last executing test programs: 3.557335447s ago: executing program 2 (id=405): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 3.14345125s ago: executing program 2 (id=409): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7f, 0x6}, &(0x7f0000000200)=0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 2.926723837s ago: executing program 2 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x26000, 0x7, 0x3, 0x62d, 0x0, [{0xc0, 0x7, 0x5}, {0x2, 0x5, 0x23, '\x00', 0x6}, {0x4, 0x7, 0x2, '\x00', 0x3}, {0x1f, 0x6, 0xc, '\x00', 0xc}, {0x7, 0x7, 0x4}, {0xa, 0x1, 0x8, '\x00', 0x1}, {0x80, 0x3, 0x1, '\x00', 0x9c}, {0x3, 0xf0, 0x6, '\x00', 0x9}, {0x1, 0x4, 0xb5, '\x00', 0x7}, {0x4, 0x3, 0xfb, '\x00', 0x8}, {0xf, 0x5, 0xb, '\x00', 0x1}, {0x2, 0x2, 0x2, '\x00', 0x2}, {0x1, 0x3, 0x8, '\x00', 0x8}, {0x1, 0xf8, 0x86, '\x00', 0xfb}, {0x7, 0x8, 0x5}, {0x7f, 0xf0, 0x5}, {0x0, 0x80, 0x5, '\x00', 0x7}, {0xe7, 0x9d, 0x3, '\x00', 0x8}, {0xfa, 0x9, 0x2}, {0x3, 0x3, 0xf4, '\x00', 0x27}, {0x8, 0x9, 0x2, '\x00', 0x5}, {0x7f, 0x6, 0xdf, '\x00', 0xa}, {0x8, 0x4, 0xc, '\x00', 0x4}, {0x5, 0xff, 0x5, '\x00', 0xb1}]}}) 2.489825671s ago: executing program 2 (id=416): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) readv(r0, &(0x7f0000006300)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005300)=""/4096, 0x1000}], 0x2) 2.287683578s ago: executing program 2 (id=418): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea0020904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x20, 0x13, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x14, 0x1, '_'}, 0x0, 0x0}) 2.032893526s ago: executing program 0 (id=421): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) 2.005580367s ago: executing program 1 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250c00000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000000000004002800500050801400088104000100040001000400010004000200050009000000000004000500110001000024fb54b0f798fac4164411af00000006000419f2860000050002"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x40000c4) 1.913397439s ago: executing program 0 (id=424): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280000b, &(0x7f0000000440)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@delalloc}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") chdir(&(0x7f00000002c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.856486531s ago: executing program 3 (id=425): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = eventfd(0x0) io_setup(0xc, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000180)='\x00\x00\x00a\x00\x00\x00\x00', 0x8, 0x34}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xffff, r0, 0x0, 0x300, 0x0, 0x0, 0x1, r0}]) 1.611457449s ago: executing program 0 (id=426): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x2, 0x30}, &(0x7f00000003c0)=0xc) 1.59740006s ago: executing program 1 (id=427): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000001540)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108) 1.420710495s ago: executing program 1 (id=428): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1.353105477s ago: executing program 3 (id=429): r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) 1.162890663s ago: executing program 3 (id=430): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.055578237s ago: executing program 0 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}]}]}, 0x28}}, 0x0) 1.012466858s ago: executing program 3 (id=432): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000380)={{@any, 0xffffffff}, 0xffffffff, 0x8, 0x1ff, 0x0, 0x7, 0x10001, 0x8, 0x9}) 885.068632ms ago: executing program 1 (id=433): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 876.081603ms ago: executing program 0 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 855.274093ms ago: executing program 3 (id=435): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfb, 0xfa83eb850bd66ef}, 0xc) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2001413, 0x0, 0x1, 0x0, &(0x7f0000000080)) 390.042988ms ago: executing program 3 (id=436): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota_file, 0x4}, {@acl}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x2, 0x110f, &(0x7f0000001140)="$eJzs2LFqFEEYB/D/7B2Y7mTTL4IWFhISzs4qRYRrrW0kpDJVrooI4rv4OJLKPuQBLAKWwshusp5IIGAuhoPfD2Z3+OabmW/KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVV/1nu0naMdIkKUnXnS0uknRj/PHXSZOSN0eL5cHJ/PUyyWRIL33rZ/XT0u493Wrn7bzda19u7z9rl6cf3r87Pj46uV6mpMv55foPUq7rudHW+vcDAACATVHvbPb3ktP/uz8AAABwm7U+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8gzpb9dskP2utaZKUpOvOFhdJuocsEAAAALizkiZvZzfFMzwDrLzIt1kZ4mP7Ufqc3XwZ5j9apR429184AAAAbJTprRnlj/v480xTa/00jj3JNDs7V/3+1w98308mpwfZ/X0n/zx8zy8/Ho6t1Mk9nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAB8FAAD//6zC3aE=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='mountinfo\x00') r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x8000000010001) 343.354589ms ago: executing program 0 (id=437): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x8584b4, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) open(0x0, 0x8000, 0x50) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 244.668063ms ago: executing program 1 (id=438): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) 49.036299ms ago: executing program 1 (id=439): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x40) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000380)=0x101082) 0s ago: executing program 2 (id=440): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) write(r0, &(0x7f00000000c0)="9b", 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 81.449746][ T5763] cgroup: Unknown subsys name 'net' [ 81.620407][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.370602][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.510707][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.519478][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.527383][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.535967][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.544136][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.551651][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.576631][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.585467][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.593449][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.601972][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.610217][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.613160][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.618540][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.626747][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.636035][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.642882][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.653460][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.655265][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.661728][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.668788][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.703266][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.729588][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.744688][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.762022][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.124543][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.292318][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.303724][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.310912][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.320160][ T5777] bridge_slave_0: entered allmulticast mode [ 86.327457][ T5777] bridge_slave_0: entered promiscuous mode [ 86.341099][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.348408][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.355774][ T5777] bridge_slave_1: entered allmulticast mode [ 86.363864][ T5777] bridge_slave_1: entered promiscuous mode [ 86.389514][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.478602][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.502438][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.571985][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.593955][ T5777] team0: Port device team_slave_0 added [ 86.639520][ T5777] team0: Port device team_slave_1 added [ 86.645931][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.653386][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.660627][ T5774] bridge_slave_0: entered allmulticast mode [ 86.668092][ T5774] bridge_slave_0: entered promiscuous mode [ 86.697930][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.705565][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.712910][ T5775] bridge_slave_0: entered allmulticast mode [ 86.719912][ T5775] bridge_slave_0: entered promiscuous mode [ 86.738708][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.747030][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.754595][ T5774] bridge_slave_1: entered allmulticast mode [ 86.762121][ T5774] bridge_slave_1: entered promiscuous mode [ 86.791215][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.798475][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.805948][ T5775] bridge_slave_1: entered allmulticast mode [ 86.813428][ T5775] bridge_slave_1: entered promiscuous mode [ 86.857344][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.864509][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.890523][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.904874][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.911937][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.937944][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.953041][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.965729][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.016149][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.038142][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.045545][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.052843][ T5776] bridge_slave_0: entered allmulticast mode [ 87.060267][ T5776] bridge_slave_0: entered promiscuous mode [ 87.071224][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.125896][ T5774] team0: Port device team_slave_0 added [ 87.161750][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.168893][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.181876][ T5776] bridge_slave_1: entered allmulticast mode [ 87.189333][ T5776] bridge_slave_1: entered promiscuous mode [ 87.253239][ T5774] team0: Port device team_slave_1 added [ 87.280257][ T5775] team0: Port device team_slave_0 added [ 87.300760][ T5777] hsr_slave_0: entered promiscuous mode [ 87.312767][ T5777] hsr_slave_1: entered promiscuous mode [ 87.351226][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.368486][ T5775] team0: Port device team_slave_1 added [ 87.394864][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.440816][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.452710][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.483984][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.537967][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.549536][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.580503][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.618340][ T5776] team0: Port device team_slave_0 added [ 87.625075][ T51] Bluetooth: hci3: command tx timeout [ 87.627632][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.644232][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.675070][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.701828][ T51] Bluetooth: hci2: command tx timeout [ 87.701850][ T5785] Bluetooth: hci1: command tx timeout [ 87.728585][ T5776] team0: Port device team_slave_1 added [ 87.751030][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.758250][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.784357][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.861843][ T51] Bluetooth: hci0: command tx timeout [ 87.871026][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.878209][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.905855][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.918516][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.925562][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.951607][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.984975][ T5774] hsr_slave_0: entered promiscuous mode [ 87.991417][ T5774] hsr_slave_1: entered promiscuous mode [ 87.998063][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.006383][ T5774] Cannot create hsr debugfs directory [ 88.101801][ T5775] hsr_slave_0: entered promiscuous mode [ 88.109019][ T5775] hsr_slave_1: entered promiscuous mode [ 88.115942][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.124478][ T5775] Cannot create hsr debugfs directory [ 88.221491][ T5776] hsr_slave_0: entered promiscuous mode [ 88.228219][ T5776] hsr_slave_1: entered promiscuous mode [ 88.235053][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.243099][ T5776] Cannot create hsr debugfs directory [ 88.458865][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.502140][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.512682][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.565542][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.673431][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.694781][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.707398][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.718430][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.815074][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.837953][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.851159][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.862234][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.930339][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.943077][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.957491][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.986880][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.076745][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.142790][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.178927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.186408][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.228649][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.238949][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.246193][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.267033][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.299443][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.322532][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.346090][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.353317][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.393455][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.400656][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.411450][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.418671][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.428338][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.435609][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.483472][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.591025][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.611271][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.652905][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.660131][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.683982][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.691205][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.701758][ T51] Bluetooth: hci3: command tx timeout [ 89.782317][ T51] Bluetooth: hci2: command tx timeout [ 89.785090][ T5785] Bluetooth: hci1: command tx timeout [ 89.890435][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.943603][ T5785] Bluetooth: hci0: command tx timeout [ 90.149088][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.198259][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.309723][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.331692][ T5775] veth0_vlan: entered promiscuous mode [ 90.383881][ T5775] veth1_vlan: entered promiscuous mode [ 90.396815][ T5777] veth0_vlan: entered promiscuous mode [ 90.424212][ T5777] veth1_vlan: entered promiscuous mode [ 90.493862][ T5774] veth0_vlan: entered promiscuous mode [ 90.525724][ T5775] veth0_macvtap: entered promiscuous mode [ 90.541179][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.556816][ T5774] veth1_vlan: entered promiscuous mode [ 90.574036][ T5777] veth0_macvtap: entered promiscuous mode [ 90.586422][ T5775] veth1_macvtap: entered promiscuous mode [ 90.613673][ T5777] veth1_macvtap: entered promiscuous mode [ 90.639325][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.658910][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.672379][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.681266][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.690590][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.699480][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.760163][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.773229][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.785547][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.817577][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.828345][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.842926][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.868078][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.881006][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.893157][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.903068][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.933083][ T5774] veth0_macvtap: entered promiscuous mode [ 90.955865][ T5774] veth1_macvtap: entered promiscuous mode [ 91.028899][ T5776] veth0_vlan: entered promiscuous mode [ 91.035809][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.057925][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.106216][ T5776] veth1_vlan: entered promiscuous mode [ 91.113927][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.126165][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.136634][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.147909][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.160391][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.210801][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.210838][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.232654][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.247149][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.257857][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.272490][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.284077][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.331112][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.342619][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.351402][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.367815][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.373810][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.392711][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.463260][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.478679][ T5776] veth0_macvtap: entered promiscuous mode [ 91.490957][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.505939][ T5776] veth1_macvtap: entered promiscuous mode [ 91.590584][ T5843] syz.3.4[5843]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.635242][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.662380][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.674490][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.685335][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.695879][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.707151][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.719247][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.773810][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.792019][ T5785] Bluetooth: hci3: command tx timeout [ 91.799097][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.809491][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.823964][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.836075][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.846804][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.861862][ T5785] Bluetooth: hci1: command tx timeout [ 91.867360][ T5785] Bluetooth: hci2: command tx timeout [ 91.887270][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.925477][ T5845] loop0: detected capacity change from 0 to 512 [ 91.934630][ T5845] ======================================================= [ 91.934630][ T5845] WARNING: The mand mount option has been deprecated and [ 91.934630][ T5845] and is ignored by this kernel. Remove the mand [ 91.934630][ T5845] option from the mount to silence this warning. [ 91.934630][ T5845] ======================================================= [ 91.971482][ T5845] EXT4-fs: Ignoring removed oldalloc option [ 91.995911][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.005102][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.015639][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.026770][ T5785] Bluetooth: hci0: command tx timeout [ 92.033173][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.058099][ T5845] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1: invalid indirect mapped block 4294967295 (level 1) [ 92.084727][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.093074][ T5845] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1: invalid indirect mapped block 4294967295 (level 1) [ 92.112376][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.122414][ T5845] EXT4-fs (loop0): 2 truncates cleaned up [ 92.129656][ T5845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.204834][ T788] cfg80211: failed to load regulatory.db [ 92.317345][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.329867][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.363705][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.498806][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.543279][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.684310][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.702716][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.727320][ T5843] loop3: detected capacity change from 0 to 32768 [ 92.946194][ T5843] JBD2: Ignoring recovery information on journal [ 93.085177][ T5843] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 93.136289][ T5863] capability: warning: `syz.2.8' uses deprecated v2 capabilities in a way that may be insecure [ 93.179389][ T5863] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 93.217643][ T5863] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.289641][ T5863] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 93.327912][ T5863] overlayfs: conflicting lowerdir path [ 93.363993][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 93.861792][ T5785] Bluetooth: hci3: command tx timeout [ 93.942441][ T5785] Bluetooth: hci2: command tx timeout [ 93.947944][ T5785] Bluetooth: hci1: command tx timeout [ 94.102102][ T5785] Bluetooth: hci0: command tx timeout [ 94.479578][ T5897] syz.1.23: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 94.494406][ T5897] CPU: 1 PID: 5897 Comm: syz.1.23 Not tainted syzkaller #0 [ 94.501671][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.511800][ T5897] Call Trace: [ 94.515138][ T5897] [ 94.518114][ T5897] dump_stack_lvl+0x18c/0x250 [ 94.522863][ T5897] ? show_regs_print_info+0x20/0x20 [ 94.528111][ T5897] ? load_image+0x420/0x420 [ 94.532686][ T5897] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 94.539165][ T5897] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 94.545746][ T5897] warn_alloc+0x246/0x340 [ 94.550155][ T5897] ? zone_watermark_ok_safe+0x230/0x230 [ 94.555792][ T5897] __vmalloc_node_range+0x126/0x1330 [ 94.561147][ T5897] ? __mutex_trylock_common+0x159/0x260 [ 94.566755][ T5897] ? trace_raw_output_contention_end+0xd0/0xd0 [ 94.572978][ T5897] ? trace_contention_end+0x39/0xe0 [ 94.578234][ T5897] ? __mutex_lock+0x315/0xcc0 [ 94.582975][ T5897] ? free_vm_area+0x50/0x50 [ 94.587536][ T5897] ? dvb_demux_do_ioctl+0x317/0x530 [ 94.592787][ T5897] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 94.598299][ T5897] ? mutex_lock_nested+0x20/0x20 [ 94.603299][ T5897] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 94.609169][ T5897] vmalloc+0x79/0x90 [ 94.613130][ T5897] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 94.619002][ T5897] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 94.624707][ T5897] dvb_demux_do_ioctl+0x454/0x530 [ 94.629801][ T5897] dvb_usercopy+0x195/0x2b0 [ 94.634382][ T5897] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 94.639988][ T5897] ? dvb_generic_ioctl+0xb0/0xb0 [ 94.645015][ T5897] ? dvb_demux_poll+0x220/0x220 [ 94.649925][ T5897] dvb_demux_ioctl+0x29/0x30 [ 94.654581][ T5897] __se_sys_ioctl+0xfd/0x170 [ 94.659255][ T5897] do_syscall_64+0x55/0xb0 [ 94.663736][ T5897] ? clear_bhb_loop+0x40/0x90 [ 94.668488][ T5897] ? clear_bhb_loop+0x40/0x90 [ 94.673236][ T5897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.679194][ T5897] RIP: 0033:0x7fdab379ce59 [ 94.683691][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.703350][ T5897] RSP: 002b:00007fdab457f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.711806][ T5897] RAX: ffffffffffffffda RBX: 00007fdab3a15fa0 RCX: 00007fdab379ce59 [ 94.719804][ T5897] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 94.727810][ T5897] RBP: 00007fdab3832d6f R08: 0000000000000000 R09: 0000000000000000 [ 94.735808][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.743811][ T5897] R13: 00007fdab3a16038 R14: 00007fdab3a15fa0 R15: 00007ffd9af75b78 [ 94.751841][ T5897] [ 94.760893][ T5897] Mem-Info: [ 94.766553][ T5897] active_anon:5061 inactive_anon:0 isolated_anon:0 [ 94.766553][ T5897] active_file:999 inactive_file:39946 isolated_file:0 [ 94.766553][ T5897] unevictable:768 dirty:584 writeback:0 [ 94.766553][ T5897] slab_reclaimable:9964 slab_unreclaimable:90545 [ 94.766553][ T5897] mapped:24191 shmem:1361 pagetables:545 [ 94.766553][ T5897] sec_pagetables:0 bounce:0 [ 94.766553][ T5897] kernel_misc_reclaimable:0 [ 94.766553][ T5897] free:1371806 free_pcp:8417 free_cma:0 [ 94.811860][ T5897] Node 0 active_anon:20244kB inactive_anon:0kB active_file:3996kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96764kB dirty:2328kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10488kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no [ 94.845488][ T5897] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 94.877457][ T5897] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.904940][ T5897] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 94.910786][ T5897] Node 0 DMA32 free:1582216kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20208kB inactive_anon:0kB active_file:3996kB inactive_file:158752kB unevictable:1536kB writepending:2324kB present:3129332kB managed:2586940kB mlocked:0kB bounce:0kB free_pcp:11672kB local_pcp:2116kB free_cma:0kB [ 94.941631][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 94.946442][ T5897] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.975295][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 94.980096][ T5897] Node 1 Normal free:3889928kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22168kB local_pcp:8064kB free_cma:0kB [ 95.010399][ T5897] lowmem_reserve[]: 0 0 0 0 0 [ 95.015243][ T5897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.028572][ T5897] Node 0 DMA32: 196*4kB (U) 385*8kB (UM) 65*16kB (M) 42*32kB (ME) 23*64kB (UM) 21*128kB (UME) 13*256kB (UM) 5*512kB (UM) 7*1024kB (UM) 1*2048kB (U) 380*4096kB (M) = 1581992kB [ 95.046720][ T5897] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 95.060662][ T5897] Node 1 Normal: 182*4kB (UME) 48*8kB (UME) 43*16kB (UME) 58*32kB (UME) 19*64kB (UME) 6*128kB (UME) 1*256kB (M) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889928kB [ 95.079573][ T5897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.089571][ T5897] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.099148][ T5897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.108808][ T5897] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.118226][ T5897] 42305 total pagecache pages [ 95.122990][ T5897] 0 pages in swap cache [ 95.127206][ T5897] Free swap = 124996kB [ 95.131402][ T5897] Total swap = 124996kB [ 95.135862][ T5897] 2097051 pages RAM [ 95.139723][ T5897] 0 pages HighMem/MovableOnly [ 95.145729][ T5897] 416930 pages reserved [ 95.149938][ T5897] 0 pages cma reserved [ 95.643387][ T968] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.681781][ T5918] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 95.756102][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 95.772710][ T5923] netlink: 56 bytes leftover after parsing attributes in process `syz.0.35'. [ 95.856439][ T968] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.882139][ T968] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.914144][ T968] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.936551][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.950229][ T5926] loop0: detected capacity change from 0 to 1024 [ 95.977889][ T5907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.045624][ T968] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 96.192087][ T2178] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.297857][ T5933] input: syz0 as /devices/virtual/input/input5 [ 96.395179][ T968] usb 2-1: USB disconnect, device number 2 [ 96.411789][ T2178] usb 3-1: Using ep0 maxpacket: 8 [ 96.430741][ T2178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 96.461767][ T2178] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.497942][ T2178] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 96.526333][ T2178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.556240][ T2178] usb 3-1: config 0 descriptor?? [ 97.007322][ T5942] loop0: detected capacity change from 0 to 8192 [ 97.034603][ T2178] saitek 0003:06A3:0621.0001: unexpected long global item [ 97.060908][ T5945] loop3: detected capacity change from 0 to 1024 [ 97.069156][ T2178] saitek 0003:06A3:0621.0001: parse failed [ 97.097162][ T2178] saitek: probe of 0003:06A3:0621.0001 failed with error -22 [ 97.138266][ T5945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 97.266859][ T968] usb 3-1: USB disconnect, device number 2 [ 97.436648][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 97.511708][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.576455][ T5955] loop3: detected capacity change from 0 to 128 [ 97.604732][ T5955] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 97.635943][ T5955] hpfs: filesystem error: improperly stopped [ 97.643366][ T5955] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 97.649319][ T5957] ip6gre1: entered promiscuous mode [ 97.651870][ T5955] hpfs: You really don't want any checks? You are crazy... [ 97.660337][ T5957] ip6gre1: entered allmulticast mode [ 97.685399][ T5955] hpfs: hpfs_map_sector(): read error [ 97.690857][ T5955] hpfs: code page support is disabled [ 97.697558][ T5955] hpfs: hpfs_map_4sectors(): unaligned read [ 97.712169][ T5955] hpfs: hpfs_map_4sectors(): unaligned read [ 97.720735][ T5955] hpfs: filesystem error: unable to find root dir [ 97.747076][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 97.766452][ T27] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 97.779013][ T27] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 97.801606][ T27] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 97.841717][ T27] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 97.890176][ T27] usb 2-1: config 250 has no interface number 0 [ 97.909991][ T27] usb 2-1: config 250 interface 228 has no altsetting 0 [ 97.958959][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 97.994202][ T27] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 98.007629][ T27] usb 2-1: Product: syz [ 98.012084][ T27] usb 2-1: SerialNumber: syz [ 98.044198][ T27] hub 2-1:250.228: bad descriptor, ignoring hub [ 98.050841][ T27] hub: probe of 2-1:250.228 failed with error -5 [ 98.577636][ T5978] Zero length message leads to an empty skb [ 98.658213][ T27] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 98.839079][ T5987] netlink: 156 bytes leftover after parsing attributes in process `syz.0.62'. [ 99.312909][ T5997] loop2: detected capacity change from 0 to 512 [ 99.315618][ T5999] loop3: detected capacity change from 0 to 128 [ 99.396807][ T5997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.492626][ T27] usb 2-1: USB disconnect, device number 3 [ 99.688867][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.704750][ T5991] loop0: detected capacity change from 0 to 32768 [ 99.786757][ T5991] JBD2: Ignoring recovery information on journal [ 99.972614][ T5991] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 100.114788][ T6011] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.157797][ T5991] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 100.157916][ T5991] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 100.246572][ T5991] OCFS2: File system is now read-only. [ 100.253955][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 100.278108][ T6014] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.295080][ T5991] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 100.295104][ T5991] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 100.473929][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 100.736715][ T6027] vlan2: entered allmulticast mode [ 100.753026][ T6027] syz_tun: entered allmulticast mode [ 101.095628][ T6034] loop2: detected capacity change from 0 to 2048 [ 101.150177][ T6040] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.851405][ T6055] loop0: detected capacity change from 0 to 512 [ 101.932811][ T6055] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 101.941006][ T6055] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 102.044747][ T6055] EXT4-fs (loop0): 1 truncate cleaned up [ 102.093321][ T6055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.151499][ T28] audit: type=1326 audit(1779544395.286:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6066 comm="syz.2.95" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa379b9ce59 code=0x0 [ 102.265850][ T1140] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.293270][ T6069] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 102.302154][ T1140] Bluetooth: hci4: Frame reassembly failed (-84) [ 102.332021][ T6063] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 102.365922][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.488898][ T6076] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.567814][ T6078] syz_tun: entered allmulticast mode [ 102.590467][ T6077] syz_tun: left allmulticast mode [ 103.385272][ T6101] loop2: detected capacity change from 0 to 64 [ 103.771766][ T5821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.963842][ T5821] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.981790][ T5821] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.009157][ T5821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.019849][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 104.045636][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 104.075560][ T5821] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.087289][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.104595][ T5821] usb 4-1: Product: syz [ 104.108969][ T5821] usb 4-1: Manufacturer: syz [ 104.132055][ T5821] cdc_wdm 4-1:1.0: skipping garbage [ 104.140210][ T5821] cdc_wdm 4-1:1.0: skipping garbage [ 104.170388][ T5821] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 104.178880][ T5821] cdc_wdm 4-1:1.0: Unknown control protocol [ 104.272164][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 104.279049][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.449810][ T6160] warning: `syz.2.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.484660][ T6162] batadv_slave_0: entered promiscuous mode [ 105.513901][ T6162] batman_adv: batadv0: Adding interface: macvtap1 [ 105.520678][ T6162] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.562669][ T6162] batman_adv: batadv0: Interface activated: macvtap1 [ 105.619632][ T968] kernel write not supported for file /amidi2 (pid: 968 comm: kworker/1:2) [ 105.937177][ T6172] loop2: detected capacity change from 0 to 1024 [ 106.309754][ T6183] loop2: detected capacity change from 0 to 128 [ 106.492546][ T5821] usb 4-1: USB disconnect, device number 2 [ 106.697980][ T6192] loop2: detected capacity change from 0 to 164 [ 107.545726][ T968] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.584006][ T6202] loop2: detected capacity change from 0 to 32768 [ 107.642258][ T6202] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 107.744513][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 107.776677][ T968] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.785513][ T6202] XFS (loop2): Ending clean mount [ 107.822720][ T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.865781][ T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.888252][ T968] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.917899][ T968] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.946092][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.207639][ T968] usb 4-1: GET_CAPABILITIES returned 0 [ 108.214483][ T5774] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 108.227895][ T968] usbtmc 4-1:16.0: can't read capabilities [ 108.454674][ T2178] usb 4-1: USB disconnect, device number 3 [ 108.503544][ T6228] loop1: detected capacity change from 0 to 1024 [ 108.511059][ T6228] EXT4-fs: Ignoring removed orlov option [ 108.644736][ T6228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.777310][ T6228] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 109.029836][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.665444][ T6269] capability: warning: `syz.2.168' uses 32-bit capabilities (legacy support in use) [ 109.685632][ T6269] program syz.2.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.922795][ T6275] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 109.937016][ T6275] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 109.997234][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 110.011162][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 110.174092][ T6281] loop0: detected capacity change from 0 to 2048 [ 110.255456][ T6281] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 110.297751][ T6281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.419076][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 110.703068][ T6296] overlay: filesystem on ./file0 is read-only [ 110.729165][ T6291] team0: Port device team_slave_0 removed [ 111.124241][ T6310] loop0: detected capacity change from 0 to 512 [ 111.216256][ T6318] loop1: detected capacity change from 0 to 128 [ 111.224609][ T6310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.284261][ T6318] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 111.324413][ T6310] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.421712][ T6318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.558983][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.904717][ T6331] tap0: tun_chr_ioctl cmd 1074025677 [ 111.910399][ T6331] tap0: linktype set to 0 [ 111.966717][ T6333] overlayfs: regular lower layers cannot follow data lower layers [ 112.077728][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.306110][ T27] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.321654][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.363115][ T27] usb 3-1: config 0 descriptor?? [ 112.380635][ T27] cp210x 3-1:0.0: cp210x converter detected [ 112.782997][ T27] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 112.811190][ T6335] loop3: detected capacity change from 0 to 40427 [ 112.832441][ T27] usb 3-1: cp210x converter now attached to ttyUSB0 [ 112.846421][ T6335] F2FS-fs (loop3): invalid crc value [ 112.883507][ T6335] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.961746][ T5821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.031494][ T27] usb 3-1: USB disconnect, device number 3 [ 113.047759][ T6335] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.068760][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 113.105779][ T27] cp210x 3-1:0.0: device disconnected [ 113.166503][ T5821] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 113.181658][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.204297][ T5821] usb 1-1: config 0 descriptor?? [ 113.308631][ T5775] syz-executor: attempt to access beyond end of device [ 113.308631][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.330299][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 113.376732][ T6345] loop1: detected capacity change from 0 to 40427 [ 113.438338][ T5821] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 113.451939][ T5821] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 113.471301][ T6345] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.601964][ T6345] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.687165][ T5821] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 113.729479][ T5821] [drm] Initialized udl on minor 2 [ 113.842423][ T5821] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 113.867924][ T5821] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 113.891356][ T5776] syz-executor: attempt to access beyond end of device [ 113.891356][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.910192][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 114.130871][ T27] usb 1-1: USB disconnect, device number 2 [ 114.137205][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 114.167685][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 114.864479][ T6378] netlink: 'syz.0.215': attribute type 3 has an invalid length. [ 115.091082][ T6382] loop0: detected capacity change from 0 to 16 [ 115.150689][ T6382] erofs: (device loop0): mounted with root inode @ nid 36. [ 115.223544][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 115.252113][ T28] audit: type=1800 audit(1779544408.386:3): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.217" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 115.460729][ T6372] loop3: detected capacity change from 0 to 32768 [ 115.542283][ T6372] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 115.689216][ T6372] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 115.762879][ T6372] XFS (loop3): Ending clean mount [ 115.998992][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.220831][ T6410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.226'. [ 116.284970][ T6412] netlink: 'syz.2.227': attribute type 12 has an invalid length. [ 116.293256][ T6412] netlink: 'syz.2.227': attribute type 29 has an invalid length. [ 116.301272][ T6412] netlink: 148 bytes leftover after parsing attributes in process `syz.2.227'. [ 116.310962][ T6412] netlink: 59 bytes leftover after parsing attributes in process `syz.2.227'. [ 116.435183][ T6399] loop0: detected capacity change from 0 to 32768 [ 116.473300][ T6399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.221 (6399) [ 116.550376][ T6399] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.573058][ T6399] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.582948][ T6416] loop2: detected capacity change from 0 to 256 [ 116.616627][ T6416] exfat: Deprecated parameter 'utf8' [ 116.622096][ T6399] BTRFS info (device loop0): setting nodatacow, compression disabled [ 116.622166][ T6399] BTRFS info (device loop0): enabling auto defrag [ 116.622233][ T6399] BTRFS info (device loop0): max_inline at 0 [ 116.622260][ T6399] BTRFS info (device loop0): using free space tree [ 116.644438][ T6416] exfat: Deprecated parameter 'namecase' [ 116.694047][ T6416] exfat: Deprecated parameter 'namecase' [ 116.826466][ T6416] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 116.906257][ T6434] loop3: detected capacity change from 0 to 1024 [ 116.923173][ T6399] BTRFS info (device loop0): auto enabling async discard [ 117.021061][ T6434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.285418][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.500797][ T6452] loop2: detected capacity change from 0 to 1024 [ 117.540674][ T6452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.599531][ T6452] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.637348][ T6452] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.236: lblock 3 mapped to illegal pblock 3 (length 1) [ 117.650839][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.685522][ T6452] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 117.725449][ T6452] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.725449][ T6452] [ 117.768616][ T6457] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.236: Freeing blocks not in datazone - block = 3, count = 1 [ 117.893048][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.434548][ T6474] loop0: detected capacity change from 0 to 2048 [ 118.460855][ T6474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.622162][ T28] audit: type=1800 audit(1779544411.746:4): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.237" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 119.101662][ T5821] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.240990][ T6492] loop0: detected capacity change from 0 to 512 [ 119.294713][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.308133][ T6492] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.317745][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 119.342442][ T5821] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 119.350731][ T5821] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.363105][ T5821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.372998][ T5821] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.383138][ T5821] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.397298][ T5821] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.406761][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.439921][ T6492] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.251: bg 0: block 217: padding at end of block bitmap is not set [ 119.461996][ T6492] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 119.608316][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.666820][ T5821] usb 4-1: GET_CAPABILITIES returned 0 [ 119.690839][ T5821] usbtmc 4-1:16.0: can't read capabilities [ 119.786502][ T6504] loop2: detected capacity change from 0 to 256 [ 119.875757][ T6504] FAT-fs (loop2): Directory bread(block 64) failed [ 119.896581][ T6504] FAT-fs (loop2): Directory bread(block 65) failed [ 119.908378][ T6504] FAT-fs (loop2): Directory bread(block 66) failed [ 119.912019][ T5821] usb 4-1: USB disconnect, device number 4 [ 119.933232][ T6504] FAT-fs (loop2): Directory bread(block 67) failed [ 119.962035][ T6504] FAT-fs (loop2): Directory bread(block 68) failed [ 119.987441][ T6504] FAT-fs (loop2): Directory bread(block 69) failed [ 119.991933][ T5780] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 120.001794][ T6504] FAT-fs (loop2): Directory bread(block 70) failed [ 120.016825][ T6504] FAT-fs (loop2): Directory bread(block 71) failed [ 120.029160][ T6504] FAT-fs (loop2): Directory bread(block 72) failed [ 120.036103][ T6504] FAT-fs (loop2): Directory bread(block 73) failed [ 120.203140][ T5780] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.212652][ T5780] usb 2-1: not running at top speed; connect to a high speed hub [ 120.239820][ T5780] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 120.275625][ T5780] usb 2-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 120.301886][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.309970][ T5780] usb 2-1: Product: syz [ 120.326407][ T5780] usb 2-1: Manufacturer: syz [ 120.331140][ T5780] usb 2-1: SerialNumber: syz [ 120.534777][ T6516] Set syz1 is full, maxelem 0 reached [ 120.609862][ T5780] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 120.780022][ T5780] usb 2-1: USB disconnect, device number 4 [ 121.110371][ T6537] loop3: detected capacity change from 0 to 256 [ 121.176911][ T6537] FAT-fs (loop3): Directory bread(block 64) failed [ 121.191873][ T6537] FAT-fs (loop3): Directory bread(block 65) failed [ 121.198647][ T6537] FAT-fs (loop3): Directory bread(block 66) failed [ 121.216569][ T6537] FAT-fs (loop3): Directory bread(block 67) failed [ 121.228674][ T6537] FAT-fs (loop3): Directory bread(block 68) failed [ 121.237529][ T6537] FAT-fs (loop3): Directory bread(block 69) failed [ 121.248895][ T6537] FAT-fs (loop3): Directory bread(block 70) failed [ 121.267158][ T6537] FAT-fs (loop3): Directory bread(block 71) failed [ 121.286835][ T6537] FAT-fs (loop3): Directory bread(block 72) failed [ 121.311712][ T6537] FAT-fs (loop3): Directory bread(block 73) failed [ 121.771614][ T5780] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.975438][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.001790][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.028604][ T5780] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 122.041970][ T6561] Illegal XDP return value 4294967274 on prog (id 13) dev syz_tun, expect packet loss! [ 122.052324][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.083462][ T5780] usb 2-1: config 0 descriptor?? [ 122.527688][ T5780] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 122.547845][ T5780] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 122.564225][ T5780] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 122.581131][ T5780] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 122.599676][ T5780] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 122.616105][ T5780] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 122.633925][ T5780] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 122.677949][ T5780] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 122.704287][ T5780] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 122.738334][ C0] hid-thrustmaster 0003:044F:B65D.0002: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 122.769196][ T6577] loop0: detected capacity change from 0 to 4096 [ 123.071769][ T5780] usb 2-1: USB disconnect, device number 5 [ 123.087175][ T6580] loop2: detected capacity change from 0 to 2048 [ 123.154757][ T6580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.187408][ T28] audit: type=1800 audit(1779544416.306:5): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.285" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 123.247265][ T6580] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 123.272949][ T6580] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 123.295105][ T6580] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.295105][ T6580] [ 123.316875][ T6580] EXT4-fs (loop2): Total free blocks count 0 [ 123.324531][ T6587] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 123.336395][ T6580] EXT4-fs (loop2): Free/Dirty block details [ 123.348146][ T6580] EXT4-fs (loop2): free_blocks=66060288 [ 123.354585][ T6580] EXT4-fs (loop2): dirty_blocks=32 [ 123.360005][ T6580] EXT4-fs (loop2): Block reservation details [ 123.369706][ T6580] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 123.436314][ T6577] ntfs3: loop0: ino=0, "file1" failed to extend initialized size to 40000. [ 124.103437][ T2178] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.207667][ T6611] loop1: detected capacity change from 0 to 16 [ 124.246333][ T6611] erofs: (device loop1): mounted with root inode @ nid 36. [ 124.285089][ T6613] loop2: detected capacity change from 0 to 128 [ 124.291726][ T2178] usb 4-1: Using ep0 maxpacket: 16 [ 124.314772][ T2178] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.335409][ T2178] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.351260][ T6613] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.353441][ T2178] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 124.392416][ T2178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.415090][ T2178] usb 4-1: config 0 descriptor?? [ 124.432353][ T6613] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.574447][ T6616] syz.1.300 uses obsolete (PF_INET,SOCK_PACKET) [ 124.636252][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.885559][ T2178] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 125.081696][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.301771][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 125.310547][ T27] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 125.329084][ T27] usb 1-1: config 0 has no interface number 0 [ 125.339523][ T27] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 125.359214][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.371795][ T5817] usb 4-1: USB disconnect, device number 5 [ 125.389506][ T27] usb 1-1: Product: syz [ 125.420553][ T27] usb 1-1: Manufacturer: syz [ 125.432469][ T27] usb 1-1: SerialNumber: syz [ 125.455465][ T27] usb 1-1: config 0 descriptor?? [ 125.475590][ T27] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 125.499939][ T6620] loop2: detected capacity change from 0 to 32768 [ 125.518061][ T6620] XFS: attr2 mount option is deprecated. [ 125.531739][ T6620] XFS: attr2 mount option is deprecated. [ 125.577986][ T6620] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 125.615679][ T6620] XFS (loop2): Ending clean mount [ 125.660610][ T6620] XFS (loop2): Quotacheck needed: Please wait. [ 125.735694][ T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 125.770755][ T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 125.828955][ T6620] XFS (loop2): Quotacheck: Done. [ 126.122956][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.145581][ T6637] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 126.220321][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 126.229436][ T27] usb 1-1: USB disconnect, device number 3 [ 126.272298][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 126.315382][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 126.367944][ T27] quatech2 1-1:0.51: device disconnected [ 126.538298][ T6641] loop1: detected capacity change from 0 to 128 [ 126.726163][ T6645] syz.1.307: attempt to access beyond end of device [ 126.726163][ T6645] loop1: rw=2049, sector=145, nr_sectors = 136 limit=128 [ 126.815271][ T6647] loop3: detected capacity change from 0 to 1024 [ 127.234530][ T6657] loop3: detected capacity change from 0 to 128 [ 127.385212][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 127.405427][ T12] kworker/u4:1: attempt to access beyond end of device [ 127.405427][ T12] loop1: rw=1, sector=281, nr_sectors = 760 limit=128 [ 127.565131][ T6663] loop3: detected capacity change from 0 to 256 [ 127.623077][ T6663] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.669216][ T6663] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 127.725243][ T6663] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 127.901426][ T6663] exFAT-fs (loop3): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 127.939960][ T6663] exFAT-fs (loop3): Filesystem has been set read-only [ 128.191152][ T6659] loop2: detected capacity change from 0 to 32768 [ 128.277941][ T6671] loop0: detected capacity change from 0 to 128 [ 128.304382][ T6671] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 128.407316][ T6671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.427628][ T6678] syz.3.324: attempt to access beyond end of device [ 128.427628][ T6678] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 128.459606][ T6659] JFS: Invalid stbl[0] = -1 for inode 2, block = 0 [ 128.496026][ T6678] hfs: can't find a HFS filesystem on dev nbd3 [ 128.725612][ T6683] loop3: detected capacity change from 0 to 64 [ 128.863247][ T6685] loop0: detected capacity change from 0 to 256 [ 128.907476][ T6685] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 129.193960][ T6689] serio: Serial port pty22 [ 129.339355][ T6695] loop2: detected capacity change from 0 to 1024 [ 129.529000][ T2958] hfsplus: bad catalog folder entry [ 129.545521][ T2958] hfsplus: bad catalog file entry [ 129.744514][ T6698] syz.1.332 (6698) used greatest stack depth: 19976 bytes left [ 130.156438][ T6718] loop1: detected capacity change from 0 to 128 [ 130.190901][ T6719] Cannot find add_set index 4 as target [ 130.743504][ T6727] overlay: filesystem on ./bus not supported as upperdir [ 130.876481][ T2178] hid-generic 0005:10CF:5508.0004: item fetching failed at offset 0/1 [ 130.892704][ T2178] hid-generic: probe of 0005:10CF:5508.0004 failed with error -22 [ 131.158578][ T6739] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 131.191042][ T6739] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 131.325258][ T6723] syz.2.344: attempt to access beyond end of device [ 131.325258][ T6723] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 131.392663][ T6723] lbmIODone: I/O error in JFS log [ 131.398260][ T6723] *** Log Format Error ! *** [ 131.419635][ T6723] lmLogInit: exit(-22) [ 131.436803][ T6723] lmLogOpen: exit(-22) [ 131.516946][ T6723] syz.2.344: attempt to access beyond end of device [ 131.516946][ T6723] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 131.556466][ T6723] lbmIODone: I/O error in JFS log [ 131.572482][ T6723] *** Log Format Error ! *** [ 131.602076][ T6723] lmLogInit: exit(-22) [ 131.606367][ T6723] lmLogOpen: exit(-22) [ 132.399331][ T6763] block nbd0: server does not support multiple connections per device. [ 132.447693][ T6763] block nbd0: shutting down sockets [ 132.622262][ T5821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.798177][ T6776] ALSA: mixer_oss: invalid OSS volume '' [ 132.821901][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 132.835831][ T6776] ALSA: mixer_oss: invalid OSS volume '' [ 132.846164][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.868841][ T6776] ALSA: mixer_oss: invalid OSS volume '' [ 132.877253][ T5821] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.881884][ T6776] ALSA: mixer_oss: invalid OSS volume '' [ 132.899981][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.926572][ T5821] usb 3-1: config 0 descriptor?? [ 133.149698][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157519][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.173126][ T6772] set_capacity_and_notify: 1 callbacks suppressed [ 133.173142][ T6772] loop3: detected capacity change from 0 to 32768 [ 133.249141][ T6772] JBD2: Ignoring recovery information on journal [ 133.377779][ T6772] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.401724][ T27] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 133.401733][ T5821] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 133.421348][ T6786] tap0: tun_chr_ioctl cmd 1074025677 [ 133.434032][ T6786] tap0: linktype set to 778 [ 133.438981][ T5821] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 133.446955][ T5821] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 133.455834][ T5821] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 133.471200][ T5821] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 133.492564][ T5821] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 133.594338][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 133.602141][ C0] usb 3-1: input irq status -75 received [ 133.628336][ T27] usb 1-1: can't read configurations, error -71 [ 133.906570][ T2178] usb 3-1: USB disconnect, device number 4 [ 134.011039][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 134.354284][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'. [ 134.635105][ T6806] loop3: detected capacity change from 0 to 256 [ 134.675387][ T6806] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.588822][ T6804] loop2: detected capacity change from 0 to 40427 [ 135.624243][ T6804] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 135.644563][ T6804] F2FS-fs (loop2): invalid crc value [ 135.656468][ T6804] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.787733][ T6804] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.893474][ T6804] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 136.465172][ T6831] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.474593][ T6831] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.483464][ T6831] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.492250][ T6831] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.780042][ T6840] loop3: detected capacity change from 0 to 512 [ 136.812539][ T6840] EXT4-fs: Ignoring removed bh option [ 136.861017][ T6840] EXT4-fs (loop3): Test dummy encryption mode enabled [ 136.889666][ T6840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 136.911770][ T6840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.948260][ T6840] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.395: inode has both inline data and extents flags [ 137.007069][ T6820] loop1: detected capacity change from 0 to 32768 [ 137.031366][ T6840] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.395: couldn't read orphan inode 15 (err -117) [ 137.092251][ T6820] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.388 (6820) [ 137.103666][ T6838] loop0: detected capacity change from 0 to 32768 [ 137.114644][ T6840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.158082][ T6820] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.195272][ T6820] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 137.213390][ T6820] BTRFS info (device loop1): setting nodatasum [ 137.219864][ T6820] BTRFS info (device loop1): force zlib compression, level 3 [ 137.228083][ T6820] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 137.238452][ T6820] BTRFS info (device loop1): use lzo compression, level 0 [ 137.247154][ T6820] BTRFS info (device loop1): turning on flush-on-commit [ 137.254711][ T6820] BTRFS info (device loop1): enabling auto defrag [ 137.261242][ T6820] BTRFS info (device loop1): max_inline at 4096 [ 137.267691][ T6838] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.269170][ T6820] BTRFS info (device loop1): using free space tree [ 137.291122][ T6840] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 137.511981][ T6820] BTRFS info (device loop1): enabling ssd optimizations [ 137.618707][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.748308][ T6838] syz.0.394 (6838) used greatest stack depth: 18768 bytes left [ 137.775931][ T28] audit: type=1800 audit(1779544430.916:6): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.388" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 137.893818][ T6866] loop3: detected capacity change from 0 to 2048 [ 137.916580][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 137.933176][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.999079][ T6866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.112306][ T6866] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #12: block 2: comm syz.3.397: lblock 0 mapped to illegal pblock 2 (length 1) [ 138.220953][ T6871] loop2: detected capacity change from 0 to 2048 [ 138.251739][ T5789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (5789) [ 138.273977][ T6871] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.361651][ T6875] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.381957][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 138.441260][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.297755][ T6900] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 140.352480][ T5821] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 140.519697][ T6939] loop0: detected capacity change from 0 to 4096 [ 140.568057][ T6939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.601424][ T5821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.644986][ T5821] usb 3-1: not running at top speed; connect to a high speed hub [ 140.655968][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.674128][ T5821] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 140.715896][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.738362][ T5821] usb 3-1: Product: syz [ 140.754770][ T5821] usb 3-1: Manufacturer: syz [ 140.759455][ T5821] usb 3-1: SerialNumber: syz [ 140.965119][ T6950] loop1: detected capacity change from 0 to 256 [ 141.019279][ T5821] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 141.039195][ T6950] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 141.118912][ T6950] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 141.128558][ T28] audit: type=1800 audit(1779544434.256:7): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.428" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 141.181626][ T6950] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ec287e0 iblock : 8, err : -5) [ 141.242752][ T6950] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 141.263597][ T6950] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 141.515502][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.538825][ T6965] loop3: detected capacity change from 0 to 512 [ 141.570147][ T6965] EXT4-fs: Ignoring removed nobh option [ 141.621016][ T6965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.636491][ T5821] gp8psk: usb out operation failed. [ 141.647840][ T6965] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.662022][ T5821] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 141.698240][ T5821] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 141.730595][ T5821] usb 3-1: USB disconnect, device number 5 [ 141.791799][ T6965] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.435: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 141.890015][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.139734][ T6972] loop0: detected capacity change from 0 to 4096 [ 142.168818][ T6973] loop3: detected capacity change from 0 to 8192 [ 142.179110][ T6972] EXT4-fs (loop0): Test dummy encryption mode enabled [ 142.236620][ T6972] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 142.246672][ T6973] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.297349][ T6972] System zones: 0-5 [ 142.331122][ T6972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.363202][ T6973] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 142.388863][ T6973] REISERFS (device loop3): using journaled data mode [ 142.423356][ T6979] [ 142.425761][ T6979] ====================================================== [ 142.432821][ T6979] WARNING: possible circular locking dependency detected [ 142.439891][ T6979] syzkaller #0 Not tainted [ 142.444343][ T6979] ------------------------------------------------------ [ 142.451401][ T6979] syz.2.440/6979 is trying to acquire lock: [ 142.457331][ T6979] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1c0/0x490 [ 142.466467][ T6979] [ 142.466467][ T6979] but task is already holding lock: [ 142.473867][ T6979] ffff888148e4b748 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1c55/0x2570 [ 142.482305][ T6973] reiserfs: using flush barriers [ 142.484355][ T6979] [ 142.484355][ T6979] which lock already depends on the new lock. [ 142.484355][ T6979] [ 142.484363][ T6979] [ 142.484363][ T6979] the existing dependency chain (in reverse order) is: [ 142.484369][ T6979] [ 142.484369][ T6979] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 142.517144][ T6979] down_write+0x97/0x200 [ 142.521942][ T6979] set_blocksize+0x247/0x4b0 [ 142.527084][ T6979] sb_min_blocksize+0xbe/0x190 [ 142.532399][ T6979] ext4_fill_super+0x6f0/0x67b0 [ 142.537826][ T6979] get_tree_bdev+0x3f3/0x520 [ 142.542968][ T6979] vfs_get_tree+0x8c/0x280 [ 142.547932][ T6979] do_new_mount+0x24b/0xa40 [ 142.552981][ T6979] init_mount+0xde/0x130 [ 142.557773][ T6979] do_mount_root+0x97/0x230 [ 142.562820][ T6979] mount_root_generic+0x1a6/0x3e0 [ 142.568396][ T6979] prepare_namespace+0xc2/0x100 [ 142.573801][ T6979] kernel_init_freeable+0x42e/0x580 [ 142.579548][ T6979] kernel_init+0x1d/0x1c0 [ 142.584434][ T6979] ret_from_fork+0x48/0x80 [ 142.589402][ T6979] ret_from_fork_asm+0x11/0x20 [ 142.594718][ T6979] [ 142.594718][ T6979] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 142.603348][ T6979] down_write+0x97/0x200 [ 142.608139][ T6979] set_blocksize+0x1ff/0x4b0 [ 142.613275][ T6979] sb_min_blocksize+0xbe/0x190 [ 142.618584][ T6979] hfs_mdb_get+0xa2/0x20b0 [ 142.623544][ T6979] hfs_fill_super+0xe25/0x14a0 [ 142.628851][ T6979] mount_bdev+0x221/0x2d0 [ 142.633722][ T6979] legacy_get_tree+0xea/0x180 [ 142.638953][ T6979] vfs_get_tree+0x8c/0x280 [ 142.643920][ T6979] do_new_mount+0x24b/0xa40 [ 142.648969][ T6979] __se_sys_mount+0x2e7/0x3d0 [ 142.654194][ T6979] do_syscall_64+0x55/0xb0 [ 142.659154][ T6979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.665613][ T6979] [ 142.665613][ T6979] -> #2 (&type->s_umount_key#91){++++}-{3:3}: [ 142.673910][ T6979] down_read+0x46/0x2e0 [ 142.678616][ T6979] super_lock+0x17f/0x3a0 [ 142.683497][ T6979] fs_bdev_mark_dead+0xad/0x1f0 [ 142.688896][ T6979] bdev_mark_dead+0x83/0x1a0 [ 142.694033][ T6979] disk_force_media_change+0x14a/0x1b0 [ 142.700041][ T6979] nbd_ioctl+0x433/0xf10 [ 142.704835][ T6979] blkdev_ioctl+0x5b2/0x730 [ 142.709892][ T6979] __se_sys_ioctl+0xfd/0x170 [ 142.715028][ T6979] do_syscall_64+0x55/0xb0 [ 142.719989][ T6979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.726433][ T6979] [ 142.726433][ T6979] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 142.734626][ T6979] __mutex_lock+0x136/0xcc0 [ 142.739685][ T6979] bd_finish_claiming+0x22f/0x3f0 [ 142.745260][ T6979] blkdev_get_by_dev+0x45c/0x600 [ 142.750747][ T6979] bdev_open_by_dev+0x77/0x100 [ 142.756056][ T6979] setup_bdev_super+0x59/0x660 [ 142.761373][ T6979] mount_bdev+0x1d3/0x2d0 [ 142.766250][ T6979] legacy_get_tree+0xea/0x180 [ 142.771471][ T6979] vfs_get_tree+0x8c/0x280 [ 142.776439][ T6979] do_new_mount+0x24b/0xa40 [ 142.781488][ T6979] init_mount+0xde/0x130 [ 142.786283][ T6979] do_mount_root+0x97/0x230 [ 142.791334][ T6979] mount_root_generic+0x1a6/0x3e0 [ 142.796901][ T6979] prepare_namespace+0xc2/0x100 [ 142.802295][ T6979] kernel_init_freeable+0x42e/0x580 [ 142.808048][ T6979] kernel_init+0x1d/0x1c0 [ 142.812925][ T6979] ret_from_fork+0x48/0x80 [ 142.817889][ T6979] ret_from_fork_asm+0x11/0x20 [ 142.823200][ T6979] [ 142.823200][ T6979] -> #0 (bdev_lock){+.+.}-{3:3}: [ 142.830354][ T6979] __lock_acquire+0x2df1/0x7d40 [ 142.835755][ T6979] lock_acquire+0x19e/0x420 [ 142.840804][ T6979] __mutex_lock+0x136/0xcc0 [ 142.845849][ T6979] bd_prepare_to_claim+0x1c0/0x490 [ 142.851506][ T6979] truncate_bdev_range+0x4e/0x260 [ 142.857077][ T6979] blkdev_common_ioctl+0x1c6b/0x2570 [ 142.862909][ T6979] blkdev_ioctl+0x512/0x730 [ 142.867961][ T6979] __se_sys_ioctl+0xfd/0x170 [ 142.873110][ T6979] do_syscall_64+0x55/0xb0 [ 142.878084][ T6979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.884535][ T6979] [ 142.884535][ T6979] other info that might help us debug this: [ 142.884535][ T6979] [ 142.894796][ T6979] Chain exists of: [ 142.894796][ T6979] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 142.894796][ T6979] [ 142.908998][ T6979] Possible unsafe locking scenario: [ 142.908998][ T6979] [ 142.916464][ T6979] CPU0 CPU1 [ 142.921844][ T6979] ---- ---- [ 142.927230][ T6979] lock(mapping.invalidate_lock); [ 142.932373][ T6979] lock(&sb->s_type->i_mutex_key#8); [ 142.940296][ T6979] lock(mapping.invalidate_lock); [ 142.947958][ T6979] lock(bdev_lock); [ 142.951877][ T6979] [ 142.951877][ T6979] *** DEADLOCK *** [ 142.951877][ T6979] [ 142.960042][ T6979] 2 locks held by syz.2.440/6979: [ 142.965083][ T6979] #0: ffff888148e4b5b8 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_common_ioctl+0x1c24/0x2570 [ 142.976273][ T6979] #1: ffff888148e4b748 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1c55/0x2570 [ 142.987191][ T6979] [ 142.987191][ T6979] stack backtrace: [ 142.993109][ T6979] CPU: 0 PID: 6979 Comm: syz.2.440 Not tainted syzkaller #0 [ 143.000426][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.010501][ T6979] Call Trace: [ 143.013807][ T6979] [ 143.016758][ T6979] dump_stack_lvl+0x18c/0x250 [ 143.021465][ T6979] ? load_image+0x420/0x420 [ 143.026008][ T6979] ? show_regs_print_info+0x20/0x20 [ 143.031235][ T6979] ? print_circular_bug+0x12b/0x1a0 [ 143.036462][ T6979] check_noncircular+0x2fc/0x400 [ 143.041434][ T6979] ? print_deadlock_bug+0x5d0/0x5d0 [ 143.046667][ T6979] ? lockdep_lock+0xf5/0x230 [ 143.051290][ T6979] ? _find_first_zero_bit+0xd3/0x100 [ 143.056603][ T6979] __lock_acquire+0x2df1/0x7d40 [ 143.061499][ T6979] ? verify_lock_unused+0x140/0x140 [ 143.066724][ T6979] ? check_noncircular+0x18a/0x400 [ 143.071867][ T6979] ? deref_stack_reg+0x1bd/0x240 [ 143.076830][ T6979] ? print_deadlock_bug+0x5d0/0x5d0 [ 143.082069][ T6979] ? lockdep_lock+0xf5/0x230 [ 143.086696][ T6979] ? lockdep_unlock+0x146/0x2e0 [ 143.091579][ T6979] ? lockdep_lock+0x230/0x230 [ 143.096299][ T6979] lock_acquire+0x19e/0x420 [ 143.100829][ T6979] ? bd_prepare_to_claim+0x1c0/0x490 [ 143.106145][ T6979] ? __might_sleep+0xe0/0xe0 [ 143.110777][ T6979] ? read_lock_is_recursive+0x20/0x20 [ 143.116179][ T6979] __mutex_lock+0x136/0xcc0 [ 143.120707][ T6979] ? bd_prepare_to_claim+0x1c0/0x490 [ 143.126021][ T6979] ? slab_free_freelist_hook+0x130/0x1a0 [ 143.131690][ T6979] ? __kmem_cache_free+0xba/0x1e0 [ 143.136747][ T6979] ? tomoyo_path_number_perm+0x500/0x620 [ 143.142407][ T6979] ? security_file_ioctl+0x70/0xa0 [ 143.147543][ T6979] ? __se_sys_ioctl+0x48/0x170 [ 143.152330][ T6979] ? bd_prepare_to_claim+0x1c0/0x490 [ 143.157651][ T6979] ? mutex_lock_nested+0x20/0x20 [ 143.162622][ T6979] bd_prepare_to_claim+0x1c0/0x490 [ 143.167764][ T6979] ? invalidate_bdev+0xc0/0xc0 [ 143.172578][ T6979] ? truncate_bdev_range+0x260/0x260 [ 143.177905][ T6979] ? __might_fault+0xaa/0x120 [ 143.182617][ T6979] ? down_write+0x16e/0x200 [ 143.187171][ T6979] ? down_read_killable+0x340/0x340 [ 143.192399][ T6979] ? __might_fault+0xaa/0x120 [ 143.197102][ T6979] truncate_bdev_range+0x4e/0x260 [ 143.202158][ T6979] blkdev_common_ioctl+0x1c6b/0x2570 [ 143.207477][ T6979] ? blkdev_bszset+0x1f0/0x1f0 [ 143.212300][ T6979] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 143.217814][ T6979] blkdev_ioctl+0x512/0x730 [ 143.222360][ T6979] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 143.227858][ T6979] ? bpf_lsm_file_ioctl+0x9/0x10 [ 143.232828][ T6979] ? security_file_ioctl+0x80/0xa0 [ 143.237967][ T6979] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 143.243460][ T6979] __se_sys_ioctl+0xfd/0x170 [ 143.248078][ T6979] do_syscall_64+0x55/0xb0 [ 143.252538][ T6979] ? clear_bhb_loop+0x40/0x90 [ 143.257249][ T6979] ? clear_bhb_loop+0x40/0x90 [ 143.261955][ T6979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.267880][ T6979] RIP: 0033:0x7fa379b9ce59 [ 143.272337][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.291975][ T6979] RSP: 002b:00007fa37a9d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.300421][ T6979] RAX: ffffffffffffffda RBX: 00007fa379e15fa0 RCX: 00007fa379b9ce59 [ 143.308416][ T6979] RDX: 0000200000000240 RSI: 000000000000127f RDI: 0000000000000004 [ 143.316411][ T6979] RBP: 00007fa379c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 143.324401][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.332393][ T6979] R13: 00007fa379e16038 R14: 00007fa379e15fa0 R15: 00007ffd767fc8e8 [ 143.340401][ T6979] [ 143.390857][ T6972] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.437: Abort forced by user [ 143.401655][ T6973] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.401683][ T6972] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 143.419120][ T6973] REISERFS (device loop3): checking transaction log (loop3) [ 143.468026][ T6973] REISERFS (device loop3): Using r5 hash to sort names [ 143.482249][ T6973] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 143.496995][ T6973] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 143.627236][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.