last executing test programs: 2m15.894898131s ago: executing program 0 (id=85): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) write$FUSE_INIT(r1, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000280)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xa29, 0x7, 0x9, 0x1000, 0x499f, 0x6}}, 0x10081) 2m15.64823073s ago: executing program 0 (id=89): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, r2, 0x0) 2m15.412148537s ago: executing program 0 (id=91): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x88) getdents(r2, &(0x7f0000000080)=""/37, 0x25) 2m15.298572471s ago: executing program 0 (id=92): syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodiscard}, {@nolargeio}, {@gquota}]}, 0x1, 0x988a, &(0x7f00000185c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 2m13.896340249s ago: executing program 0 (id=100): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x431160a1, 0x0, 0x5, 0x1, 0x56}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0xa, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x80000001, 0x200000000005, 0x4, 0x1, 0x8, 0x4000, 0x7, 0x0, 0x0, 0x7ffffffa, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) 2m13.00428363s ago: executing program 0 (id=103): r0 = memfd_create(&(0x7f0000000640)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x82\xe7\x80^\xad\xd2\xf2\xb3=\xf6\xa6\x9b\xfa\xa4\xb4\xe7N\v\xd1*C\x1duf\xa4y\xd8\xba\xde\x8b\x99\x82\x94\xd7\xb9_\xd0_C\x87-\xa8\x8a\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x82\xe7\x80^\xad\xd2\xf2\xb3=\xf6\xa6\x9b\xfa\xa4\xb4\xe7N\v\xd1*C\x1duf\xa4y\xd8\xba\xde\x8b\x99\x82\x94\xd7\xb9_\xd0_C\x87-\xa8\x8a0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m24.133261332s ago: executing program 2 (id=356): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/21, 0x15}, 0x6}], 0x1, 0x0, 0x0) 1m23.643709358s ago: executing program 33 (id=356): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/21, 0x15}, 0x6}], 0x1, 0x0, 0x0) 1m4.983245487s ago: executing program 4 (id=435): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xc800, 0x0, 0x1, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0xa) syz_open_procfs(0x0, 0x0) 1m3.021688724s ago: executing program 4 (id=443): memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00)\xfa\xe8\xa5Z\x11\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x91\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19', 0x1) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x21, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1m2.100963895s ago: executing program 4 (id=451): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x38, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0x3, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@dstopts={0xc}]}}}}}}}, 0x0) 1m1.737392068s ago: executing program 4 (id=454): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m1.498387036s ago: executing program 4 (id=456): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 1m1.134901869s ago: executing program 4 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000f7ffffffffffffbbbbbbbbbbbb0800470001a00067e000032f"], 0x1b2) 1m0.479197611s ago: executing program 34 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000f7ffffffffffffbbbbbbbbbbbb0800470001a00067e000032f"], 0x1b2) 12.8446671s ago: executing program 3 (id=729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x800800, &(0x7f0000000380)={[{@bs={'bs', 0x3d, 0x5}}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@lastblock}, {@utf8}, {@gid}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@lastblock={'lastblock', 0x3d, 0xb0}}, {@noadinicb}, {@uid}]}, 0x1, 0xc4b, &(0x7f0000000f80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.442668884s ago: executing program 3 (id=731): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11.352157032s ago: executing program 3 (id=738): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10}}}, 0x24}}, 0x4000010) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 11.282192484s ago: executing program 3 (id=739): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 11.160909998s ago: executing program 3 (id=740): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x24, 0x32, 0x200, 0x70bd2d, 0x25cfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100706369001100020030082e303a30303a31302e3000000000080003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 10.837256679s ago: executing program 3 (id=742): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10.334755986s ago: executing program 35 (id=742): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.757272075s ago: executing program 5 (id=763): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e000000180100001f786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x1f4, 0xe, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 7.499058163s ago: executing program 5 (id=764): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e3d61bbffedbdf25070000001400018008000100", @ANYRES32=r3, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 7.238476932s ago: executing program 6 (id=766): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x1, 0x13) 7.237737522s ago: executing program 5 (id=767): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) 6.816376487s ago: executing program 6 (id=768): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, 0x0, 0x1, {0x1, 0xf0, 0x2}}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x885}, 0x8080) 6.188682989s ago: executing program 5 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x4}, {0x1002, 0x2, 0xffffffff, 0x9e6d}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x7, 0x9, 0xf3a7}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 5.807883452s ago: executing program 6 (id=771): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400edff2bbd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="000202007f00000100000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.783124395s ago: executing program 6 (id=775): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300000400000000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="001000000000000014001a"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.770162045s ago: executing program 1 (id=776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x4000, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xf65, 0x9, 0x0, 0x4}, {0x0, 0x4, 0xfffffffffffffffd, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2.619811141s ago: executing program 5 (id=777): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x204001, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 2.407186928s ago: executing program 6 (id=778): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_usb_connect$cdc_ncm(0x6, 0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902740002010420040904000001020d0000052406000105240000020006000806241a05ed0d0724140e00400005240100020c241b0300af200404010008090581030002580508"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xa0, 0xff}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.361980583s ago: executing program 1 (id=779): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 818.550792ms ago: executing program 1 (id=780): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/9, 0x9}, 0x6}], 0x1, 0x1000400000de, 0x0) 568.523031ms ago: executing program 1 (id=781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18, 0x20000015}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 468.392614ms ago: executing program 6 (id=782): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000740)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2}, &(0x7f00000000c0)=0x8) 262.172841ms ago: executing program 1 (id=783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x30, 0x6, 0x0, @local, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x1, 0xe5, 0xbcfa}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @dev}]}}}}}}}}, 0x0) 31.243539ms ago: executing program 5 (id=784): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1ff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 0s ago: executing program 1 (id=785): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d740109730773396000000010902"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x122) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): using dummy_hcd [ 100.416024][ T967] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 100.442022][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.459433][ T967] usb 4-1: config 0 descriptor?? [ 100.469685][ T967] cp210x 4-1:0.0: cp210x converter detected [ 100.929707][ T967] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 100.982446][ T5775] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 101.025123][ T967] usb 4-1: cp210x converter now attached to ttyUSB0 [ 101.040100][ T5775] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 101.099982][ T5775] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 101.153699][ T5775] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 101.199474][ T5775] usb 3-1: USB disconnect, device number 2 [ 101.273955][ T5817] usb 4-1: USB disconnect, device number 2 [ 101.317308][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 101.359743][ T5817] cp210x 4-1:0.0: device disconnected [ 102.639327][ T6013] capability: warning: `syz.2.58' uses deprecated v2 capabilities in a way that may be insecure [ 102.725931][ T5998] Process accounting resumed [ 103.152284][ T6013] mmap: syz.2.58 (6013) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.285593][ T6024] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 103.304911][ T6024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.312741][ T6024] IPv6: NLM_F_CREATE should be set when creating new route [ 103.320051][ T6024] IPv6: NLM_F_CREATE should be set when creating new route [ 103.395873][ T6028] loop3: detected capacity change from 0 to 512 [ 103.403746][ T6029] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 103.422475][ T6028] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.432239][ T6029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.442915][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 103.460757][ T6028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.507964][ T6029] Zero length message leads to an empty skb [ 103.524669][ T6028] EXT4-fs (loop3): 1 truncate cleaned up [ 103.568311][ T6028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.582601][ T6033] loop2: detected capacity change from 0 to 256 [ 103.674573][ T6033] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 103.844786][ T6037] input: syz0 as /devices/virtual/input/input5 [ 103.895583][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.101410][ T6044] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 104.362373][ T6057] process 'syz.1.73' launched './file1' with NULL argv: empty string added [ 104.484021][ T5775] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.528562][ T5775] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.777626][ T6065] fido_id[6065]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.983841][ T6074] bridge_slave_0: left allmulticast mode [ 105.013486][ T6074] bridge_slave_0: left promiscuous mode [ 105.030768][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.098611][ T6074] bridge_slave_1: left allmulticast mode [ 105.131844][ T6074] bridge_slave_1: left promiscuous mode [ 105.132086][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.166804][ T6074] bond0: (slave bond_slave_0): Releasing backup interface [ 105.206948][ T6074] bond0: (slave bond_slave_1): Releasing backup interface [ 105.306474][ T6074] team0: Port device team_slave_0 removed [ 105.399721][ T6074] team0: Port device team_slave_1 removed [ 105.415253][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.442802][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.464939][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.501630][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.867814][ T6097] loop3: detected capacity change from 0 to 256 [ 107.012035][ T967] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.116566][ T6109] loop0: detected capacity change from 0 to 32768 [ 107.188905][ T6109] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.225795][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.285676][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.302315][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.319764][ T967] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.329305][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.341755][ T967] usb 4-1: config 0 descriptor?? [ 107.365438][ T6109] XFS (loop0): Ending clean mount [ 107.399661][ T6109] XFS (loop0): Quotacheck needed: Please wait. [ 107.485626][ T6109] XFS (loop0): Quotacheck: Done. [ 107.521504][ T5783] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.596270][ T6109] XFS (loop0): User initiated shutdown received. [ 107.603295][ T6109] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 107.618989][ T6109] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 107.711610][ T6131] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.723579][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 107.738587][ T5783] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 107.761421][ T5783] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 107.786870][ T5783] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.815784][ T967] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 107.841638][ T5783] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.865380][ T5783] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.892453][ T967] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 107.907873][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.062086][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.148368][ T5783] usb 3-1: GET_CAPABILITIES returned 0 [ 108.159604][ T5783] usbtmc 3-1:16.0: can't read capabilities [ 108.215483][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.394010][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.425422][ T967] usb 3-1: USB disconnect, device number 3 [ 108.520048][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.661159][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.127566][ T967] usb 4-1: USB disconnect, device number 3 [ 110.453683][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.464600][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.473689][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.481305][ C0] sched: RT throttling activated [ 110.483929][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.504031][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.551766][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.742246][ T6148] loop2: detected capacity change from 0 to 131072 [ 110.764151][ T6148] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 110.773572][ T6148] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 110.796611][ T6148] F2FS-fs (loop2): invalid crc value [ 110.830504][ T6148] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.908004][ T6148] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 110.915695][ T6148] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 112.087370][ T6155] chnl_net:caif_netlink_parms(): no params data found [ 112.186422][ T49] hsr_slave_0: left promiscuous mode [ 112.254959][ T49] hsr_slave_1: left promiscuous mode [ 112.278127][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.301745][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.329866][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.356279][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.391095][ T49] bridge_slave_1: left allmulticast mode [ 112.421381][ T49] bridge_slave_1: left promiscuous mode [ 112.428730][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.487135][ T49] bridge_slave_0: left allmulticast mode [ 112.496395][ T49] bridge_slave_0: left promiscuous mode [ 112.521833][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.535122][ T6201] loop1: detected capacity change from 0 to 1024 [ 112.623115][ T49] veth1_macvtap: left promiscuous mode [ 112.632846][ T5773] Bluetooth: hci1: command tx timeout [ 112.643627][ T6201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.670994][ T49] veth0_macvtap: left promiscuous mode [ 112.706184][ T49] veth1_vlan: left promiscuous mode [ 112.745104][ T49] veth0_vlan: left promiscuous mode [ 112.971745][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.146764][ T6213] loop3: detected capacity change from 0 to 128 [ 113.226032][ T6213] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.322935][ T6213] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.376575][ T49] bond1 (unregistering): (slave lo): Releasing backup interface [ 113.395096][ T49] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 113.410968][ T49] bond1 (unregistering): Released all slaves [ 113.490527][ T28] audit: type=1800 audit(1774714973.537:2): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.120" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 res=0 errno=0 [ 113.563893][ T6213] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 18: comm syz.3.120: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 113.619023][ T6213] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 113.744716][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.280487][ T6238] loop3: detected capacity change from 0 to 8192 [ 114.349351][ T6238] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 114.397067][ T6238] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 114.438487][ T6238] loop3: p4 [ 114.469171][ T6238] loop3: p4 start 131072 is beyond EOD, truncated [ 114.714745][ T5773] Bluetooth: hci1: command tx timeout [ 114.764260][ T6246] loop2: detected capacity change from 0 to 32768 [ 114.778647][ T6246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.130 (6246) [ 114.816559][ T6246] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.827361][ T6246] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 114.836744][ T6246] BTRFS info (device loop2): enabling auto defrag [ 114.843661][ T6246] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.853661][ T6246] BTRFS info (device loop2): use zstd compression, level 3 [ 114.860943][ T6246] BTRFS info (device loop2): turning on async discard [ 114.868582][ T6246] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.879719][ T6246] BTRFS info (device loop2): trying to use backup root at mount time [ 114.887977][ T6246] BTRFS info (device loop2): enabling ssd optimizations [ 114.895128][ T6246] BTRFS info (device loop2): using spread ssd allocation scheme [ 114.902985][ T6246] BTRFS info (device loop2): force zlib compression, level 3 [ 114.910442][ T6246] BTRFS info (device loop2): using free space tree [ 114.969383][ T1144] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 114.985929][ T6246] BTRFS error (device loop2): failed to load root extent [ 114.994600][ T6246] BTRFS warning (device loop2): try to load backup roots slot 1 [ 115.005453][ T2961] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 115.038414][ T6246] BTRFS warning (device loop2): couldn't read tree root [ 115.045763][ T6246] BTRFS warning (device loop2): try to load backup roots slot 2 [ 115.054446][ T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 115.093686][ T6246] BTRFS warning (device loop2): couldn't read tree root [ 115.100778][ T6246] BTRFS warning (device loop2): try to load backup roots slot 3 [ 115.139621][ T6246] BTRFS info (device loop2): rebuilding free space tree [ 115.234094][ T6246] BTRFS info (device loop2): checking UUID tree [ 115.443875][ T49] team0 (unregistering): Port device team_slave_1 removed [ 115.644974][ T49] team0 (unregistering): Port device team_slave_0 removed [ 115.763990][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.823052][ T5782] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.932443][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.792064][ T5773] Bluetooth: hci1: command tx timeout [ 116.808192][ T49] bond0 (unregistering): Released all slaves [ 116.981471][ T5783] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.185308][ T5783] usb 3-1: config 0 has no interfaces? [ 117.207835][ T5783] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 117.252088][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.280720][ T5783] usb 3-1: Product: syz [ 117.311532][ T5783] usb 3-1: Manufacturer: syz [ 117.322239][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.348807][ T5783] usb 3-1: SerialNumber: syz [ 117.365014][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.382917][ T5783] usb 3-1: config 0 descriptor?? [ 117.401706][ T6155] bridge_slave_0: entered allmulticast mode [ 117.462456][ T6155] bridge_slave_0: entered promiscuous mode [ 117.476394][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.491752][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.499165][ T6155] bridge_slave_1: entered allmulticast mode [ 117.546660][ T6155] bridge_slave_1: entered promiscuous mode [ 117.589122][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.604203][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.724568][ T6155] team0: Port device team_slave_0 added [ 117.835756][ T6307] input: syz0 as /devices/virtual/input/input6 [ 118.264828][ T6287] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.364074][ T6155] team0: Port device team_slave_1 added [ 118.408452][ T967] usb 3-1: USB disconnect, device number 4 [ 118.451473][ T6318] veth1_to_bond: entered allmulticast mode [ 118.542525][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 118.699520][ T6320] veth1_to_bond (unregistering): left allmulticast mode [ 118.732298][ T6320] bond0: (slave bond_slave_1): Releasing backup interface [ 118.751959][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.760438][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.813571][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.828113][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.837808][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.869897][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.871879][ T5773] Bluetooth: hci1: command tx timeout [ 119.003526][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 119.165752][ T6155] hsr_slave_0: entered promiscuous mode [ 119.189406][ T6155] hsr_slave_1: entered promiscuous mode [ 119.206601][ T6155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.218586][ T6155] Cannot create hsr debugfs directory [ 119.667645][ T6346] loop1: detected capacity change from 0 to 512 [ 120.204502][ T6155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.233724][ T6155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.271669][ T6155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.293740][ T28] audit: type=1326 audit(1774714980.347:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.1.158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce4179c819 code=0x0 [ 120.339603][ T6155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.853020][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.942488][ T6155] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.009292][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.016801][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.045310][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.053132][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.189095][ T6155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.907379][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.469762][ T6400] loop1: detected capacity change from 0 to 32768 [ 122.518747][ T6400] (syz.1.170,6400,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.555754][ T6400] (syz.1.170,6400,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.628442][ T6400] JBD2: Ignoring recovery information on journal [ 122.663428][ T6406] loop2: detected capacity change from 0 to 32768 [ 122.741575][ T6400] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 122.839663][ T6155] veth0_vlan: entered promiscuous mode [ 122.893883][ T6155] veth1_vlan: entered promiscuous mode [ 123.024820][ T6155] veth0_macvtap: entered promiscuous mode [ 123.070194][ T6155] veth1_macvtap: entered promiscuous mode [ 123.169748][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.201128][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.220277][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.236505][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.259437][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.294275][ T6400] (syz.1.170,6400,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 123.353879][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.366111][ T28] audit: type=1800 audit(1774714983.397:4): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.170" name="file1" dev="loop1" ino=16979 res=0 errno=0 [ 123.406945][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.445932][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.491420][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.519994][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.537173][ T6437] loop3: detected capacity change from 0 to 1024 [ 123.573763][ T6155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.618158][ T6155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.641702][ T6155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.651047][ T6155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.686288][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 124.039549][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.072131][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.194617][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.226742][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.578232][ T28] audit: type=1800 audit(1774714984.627:5): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.104" name="file2" dev="overlay" ino=25 res=0 errno=0 [ 125.172364][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.355909][ T6471] loop3: detected capacity change from 0 to 256 [ 125.381470][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 125.397852][ T8] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.431423][ T8] usb 5-1: config 0 has no interface number 0 [ 125.437834][ T8] usb 5-1: config 0 interface 184 has no altsetting 0 [ 125.447768][ T6451] loop1: detected capacity change from 0 to 40427 [ 125.480071][ T8] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.527069][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.545139][ T6451] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.563713][ T8] usb 5-1: Product: syz [ 125.567971][ T8] usb 5-1: Manufacturer: syz [ 125.581759][ T6451] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.617722][ T8] usb 5-1: SerialNumber: syz [ 125.637758][ T8] usb 5-1: config 0 descriptor?? [ 125.643030][ T6451] F2FS-fs (loop1): invalid crc value [ 125.666950][ T8] smsc75xx v1.0.0 [ 125.681329][ T6451] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.877550][ T6461] loop2: detected capacity change from 0 to 32768 [ 125.907345][ T6451] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.948793][ T6451] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.039364][ T6461] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.106297][ T28] audit: type=1800 audit(1774714986.157:6): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.177" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 126.226764][ T6461] XFS (loop2): Ending clean mount [ 126.240658][ T28] audit: type=1804 audit(1774714986.197:7): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.177" name="/newroot/50/file7/bus" dev="loop1" ino=10 res=1 errno=0 [ 126.781159][ T5782] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.922192][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 126.940655][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.972668][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 127.001479][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 127.031599][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 127.044238][ T6504] Illegal XDP return value 4294967294 on prog (id 18) dev N/A, expect packet loss! [ 127.081887][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 127.111897][ T8] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 127.165549][ T8] usb 5-1: USB disconnect, device number 2 [ 127.981469][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.171437][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 128.197936][ T8] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 128.224142][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.243194][ T8] usb 5-1: Product: syz [ 128.251659][ T8] usb 5-1: Manufacturer: syz [ 128.271675][ T8] usb 5-1: SerialNumber: syz [ 128.303452][ T8] usb 5-1: config 0 descriptor?? [ 128.347479][ T8] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 128.699665][ T6539] syz.1.195[6539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.700000][ T6539] syz.1.195[6539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.607052][ T8] gspca_topro: reg_w err -71 [ 129.671755][ T8] gspca_topro: Sensor soi763a [ 129.693375][ T8] usb 5-1: USB disconnect, device number 3 [ 130.255009][ T6559] loop1: detected capacity change from 0 to 40427 [ 130.321663][ T6559] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 130.354835][ T6559] F2FS-fs (loop1): invalid crc value [ 130.421111][ T6559] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.623362][ T6559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.711440][ T967] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.796413][ T28] audit: type=1800 audit(1774714990.847:8): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.201" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 130.884314][ T5770] syz-executor: attempt to access beyond end of device [ 130.884314][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.933873][ T967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.946253][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.955906][ T967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.976423][ T967] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 130.989855][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.999834][ T967] usb 4-1: SerialNumber: syz [ 131.275001][ T967] usb 4-1: 0:2 : does not exist [ 131.371946][ T967] usb 4-1: USB disconnect, device number 4 [ 131.505712][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.539001][ T6589] loop4: detected capacity change from 0 to 40427 [ 131.600134][ T6589] F2FS-fs (loop4): Invalid segment count (0) [ 131.627895][ T6589] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 131.683937][ T6589] F2FS-fs (loop4): invalid crc value [ 131.720054][ T6589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.884353][ T6589] F2FS-fs (loop4): Start checkpoint disabled! [ 131.923966][ T6589] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 131.943063][ T6589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 133.277097][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.291386][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.941394][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.131432][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 134.153714][ T8] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 134.180645][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.218657][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.244461][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.280869][ T8] usbtmc 4-1:16.0: bulk endpoints not found [ 135.059514][ T6672] loop4: detected capacity change from 0 to 128 [ 135.087544][ T6672] EXT4-fs: Ignoring removed nobh option [ 135.159620][ T6672] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.238473][ T6676] tls_set_device_offload_rx: netdev not found [ 135.255859][ T6672] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.552057][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.713788][ T6155] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.751776][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 135.763853][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.791962][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.830783][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.850354][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.869269][ T8] usb 3-1: config 0 descriptor?? [ 135.879110][ T8] hub 3-1:0.0: USB hub found [ 135.899595][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 135.924555][ T6692] bridge: RTM_NEWNEIGH with invalid ether address [ 136.102681][ T8] hub 3-1:0.0: 1 port detected [ 136.655453][ T5819] usb 4-1: USB disconnect, device number 5 [ 136.772419][ T8] hub 3-1:0.0: activate --> -90 [ 136.808834][ T6706] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 136.989634][ T967] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 137.002434][ T967] usb 3-1: USB disconnect, device number 5 [ 137.271757][ T5819] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.400708][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.409726][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.473632][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.494027][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.515082][ T5819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.529867][ T5819] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.539945][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.562337][ T5819] usb 5-1: config 0 descriptor?? [ 137.672311][ T6722] warning: `syz.1.239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.018698][ T5819] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x4 [ 138.058172][ T5819] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 138.100710][ T5819] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 139.161604][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.363969][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.401438][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.423695][ T6740] usb 5-1: string descriptor 0 read error: -71 [ 139.441333][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.480595][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.496730][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.520301][ T6771] loop1: detected capacity change from 0 to 1024 [ 139.525992][ T27] usb 4-1: config 0 descriptor?? [ 139.721517][ T2961] hfsplus: b-tree write err: -5, ino 3 [ 139.773840][ T6771] hfsplus: b-tree write err: -5, ino 3 [ 139.787164][ T6771] hfsplus: request for non-existent node 33554434 in B*Tree [ 139.795622][ T6771] hfsplus: request for non-existent node 33554434 in B*Tree [ 139.980121][ T27] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x4 [ 140.021074][ T27] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 140.070273][ T27] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 140.084002][ T49] hfsplus: request for non-existent node 33554434 in B*Tree [ 140.125970][ T49] hfsplus: request for non-existent node 33554434 in B*Tree [ 140.152052][ T49] hfsplus: b-tree write err: -5, ino 3 [ 140.269610][ T967] usb 5-1: USB disconnect, device number 4 [ 140.345774][ T5783] usb 4-1: USB disconnect, device number 6 [ 140.812990][ T6785] loop2: detected capacity change from 0 to 40427 [ 140.840608][ T6785] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 140.849668][ T6785] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 140.883270][ T6785] F2FS-fs (loop2): invalid crc value [ 141.068214][ T6785] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 141.091616][ T6785] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.260330][ T6785] syz.2.254: attempt to access beyond end of device [ 141.260330][ T6785] loop2: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 141.276840][ T3472] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 141.323984][ T6785] syz.2.254: attempt to access beyond end of device [ 141.323984][ T6785] loop2: rw=2049, sector=53264, nr_sectors = 8 limit=40427 [ 141.347144][ T6785] syz.2.254: attempt to access beyond end of device [ 141.347144][ T6785] loop2: rw=2049, sector=53272, nr_sectors = 16 limit=40427 [ 141.447027][ T5782] syz-executor: attempt to access beyond end of device [ 141.447027][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.492319][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 141.601579][ T6819] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 141.618597][ T6819] overlayfs: failed to clone lowerpath [ 141.729330][ T6823] loop1: detected capacity change from 0 to 1024 [ 141.984430][ T6823] hfsplus: xattr search failed [ 142.088669][ T6832] loop4: detected capacity change from 0 to 512 [ 142.132142][ T6832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.189607][ T6832] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.269: bad orphan inode 131083 [ 142.210525][ T6832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.363069][ T6155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.301402][ T5775] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.331421][ T1189] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.487488][ T5775] usb 4-1: Using ep0 maxpacket: 32 [ 144.497976][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.517710][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.527691][ T1189] usb 2-1: Using ep0 maxpacket: 8 [ 144.540827][ T5775] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.552088][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.561244][ T1189] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 144.569982][ T1189] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.590251][ T5775] usb 4-1: config 0 descriptor?? [ 144.599744][ T5775] hub 4-1:0.0: USB hub found [ 144.615184][ T1189] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.654732][ T1189] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.682077][ T1189] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.699951][ T1189] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.713717][ T1189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.870079][ T5775] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 144.982170][ T1189] usb 2-1: usb_control_msg returned -32 [ 144.987922][ T1189] usbtmc 2-1:16.0: can't read capabilities [ 145.124416][ T5775] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 145.471765][ T5775] usb 4-1: USB disconnect, device number 7 [ 145.576822][ T6935] trusted_key: syz.4.286 sent an empty control message without MSG_MORE. [ 145.737694][ T6938] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 145.943429][ T5775] usb 2-1: USB disconnect, device number 2 [ 145.987889][ T6947] netlink: 104 bytes leftover after parsing attributes in process `syz.2.287'. [ 146.196098][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 146.726955][ T6966] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 146.742257][ T6949] loop3: detected capacity change from 0 to 32768 [ 146.781574][ T6949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.288 (6949) [ 146.849756][ T6949] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.880491][ T6949] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 146.915591][ T6949] BTRFS info (device loop3): setting nodatacow, compression disabled [ 146.962456][ T6949] BTRFS info (device loop3): turning on flush-on-commit [ 146.969504][ T6949] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 147.025131][ T6949] BTRFS info (device loop3): use lzo compression, level 0 [ 147.051501][ T6949] BTRFS info (device loop3): setting nodatasum [ 147.057801][ T6949] BTRFS info (device loop3): use no compression [ 147.085890][ T6949] BTRFS info (device loop3): trying to use backup root at mount time [ 147.114281][ T6949] BTRFS info (device loop3): max_inline at 0 [ 147.147493][ T6949] BTRFS info (device loop3): using free space tree [ 147.317602][ T2961] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 147.362047][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.297'. [ 147.393723][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.297'. [ 147.437898][ T6949] BTRFS warning (device loop3): couldn't read tree root [ 147.481467][ T6949] BTRFS warning (device loop3): try to load backup roots slot 1 [ 147.495341][ T2961] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 147.551689][ T6949] BTRFS warning (device loop3): couldn't read tree root [ 147.558807][ T6949] BTRFS warning (device loop3): try to load backup roots slot 2 [ 147.585199][ T2961] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 147.612254][ T6949] BTRFS warning (device loop3): couldn't read tree root [ 147.626167][ T6999] loop4: detected capacity change from 0 to 256 [ 147.629897][ T6949] BTRFS warning (device loop3): try to load backup roots slot 3 [ 147.673752][ T6949] BTRFS info (device loop3): enabling ssd optimizations [ 147.682356][ T1189] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.692831][ T6949] BTRFS info (device loop3): auto enabling async discard [ 147.717853][ T6949] BTRFS info (device loop3): rebuilding free space tree [ 147.781442][ T6999] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 147.807436][ T6949] BTRFS info (device loop3): checking UUID tree [ 147.945456][ T1189] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.954895][ T1189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.011537][ T1189] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 148.035200][ T1189] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.081391][ T1189] usb 3-1: Manufacturer: syz [ 148.122504][ T1189] usb 3-1: config 0 descriptor?? [ 148.351967][ T1189] rc_core: IR keymap rc-hauppauge not found [ 148.366035][ T1189] Registered IR keymap rc-empty [ 148.389856][ T1189] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 148.403569][ T7019] loop1: detected capacity change from 0 to 512 [ 148.429363][ T7019] FAT-fs (loop1): bogus number of FAT sectors [ 148.445986][ T1189] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 148.464375][ T7019] FAT-fs (loop1): Can't find a valid FAT filesystem [ 148.502515][ T5779] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.528035][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 148.565012][ T1189] usb 3-1: USB disconnect, device number 6 [ 149.324208][ T7031] loop3: detected capacity change from 0 to 512 [ 149.382523][ T7031] EXT4-fs: Ignoring removed nobh option [ 149.394790][ T7031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.499938][ T7031] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.536686][ T7031] EXT4-fs (loop3): 1 truncate cleaned up [ 149.543884][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.736044][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.788944][ T7041] loop2: detected capacity change from 0 to 4096 [ 149.888990][ T7049] loop1: detected capacity change from 0 to 512 [ 149.939607][ T7049] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.310: corrupted in-inode xattr: e_value size too large [ 149.969031][ T7049] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.310: couldn't read orphan inode 15 (err -117) [ 150.071539][ T7049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.279811][ T7049] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 12: comm syz.1.310: lblock 3 mapped to illegal pblock 12 (length 1) [ 150.372667][ T7061] loop3: detected capacity change from 0 to 256 [ 150.520223][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.534014][ T28] audit: type=1800 audit(1774715010.557:9): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.309" name="file1" dev="loop2" ino=0 res=0 errno=0 [ 150.678159][ T28] audit: type=1800 audit(1774715010.727:10): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.309" name="file1" dev="loop2" ino=0 res=0 errno=0 [ 151.151436][ T5817] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.372908][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 151.406088][ T5817] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.441750][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.472818][ T5817] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 151.507951][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.548220][ T5817] usb 2-1: config 0 descriptor?? [ 151.872997][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.993340][ T7068] loop3: detected capacity change from 0 to 40427 [ 152.022326][ T5817] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 152.047920][ T7068] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 152.067799][ T7068] F2FS-fs (loop3): invalid crc value [ 152.076854][ T7068] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.094075][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.106525][ T7075] loop2: detected capacity change from 0 to 40427 [ 152.135421][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.160170][ T7075] F2FS-fs (loop2): invalid crc value [ 152.181018][ T27] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.251392][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.265841][ T7075] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.297108][ T27] usb 5-1: SerialNumber: syz [ 152.352226][ T7068] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.542085][ T7075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.600999][ T5783] usb 2-1: USB disconnect, device number 3 [ 152.615536][ T27] usb 5-1: 0:2 : does not exist [ 152.620569][ T27] usb 5-1: unit 5 not found! [ 152.719787][ T27] usb 5-1: USB disconnect, device number 5 [ 152.802383][ T7095] f2fs_ckpt-7:3: attempt to access beyond end of device [ 152.802383][ T7095] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.837644][ T6592] udevd[6592]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.872096][ T7095] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 152.939611][ T5782] syz-executor: attempt to access beyond end of device [ 152.939611][ T5782] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.988074][ T5782] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 153.401126][ T7115] loop1: detected capacity change from 0 to 64 [ 153.848970][ T7125] netlink: 27 bytes leftover after parsing attributes in process `syz.1.328'. [ 153.998309][ T7126] loop2: detected capacity change from 0 to 4096 [ 154.023802][ T7126] EXT4-fs: inline encryption not supported [ 154.113363][ T7126] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 154.152057][ T7126] System zones: 0-5 [ 154.195813][ T7126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.419765][ T28] audit: type=1800 audit(1774715014.467:11): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 154.572794][ T7145] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 154.753390][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.175627][ T7160] gretap1: entered promiscuous mode [ 155.182282][ T7160] batman_adv: batadv0: Adding interface: gretap1 [ 155.189870][ T7160] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 155.216677][ T7160] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 155.361503][ T5819] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.551484][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 155.559619][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.575690][ T5819] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.585554][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.597343][ T5819] usb 4-1: config 0 descriptor?? [ 155.824348][ T5819] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 156.008266][ T7172] loop2: detected capacity change from 0 to 32768 [ 156.055489][ T7172] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.216548][ T7172] XFS (loop2): Ending clean mount [ 156.255117][ T7172] XFS (loop2): Quotacheck needed: Please wait. [ 156.296493][ T7186] loop1: detected capacity change from 0 to 16 [ 156.347381][ T7172] XFS (loop2): Quotacheck: Done. [ 156.375390][ T7186] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.411801][ T967] usb 4-1: USB disconnect, device number 8 [ 156.456408][ T7186] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 156.485643][ T7172] XFS (loop2): User initiated shutdown received. [ 156.509373][ T7172] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 156.547350][ T7172] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 156.633185][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 156.971412][ T5782] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.321722][ T2961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.600695][ T2961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.741820][ T2961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.771511][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 157.961450][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 157.977781][ T8] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 157.995579][ T8] usb 4-1: config 1 has no interface number 0 [ 158.011642][ T8] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 158.046492][ T8] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.085939][ T8] usb 4-1: config 1 interface 105 has no altsetting 0 [ 158.130439][ T8] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 158.147353][ T8] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 158.165979][ T8] usb 4-1: Product: syz [ 158.187835][ T8] usb 4-1: Manufacturer: syz [ 158.200774][ T8] usb 4-1: SerialNumber: syz [ 158.233747][ T7209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.271702][ T7209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.384852][ T7208] loop1: detected capacity change from 0 to 32768 [ 158.420538][ T7208] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.354 (7208) [ 158.491635][ T7208] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.549381][ T7208] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 158.598001][ T7208] BTRFS info (device loop1): setting nodatacow, compression disabled [ 158.628231][ T7208] BTRFS info (device loop1): turning on flush-on-commit [ 158.663769][ T7208] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 158.689992][ T7208] BTRFS info (device loop1): use lzo compression, level 0 [ 158.741662][ T7208] BTRFS info (device loop1): setting nodatasum [ 158.748850][ T7209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.781898][ T7209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.789377][ T7208] BTRFS info (device loop1): use no compression [ 158.821841][ T7208] BTRFS info (device loop1): trying to use backup root at mount time [ 158.862186][ T7208] BTRFS info (device loop1): max_inline at 0 [ 158.924220][ T7208] BTRFS info (device loop1): using free space tree [ 159.156786][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 159.196776][ T7208] BTRFS warning (device loop1): couldn't read tree root [ 159.220898][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.231536][ T8] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 159.251950][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.259290][ T7208] BTRFS warning (device loop1): try to load backup roots slot 1 [ 159.279655][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.287759][ T7246] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.317478][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.319993][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 159.341869][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.363121][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.444022][ T7208] BTRFS warning (device loop1): couldn't read tree root [ 159.461495][ T7208] BTRFS warning (device loop1): try to load backup roots slot 2 [ 159.471738][ T8] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 159.521091][ T49] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 159.526070][ T8] aqc111 4-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 159.581677][ T8] usb 4-1: USB disconnect, device number 9 [ 159.589541][ T8] aqc111 4-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 159.596806][ T7208] BTRFS warning (device loop1): couldn't read tree root [ 159.630039][ T7208] BTRFS warning (device loop1): try to load backup roots slot 3 [ 159.711754][ T7208] BTRFS info (device loop1): enabling ssd optimizations [ 159.743026][ T7208] BTRFS info (device loop1): auto enabling async discard [ 159.763666][ T7208] BTRFS info (device loop1): rebuilding free space tree [ 159.797997][ T7208] BTRFS info (device loop1): checking UUID tree [ 159.922867][ T8] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 159.958100][ T8] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 159.992845][ T8] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 160.175891][ T5770] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.518614][ T7262] loop3: detected capacity change from 0 to 8192 [ 160.639572][ T7262] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 160.684743][ T7262] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 160.723452][ T2961] batman_adv: batadv0: Removing interface: gretap1 [ 160.757293][ T7262] REISERFS (device loop3): using ordered data mode [ 160.809838][ T7262] reiserfs: using flush barriers [ 160.845802][ T7262] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.974295][ T7262] REISERFS (device loop3): checking transaction log (loop3) [ 161.000273][ T7276] loop1: detected capacity change from 0 to 128 [ 161.039368][ T7262] REISERFS (device loop3): Using r5 hash to sort names [ 161.078360][ T7262] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 161.201467][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.401702][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 161.436151][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.449176][ T5087] Bluetooth: hci3: command tx timeout [ 161.464541][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 161.478616][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 161.488928][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.510265][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.519954][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.528624][ T8] usb 5-1: SerialNumber: syz [ 161.538295][ T7274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.546199][ T7274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.559038][ T8] hub 5-1:1.0: bad descriptor, ignoring hub [ 161.565203][ T8] hub: probe of 5-1:1.0 failed with error -5 [ 161.727143][ T7242] chnl_net:caif_netlink_parms(): no params data found [ 161.792175][ T7274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.807255][ T7274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.875695][ T2961] hsr_slave_0: left promiscuous mode [ 161.887872][ T2961] hsr_slave_1: left promiscuous mode [ 161.929767][ T2961] veth1_macvtap: left promiscuous mode [ 161.935811][ T2961] veth0_macvtap: left promiscuous mode [ 161.944111][ T2961] veth1_vlan: left promiscuous mode [ 161.949925][ T2961] veth0_vlan: left promiscuous mode [ 162.052360][ T5819] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 162.278314][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 162.287218][ T5819] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 162.308998][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.332527][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.357213][ T5819] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.390078][ T5819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.411652][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.678644][ T5819] usb 4-1: GET_CAPABILITIES returned 0 [ 162.695767][ T5819] usbtmc 4-1:16.0: can't read capabilities [ 162.909198][ T5819] usb 4-1: USB disconnect, device number 10 [ 163.515234][ T5087] Bluetooth: hci3: command tx timeout [ 163.615416][ T7320] loop3: detected capacity change from 0 to 1024 [ 163.830828][ T3556] hfsplus: b-tree write err: -5, ino 3 [ 163.944507][ T7322] loop3: detected capacity change from 0 to 512 [ 163.971855][ T7322] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.067504][ T7322] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.373: invalid indirect mapped block 256 (level 2) [ 164.111612][ T7322] EXT4-fs (loop3): 2 truncates cleaned up [ 164.125240][ T7322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.170578][ T5775] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 164.207647][ T28] audit: type=1800 audit(1774715024.257:12): pid=7322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.373" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 164.240844][ T7322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.373: bg 0: block 5: invalid block bitmap [ 164.264800][ T7326] loop4: detected capacity change from 0 to 4096 [ 164.272160][ T5775] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.291072][ T7326] EXT4-fs: quotafile must be on filesystem root [ 164.316843][ T7322] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 12288 with max blocks 1 with error 28 [ 164.343567][ T7327] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 164.358073][ T7327] EXT4-fs (loop3): This should not happen!! Data will be lost [ 164.358073][ T7327] [ 164.370331][ T7327] EXT4-fs (loop3): Total free blocks count 0 [ 164.393419][ T7322] EXT4-fs (loop3): This should not happen!! Data will be lost [ 164.393419][ T7322] [ 164.407292][ T7327] EXT4-fs (loop3): Free/Dirty block details [ 164.416127][ T7327] EXT4-fs (loop3): free_blocks=0 [ 164.421304][ T7322] EXT4-fs (loop3): Total free blocks count 0 [ 164.452138][ T7327] EXT4-fs (loop3): dirty_blocks=2 [ 164.549770][ T7328] fido_id[7328]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.985366][ T2961] bond0 (unregistering): Released all slaves [ 165.106300][ T8] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 165.174584][ T7242] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.187246][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.194945][ T7242] bridge_slave_0: entered allmulticast mode [ 165.202422][ T7242] bridge_slave_0: entered promiscuous mode [ 165.226953][ T7242] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.246776][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.282896][ T7242] bridge_slave_1: entered allmulticast mode [ 165.306439][ T7242] bridge_slave_1: entered promiscuous mode [ 165.372086][ T8] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 165.431635][ T8] usb 5-1: device reset changed ep0 maxpacket size! [ 165.450047][ T7242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.494756][ T8] usb 5-1: USB disconnect, device number 6 [ 165.543050][ T7242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.572680][ T8] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 165.597274][ T5087] Bluetooth: hci3: command tx timeout [ 165.708847][ T7242] team0: Port device team_slave_0 added [ 165.739729][ T7242] team0: Port device team_slave_1 added [ 165.755373][ T5775] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 165.868633][ T7242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.879940][ T7242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.907579][ T7242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.921740][ T7242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.928920][ T7242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.968305][ T7242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.003878][ T5775] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.035211][ T5775] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.054248][ T5775] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.076427][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.098958][ T5775] usb 4-1: SerialNumber: syz [ 166.104952][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.116285][ T7353] loop1: detected capacity change from 0 to 4096 [ 166.145704][ T7353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.166201][ T7353] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 166.186562][ T7242] hsr_slave_0: entered promiscuous mode [ 166.201981][ T7242] hsr_slave_1: entered promiscuous mode [ 166.213742][ T7353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.331427][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 166.342099][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 166.350390][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.384619][ T5775] usb 4-1: 0:2 : does not exist [ 166.404289][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.431376][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.470388][ T5775] usb 4-1: USB disconnect, device number 11 [ 166.481363][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.533798][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.563855][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.595003][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.812099][ T7242] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.836196][ T7242] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.894080][ T7242] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.936281][ T7242] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.136869][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.151909][ T7242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.259525][ T7242] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.329949][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.337360][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.398668][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.407236][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.662312][ T7382] usbtmc 5-1:16.0: simple control status returned 3d [ 167.671564][ T5087] Bluetooth: hci3: command tx timeout [ 167.866180][ T8] usb 5-1: USB disconnect, device number 7 [ 168.088451][ T7242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.608570][ T7406] loop1: detected capacity change from 0 to 2048 [ 168.754022][ T7406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.937105][ T7242] veth0_vlan: entered promiscuous mode [ 168.956440][ T7418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.017251][ T7242] veth1_vlan: entered promiscuous mode [ 169.163397][ T7394] loop3: detected capacity change from 0 to 32768 [ 169.176256][ T7242] veth0_macvtap: entered promiscuous mode [ 169.245917][ T7242] veth1_macvtap: entered promiscuous mode [ 169.267253][ T7394] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.375580][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.427201][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.439908][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.451508][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.462231][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.473079][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.485749][ T7242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.515716][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.537415][ T7394] XFS (loop3): Ending clean mount [ 169.539378][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.577923][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.591012][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.606838][ T7242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.617945][ T7242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.641227][ T7242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.684706][ T7242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.706959][ T7242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.734792][ T7242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.764825][ T7242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.864737][ T5779] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.968552][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.985084][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.141686][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.149696][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.704036][ T7458] loop3: detected capacity change from 0 to 64 [ 171.261592][ T1189] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.455889][ T1189] usb 5-1: Using ep0 maxpacket: 32 [ 171.467785][ T1189] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 171.491737][ T1189] usb 5-1: config 0 has no interface number 0 [ 171.512009][ T1189] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.540706][ T1189] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 171.560449][ T1189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.577923][ T1189] usb 5-1: Product: syz [ 171.600869][ T1189] usb 5-1: Manufacturer: syz [ 171.615677][ T1189] usb 5-1: SerialNumber: syz [ 171.628056][ T1189] usb 5-1: config 0 descriptor?? [ 171.647289][ T1189] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 171.673441][ T1189] em28xx 5-1:0.132: Video interface 132 found: [ 172.075945][ T1189] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 172.506925][ T1189] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 172.541505][ T1189] em28xx 5-1:0.132: board has no eeprom [ 172.791818][ T1189] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 172.811192][ T1189] em28xx 5-1:0.132: analog set to bulk mode. [ 172.823471][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f412000: rx timeout, send abort [ 172.825007][ T27] em28xx 5-1:0.132: Registering V4L2 extension [ 172.836033][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f412000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.868223][ T1189] usb 5-1: USB disconnect, device number 8 [ 172.928611][ T1189] em28xx 5-1:0.132: Disconnecting em28xx [ 173.116144][ T7523] loop1: detected capacity change from 0 to 128 [ 173.189746][ T7523] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.208725][ T7526] loop3: detected capacity change from 0 to 2048 [ 173.259123][ T7526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.273444][ T7523] hpfs: filesystem error: improperly stopped [ 173.279546][ T7523] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 173.326973][ T7523] hpfs: You really don't want any checks? You are crazy... [ 173.361356][ T7523] hpfs: Code page index out of array [ 173.404818][ T7523] hpfs: code page support is disabled [ 173.413058][ T7523] hpfs: hpfs_map_4sectors(): unaligned read [ 173.419964][ T7523] hpfs: hpfs_map_4sectors(): unaligned read [ 173.441327][ T27] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 173.449100][ T27] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 173.481735][ T7523] hpfs: filesystem error: unable to find root dir [ 173.527550][ T27] em28xx 5-1:0.132: No AC97 audio processor [ 173.579960][ T27] usb 5-1: Decoder not found [ 173.621313][ T27] em28xx 5-1:0.132: failed to create media graph [ 173.648247][ T27] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 173.712704][ T27] em28xx 5-1:0.132: Remote control support is not available for this card. [ 173.745637][ T1189] em28xx 5-1:0.132: Closing input extension [ 173.889933][ T1189] em28xx 5-1:0.132: Freeing device [ 174.501638][ T967] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 174.714040][ T967] usb 4-1: config 0 has no interfaces? [ 174.726818][ T967] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 174.742138][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.750303][ T967] usb 4-1: Product: syz [ 174.761348][ T967] usb 4-1: Manufacturer: syz [ 174.776036][ T967] usb 4-1: SerialNumber: syz [ 174.813999][ T967] usb 4-1: config 0 descriptor?? [ 175.131389][ T967] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 175.238181][ T7541] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.289089][ T7563] loop5: detected capacity change from 0 to 8192 [ 175.301482][ T967] usb 2-1: device descriptor read/64, error -71 [ 175.350897][ T5836] usb 4-1: USB disconnect, device number 12 [ 175.362020][ T7563] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.382681][ T7563] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 175.397854][ T7563] REISERFS (device loop5): using ordered data mode [ 175.405032][ T7563] reiserfs: using flush barriers [ 175.440836][ T7563] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.467137][ T7563] REISERFS (device loop5): checking transaction log (loop5) [ 175.494388][ T7563] REISERFS (device loop5): Using r5 hash to sort names [ 175.520134][ T7563] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 175.611412][ T967] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 175.793937][ T967] usb 2-1: device descriptor read/64, error -71 [ 175.931524][ T967] usb usb2-port1: attempt power cycle [ 176.173940][ T7580] atomic_op ffff88807a57c998 conn xmit_atomic 0000000000000000 [ 176.381970][ T967] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 176.422083][ T967] usb 2-1: device descriptor read/8, error -71 [ 176.715491][ T967] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 176.776796][ T967] usb 2-1: device descriptor read/8, error -71 [ 176.921598][ T967] usb usb2-port1: unable to enumerate USB device [ 177.138886][ T7587] loop3: detected capacity change from 0 to 32768 [ 177.173358][ T7587] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.330255][ T7587] XFS (loop3): Ending clean mount [ 177.353427][ T7587] XFS (loop3): Quotacheck needed: Please wait. [ 177.456393][ T7587] XFS (loop3): Quotacheck: Done. [ 177.595317][ T7602] loop4: detected capacity change from 0 to 32768 [ 177.657528][ T7602] (syz.4.435,7602,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.697272][ T5779] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.717052][ T7602] (syz.4.435,7602,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.784225][ T7602] JBD2: Ignoring recovery information on journal [ 177.885524][ T7602] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 178.386348][ T28] audit: type=1800 audit(1774715038.437:13): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.435" name="file1" dev="loop4" ino=16979 res=0 errno=0 [ 178.668231][ T7650] netlink: 104 bytes leftover after parsing attributes in process `syz.3.442'. [ 178.686140][ T6155] ocfs2: Unmounting device (7,4) on (node local) [ 179.176292][ T7665] Bluetooth: MGMT ver 1.22 [ 179.269663][ T7669] loop4: detected capacity change from 0 to 512 [ 179.764155][ T7681] sctp: [Deprecated]: syz.1.452 (pid 7681) Use of int in max_burst socket option deprecated. [ 179.764155][ T7681] Use struct sctp_assoc_value instead [ 180.728197][ T7683] loop3: detected capacity change from 0 to 32768 [ 180.781428][ T7683] (syz.3.453,7683,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.792017][ T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 180.834927][ T7683] (syz.3.453,7683,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.930650][ T7683] JBD2: Ignoring recovery information on journal [ 181.018999][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 181.035328][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.044061][ T8] usb 2-1: Product: syz [ 181.048494][ T8] usb 2-1: Manufacturer: syz [ 181.053224][ T8] usb 2-1: SerialNumber: syz [ 181.068932][ T8] usb 2-1: config 0 descriptor?? [ 181.100020][ T7683] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.311627][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.344218][ T28] audit: type=1800 audit(1774715041.387:14): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.453" name="file1" dev="loop3" ino=16979 res=0 errno=0 [ 181.543859][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 181.921660][ T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 181.953321][ T8] usb 2-1: USB disconnect, device number 8 [ 182.143778][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.155664][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.166038][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.174832][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.226954][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 182.234503][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.287470][ T7712] loop5: detected capacity change from 0 to 32768 [ 182.302905][ T7712] (syz.5.460,7712,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.343311][ T7712] (syz.5.460,7712,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 182.466667][ T7712] JBD2: Ignoring recovery information on journal [ 182.618465][ T7712] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 183.063422][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 183.219777][ T7712] (syz.5.460,7712,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 183.296002][ T28] audit: type=1800 audit(1774715043.347:15): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.460" name="file1" dev="loop5" ino=16979 res=0 errno=0 [ 183.428580][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.500217][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.513591][ T7724] bridge_slave_0: entered allmulticast mode [ 183.521194][ T7724] bridge_slave_0: entered promiscuous mode [ 183.593212][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.609974][ T7242] ocfs2: Unmounting device (7,5) on (node local) [ 183.616654][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.630075][ T7724] bridge_slave_1: entered allmulticast mode [ 183.663614][ T7724] bridge_slave_1: entered promiscuous mode [ 183.795602][ T7760] atomic_op ffff88807de27998 conn xmit_atomic 0000000000000000 [ 183.820427][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.881127][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.086400][ T7724] team0: Port device team_slave_0 added [ 184.123276][ T7724] team0: Port device team_slave_1 added [ 184.217621][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.241511][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.309321][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.316977][ T5773] Bluetooth: hci1: command tx timeout [ 184.354633][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.440121][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.491426][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.660336][ T7724] hsr_slave_0: entered promiscuous mode [ 184.679865][ T7724] hsr_slave_1: entered promiscuous mode [ 184.691900][ T7724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.716458][ T7724] Cannot create hsr debugfs directory [ 185.576547][ T7724] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.610011][ T7724] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.649647][ T7724] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.697452][ T7724] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.020694][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.394701][ T5773] Bluetooth: hci1: command tx timeout [ 186.483564][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.506718][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.514024][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.607785][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.615082][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.966078][ T7806] loop3: detected capacity change from 0 to 32768 [ 187.005031][ T7806] (syz.3.475,7806,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.055480][ T7806] (syz.3.475,7806,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.247078][ T7806] JBD2: Ignoring recovery information on journal [ 187.349269][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.434229][ T7806] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 187.945056][ T7806] (syz.3.475,7806,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 188.208921][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 188.309990][ T7724] veth0_vlan: entered promiscuous mode [ 188.355091][ T7724] veth1_vlan: entered promiscuous mode [ 188.476075][ T5773] Bluetooth: hci1: command tx timeout [ 188.489100][ T7724] veth0_macvtap: entered promiscuous mode [ 188.532284][ T7724] veth1_macvtap: entered promiscuous mode [ 188.631910][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.662816][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.686447][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.723822][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.743084][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.758623][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.769070][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.786688][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.808061][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.850257][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.876257][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.887279][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.899819][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.910146][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.921011][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.933544][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.947715][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.970736][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.990166][ T7724] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.003005][ T7724] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.021606][ T7724] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.030739][ T7724] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.251794][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.259790][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.422827][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.431097][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.557311][ T5773] Bluetooth: hci1: command tx timeout [ 190.766781][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 190.778702][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 190.807852][ T7895] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.817493][ T7895] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.826410][ T7895] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.835426][ T7895] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.853777][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 190.916306][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 191.379065][ T7907] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 191.848395][ T5773] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 191.861496][ T5773] CPU: 0 PID: 5773 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 191.869156][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.879309][ T5773] Workqueue: hci0 hci_rx_work [ 191.884067][ T5773] Call Trace: [ 191.887503][ T5773] [ 191.890473][ T5773] dump_stack_lvl+0x18c/0x250 [ 191.895206][ T5773] ? show_regs_print_info+0x20/0x20 [ 191.900455][ T5773] ? load_image+0x400/0x400 [ 191.905014][ T5773] sysfs_create_dir_ns+0x26e/0x2a0 [ 191.910167][ T5773] ? sysfs_warn_dup+0xa0/0xa0 [ 191.914887][ T5773] ? do_raw_spin_unlock+0x121/0x230 [ 191.920227][ T5773] kobject_add_internal+0x61c/0xcc0 [ 191.925514][ T5773] kobject_add+0x164/0x240 [ 191.929970][ T5773] ? __rwlock_init+0x150/0x150 [ 191.934786][ T5773] ? kobject_init+0x1e0/0x1e0 [ 191.939590][ T5773] ? _raw_spin_unlock+0x28/0x40 [ 191.944490][ T5773] ? get_device_parent+0x366/0x390 [ 191.949649][ T5773] device_add+0x408/0xc20 [ 191.954067][ T5773] hci_conn_add_sysfs+0xd5/0x1e0 [ 191.959054][ T5773] le_conn_complete_evt+0xf5d/0x1540 [ 191.964462][ T5773] ? hci_event_packet+0x4cb/0x1270 [ 191.969627][ T5773] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 191.975970][ T5773] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 191.981752][ T5773] ? skb_pull_data+0xfb/0x200 [ 191.986479][ T5773] hci_le_conn_complete_evt+0x187/0x440 [ 191.992079][ T5773] ? hci_remote_host_features_evt+0x150/0x150 [ 191.998283][ T5773] hci_event_packet+0x7ba/0x1270 [ 192.003270][ T5773] ? bis_list+0x290/0x290 [ 192.007682][ T5773] ? lockdep_hardirqs_on+0x98/0x150 [ 192.012929][ T5773] ? hci_send_to_monitor+0xd7/0x4f0 [ 192.018172][ T5773] hci_rx_work+0x43a/0xd60 [ 192.022663][ T5773] ? process_scheduled_works+0x96f/0x15d0 [ 192.028458][ T5773] process_scheduled_works+0xa5d/0x15d0 [ 192.034073][ T5773] ? worker_attach_to_pool+0x380/0x380 [ 192.039677][ T5773] ? assign_work+0x3d2/0x5d0 [ 192.044340][ T5773] worker_thread+0xa55/0xfc0 [ 192.048988][ T5773] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 192.054927][ T5773] ? _raw_spin_unlock+0x40/0x40 [ 192.059816][ T5773] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 192.065939][ T5773] kthread+0x2fa/0x390 [ 192.070046][ T5773] ? pr_cont_work+0x560/0x560 [ 192.075024][ T5773] ? kthread_blkcg+0xd0/0xd0 [ 192.079643][ T5773] ret_from_fork+0x48/0x80 [ 192.084105][ T5773] ? kthread_blkcg+0xd0/0xd0 [ 192.088734][ T5773] ret_from_fork_asm+0x11/0x20 [ 192.093649][ T5773] [ 192.099363][ T5773] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 192.113850][ T5773] Bluetooth: hci0: failed to register connection device [ 192.270373][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.504'. [ 192.801666][ T5819] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 193.028676][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 193.036941][ T5819] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 193.086743][ T5819] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.110044][ T5819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.130811][ T5819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.157395][ T5819] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.211751][ T5819] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.243618][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.454520][ T7937] loop6: detected capacity change from 0 to 32768 [ 193.498545][ T7937] (syz.6.506,7937,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 193.514190][ T5775] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.544289][ T5819] usb 2-1: usb_control_msg returned -32 [ 193.553592][ T5819] usbtmc 2-1:16.0: can't read capabilities [ 193.564808][ T7937] (syz.6.506,7937,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 193.629145][ T7937] JBD2: Ignoring recovery information on journal [ 193.720914][ T7937] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 193.733815][ T5775] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 193.745823][ T5775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.757146][ T5775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.767466][ T5775] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.802582][ T5775] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 193.820455][ T5775] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 193.856407][ T5775] usb 6-1: Manufacturer: syz [ 193.869354][ T5775] usb 6-1: config 0 descriptor?? [ 193.903294][ T7964] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 193.924619][ T27] usb 2-1: USB disconnect, device number 9 [ 194.078495][ T7937] (syz.6.506,7937,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 194.108317][ T28] audit: type=1800 audit(1774715054.157:16): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.506" name="file1" dev="loop6" ino=16979 res=0 errno=0 [ 194.218035][ T7724] ocfs2: Unmounting device (7,6) on (node local) [ 194.317872][ T5775] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 194.342493][ T5775] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 194.367147][ T5775] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 194.691988][ T967] usb 6-1: USB disconnect, device number 2 [ 194.721878][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.728360][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.115924][ T7972] loop1: detected capacity change from 0 to 32768 [ 195.130451][ T7972] (syz.1.517,7972,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.159133][ T7972] (syz.1.517,7972,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.210983][ T7972] JBD2: Ignoring recovery information on journal [ 195.380474][ T7972] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 195.791396][ T5775] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 195.925953][ T28] audit: type=1800 audit(1774715055.977:17): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.517" name="file1" dev="loop1" ino=16979 res=0 errno=0 [ 196.026063][ T5775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.046796][ T5775] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.075922][ T5775] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 196.091489][ T5775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.135425][ T5775] usb 6-1: config 0 descriptor?? [ 196.558016][ T5775] logitech 0003:046D:C293.0009: unknown main item tag 0x0 [ 196.589362][ T5775] logitech 0003:046D:C293.0009: unknown main item tag 0x0 [ 196.609419][ T5775] logitech 0003:046D:C293.0009: unknown main item tag 0x0 [ 196.632496][ T5775] logitech 0003:046D:C293.0009: unknown main item tag 0x0 [ 196.640028][ T5775] logitech 0003:046D:C293.0009: unknown main item tag 0x0 [ 196.654421][ T5775] logitech 0003:046D:C293.0009: unknown main item tag 0x0 [ 196.662762][ T5775] logitech 0003:046D:C293.0009: unexpected long global item [ 196.694016][ T5775] logitech 0003:046D:C293.0009: parse failed [ 196.701006][ T5775] logitech: probe of 0003:046D:C293.0009 failed with error -22 [ 196.719322][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 196.832112][ T5775] usb 6-1: USB disconnect, device number 3 [ 197.219253][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 197.532344][ T8011] netlink: 'syz.5.529': attribute type 5 has an invalid length. [ 197.612002][ T8011] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.620831][ T8011] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.629720][ T8011] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.638607][ T8011] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.729721][ T8011] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.739161][ T8011] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.748499][ T8011] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.758090][ T8011] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.301510][ T5775] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 198.313117][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 198.515229][ T5775] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.552705][ T5775] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.582962][ T5775] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.592475][ T5775] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.600525][ T5775] usb 7-1: SerialNumber: syz [ 198.845196][ T5775] usb 7-1: 0:2 : does not exist [ 198.916227][ T5775] usb 7-1: USB disconnect, device number 2 [ 199.020537][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.118204][ T28] audit: type=1326 audit(1774715059.167:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz.5.538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60cb19c819 code=0x0 [ 199.565471][ T8056] netlink: 'syz.1.543': attribute type 11 has an invalid length. [ 199.597052][ T8056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.543'. [ 199.611736][ T8056] netlink: 'syz.1.543': attribute type 11 has an invalid length. [ 199.619595][ T8056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.543'. [ 199.629514][ T8056] netlink: 'syz.1.543': attribute type 11 has an invalid length. [ 199.638259][ T8056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.543'. [ 199.801500][ T5775] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.044419][ T5775] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.067574][ T5775] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.085691][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.099239][ T5775] usb 4-1: config 0 descriptor?? [ 200.116350][ T5775] pwc: Askey VC010 type 2 USB webcam detected. [ 200.379136][ T8063] loop6: detected capacity change from 0 to 40427 [ 200.413452][ T8063] F2FS-fs (loop6): invalid crc value [ 200.428780][ T8063] F2FS-fs (loop6): Found nat_bits in checkpoint [ 200.546539][ T5775] pwc: recv_control_msg error -32 req 02 val 2b00 [ 200.567901][ T5775] pwc: recv_control_msg error -32 req 02 val 2700 [ 200.582604][ T5775] pwc: recv_control_msg error -32 req 02 val 2c00 [ 200.643576][ T8063] F2FS-fs (loop6): Start checkpoint disabled! [ 200.657443][ T8063] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 200.804759][ T5775] pwc: recv_control_msg error -71 req 04 val 1300 [ 200.831743][ T5775] pwc: recv_control_msg error -71 req 04 val 1400 [ 200.872024][ T5775] pwc: recv_control_msg error -71 req 02 val 2000 [ 200.892092][ T5775] pwc: recv_control_msg error -71 req 02 val 2100 [ 200.911507][ T5775] pwc: recv_control_msg error -71 req 04 val 1500 [ 200.928798][ T5775] pwc: recv_control_msg error -71 req 02 val 2500 [ 200.937776][ T5775] pwc: recv_control_msg error -71 req 02 val 2400 [ 200.952110][ T5775] pwc: recv_control_msg error -71 req 02 val 2600 [ 200.968965][ T5775] pwc: recv_control_msg error -71 req 02 val 2900 [ 200.977562][ T8080] vlan2: entered promiscuous mode [ 200.993909][ T5775] pwc: recv_control_msg error -71 req 02 val 2800 [ 201.001442][ T8080] bond0: entered promiscuous mode [ 201.006552][ T8080] bond_slave_0: entered promiscuous mode [ 201.013287][ T5775] pwc: recv_control_msg error -71 req 04 val 1100 [ 201.027905][ T5775] pwc: recv_control_msg error -71 req 04 val 1200 [ 201.041215][ T8080] bond_slave_1: entered promiscuous mode [ 201.081989][ T5775] pwc: Registered as video103. [ 201.090528][ T5775] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 201.155908][ T5775] usb 4-1: USB disconnect, device number 13 [ 201.333731][ T11] kworker/u4:0: attempt to access beyond end of device [ 201.333731][ T11] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 201.381819][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 201.402545][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 201.409760][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 201.422032][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 202.043502][ T8082] loop1: detected capacity change from 0 to 32768 [ 202.111561][ T8082] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.552 (8082) [ 202.192424][ T8082] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 202.227359][ T8082] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 202.265238][ T8082] BTRFS info (device loop1): using free space tree [ 202.515740][ T8082] BTRFS info (device loop1): enabling ssd optimizations [ 202.562942][ T8082] BTRFS info (device loop1): auto enabling async discard [ 202.979887][ T8140] loop5: detected capacity change from 0 to 1024 [ 203.154000][ T8140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.472060][ T5770] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 203.508426][ T7242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.739169][ T8162] loop3: detected capacity change from 0 to 256 [ 203.803833][ T8162] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.892487][ T8197] loop6: detected capacity change from 0 to 1024 [ 204.930951][ T28] audit: type=1326 audit(1774715064.977:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.018178][ T8197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.035863][ T28] audit: type=1326 audit(1774715064.977:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.140774][ T28] audit: type=1326 audit(1774715065.027:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.232788][ T28] audit: type=1326 audit(1774715065.027:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.325229][ T7724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.341692][ T28] audit: type=1326 audit(1774715065.027:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.428817][ T28] audit: type=1326 audit(1774715065.027:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.562555][ T28] audit: type=1326 audit(1774715065.037:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.670535][ T28] audit: type=1326 audit(1774715065.047:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.778636][ T8213] loop3: detected capacity change from 0 to 1024 [ 205.781569][ T28] audit: type=1326 audit(1774715065.047:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 205.818347][ T8213] EXT4-fs: Ignoring removed oldalloc option [ 205.858466][ T8213] EXT4-fs: Ignoring removed orlov option [ 205.906112][ T8213] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 205.907128][ T28] audit: type=1326 audit(1774715065.047:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0cf9c819 code=0x7ffc0000 [ 206.066197][ T8213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.473774][ T8213] EXT4-fs error (device loop3): ext4_ext_remove_space:2857: inode #15: comm syz.3.582: path[1].p_hdr == NULL [ 206.740725][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.107702][ T8214] loop6: detected capacity change from 0 to 32768 [ 207.162824][ T8214] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.236356][ T8214] XFS (loop6): Ending clean mount [ 207.328128][ T8214] xfs: Unknown parameter '@LqE: 艞t}0$' [ 207.468430][ T7724] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.674244][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.585'. [ 207.856717][ T8249] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 207.902855][ T8249] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 208.924045][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.595'. [ 209.010720][ T8289] netlink: 'syz.5.597': attribute type 1 has an invalid length. [ 209.021817][ T8290] netlink: 'syz.1.596': attribute type 2 has an invalid length. [ 209.039536][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'. [ 209.250476][ T5775] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 209.274021][ T8298] netlink: 'syz.1.600': attribute type 39 has an invalid length. [ 209.284660][ T5775] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.551598][ T1189] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 209.763882][ T1189] usb 7-1: Using ep0 maxpacket: 32 [ 210.406896][ T1189] usb 7-1: unable to get BOS descriptor or descriptor too short [ 210.452632][ T1189] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 210.491825][ T1189] usb 7-1: can't read configurations, error -71 [ 211.160720][ T8345] loop6: detected capacity change from 0 to 8 [ 211.216866][ T8345] Dev loop6: unable to read RDB block 8 [ 211.247435][ T8345] loop6: unable to read partition table [ 211.261116][ T8345] loop6: partition table beyond EOD, truncated [ 211.291788][ T8345] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 211.858939][ T8362] "syz.5.617" (8362) uses obsolete ecb(arc4) skcipher [ 212.156073][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 212.156258][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 212.230561][ T8341] loop1: detected capacity change from 0 to 32768 [ 212.354211][ T8341] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.468654][ T8341] XFS (loop1): Ending clean mount [ 212.508519][ T8341] XFS (loop1): Quotacheck needed: Please wait. [ 212.787175][ T8341] XFS (loop1): Quotacheck: Done. [ 213.188600][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.197674][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.321351][ T5770] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 214.223199][ T8366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.287784][ T8366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.411411][ T5817] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 214.601363][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 214.627168][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.651730][ T5817] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 214.660842][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.690973][ T5817] usb 2-1: config 0 descriptor?? [ 214.917392][ T5817] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.954411][ T8366] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.963614][ T8366] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.973084][ T8366] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.986432][ T8366] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.197680][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 215.393094][ T8410] usb 2-1: USB disconnect, device number 10 [ 216.336253][ T8446] ip6erspan0: entered promiscuous mode [ 217.007185][ T8456] syzkaller1: entered promiscuous mode [ 217.041319][ T8456] syzkaller1: entered allmulticast mode [ 218.387935][ T8502] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 218.451394][ T8502] netlink: 'syz.3.652': attribute type 2 has an invalid length. [ 218.753545][ T8519] loop3: detected capacity change from 0 to 128 [ 218.812383][ T8519] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.908218][ T8519] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.959592][ T8411] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 219.013645][ T8411] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.059114][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 219.059130][ T28] audit: type=1800 audit(1774715079.107:35): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.657" name="file2" dev="loop3" ino=1048607 res=0 errno=0 [ 220.218338][ T8530] loop5: detected capacity change from 0 to 40427 [ 220.262183][ T8530] F2FS-fs (loop5): invalid crc value [ 220.581404][ T8530] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 220.840520][ T3556] kworker/u4:14: attempt to access beyond end of device [ 220.840520][ T3556] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 220.902786][ T3556] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 220.911197][ T3556] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 220.961651][ T8579] loop6: detected capacity change from 0 to 2048 [ 220.992246][ T8530] VFS:Filesystem freeze failed [ 221.040577][ T8579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.186067][ T28] audit: type=1800 audit(1774715081.237:36): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.673" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 221.433685][ T7724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.631095][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.6.677'. [ 221.641038][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.6.677'. [ 221.670224][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.6.677'. [ 222.845858][ T8637] loop6: detected capacity change from 0 to 1024 [ 222.904165][ T8637] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 222.919580][ T8637] hfsplus: xattr search failed [ 222.978876][ T3556] hfsplus: b-tree write err: -5, ino 25 [ 222.985650][ T3556] hfsplus: b-tree write err: -5, ino 4 [ 222.993500][ T3556] hfsplus: b-tree write err: -5, ino 2 [ 223.000208][ T3556] hfsplus: b-tree write err: -5, ino 26 [ 223.961524][ T8643] loop6: detected capacity change from 0 to 32768 [ 224.006205][ T8649] loop5: detected capacity change from 0 to 32768 [ 224.022140][ T8643] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 224.035031][ T8649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.697 (8649) [ 224.055019][ T8649] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.067396][ T8649] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 224.076979][ T8649] BTRFS info (device loop5): using free space tree [ 224.153561][ T8649] BTRFS info (device loop5): enabling ssd optimizations [ 224.160660][ T8649] BTRFS info (device loop5): auto enabling async discard [ 224.201416][ T8643] XFS (loop6): Ending clean mount [ 224.416964][ T7242] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.492578][ T7724] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.375370][ T8696] loop1: detected capacity change from 0 to 4096 [ 225.447940][ T5818] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 225.521537][ T8700] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.641323][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 225.654100][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.677398][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.703480][ T5818] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 225.713020][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.752722][ T5818] usb 4-1: config 0 descriptor?? [ 225.885427][ T8688] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 225.894315][ T8688] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 226.393704][ T5818] usb 4-1: language id specifier not provided by device, defaulting to English [ 226.806976][ T5818] letsketch 0003:6161:4D15.000C: Device info:  [ 227.041014][ T5818] usb 4-1: Max retries (5) exceeded reading string descriptor 201 [ 227.059227][ T5818] letsketch: probe of 0003:6161:4D15.000C failed with error -71 [ 227.087851][ T5818] usb 4-1: USB disconnect, device number 14 [ 227.099829][ T8706] loop5: detected capacity change from 0 to 40427 [ 227.134346][ T8706] F2FS-fs (loop5): invalid crc value [ 227.176768][ T8706] F2FS-fs (loop5): Found nat_bits in checkpoint [ 227.227200][ T8728] loop6: detected capacity change from 0 to 2048 [ 227.301765][ T5990] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.391582][ T8706] F2FS-fs (loop5): Start checkpoint disabled! [ 227.416208][ T8706] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 227.859938][ T49] kworker/u4:3: attempt to access beyond end of device [ 227.859938][ T49] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 227.881417][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 227.893372][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 227.908258][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 228.915004][ T8760] loop3: detected capacity change from 0 to 2048 [ 229.277038][ T8755] loop6: detected capacity change from 0 to 32768 [ 229.343532][ T8755] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 229.407350][ T8755] XFS (loop6): Ending clean mount [ 229.656460][ T7724] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 229.900913][ T8784] loop1: detected capacity change from 0 to 764 [ 230.945175][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.160346][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.305199][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.614635][ T8812] netlink: 'syz.1.747': attribute type 3 has an invalid length. [ 232.012359][ T8822] loop1: detected capacity change from 0 to 512 [ 232.052571][ T8822] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.148220][ T8817] syzkaller1: entered promiscuous mode [ 232.210509][ T8817] syzkaller1: entered allmulticast mode [ 232.402784][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.408095][ T8829] Bluetooth: MGMT ver 1.22 [ 232.427159][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.437020][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.446687][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.457097][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.464998][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.254196][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 234.344949][ T8839] loop1: detected capacity change from 0 to 40427 [ 234.392739][ T8839] F2FS-fs (loop1): heap/no_heap options were deprecated [ 234.399847][ T8839] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 234.449770][ T8839] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x77e8c [ 234.460638][ T8839] F2FS-fs (loop1): invalid crc value [ 234.479068][ T8839] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 234.493183][ T8839] F2FS-fs (loop1): Found nat_bits in checkpoint [ 234.566675][ T5773] Bluetooth: hci2: command tx timeout [ 234.587040][ T8839] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 234.664584][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 234.719695][ T8839] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 234.802033][ T28] audit: type=1326 audit(1774715094.837:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.5.767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60cb19c819 code=0x0 [ 234.919679][ T8839] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 234.934470][ T8895] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 235.070897][ T8839] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_mpage_readpages+0xc1a/0x1ea0 [ 235.113424][ T8839] syz.1.753: attempt to access beyond end of device [ 235.113424][ T8839] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 235.164778][ T5770] syz-executor: attempt to access beyond end of device [ 235.164778][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.179745][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022bfb000: rx timeout, send abort [ 235.196389][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 235.270179][ T1144] hsr_slave_0: left promiscuous mode [ 235.294118][ T1144] hsr_slave_1: left promiscuous mode [ 235.305965][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.318419][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.352025][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.360596][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.423382][ T1144] bridge_slave_1: left allmulticast mode [ 235.429383][ T1144] bridge_slave_1: left promiscuous mode [ 235.441625][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.461457][ T1144] bridge_slave_0: left allmulticast mode [ 235.468174][ T1144] bridge_slave_0: left promiscuous mode [ 235.485228][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.575726][ T1144] veth1_macvtap: left promiscuous mode [ 235.601530][ T1144] veth0_macvtap: left promiscuous mode [ 235.609983][ T1144] veth1_vlan: left promiscuous mode [ 235.636210][ T1144] veth0_vlan: left promiscuous mode [ 235.668823][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022bf8000: rx timeout, send abort [ 235.679890][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022bfb000: abort rx timeout. Force session deactivation [ 236.177395][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022bf8000: abort rx timeout. Force session deactivation [ 236.651824][ T5773] Bluetooth: hci2: command tx timeout [ 237.557573][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 237.663282][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 237.750567][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.443164][ T1144] bond0 (unregistering): Released all slaves [ 238.547266][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.554938][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.565658][ T8825] bridge_slave_0: entered allmulticast mode [ 238.592888][ T8825] bridge_slave_0: entered promiscuous mode [ 238.711774][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.712264][ T5773] Bluetooth: hci2: command tx timeout [ 238.725922][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.741970][ T8825] bridge_slave_1: entered allmulticast mode [ 238.754654][ T8825] bridge_slave_1: entered promiscuous mode [ 238.836393][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.866681][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.163695][ T8825] team0: Port device team_slave_0 added [ 239.200798][ T8825] team0: Port device team_slave_1 added [ 239.367410][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.406308][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.500011][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.540829][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.558245][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.621484][ T5818] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 239.627044][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.837790][ T5818] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 239.863658][ T5818] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 239.885821][ T5818] usb 7-1: config 220 has no interface number 2 [ 239.887864][ T8825] hsr_slave_0: entered promiscuous mode [ 239.911428][ T5818] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 239.941987][ T8825] hsr_slave_1: entered promiscuous mode [ 239.948632][ T8825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.949225][ T5818] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 240.000181][ T8825] Cannot create hsr debugfs directory [ 240.006312][ T5818] usb 7-1: config 220 interface 0 has no altsetting 0 [ 240.053875][ T5818] usb 7-1: config 220 interface 76 has no altsetting 0 [ 240.061098][ T5818] usb 7-1: config 220 interface 1 has no altsetting 0 [ 240.101982][ T5818] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 240.121489][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.150322][ T5818] usb 7-1: Product: syz [ 240.161060][ T5818] usb 7-1: Manufacturer: syz [ 240.176700][ T5818] usb 7-1: SerialNumber: syz [ 240.386554][ T8955] loop5: detected capacity change from 0 to 32768 [ 240.425304][ T8955] (syz.5.777,8955,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 240.469673][ T8955] (syz.5.777,8955,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 240.510044][ T5818] usb 7-1: selecting invalid altsetting 0 [ 240.575013][ T5818] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 240.599906][ T8955] JBD2: Ignoring recovery information on journal [ 240.605516][ T5818] usb 7-1: No valid video chain found. [ 240.727565][ T8955] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 240.753027][ T5818] usb 7-1: selecting invalid altsetting 0 [ 240.797039][ T5818] usbtest: probe of 7-1:220.1 failed with error -22 [ 240.800078][ T5773] Bluetooth: hci2: command tx timeout [ 240.866005][ T5818] usb 7-1: USB disconnect, device number 5 [ 241.112267][ T8825] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 241.189008][ T8825] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 241.246153][ T8825] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 241.322134][ T8825] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 241.617172][ T7242] [ 241.620829][ T7242] ====================================================== [ 241.628365][ T7242] WARNING: possible circular locking dependency detected [ 241.636589][ T7242] syzkaller #0 Not tainted [ 241.641575][ T7242] ------------------------------------------------------ [ 241.648811][ T7242] syz-executor/7242 is trying to acquire lock: [ 241.655631][ T7242] ffff88806028ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_evict_inode+0x1d84/0x41e0 [ 241.670018][ T7242] [ 241.670018][ T7242] but task is already holding lock: [ 241.677838][ T7242] ffff8880602889d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2d24/0x41e0 [ 241.691751][ T7242] [ 241.691751][ T7242] which lock already depends on the new lock. [ 241.691751][ T7242] [ 241.702234][ T7242] [ 241.702234][ T7242] the existing dependency chain (in reverse order) is: [ 241.707309][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.712064][ T7242] [ 241.712064][ T7242] -> #3 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}: [ 241.712102][ T7242] down_write+0x97/0x200 [ 241.712125][ T7242] ocfs2_del_inode_from_orphan+0x12f/0x7a0 [ 241.712158][ T7242] ocfs2_dio_end_io+0x546/0x1200 [ 241.712175][ T7242] dio_complete+0x254/0x710 [ 241.712192][ T7242] __blockdev_direct_IO+0x2ea8/0x3500 [ 241.712211][ T7242] ocfs2_direct_IO+0x235/0x2a0 [ 241.712238][ T7242] generic_file_direct_write+0x1d4/0x3e0 [ 241.712260][ T7242] __generic_file_write_iter+0x11b/0x230 [ 241.712280][ T7242] ocfs2_file_write_iter+0x167a/0x1e80 [ 241.712309][ T7242] do_iter_write+0x738/0xc30 [ 241.712334][ T7242] do_pwritev+0x241/0x3a0 [ 241.712361][ T7242] do_syscall_64+0x55/0xa0 [ 241.712388][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.712408][ T7242] [ 241.712408][ T7242] -> #2 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 241.712434][ T7242] down_write+0x97/0x200 [ 241.712448][ T7242] ocfs2_create_local_dquot+0x1a9/0x18f0 [ 241.712469][ T7242] ocfs2_acquire_dquot+0x7f1/0xb10 [ 241.712493][ T7242] dqget+0x77c/0xeb0 [ 241.712517][ T7242] __dquot_initialize+0x3c7/0xcd0 [ 241.712542][ T7242] ocfs2_get_init_inode+0x148/0x1c0 [ 241.712563][ T7242] ocfs2_mknod+0x867/0x2300 [ 241.712584][ T7242] ocfs2_mkdir+0x196/0x430 [ 241.712605][ T7242] vfs_mkdir+0x296/0x440 [ 241.712621][ T7242] do_mkdirat+0x1dc/0x450 [ 241.712637][ T7242] __x64_sys_mkdirat+0x89/0xa0 [ 241.712655][ T7242] do_syscall_64+0x55/0xa0 [ 241.712683][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.712705][ T7242] [ 241.712705][ T7242] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 241.712734][ T7242] __mutex_lock+0x136/0xcc0 [ 241.712750][ T7242] dqget+0x6fc/0xeb0 [ 241.712773][ T7242] __dquot_initialize+0x3c7/0xcd0 [ 241.712798][ T7242] ocfs2_get_init_inode+0x148/0x1c0 [ 241.712818][ T7242] ocfs2_mknod+0x867/0x2300 [ 241.712839][ T7242] ocfs2_mkdir+0x196/0x430 [ 241.712860][ T7242] vfs_mkdir+0x296/0x440 [ 241.712888][ T7242] do_mkdirat+0x1dc/0x450 [ 241.712905][ T7242] __x64_sys_mkdirat+0x89/0xa0 [ 241.712923][ T7242] do_syscall_64+0x55/0xa0 [ 241.712950][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.712972][ T7242] [ 241.712972][ T7242] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 241.713007][ T7242] __lock_acquire+0x2df1/0x7d40 [ 241.713029][ T7242] lock_acquire+0x19e/0x420 [ 241.713049][ T7242] down_write+0x97/0x200 [ 241.713065][ T7242] ocfs2_evict_inode+0x1d84/0x41e0 [ 241.713094][ T7242] evict+0x4ca/0x8d0 [ 241.713115][ T7242] vfs_rmdir+0x39b/0x4d0 [ 241.713131][ T7242] do_rmdir+0x29f/0x590 [ 241.713158][ T7242] __x64_sys_unlinkat+0xc4/0xe0 [ 241.713175][ T7242] do_syscall_64+0x55/0xa0 [ 241.713203][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.713225][ T7242] [ 241.713225][ T7242] other info that might help us debug this: [ 241.713225][ T7242] [ 241.713233][ T7242] Chain exists of: [ 241.713233][ T7242] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &ocfs2_quota_ip_alloc_sem_key --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type] [ 241.713233][ T7242] [ 241.713277][ T7242] Possible unsafe locking scenario: [ 241.713277][ T7242] [ 241.713283][ T7242] CPU0 CPU1 [ 241.713288][ T7242] ---- ---- [ 241.713293][ T7242] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 241.713308][ T7242] lock(&ocfs2_quota_ip_alloc_sem_key); [ 241.713324][ T7242] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 241.713340][ T7242] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 241.713361][ T7242] [ 241.713361][ T7242] *** DEADLOCK *** [ 241.713361][ T7242] [ 241.713365][ T7242] 4 locks held by syz-executor/7242: [ 241.713377][ T7242] #0: ffff888023e90418 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 241.713442][ T7242] #1: ffff888060115118 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 241.713509][ T7242] #2: ffff88805a8c8bd0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x107/0x270 [ 241.713563][ T7242] #3: ffff8880602889d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2d24/0x41e0 [ 241.713622][ T7242] [ 241.713622][ T7242] stack backtrace: [ 241.713630][ T7242] CPU: 0 PID: 7242 Comm: syz-executor Not tainted syzkaller #0 [ 241.713647][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.713658][ T7242] Call Trace: [ 241.713667][ T7242] [ 241.713674][ T7242] dump_stack_lvl+0x18c/0x250 [ 241.713704][ T7242] ? load_image+0x400/0x400 [ 241.713729][ T7242] ? show_regs_print_info+0x20/0x20 [ 241.713763][ T7242] ? print_circular_bug+0x12b/0x1a0 [ 241.713790][ T7242] check_noncircular+0x2fc/0x400 [ 241.713816][ T7242] ? print_deadlock_bug+0x5d0/0x5d0 [ 241.713837][ T7242] ? lockdep_lock+0xf5/0x230 [ 241.901952][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.905161][ T7242] ? _find_first_zero_bit+0xd3/0x100 [ 241.905195][ T7242] __lock_acquire+0x2df1/0x7d40 [ 241.970056][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.971364][ T7242] ? __lock_acquire+0x7d40/0x7d40 [ 241.971396][ T7242] ? verify_lock_unused+0x140/0x140 [ 241.978945][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.990234][ T7242] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 241.990268][ T7242] ? do_raw_spin_lock+0x11f/0x2c0 [ 241.990294][ T7242] ? mutex_unlock+0x10/0x10 [ 241.990312][ T7242] lock_acquire+0x19e/0x420 [ 241.990334][ T7242] ? ocfs2_evict_inode+0x1d84/0x41e0 [ 241.990367][ T7242] ? ocfs2_get_system_file_inode+0x202/0x850 [ 242.061901][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 242.077880][ T7242] ? __might_sleep+0xe0/0xe0 [ 242.077926][ T7242] ? read_lock_is_recursive+0x20/0x20 [ 242.077950][ T7242] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 242.077976][ T7242] ? ocfs2_evict_inode+0x165e/0x41e0 [ 242.078008][ T7242] down_write+0x97/0x200 [ 242.101532][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.107732][ T7242] ? ocfs2_evict_inode+0x1d84/0x41e0 [ 242.107778][ T7242] ? down_read_killable+0x340/0x340 [ 242.116947][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.126432][ T7242] ocfs2_evict_inode+0x1d84/0x41e0 [ 242.126482][ T7242] ? ocfs2_sync_blockdev+0x40/0x40 [ 242.414423][ T7242] ? is_bpf_text_address+0x28f/0x2a0 [ 242.417021][ T27] usb 2-1: config 0 has no interfaces? [ 242.420007][ T7242] ? is_bpf_text_address+0x26/0x2a0 [ 242.427172][ T27] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 242.431145][ T7242] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.431181][ T7242] ? kernel_text_address+0xa0/0xd0 [ 242.452123][ T7242] ? __kernel_text_address+0xd/0x30 [ 242.457576][ T7242] ? unwind_get_return_address+0x91/0xc0 [ 242.463444][ T7242] ? stack_trace_save+0x100/0x100 [ 242.468806][ T7242] ? arch_stack_walk+0x160/0x190 [ 242.471643][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.473912][ T7242] ? mark_lock+0x94/0x320 [ 242.473947][ T7242] ? __lock_acquire+0x1347/0x7d40 [ 242.491938][ T7242] ? __lock_acquire+0x1347/0x7d40 [ 242.497116][ T7242] ? verify_lock_unused+0x140/0x140 [ 242.502588][ T7242] ? inode_wait_for_writeback+0x1e3/0x230 [ 242.508489][ T7242] ? __lock_acquire+0x7d40/0x7d40 [ 242.513589][ T7242] ? do_raw_spin_lock+0x11f/0x2c0 [ 242.518686][ T7242] ? __rwlock_init+0x150/0x150 [ 242.523617][ T7242] ? do_raw_spin_unlock+0x121/0x230 [ 242.528882][ T7242] ? _raw_spin_unlock+0x28/0x40 [ 242.534043][ T7242] ? inode_wait_for_writeback+0x1e3/0x230 [ 242.538055][ T27] usb 2-1: config 0 descriptor?? [ 242.540712][ T7242] ? evict+0x495/0x8d0 [ 242.540745][ T7242] ? sb_clear_inode_writeback+0x360/0x360 [ 242.556257][ T7242] ? do_raw_spin_lock+0x11f/0x2c0 [ 242.561478][ T7242] ? bit_waitqueue+0x30/0x30 [ 242.566170][ T7242] ? do_raw_spin_unlock+0x121/0x230 [ 242.571645][ T7242] ? ocfs2_sync_blockdev+0x40/0x40 [ 242.576835][ T7242] evict+0x4ca/0x8d0 [ 242.580968][ T7242] ? proc_nr_inodes+0x230/0x230 [ 242.586151][ T7242] ? do_raw_spin_unlock+0x121/0x230 [ 242.591541][ T7242] ? _raw_spin_unlock+0x28/0x40 [ 242.597109][ T7242] ? iput+0x706/0x920 [ 242.601180][ T7242] vfs_rmdir+0x39b/0x4d0 [ 242.605763][ T7242] do_rmdir+0x29f/0x590 [ 242.611102][ T7242] ? __check_object_size+0x506/0xa20 [ 242.617468][ T7242] ? d_delete_notify+0x150/0x150 [ 242.622794][ T7242] ? getname_flags+0x20a/0x500 [ 242.628260][ T7242] __x64_sys_unlinkat+0xc4/0xe0 [ 242.633551][ T7242] do_syscall_64+0x55/0xa0 [ 242.639092][ T7242] ? clear_bhb_loop+0x40/0x90 [ 242.643838][ T7242] ? clear_bhb_loop+0x40/0x90 [ 242.649010][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.655049][ T7242] RIP: 0033:0x7f60cb19b937 [ 242.659517][ T7242] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.679549][ T7242] RSP: 002b:00007ffde4ce84b8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 242.688107][ T7242] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f60cb19b937 [ 242.696410][ T7242] RDX: 0000000000000200 RSI: 00007ffde4ce9660 RDI: 00000000ffffff9c [ 242.705344][ T7242] RBP: 00007f60cb232048 R08: 0000000000008560 R09: 0000000000000001 [ 242.713465][ T7242] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffde4ce9660 [ 242.722189][ T7242] R13: 00007f60cb232048 R14: 000000000003aef9 R15: 00007ffde4ceb820 [ 242.731181][ T7242] [ 242.863557][ T7242] ocfs2: Unmounting device (7,5) on (node local) [ 242.873558][ T5783] usb 2-1: USB disconnect, device number 11 [ 243.050052][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.465449][ T8825] veth0_vlan: entered promiscuous mode [ 243.488433][ T8825] veth1_vlan: entered promiscuous mode [ 243.539047][ T8825] veth0_macvtap: entered promiscuous mode [ 243.555019][ T8825] veth1_macvtap: entered promiscuous mode [ 243.587419][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.601712][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.615314][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.626589][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.646918][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.659594][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.674346][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.695777][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.708568][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.718871][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.730399][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.741984][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.758138][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.775764][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.794298][ T8825] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.806025][ T8825] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.816185][ T8825] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.828085][ T8825] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.903624][ T8825] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 243.943235][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.957571][ T8825] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 243.968424][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.015155][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.025786][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.937552][ T3556] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.004622][ T3556] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.044194][ T3556] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.110549][ T3556] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.943345][ T3556] hsr_slave_0: left promiscuous mode [ 246.954057][ T3556] hsr_slave_1: left promiscuous mode [ 246.966658][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.975744][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.987281][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.997698][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.014226][ T3556] bridge_slave_1: left allmulticast mode [ 247.023165][ T3556] bridge_slave_1: left promiscuous mode [ 247.035692][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.056253][ T3556] bridge_slave_0: left allmulticast mode [ 247.069724][ T3556] bridge_slave_0: left promiscuous mode [ 247.077534][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.106459][ T3556] veth1_macvtap: left promiscuous mode [ 247.118030][ T3556] veth0_macvtap: left promiscuous mode [ 247.130459][ T3556] veth1_vlan: left promiscuous mode [ 247.137668][ T3556] veth0_vlan: left promiscuous mode [ 247.582827][ T3556] team0 (unregistering): Port device team_slave_1 removed [ 247.637211][ T3556] team0 (unregistering): Port device team_slave_0 removed [ 247.700798][ T3556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.755980][ T3556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.894395][ T3556] bond0 (unregistering): Released all slaves