][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.866857][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.886685][ T5778] Bluetooth: hci3: command tx timeout [ 80.903061][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.910855][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.937321][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.971491][ T5786] hsr_slave_0: entered promiscuous mode [ 80.979179][ T5786] hsr_slave_1: entered promiscuous mode [ 81.015765][ T5776] hsr_slave_0: entered promiscuous mode [ 81.022222][ T5776] hsr_slave_1: entered promiscuous mode [ 81.028783][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.037182][ T5776] Cannot create hsr debugfs directory [ 81.145489][ T5782] hsr_slave_0: entered promiscuous mode [ 81.152249][ T5782] hsr_slave_1: entered promiscuous mode [ 81.159047][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.166753][ T5782] Cannot create hsr debugfs directory [ 81.412146][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.564120][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.571734][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.579098][ T5779] bridge_slave_0: entered allmulticast mode [ 81.586234][ T5779] bridge_slave_0: entered promiscuous mode [ 81.600316][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.608354][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.615763][ T5779] bridge_slave_1: entered allmulticast mode [ 81.623176][ T5779] bridge_slave_1: entered promiscuous mode [ 81.671215][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.684943][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.703639][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.714575][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.727974][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.755642][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.795176][ T5779] team0: Port device team_slave_0 added [ 81.822959][ T5779] team0: Port device team_slave_1 added [ 81.830359][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.872010][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.879195][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.905625][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.918698][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.930489][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.957528][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.968902][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.979759][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.012327][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.064108][ T5779] hsr_slave_0: entered promiscuous mode [ 82.071623][ T5779] hsr_slave_1: entered promiscuous mode [ 82.078458][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.086148][ T5779] Cannot create hsr debugfs directory [ 82.144898][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.158714][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.180768][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.191103][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.359857][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.441142][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.453810][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.469199][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.478855][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.509934][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.522951][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.530446][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.545769][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.564093][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.571839][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.635033][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.651674][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.674132][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.681432][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.701521][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.729984][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.737232][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.771340][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.778536][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.791120][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.798475][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.806494][ T5778] Bluetooth: hci1: command tx timeout [ 82.887376][ T5778] Bluetooth: hci0: command tx timeout [ 82.889965][ T5788] Bluetooth: hci2: command tx timeout [ 82.935232][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.946486][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.967381][ T5788] Bluetooth: hci3: command tx timeout [ 83.056241][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.115295][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.145414][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.152629][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.192564][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.200061][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.342770][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.402396][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.512487][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.541323][ T5786] veth0_vlan: entered promiscuous mode [ 83.584194][ T5776] veth0_vlan: entered promiscuous mode [ 83.603583][ T5786] veth1_vlan: entered promiscuous mode [ 83.656099][ T5776] veth1_vlan: entered promiscuous mode [ 83.692650][ T5782] veth0_vlan: entered promiscuous mode [ 83.709650][ T5786] veth0_macvtap: entered promiscuous mode [ 83.734314][ T5786] veth1_macvtap: entered promiscuous mode [ 83.762155][ T5782] veth1_vlan: entered promiscuous mode [ 83.783232][ T5776] veth0_macvtap: entered promiscuous mode [ 83.794658][ T5776] veth1_macvtap: entered promiscuous mode [ 83.838760][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.855145][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.864479][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.876604][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.888402][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.903570][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.922259][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.933804][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.945766][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.958608][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.967700][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.977134][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.985914][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.997728][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.009037][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.018088][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.027326][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.046224][ T5782] veth0_macvtap: entered promiscuous mode [ 84.064192][ T5782] veth1_macvtap: entered promiscuous mode [ 84.171380][ T5779] veth0_vlan: entered promiscuous mode [ 84.191177][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.202997][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.214022][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.224709][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.236231][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.246696][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.259457][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.269366][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.279904][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.291004][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.332053][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.342924][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.353518][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.362837][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.389515][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.389620][ T5779] veth1_vlan: entered promiscuous mode [ 84.398683][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.431517][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.449682][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.512071][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.524245][ T5779] veth0_macvtap: entered promiscuous mode [ 84.529019][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.559689][ T5779] veth1_macvtap: entered promiscuous mode [ 84.587761][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.591743][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.595723][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.613832][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.634626][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.649001][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.659938][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.671488][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.689131][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.732522][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.749803][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.760373][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.771283][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.782090][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.793693][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.823928][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.891687][ T5788] Bluetooth: hci1: command tx timeout [ 84.911043][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.942393][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.967026][ T5788] Bluetooth: hci0: command tx timeout [ 84.967101][ T5778] Bluetooth: hci2: command tx timeout [ 84.984247][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.005255][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.036674][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.056835][ T5778] Bluetooth: hci3: command tx timeout [ 85.074504][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.201431][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.227708][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.260395][ T5878] syz.0.9[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.311048][ T5878] loop0: detected capacity change from 0 to 1024 [ 85.343725][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.376710][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.452320][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.457802][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.464578][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.532257][ T5885] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 85.595448][ T5885] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.743661][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.812981][ T5890] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 85.824435][ T5839] IPVS: starting estimator thread 0... [ 85.927378][ T5893] IPVS: using max 24 ests per chain, 57600 per kthread [ 85.992842][ T5899] loop3: detected capacity change from 0 to 128 [ 86.038489][ T5899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c118, mo2=0042] [ 86.065538][ T5899] System zones: 1-3, 19-19, 35-36 [ 86.078947][ T5899] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 86.114753][ T5899] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.305630][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.390091][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.638667][ T5927] sd 0:0:1:0: PR command failed: 1026 [ 86.645396][ T5927] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 86.681530][ T5927] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 86.877381][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.971129][ T5778] Bluetooth: hci1: command tx timeout [ 87.046715][ T5778] Bluetooth: hci0: command tx timeout [ 87.053563][ T5788] Bluetooth: hci2: command tx timeout [ 87.106528][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 87.127138][ T5778] Bluetooth: hci3: command tx timeout [ 87.197295][ T8] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.234365][ T8] usb 4-1: config 179 has no interface number 0 [ 87.269639][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.300950][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 87.328630][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.350317][ T8] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 87.364591][ T8] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.414986][ T8] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.439605][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.496480][ T5924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.900181][ T5948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34'. [ 87.943835][ T5862] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 88.187356][ T5956] cougar: G6 mapped to space [ 88.202834][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 88.202875][ T23] usb 4-1: USB disconnect, device number 2 [ 88.217863][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 88.217901][ T23] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 88.371765][ T5960] warning: `syz.1.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.756548][ T5766] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.836774][ T5973] ======================================================= [ 88.836774][ T5973] WARNING: The mand mount option has been deprecated and [ 88.836774][ T5973] and is ignored by this kernel. Remove the mand [ 88.836774][ T5973] option from the mount to silence this warning. [ 88.836774][ T5973] ======================================================= [ 88.934645][ T5979] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 88.988660][ T5766] usb 2-1: Using ep0 maxpacket: 8 [ 89.005033][ T5981] Bluetooth: MGMT ver 1.22 [ 89.012800][ T5766] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.026389][ T5766] usb 2-1: config 179 has no interface number 0 [ 89.044322][ T5766] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 89.076424][ T5766] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 89.106482][ T5766] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 89.122788][ T5766] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 89.143543][ T5766] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.176499][ T5766] usb 2-1: config 179 interface 65 has no altsetting 0 [ 89.186511][ T5766] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 89.206863][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.251687][ T5766] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 89.504138][ T5839] usb 2-1: USB disconnect, device number 2 [ 89.510165][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 89.528149][ T5839] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 89.528175][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.759028][ T56] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.768714][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 89.798912][ T23] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 89.815797][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.836112][ T23] usb 3-1: Product: syz [ 89.847102][ T23] usb 3-1: Manufacturer: syz [ 89.864161][ T23] usb 3-1: SerialNumber: syz [ 90.122317][ T23] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 90.179375][ T23] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.206830][ T23] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 90.217896][ T23] usb 3-1: media controller created [ 90.298984][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.388009][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 90.519945][ T23] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 90.540413][ T6036] loop1: detected capacity change from 0 to 512 [ 90.574189][ T23] usb 3-1: USB disconnect, device number 2 [ 90.663468][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.682323][ T6036] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.701368][ T6043] sch_tbf: burst 20480 is lower than device lo mtu (65550) ! [ 90.804420][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.287757][ T5778] Bluetooth: hci1: command tx timeout [ 91.624589][ T6075] loop3: detected capacity change from 0 to 64 [ 91.678327][ T6056] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 91.767226][ T5778] Bluetooth: hci3: command tx timeout [ 91.794221][ T6061] loop2: detected capacity change from 0 to 32768 [ 92.020796][ T9] cfg80211: failed to load regulatory.db [ 92.457046][ T6096] tap0: tun_chr_ioctl cmd 1074025677 [ 92.462688][ T6096] tap0: linktype set to 780 [ 93.068819][ T6122] loop0: detected capacity change from 0 to 256 [ 93.073637][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.92'. [ 93.318687][ T5862] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.392725][ T6129] syz.1.96 (6129) used greatest stack depth: 19920 bytes left [ 93.432220][ T6133] loop0: detected capacity change from 0 to 736 [ 93.507286][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 93.525950][ T5862] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.549265][ T5862] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.576580][ T5862] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.599997][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.612142][ T5862] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 93.636372][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.658785][ T5862] usb 3-1: config 0 descriptor?? [ 93.664756][ T6140] loop1: detected capacity change from 0 to 1024 [ 93.812680][ T6142] loop0: detected capacity change from 0 to 4096 [ 93.902234][ T6144] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.085252][ T5786] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 94.113252][ T5862] waltop 0003:172F:0032.0001: unknown main item tag 0x3 [ 94.126499][ T5786] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 94.129495][ T5862] waltop 0003:172F:0032.0001: unbalanced collection at end of report description [ 94.147762][ T5862] waltop: probe of 0003:172F:0032.0001 failed with error -22 [ 94.165225][ T5786] Remounting filesystem read-only [ 94.180086][ T5786] NILFS (loop0): error -5 truncating bmap (ino=12) [ 94.192514][ T5786] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 94.207140][ T5786] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 94.214731][ T5786] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 94.224815][ T5786] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 94.232521][ T5786] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 94.239932][ T5786] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 94.247171][ T5786] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 94.257149][ T5786] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 94.266471][ T5786] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 94.400266][ T5862] usb 3-1: USB disconnect, device number 3 [ 94.516047][ T6154] loop1: detected capacity change from 0 to 4096 [ 94.557359][ T6154] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 94.661472][ T6154] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 95.191273][ T6155] loop3: detected capacity change from 0 to 40427 [ 95.267099][ T6155] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 95.307270][ T6155] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 95.367632][ T6155] F2FS-fs (loop3): invalid crc value [ 95.419600][ T6155] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.617189][ T6155] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 95.634913][ T6155] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.816431][ T5862] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.817105][ T6190] loop1: detected capacity change from 0 to 512 [ 95.860543][ T6190] EXT4-fs: Ignoring removed bh option [ 95.908371][ T6190] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.920433][ T6196] loop0: detected capacity change from 0 to 512 [ 95.933390][ T5779] syz-executor: attempt to access beyond end of device [ 95.933390][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.972647][ T6190] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 95.983140][ T6190] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.117: Corrupt directory, running e2fsck is recommended [ 96.002728][ T6190] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 96.011132][ T6196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 96.011260][ T6196] System zones: 1-12 [ 96.023418][ T6190] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.117: corrupted in-inode xattr: e_name out of bounds [ 96.024567][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 96.032292][ T5779] F2FS-fs (loop3): Remounting filesystem read-only [ 96.038869][ T5862] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 96.038900][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.090544][ T6196] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.118: error while reading EA inode 32 err=-116 [ 96.091566][ T6190] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.117: couldn't read orphan inode 15 (err -117) [ 96.127450][ T6196] EXT4-fs (loop0): Remounting filesystem read-only [ 96.134513][ T6196] EXT4-fs (loop0): 1 orphan inode deleted [ 96.149102][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.157799][ T5862] usb 3-1: config 0 descriptor?? [ 96.224395][ T6190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.328802][ T6190] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.342953][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.364893][ T6194] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 96.394218][ T6190] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 96.457747][ T6190] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.117: Corrupt directory, running e2fsck is recommended [ 96.492914][ T6190] CacheFiles: Lookup cache failed with error -117 [ 96.515319][ T6190] CacheFiles: Failed to register: -117 [ 96.608854][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.658924][ T5862] elecom 0003:056E:011C.0002: item fetching failed at offset 2/40 [ 96.700887][ T5862] elecom: probe of 0003:056E:011C.0002 failed with error -22 [ 96.962150][ T5862] usb 3-1: USB disconnect, device number 4 [ 97.157214][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 97.417721][ T6218] loop0: detected capacity change from 0 to 32768 [ 97.441461][ T6218] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.126 (6218) [ 97.491904][ T6218] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.523658][ T6218] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 97.551843][ T6218] BTRFS info (device loop0): enabling auto defrag [ 97.558528][ T6218] BTRFS info (device loop0): force clearing of disk cache [ 97.582162][ T6218] BTRFS info (device loop0): ignoring data csums [ 97.592101][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 97.601210][ T6218] BTRFS info (device loop0): turning on async discard [ 97.608345][ T6218] BTRFS info (device loop0): setting nodatacow, compression disabled [ 97.626358][ T6218] BTRFS info (device loop0): turning off async discard [ 97.645420][ T6218] BTRFS info (device loop0): disabling free space tree [ 97.943412][ T6218] BTRFS error (device loop0: state MC): ignoredatacsums must be used with ro mount option [ 98.074204][ T5786] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 98.110305][ T6257] loop3: detected capacity change from 0 to 164 [ 98.117954][ T6258] loop2: detected capacity change from 0 to 512 [ 98.174173][ T6258] EXT4-fs (loop2): 1 truncate cleaned up [ 98.217202][ T6258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.403753][ T6258] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.137: bg 0: block 465: padding at end of block bitmap is not set [ 98.425824][ T28] audit: type=1800 audit(1792076187.788:2): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.137" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 98.561908][ T6258] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 98.604143][ T6258] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.604143][ T6258] [ 98.616717][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.143'. [ 98.663093][ T6273] netem: incorrect gi model size [ 98.664308][ T6258] EXT4-fs (loop2): Total free blocks count 0 [ 98.672649][ T6273] netem: change failed [ 98.721039][ T6258] EXT4-fs (loop2): Free/Dirty block details [ 98.729812][ T6258] EXT4-fs (loop2): free_blocks=0 [ 98.761932][ T6258] EXT4-fs (loop2): dirty_blocks=8 [ 98.780039][ T6258] EXT4-fs (loop2): Block reservation details [ 98.800340][ T6258] EXT4-fs (loop2): i_reserved_data_blocks=8 [ 99.033115][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.408911][ T6291] loop1: detected capacity change from 0 to 4096 [ 99.481704][ T6293] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.483927][ T6291] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 99.555545][ T6291] NILFS (loop1): mounting fs with errors [ 99.738372][ T28] audit: type=1800 audit(1792076189.128:3): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.151" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 99.760777][ T6291] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 99.774528][ T6291] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 99.863799][ T6300] netlink: 'syz.0.154': attribute type 2 has an invalid length. [ 99.876445][ T6300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.154'. [ 99.983506][ T6302] loop1: detected capacity change from 0 to 256 [ 100.025554][ T6302] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 100.521709][ T6320] loop1: detected capacity change from 0 to 512 [ 100.540841][ T6320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.563661][ T6320] EXT4-fs warning (device loop1): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 100.648326][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.751720][ T6328] loop3: detected capacity change from 0 to 512 [ 100.765933][ T6331] loop0: detected capacity change from 0 to 256 [ 100.822360][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.855304][ T6331] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 100.862284][ T6336] loop2: detected capacity change from 0 to 256 [ 100.903747][ T6336] exfat: Deprecated parameter 'utf8' [ 100.914612][ T6336] exfat: Deprecated parameter 'utf8' [ 100.921159][ T6336] exfat: Deprecated parameter 'utf8' [ 100.973283][ T6336] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 100.991838][ T6328] EXT4-fs error (device loop3): ext4_get_first_dir_block:3586: inode #12: comm syz.3.167: Directory block failed checksum [ 101.030593][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.087116][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.268832][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.313551][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.338484][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.410076][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.452735][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.501096][ T23] usb 2-1: config 0 descriptor?? [ 102.001508][ T23] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 102.065366][ T23] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 102.265901][ T56] usb 2-1: USB disconnect, device number 3 [ 102.658255][ T2980] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.735939][ T6371] loop2: detected capacity change from 0 to 512 [ 102.774373][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.804082][ T6371] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.911424][ T6378] loop3: detected capacity change from 0 to 64 [ 102.991817][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.179774][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.190'. [ 103.224244][ T6390] tun0: tun_chr_ioctl cmd 1074812117 [ 103.833708][ T6414] loop2: detected capacity change from 0 to 4096 [ 103.852522][ T6414] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 103.864865][ T6414] ntfs3: loop2: Failed to load $Bitmap (-2). [ 104.170052][ T6428] Illegal XDP return value 4294967294 on prog (id 20) dev N/A, expect packet loss! [ 104.411135][ T6420] loop3: detected capacity change from 0 to 40427 [ 104.431261][ T6420] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 104.439083][ T6420] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 104.458067][ T6420] F2FS-fs (loop3): invalid crc value [ 104.600418][ T6420] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 104.616375][ T6420] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.691952][ T6420] syz.3.205: attempt to access beyond end of device [ 104.691952][ T6420] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 104.726486][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 104.726557][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 104.780790][ T5779] syz-executor: attempt to access beyond end of device [ 104.780790][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.805532][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 105.066390][ T6434] loop1: detected capacity change from 0 to 32768 [ 105.172981][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.192402][ T6434] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.368584][ T6434] XFS (loop1): Ending clean mount [ 105.394562][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.401874][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.559177][ T6464] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 105.559998][ T5776] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.567168][ T6464] netlink: 'syz.0.220': attribute type 2 has an invalid length. [ 105.656811][ T23] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 105.880994][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.891462][ T23] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.903216][ T6473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.915810][ T23] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 105.952703][ T23] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 105.966338][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.974400][ T23] usb 3-1: Product: syz [ 105.989723][ T23] usb 3-1: Manufacturer: syz [ 105.998809][ T23] usb 3-1: SerialNumber: syz [ 106.000410][ T6474] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.061690][ T6474] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 106.071954][ T6474] Zero length message leads to an empty skb [ 106.321043][ T6488] loop0: detected capacity change from 0 to 1024 [ 106.497843][ C1] usb 3-1: received EP1 urb->status = -2 [ 106.504209][ T23] usb 3-1: unable to init card! (ret=-110) [ 106.512620][ T23] snd-usb-caiaq: probe of 3-1:1.0 failed with error -110 [ 106.704636][ T6498] loop3: detected capacity change from 0 to 2048 [ 106.743844][ T56] usb 3-1: USB disconnect, device number 5 [ 106.775221][ T6498] NILFS (loop3): invalid segment: Magic number mismatch [ 106.805092][ T6498] NILFS (loop3): trying rollback from an earlier position [ 106.839699][ T6498] NILFS (loop3): recovery complete [ 106.857808][ T6501] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.008103][ T6493] loop1: detected capacity change from 0 to 32768 [ 107.117026][ T6493] blkno = 8ed2c, nblocks = 1 [ 107.122254][ T6493] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 107.122254][ T6493] [ 107.154757][ T6493] ERROR: (device loop1): remounting filesystem as read-only [ 107.170321][ T6493] ialloc: diAlloc returned -17! [ 107.188902][ T6507] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 107.188902][ T6507] [ 107.261698][ T6507] syz.1.235: attempt to access beyond end of device [ 107.261698][ T6507] loop1: rw=2049, sector=4680032, nr_sectors = 8 limit=32768 [ 107.284796][ T6510] MTRR 1 not used [ 107.429269][ T114] blkno = 8ed2c, nblocks = 1 [ 107.433938][ T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 107.433938][ T114] [ 107.435268][ T6516] loop2: detected capacity change from 0 to 512 [ 107.456783][ T6515] loop3: detected capacity change from 0 to 512 [ 107.464840][ T6515] EXT4-fs: Ignoring removed nobh option [ 107.479954][ T6515] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.494131][ T6515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.512066][ T6515] EXT4-fs (loop3): 1 truncate cleaned up [ 107.519327][ T6515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.603719][ T6515] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.730345][ T6516] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.746411][ T6516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.795614][ T6516] EXT4-fs (loop2): 1 truncate cleaned up [ 107.835072][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.862591][ T6529] loop0: detected capacity change from 0 to 64 [ 107.897132][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.911752][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.035714][ T6531] loop3: detected capacity change from 0 to 512 [ 108.104921][ T6531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.125637][ T6531] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.167642][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 108.196531][ T6531] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 3: comm syz.3.250: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 108.337434][ T6545] loop0: detected capacity change from 0 to 24 [ 108.363365][ T6545] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 108.408715][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.413079][ T6545] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 108.638744][ T6555] loop0: detected capacity change from 0 to 8 [ 109.097762][ T6571] loop5: detected capacity change from 0 to 7 [ 109.151816][ T2968] loop: Write error at byte offset 4, length 3584. [ 109.154601][ T6571] Dev loop5: unable to read RDB block 7 [ 109.177525][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 109.187297][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 109.195187][ T6571] loop5: unable to read partition table [ 109.216087][ T6571] loop5: partition table beyond EOD, truncated [ 109.246415][ T6571] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 109.262728][ T6557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.258 (6557) [ 109.328837][ T6557] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.347651][ T6557] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.375180][ T6557] BTRFS warning (device loop1): excessive commit interval 3581 [ 109.416469][ T6557] BTRFS info (device loop1): force zlib compression, level 3 [ 109.445550][ T6557] BTRFS info (device loop1): metadata ratio 107050 [ 109.458390][ T6557] BTRFS info (device loop1): turning on flush-on-commit [ 109.476644][ T6557] BTRFS info (device loop1): max_inline at 4096 [ 109.482972][ T6557] BTRFS info (device loop1): using free space tree [ 109.674872][ T6557] BTRFS info (device loop1): enabling ssd optimizations [ 110.096395][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.119250][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.277730][ T6612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.314174][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 110.344037][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.366003][ T9] usb 3-1: Product: syz [ 110.386366][ T9] usb 3-1: Manufacturer: syz [ 110.391029][ T9] usb 3-1: SerialNumber: syz [ 110.428275][ T9] usb 3-1: config 0 descriptor?? [ 110.438016][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 110.464937][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.487664][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 110.511090][ T9] usb 3-1: media controller created [ 110.529662][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 110.575425][ T6616] ipvlan2: entered allmulticast mode [ 110.581478][ T6618] kvm: kvm [6617]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 110.584584][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.610016][ T6616] syz_tun: entered allmulticast mode [ 110.642949][ T6622] netlink: 'syz.1.276': attribute type 3 has an invalid length. [ 110.647900][ T6604] dvb-usb: bulk message failed: -22 (7/0) [ 110.739851][ T6625] netlink: 277 bytes leftover after parsing attributes in process `syz.1.282'. [ 110.768683][ T9] DVB: Unable to find symbol mt352_attach() [ 110.870422][ T9] DVB: Unable to find symbol nxt6000_attach() [ 110.888838][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 110.906359][ T28] audit: type=1326 audit(1792076200.268:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 110.943551][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 110.952877][ T28] audit: type=1326 audit(1792076200.278:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 110.992508][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 111.000798][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 111.014749][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 111.022189][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 111.030091][ T28] audit: type=1326 audit(1792076200.278:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 111.036115][ T9] usb 3-1: USB disconnect, device number 6 [ 111.117198][ T28] audit: type=1326 audit(1792076200.278:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 111.213580][ T28] audit: type=1326 audit(1792076200.278:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 111.277034][ T28] audit: type=1326 audit(1792076200.278:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 111.319042][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 111.338029][ T28] audit: type=1326 audit(1792076200.278:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 111.421784][ T28] audit: type=1326 audit(1792076200.278:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 111.476388][ T28] audit: type=1326 audit(1792076200.278:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 111.523782][ T28] audit: type=1326 audit(1792076200.278:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695959e559 code=0x7ffc0000 [ 111.677992][ T6656] set_capacity_and_notify: 1 callbacks suppressed [ 111.678007][ T6656] loop1: detected capacity change from 0 to 1024 [ 111.698789][ T6657] loop3: detected capacity change from 0 to 512 [ 111.754035][ T6657] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 111.776107][ T6657] System zones: 0-7 [ 111.781770][ T6657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.878431][ T6663] capability: warning: `syz.0.298' uses 32-bit capabilities (legacy support in use) [ 111.894167][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.896436][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 111.914942][ T6656] hfsplus: failed to extend attributes file [ 112.026903][ T6667] tmpfs: Bad value for 'gid' [ 112.085210][ T6670] loop1: detected capacity change from 0 to 8 [ 112.088396][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.109559][ T9] usb 3-1: config 0 has no interface number 0 [ 112.118693][ T9] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.149687][ T6670] SQUASHFS error: Failed to read block 0x26067d: -5 [ 112.150790][ T9] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.158542][ T6670] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 112.176395][ T6670] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 112.200640][ T9] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.228233][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 112.241637][ T9] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 112.296320][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.311450][ T9] usb 3-1: config 0 descriptor?? [ 112.559011][ T6683] loop3: detected capacity change from 0 to 2048 [ 112.614890][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.653891][ T6683] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.757829][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.946778][ T9] uclogic 0003:145F:0212.0004: pen parameters not found [ 112.976344][ T9] uclogic 0003:145F:0212.0004: interface is invalid, ignoring [ 113.451227][ T23] usb 3-1: USB disconnect, device number 7 [ 113.878426][ T6698] loop1: detected capacity change from 0 to 131072 [ 113.889187][ T6698] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 113.898688][ T6698] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.912964][ T6698] F2FS-fs (loop1): invalid crc value [ 113.959639][ T6698] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.029967][ T6720] loop0: detected capacity change from 0 to 128 [ 114.045772][ T6698] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.053069][ T6698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 114.133257][ T6724] program syz.2.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.184022][ T6698] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 114.565473][ T6735] loop3: detected capacity change from 0 to 1024 [ 114.701609][ T6735] hfsplus: bad catalog file entry [ 114.715527][ T6739] loop2: detected capacity change from 0 to 512 [ 114.739355][ T6739] EXT4-fs: Ignoring removed orlov option [ 114.794664][ T2921] hfsplus: b-tree write err: -5, ino 3 [ 114.823299][ T2921] hfsplus: bad catalog file entry [ 114.867789][ T6739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.913467][ T6739] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.938887][ T6747] loop0: detected capacity change from 0 to 164 [ 115.099056][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.334559][ T6753] loop3: detected capacity change from 0 to 8192 [ 115.412898][ T6753] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 115.476591][ T6753] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 115.506732][ T6753] REISERFS (device loop3): using ordered data mode [ 115.530252][ T6753] reiserfs: using flush barriers [ 115.565580][ T6753] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.623528][ T6753] REISERFS (device loop3): checking transaction log (loop3) [ 115.662974][ T6765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.823586][ T6753] REISERFS (device loop3): Using rupasov hash to sort names [ 115.850054][ T6753] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 115.874089][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.071619][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 116.071633][ T28] audit: type=1804 audit(1792076205.448:23): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.334" name="/newroot/78/file0/file0" dev="loop3" ino=4 res=1 errno=0 [ 116.299217][ T5839] IPVS: starting estimator thread 0... [ 116.386975][ T6778] IPVS: using max 18 ests per chain, 43200 per kthread [ 116.648455][ T6797] i2c i2c-0: delete_device: Can't find device in list [ 116.846553][ T6802] set_capacity_and_notify: 2 callbacks suppressed [ 116.846568][ T6802] loop0: detected capacity change from 0 to 256 [ 116.871881][ T6806] loop2: detected capacity change from 0 to 512 [ 116.922115][ T6806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.949846][ T6806] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.098685][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.335112][ T6805] loop3: detected capacity change from 0 to 32768 [ 117.339693][ T6815] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 117.381319][ T6805] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 117.472388][ T6805] XFS (loop3): Ending clean mount [ 117.702230][ T5779] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 117.830450][ T6833] Invalid ELF header magic: != ELF [ 118.195863][ T6847] loop0: detected capacity change from 0 to 128 [ 118.227187][ T6847] EXT4-fs: Ignoring removed i_version option [ 118.279943][ T6847] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.303782][ T6847] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.311362][ T6849] loop2: detected capacity change from 0 to 4096 [ 118.350243][ T6849] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 118.463947][ T6849] ntfs3: loop2: ino=19, mi_enum_attr [ 118.466672][ T6854] netlink: 144 bytes leftover after parsing attributes in process `syz.1.373'. [ 118.546589][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.585740][ T6849] ntfs3: loop2: failed to convert "c46c" to cp864 [ 118.667079][ T6849] ntfs3: loop2: ino=20, mi_enum_attr [ 118.756476][ T28] audit: type=1807 audit(1792076208.138:24): action=measure uid>+ res=0 [ 118.775580][ T6860] ima: policy update failed [ 118.798933][ T28] audit: type=1802 audit(1792076208.138:25): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.375" res=0 errno=0 [ 118.843528][ T28] audit: type=1802 audit(1792076208.178:26): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.375" res=0 errno=0 [ 119.197264][ T6879] : renamed from bond0 (while UP) [ 119.439302][ T6890] loop0: detected capacity change from 0 to 4096 [ 119.467262][ T6890] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 119.535786][ T6890] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 119.876393][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.090297][ T56] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.114504][ T56] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.156417][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.175890][ T56] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 120.205688][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.235029][ T56] usb 2-1: config 0 descriptor?? [ 120.285328][ T6917] loop2: detected capacity change from 0 to 128 [ 120.347060][ T6917] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 120.369133][ T6917] hpfs: filesystem error: improperly stopped [ 120.393349][ T6917] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 120.406409][ T6917] hpfs: You really don't want any checks? You are crazy... [ 120.418960][ T6917] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 120.421559][ T6921] loop0: detected capacity change from 0 to 128 [ 120.434009][ T6917] hpfs: code page support is disabled [ 120.458367][ T6917] hpfs: hpfs_map_4sectors(): unaligned read [ 120.483089][ T6917] hpfs: hpfs_map_4sectors(): unaligned read [ 120.490070][ T6917] hpfs: filesystem error: unable to find root dir [ 120.523497][ T6917] hpfs: hpfs_map_4sectors(): unaligned read [ 120.554761][ T6917] hpfs: hpfs_map_sector(): read error [ 120.688537][ T56] playstation 0003:054C:09CC.0005: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 120.879921][ T56] playstation 0003:054C:09CC.0005: Invalid byte count transferred, expected 16 got 0 [ 120.919072][ T56] playstation 0003:054C:09CC.0005: Failed to retrieve DualShock4 pairing info: -22 [ 120.963254][ T56] playstation 0003:054C:09CC.0005: Failed to get MAC address from DualShock4 [ 121.015437][ T56] playstation 0003:054C:09CC.0005: Failed to create dualshock4. [ 121.070220][ T56] playstation: probe of 0003:054C:09CC.0005 failed with error -22 [ 121.110542][ T56] usb 2-1: USB disconnect, device number 4 [ 121.297731][ T6931] loop2: detected capacity change from 0 to 512 [ 121.317195][ T6931] EXT4-fs: Ignoring removed bh option [ 121.326026][ T6933] loop0: detected capacity change from 0 to 256 [ 121.365804][ T6931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.435669][ T6931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.456985][ T6931] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.651925][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.133999][ T6964] loop2: detected capacity change from 0 to 4096 [ 122.205701][ T6972] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.301906][ T6964] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 122.372731][ T6964] Remounting filesystem read-only [ 122.597385][ T6983] hugetlbfs: syz.2.431 (6983): Using mlock ulimits for SHM_HUGETLB is obsolete [ 122.969977][ T6996] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.278081][ T7007] loop1: detected capacity change from 0 to 24 [ 123.297227][ T5839] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 123.299678][ T7007] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 123.328183][ T7007] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 123.437890][ T7011] capability: warning: `syz.3.444' uses deprecated v2 capabilities in a way that may be insecure [ 123.489112][ T5839] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.517740][ T5839] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.538734][ T5839] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.549509][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.776416][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.784784][ T5839] usb 3-1: GET_CAPABILITIES returned 0 [ 123.797534][ T5839] usbtmc 3-1:16.0: can't read capabilities [ 123.935900][ T7023] loop3: detected capacity change from 0 to 8 [ 123.966592][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 123.974752][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 123.998445][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 124.031742][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.045471][ T7023] SQUASHFS error: Failed to read block 0x26067d: -5 [ 124.054595][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 124.057574][ T5842] usb 3-1: USB disconnect, device number 8 [ 124.088482][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 124.115651][ T7023] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 124.123448][ T7023] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 124.130603][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.161949][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.174289][ T7027] loop1: detected capacity change from 0 to 256 [ 124.181632][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.190763][ T7027] exfat: Deprecated parameter 'utf8' [ 124.198424][ T7027] exfat: Deprecated parameter 'utf8' [ 124.205064][ T7027] exfat: Deprecated parameter 'utf8' [ 124.278013][ T7027] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 124.427407][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 124.433054][ T9] usbtmc 1-1:16.0: can't read capabilities [ 124.667807][ T5839] usb 1-1: USB disconnect, device number 2 [ 125.300379][ T7034] loop2: detected capacity change from 0 to 131072 [ 125.346612][ T7034] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 125.354790][ T7034] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.367051][ T7034] F2FS-fs (loop2): invalid crc value [ 125.404782][ T7034] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.482599][ T7034] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 125.490334][ T7034] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 125.826029][ T2921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.068824][ T2921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.307255][ T2921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.507457][ T2921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.787398][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.798777][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.814357][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.827999][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.845629][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.856659][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.012006][ T7052] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.590137][ T7048] loop3: detected capacity change from 0 to 32768 [ 128.480708][ T7065] loop0: detected capacity change from 0 to 40427 [ 128.513966][ T7065] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 128.538354][ T7065] F2FS-fs (loop0): invalid crc value [ 128.571539][ T7065] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.636635][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 128.722578][ T7065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.747902][ T7083] sd 0:0:1:0: PR command failed: 1026 [ 128.753998][ T7083] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 128.768326][ T7083] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 128.876852][ T7065] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 128.942242][ T7085] f2fs_ckpt-7:0: attempt to access beyond end of device [ 128.942242][ T7085] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.977940][ T5778] Bluetooth: hci0: command tx timeout [ 128.988652][ T7085] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 128.995521][ T7091] F2FS-fs (loop0): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 129.009887][ T7090] loop3: detected capacity change from 0 to 256 [ 129.748637][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.767021][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.774642][ T7052] bridge_slave_0: entered allmulticast mode [ 129.808867][ T7052] bridge_slave_0: entered promiscuous mode [ 129.875237][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.895604][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.917718][ T7052] bridge_slave_1: entered allmulticast mode [ 129.928962][ T7052] bridge_slave_1: entered promiscuous mode [ 130.106441][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.145958][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.192913][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.288757][ T7118] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 130.317351][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 130.356824][ T9] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 130.383907][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.425015][ T9] usb 1-1: config 0 descriptor?? [ 130.502921][ T9] as10x_usb: device has been detected [ 130.528343][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 130.528957][ T7052] team0: Port device team_slave_0 added [ 130.554878][ T7126] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.621896][ T7052] team0: Port device team_slave_1 added [ 130.623192][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 130.672946][ T7106] ------------[ cut here ]------------ [ 130.678906][ T7106] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 130.682564][ T7106] WARNING: CPU: 0 PID: 7106 at kernel/locking/mutex.c:582 __mutex_lock+0xb48/0xc80 [ 130.699560][ T7106] Modules linked in: [ 130.707035][ T7106] CPU: 0 PID: 7106 Comm: syz.0.475 Not tainted syzkaller #0 [ 130.715118][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.727980][ T7106] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 130.733535][ T7106] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d 51 cb d0 04 00 0f 85 d1 f5 ff ff 48 c7 c7 80 ba ca 8a 48 c7 c6 20 bb ca 8a e8 d8 8a b5 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 130.753751][ T7106] RSP: 0018:ffffc9000338fac0 EFLAGS: 00010246 [ 130.760078][ T7106] RAX: d237f1cd9392a700 RBX: ffff88802dc40ce0 RCX: 0000000000080000 [ 130.768127][ T7106] RDX: ffffc9000ccb2000 RSI: 0000000000002e9f RDI: 0000000000002ea0 [ 130.776210][ T7106] RBP: ffffc9000338fc20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 130.784437][ T7106] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92000671f68 [ 130.792978][ T7106] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 130.801243][ T7106] FS: 00007f90ac3486c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 130.810363][ T7106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.817435][ T7106] CR2: 0000001b2de1fff8 CR3: 000000007f752000 CR4: 00000000003506f0 [ 130.826208][ T7106] Call Trace: [ 130.829611][ T7106] [ 130.832573][ T7106] ? __mutex_lock+0x30d/0xc80 [ 130.837342][ T7106] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 130.843328][ T7106] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 130.849053][ T7106] ? mutex_lock_nested+0x20/0x20 [ 130.854035][ T7106] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 130.860207][ T7106] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 130.866413][ T7106] ? mutex_unlock+0x10/0x10 [ 130.871736][ T7106] ? mutex_lock_nested+0x20/0x20 [ 130.876764][ T7106] ? _raw_spin_lock_irq+0xbb/0xf0 [ 130.881841][ T7106] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.887966][ T7106] as102_dvb_dmx_start_feed+0x70/0x280 [ 130.893473][ T7106] dmx_ts_feed_start_filtering+0x120/0x220 [ 130.899372][ T7106] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 130.905305][ T7106] dvb_dmxdev_filter_start+0x422/0x10a0 [ 130.910998][ T7106] dvb_demux_do_ioctl+0x482/0x530 [ 130.916487][ T7106] dvb_usercopy+0x195/0x2b0 [ 130.921041][ T7106] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 130.927949][ T7106] ? dvb_generic_ioctl+0xb0/0xb0 [ 130.933477][ T7106] ? dvb_demux_poll+0x210/0x210 [ 130.938418][ T7106] dvb_demux_ioctl+0x29/0x30 [ 130.943036][ T7106] __se_sys_ioctl+0xfd/0x170 [ 130.947790][ T7106] do_syscall_64+0x55/0xb0 [ 130.952242][ T7106] ? clear_bhb_loop+0x40/0x90 [ 130.957018][ T7106] ? clear_bhb_loop+0x40/0x90 [ 130.961725][ T7106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.967716][ T7106] RIP: 0033:0x7f90ab39e559 [ 130.972187][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.992157][ T7106] RSP: 002b:00007f90ac348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.000623][ T7106] RAX: ffffffffffffffda RBX: 00007f90ab625fa0 RCX: 00007f90ab39e559 [ 131.008666][ T7106] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 131.017046][ T7106] RBP: 00007f90ab4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 131.025049][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.033154][ T7106] R13: 00007f90ab626038 R14: 00007f90ab625fa0 R15: 00007ffcba7c0d18 [ 131.041210][ T7106] [ 131.044448][ T7106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.051767][ T7106] CPU: 0 PID: 7106 Comm: syz.0.475 Not tainted syzkaller #0 [ 131.059100][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.069152][ T7106] Call Trace: [ 131.072426][ T7106] [ 131.075377][ T7106] dump_stack_lvl+0x18c/0x250 [ 131.080146][ T7106] ? show_regs_print_info+0x20/0x20 [ 131.085438][ T7106] ? load_image+0x420/0x420 [ 131.089952][ T7106] panic+0x2ca/0x720 [ 131.093849][ T7106] ? bpf_jit_dump+0xd0/0xd0 [ 131.098367][ T7106] __warn+0x2e0/0x470 [ 131.102367][ T7106] ? __mutex_lock+0xb48/0xc80 [ 131.107059][ T7106] ? __mutex_lock+0xb48/0xc80 [ 131.112367][ T7106] report_bug+0x2be/0x4f0 [ 131.116785][ T7106] ? __mutex_lock+0xb48/0xc80 [ 131.121497][ T7106] ? __mutex_lock+0xb48/0xc80 [ 131.126176][ T7106] ? __mutex_lock+0xb4a/0xc80 [ 131.130862][ T7106] handle_bug+0xcf/0x120 [ 131.135132][ T7106] exc_invalid_op+0x1a/0x50 [ 131.139680][ T7106] asm_exc_invalid_op+0x1a/0x20 [ 131.144906][ T7106] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 131.150215][ T7106] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d 51 cb d0 04 00 0f 85 d1 f5 ff ff 48 c7 c7 80 ba ca 8a 48 c7 c6 20 bb ca 8a e8 d8 8a b5 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 131.170188][ T7106] RSP: 0018:ffffc9000338fac0 EFLAGS: 00010246 [ 131.176368][ T7106] RAX: d237f1cd9392a700 RBX: ffff88802dc40ce0 RCX: 0000000000080000 [ 131.184352][ T7106] RDX: ffffc9000ccb2000 RSI: 0000000000002e9f RDI: 0000000000002ea0 [ 131.192322][ T7106] RBP: ffffc9000338fc20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 131.200294][ T7106] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92000671f68 [ 131.208270][ T7106] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 131.216293][ T7106] ? __mutex_lock+0x30d/0xc80 [ 131.220981][ T7106] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 131.226737][ T7106] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 131.232374][ T7106] ? mutex_lock_nested+0x20/0x20 [ 131.237310][ T7106] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.243380][ T7106] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 131.249276][ T7106] ? mutex_unlock+0x10/0x10 [ 131.253957][ T7106] ? mutex_lock_nested+0x20/0x20 [ 131.258898][ T7106] ? _raw_spin_lock_irq+0xbb/0xf0 [ 131.263926][ T7106] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.269139][ T7106] as102_dvb_dmx_start_feed+0x70/0x280 [ 131.274790][ T7106] dmx_ts_feed_start_filtering+0x120/0x220 [ 131.280630][ T7106] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 131.286564][ T7106] dvb_dmxdev_filter_start+0x422/0x10a0 [ 131.292166][ T7106] dvb_demux_do_ioctl+0x482/0x530 [ 131.297245][ T7106] dvb_usercopy+0x195/0x2b0 [ 131.301949][ T7106] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 131.307533][ T7106] ? dvb_generic_ioctl+0xb0/0xb0 [ 131.312487][ T7106] ? dvb_demux_poll+0x210/0x210 [ 131.317338][ T7106] dvb_demux_ioctl+0x29/0x30 [ 131.322029][ T7106] __se_sys_ioctl+0xfd/0x170 [ 131.326892][ T7106] do_syscall_64+0x55/0xb0 [ 131.331312][ T7106] ? clear_bhb_loop+0x40/0x90 [ 131.335983][ T7106] ? clear_bhb_loop+0x40/0x90 [ 131.340663][ T7106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.346568][ T7106] RIP: 0033:0x7f90ab39e559 [ 131.350988][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.370691][ T7106] RSP: 002b:00007f90ac348028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.379127][ T7106] RAX: ffffffffffffffda RBX: 00007f90ab625fa0 RCX: 00007f90ab39e559 [ 131.387116][ T7106] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 131.395092][ T7106] RBP: 00007f90ab4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 131.403283][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.411258][ T7106] R13: 00007f90ab626038 R14: 00007f90ab625fa0 R15: 00007ffcba7c0d18 [ 131.419701][ T7106] [ 131.422875][ T7106] Kernel Offset: disabled [ 131.427255][ T7106] Rebooting in 86400 seconds..