last executing test programs: 2m4.30071087s ago: executing program 2 (id=6050): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) close(r0) 2m3.861801526s ago: executing program 2 (id=6057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2m3.470829979s ago: executing program 2 (id=6062): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48, 0x25, 0x29, 0x2}, {0x6, 0xf8}]}) 2m3.262839221s ago: executing program 2 (id=6066): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 2m3.026545475s ago: executing program 2 (id=6069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000140)=0x6, 0x4) 2m2.577586411s ago: executing program 2 (id=6074): io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = eventfd2(0x9, 0x80801) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x1, 0x0, r1, 0x0, 0x0, 0x6, 0x0, 0x0, r1}]) 2m2.273100479s ago: executing program 32 (id=6074): io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = eventfd2(0x9, 0x80801) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x1, 0x0, r1, 0x0, 0x0, 0x6, 0x0, 0x0, r1}]) 7.163182959s ago: executing program 5 (id=6972): io_setup(0x1, &(0x7f0000000b80)) io_setup(0x222, &(0x7f0000000180)) io_setup(0x4, &(0x7f00000001c0)) 5.335256686s ago: executing program 1 (id=6987): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e751d", @ANYRES16], 0x24) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) 4.614386939s ago: executing program 0 (id=6993): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, "2111e96f"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "ab38b0f0"}]}}, 0x0}, 0x0) 4.497883616s ago: executing program 3 (id=6994): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 4.465964808s ago: executing program 1 (id=6995): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000f80)={0xa, 0x4e24, 0x0, @loopback, 0xa7a}, 0x1c) 4.361259074s ago: executing program 3 (id=6996): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 4.030612073s ago: executing program 1 (id=6997): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @local=@item_4={0x3, 0x2, 0x7, 'c^,-'}]}}, 0x0}, 0x0) 3.987448806s ago: executing program 3 (id=6998): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00') 2.558184429s ago: executing program 3 (id=6999): syz_mount_image$jfs(&(0x7f00000011c0), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYRES8=0x0], 0xfa, 0x61be, &(0x7f00000073c0)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) 2.182691902s ago: executing program 5 (id=7000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001080)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040041}, 0x40814) 1.826913423s ago: executing program 5 (id=7002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x7fffffffffd, 0x6}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) 1.596160936s ago: executing program 5 (id=7004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8000}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.451001144s ago: executing program 4 (id=7005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 1.450862015s ago: executing program 0 (id=7006): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.376289889s ago: executing program 1 (id=7007): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) 1.345182621s ago: executing program 5 (id=7008): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000a40)=ANY=[], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=ANY=[], 0x15, 0x0) 1.148991762s ago: executing program 4 (id=7009): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.116281964s ago: executing program 1 (id=7010): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000080)) 1.02069293s ago: executing program 0 (id=7011): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000001b80)=0xfffffffa) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x3fe) 924.950806ms ago: executing program 4 (id=7012): r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x100) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x7, @raw_data="8a93a9bca2e7a34fd42cad7a27db2244182edb88bfb1f531061fff7f8e2167ccf1cb11a2bc849e7071c7dc5809a0e1e7a322fb50414f35f9a64a7a24e6eac6339fe77f834b71d14670185f2b582edd96ac12667b94ce5d1dab41c7702b0dd2df2800fe8ca0eb607aace9f42c6f82b97820cb0686ff8279996467f64732144e6d8a36e8848dcbc0be0fe8c515128a63995eba99cf70e5db63cb5a10703d334e05c4fcbf9910e795abe501acb4bc4ae4b30c5e2679214f982efdb31aed3ae4392d31b7177aee45dd8c"}) 731.001737ms ago: executing program 0 (id=7013): r0 = io_uring_setup(0xc8e, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xfffffffc, 0x361}) r1 = io_uring_setup(0x26a9, &(0x7f00000004c0)={0x0, 0x1cb5, 0x1000, 0x3, 0x7e, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) 662.684871ms ago: executing program 1 (id=7014): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x0, 0x0) 576.592616ms ago: executing program 4 (id=7015): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x200000c, 0x2000001, 0x200ffff, 0x0, 0x9, "0200", 0xc, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 416.586255ms ago: executing program 0 (id=7016): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00020000000000000000001c0007800c"], 0x3c}}, 0x0) 378.469627ms ago: executing program 3 (id=7017): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee01) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001200add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 296.051172ms ago: executing program 4 (id=7018): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xec1af57558979226, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f99fae00"}, 0x0, 0x2, {0x0}, 0x20000}) 159.91519ms ago: executing program 5 (id=7019): setreuid(0x0, 0xee00) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) 102.215914ms ago: executing program 3 (id=7020): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @broadcast}], 0x20) 80.143375ms ago: executing program 0 (id=7021): r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0xf38ae000) 0s ago: executing program 4 (id=7022): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): E [ 472.839745][T17580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 472.878627][ T27] DVB: Unable to find symbol tda10046_attach() [ 472.885126][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 472.901413][ T27] usb 5-1: USB disconnect, device number 21 [ 473.036762][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 473.285480][T17512] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.292651][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.327394][T17512] device bridge_slave_0 entered promiscuous mode [ 473.366015][T17512] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.386445][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.423728][T17512] device bridge_slave_1 entered promiscuous mode [ 473.591807][T17512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.641492][T17512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.821788][T17512] team0: Port device team_slave_0 added [ 473.881734][T17512] team0: Port device team_slave_1 added [ 474.019369][ T4618] device hsr_slave_0 left promiscuous mode [ 474.039899][ T4618] device hsr_slave_1 left promiscuous mode [ 474.064245][ T4618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.082313][ T4618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.113592][ T4618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.137840][ T4618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.160537][ T4618] device bridge_slave_0 left promiscuous mode [ 474.183455][ T4618] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.298221][ T4618] device veth1_macvtap left promiscuous mode [ 474.312926][ T4618] device veth0_macvtap left promiscuous mode [ 474.333016][ T4618] device veth1_vlan left promiscuous mode [ 474.346500][ T4618] device veth0_vlan left promiscuous mode [ 474.424809][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 474.662576][T17635] sock: sock_set_timeout: `syz.1.6113' (pid 17635) tries to set negative timeout [ 475.126136][ T4618] bond1 (unregistering): Released all slaves [ 475.502698][T17649] usb usb8: usbfs: process 17649 (syz.1.6118) did not claim interface 0 before use [ 475.619799][ T4618] team0 (unregistering): Port device macvlan0 removed [ 475.631168][T17651] loop1: detected capacity change from 0 to 256 [ 476.134368][ T27] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 476.244182][ T4618] team0 (unregistering): Port device team_slave_1 removed [ 476.322208][ T4618] team0 (unregistering): Port device team_slave_0 removed [ 476.334522][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 476.354707][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.366002][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.379506][ T27] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 476.390970][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.421810][ T27] usb 2-1: config 0 descriptor?? [ 476.441725][ T4618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.505019][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 476.532437][ T4618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.856671][ T27] gembird 0003:11FF:3331.0006: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0 [ 476.941847][ T4618] bond0 (unregistering): Released all slaves [ 477.053470][T17615] kthread_run failed with err -4 [ 477.100319][ T27] usb 2-1: USB disconnect, device number 36 [ 477.156213][T17512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.163220][T17512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.260326][T17512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.309748][T17512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.327750][T17512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.353707][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.398153][T17512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.497549][T17512] device hsr_slave_0 entered promiscuous mode [ 477.571157][T17512] device hsr_slave_1 entered promiscuous mode [ 477.630264][T17512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.644936][T17512] Cannot create hsr debugfs directory [ 478.136113][T17687] loop4: detected capacity change from 0 to 64 [ 478.223895][T17512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.282208][T17512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.309871][T17512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.344818][T16776] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 478.396911][T17512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 478.560897][T16776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.584820][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 478.602444][T16776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.622409][T16776] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 478.644871][T16776] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 478.652947][T16776] usb 1-1: Manufacturer: syz [ 478.660987][T16776] usb 1-1: config 0 descriptor?? [ 478.812041][T17512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.869015][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.882686][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.913529][T17512] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.957374][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 478.973260][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.999972][ T4611] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.007187][ T4611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.066517][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.086040][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.102967][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.111956][ T4611] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.119161][ T4611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.137240][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.162137][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.179236][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.196980][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.230824][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.239407][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.258682][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 479.273117][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.283087][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.299407][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.300370][T16776] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 479.310382][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.337217][T17512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.354676][T14267] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 479.373094][T16776] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 479.408411][T16776] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 479.429532][T16776] usb 1-1: USB disconnect, device number 23 [ 479.559694][T14267] usb 2-1: Using ep0 maxpacket: 32 [ 479.566875][T14267] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 479.614531][T14267] usb 2-1: config 0 interface 0 has no altsetting 0 [ 479.622323][T14267] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 479.641972][T14267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.675569][T14267] usb 2-1: config 0 descriptor?? [ 479.989389][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.997605][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.011575][T17512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.101182][T14267] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 480.119656][T14267] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 480.128382][T14267] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 480.137945][T14267] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 480.154520][T14267] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 480.173992][T14267] monterey 0003:0566:3004.0008: hidraw0: USB HID v1.6c Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 480.309710][T14267] usb 2-1: USB disconnect, device number 37 [ 480.591517][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.607114][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.631587][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.640549][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.651652][T17512] device veth0_vlan entered promiscuous mode [ 480.661491][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.682239][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.699831][T17512] device veth1_vlan entered promiscuous mode [ 480.737144][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.746112][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 480.756361][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 480.765562][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 480.777541][T17512] device veth0_macvtap entered promiscuous mode [ 480.788578][T17512] device veth1_macvtap entered promiscuous mode [ 480.809925][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.820805][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.840235][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.850897][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.860953][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.871650][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.881827][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.893355][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.906842][T17512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.918015][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.929190][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.938128][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.947515][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.957683][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.968860][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.979472][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.990787][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.001471][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.012138][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.022498][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.036666][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.051385][T17512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.061414][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.071592][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.084152][T17512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.094059][T17512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.103524][T17512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.113505][T17512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.207094][ T4605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.217047][ T4605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.238954][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 481.269375][ T4596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.282066][ T4596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.300666][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 481.699400][T17764] loop4: detected capacity change from 0 to 4096 [ 482.174751][T17785] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 482.181757][T17785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.215469][T17785] vhci_hcd vhci_hcd.0: Device attached [ 482.244871][T17787] vhci_hcd: connection closed [ 482.248292][ T4605] vhci_hcd: stop threads [ 482.277640][ T4605] vhci_hcd: release socket [ 482.292400][ T4605] vhci_hcd: disconnect device [ 482.788136][T17817] loop5: detected capacity change from 0 to 256 [ 482.876538][T17817] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 483.070618][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6167'. [ 483.140210][T17821] loop4: detected capacity change from 0 to 4096 [ 483.177964][T17821] EXT4-fs: inline encryption not supported [ 483.218655][T17821] EXT4-fs (loop4): Test dummy encryption mode enabled [ 483.259974][T17821] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 483.278032][T17821] System zones: 0-5 [ 483.297009][T17821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 483.527540][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 483.808353][T17851] loop1: detected capacity change from 0 to 1024 [ 484.325094][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6184'. [ 484.345055][T17868] bridge_slave_0: default FDB implementation only supports local addresses [ 484.690065][T17844] loop0: detected capacity change from 0 to 32768 [ 484.753644][T17844] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.6173 (17844) [ 484.803356][T17844] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 484.846932][T17884] loop1: detected capacity change from 0 to 512 [ 484.864421][T17844] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 484.873182][T17844] BTRFS info (device loop0): using free space tree [ 484.892739][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6190'. [ 484.902371][T17884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 484.953919][T17884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 484.981155][T17890] MPTCP: kernel_bind error, err=-22 [ 484.986417][T17884] ext4 filesystem being mounted at /1154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.075311][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 485.367650][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6197'. [ 485.415145][T17844] BTRFS info (device loop0): enabling ssd optimizations [ 485.437187][T17916] loop1: detected capacity change from 0 to 8192 [ 485.502745][T17920] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 485.542626][T17920] team0: Device ipvlan2 is already an upper device of the team interface [ 485.544653][ T8730] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 485.792552][ T8730] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 485.816540][ T8730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.886239][ T4267] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 485.896981][ T8730] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 485.927271][ T8730] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 485.985171][ T8730] usb 5-1: Manufacturer: syz [ 486.066765][ T8730] usb 5-1: config 0 descriptor?? [ 486.204387][T17933] raw_sendmsg: syz.1.6202 forgot to set AF_INET. Fix it! [ 486.454493][ T8730] rc_core: IR keymap rc-hauppauge not found [ 486.460489][ T8730] Registered IR keymap rc-empty [ 486.489853][ T8730] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 486.561345][ T8730] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 486.722592][T17946] rc rc0: two consecutive events of type space [ 486.977831][ T4310] usb 5-1: USB disconnect, device number 22 [ 487.463602][T17949] loop5: detected capacity change from 0 to 32768 [ 487.513090][T17949] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.6206 (17949) [ 487.602878][T17949] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 487.649875][T17949] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 487.689994][T17949] BTRFS info (device loop5): turning off barriers [ 487.729078][T17949] BTRFS info (device loop5): enabling ssd optimizations [ 487.737579][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6214'. [ 487.786642][T17949] BTRFS info (device loop5): using spread ssd allocation scheme [ 487.816179][T17949] BTRFS info (device loop5): enabling auto defrag [ 487.851841][T17949] BTRFS info (device loop5): not using ssd optimizations [ 487.902440][T17949] BTRFS info (device loop5): not using spread ssd allocation scheme [ 487.951661][T17949] BTRFS info (device loop5): ignoring data csums [ 487.970248][T17949] BTRFS info (device loop5): force zlib compression, level 3 [ 487.974698][T17982] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 487.984320][T17982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.988548][T17949] BTRFS info (device loop5): enabling ssd optimizations [ 488.000722][T17982] vhci_hcd vhci_hcd.0: Device attached [ 488.034353][T17984] vhci_hcd: connection closed [ 488.054541][ T4601] vhci_hcd: stop threads [ 488.066738][ T4601] vhci_hcd: release socket [ 488.071195][ T4601] vhci_hcd: disconnect device [ 488.090203][T17949] BTRFS info (device loop5): using spread ssd allocation scheme [ 488.116416][T17949] BTRFS info (device loop5): using free space tree [ 488.328410][ T26] audit: type=1326 audit(1770112531.031:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 488.445958][ T26] audit: type=1326 audit(1770112531.031:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 488.480429][ T26] audit: type=1326 audit(1770112531.061:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 488.556255][ T26] audit: type=1326 audit(1770112531.061:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 488.596793][T17512] BTRFS info (device loop5: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 488.675841][ T26] audit: type=1326 audit(1770112531.061:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 488.817841][ T26] audit: type=1326 audit(1770112531.061:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 488.952134][ T26] audit: type=1326 audit(1770112531.061:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 489.034110][ T26] audit: type=1326 audit(1770112531.061:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 489.800410][T18055] loop5: detected capacity change from 0 to 1024 [ 489.948745][T18055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 490.030986][T18055] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 490.077588][T18062] loop1: detected capacity change from 0 to 2048 [ 490.089707][T18055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 490.108405][T18055] System zones: 0-1, 3-36 [ 490.123471][T18055] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 490.155880][T18062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.280491][T18062] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 490.324449][ T4350] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 490.343660][T18062] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has too big (3880) entry at pos 0 [ 490.391147][T17512] EXT4-fs (loop5): unmounting filesystem. [ 490.524423][ T4350] usb 1-1: Using ep0 maxpacket: 8 [ 490.531710][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 490.594948][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.617192][ T4350] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 490.627717][ T8730] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 490.671089][ T4350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 490.707252][ T4350] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 490.737910][ T4350] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 490.778387][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.816885][ T4350] usb 1-1: config 0 descriptor?? [ 490.844763][T18067] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.851963][ T8730] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.876731][ T8730] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 490.924475][ T8730] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 490.953408][ T8730] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.984492][ T8730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.992637][ T8730] usb 4-1: Product: syz [ 491.024728][ T8730] usb 4-1: Manufacturer: syz [ 491.029485][ T8730] usb 4-1: SerialNumber: syz [ 491.064517][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 491.162563][T18091] loop4: detected capacity change from 0 to 256 [ 491.229272][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6251'. [ 491.261993][T18091] FAT-fs (loop4): Directory bread(block 64) failed [ 491.270033][ T8730] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 491.279715][T18091] FAT-fs (loop4): Directory bread(block 65) failed [ 491.302182][T18091] FAT-fs (loop4): Directory bread(block 66) failed [ 491.321035][T18091] FAT-fs (loop4): Directory bread(block 67) failed [ 491.359102][T18091] FAT-fs (loop4): Directory bread(block 68) failed [ 491.378936][ T4350] usb 1-1: USB disconnect, device number 24 [ 491.385940][ T4278] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 491.386751][ T8730] usb 4-1: USB disconnect, device number 28 [ 491.394404][T18091] FAT-fs (loop4): Directory bread(block 69) failed [ 491.411650][T18091] FAT-fs (loop4): Directory bread(block 70) failed [ 491.462151][T18091] FAT-fs (loop4): Directory bread(block 71) failed [ 491.469961][T18091] FAT-fs (loop4): Directory bread(block 72) failed [ 491.477298][T18091] FAT-fs (loop4): Directory bread(block 73) failed [ 491.764031][T18084] loop1: detected capacity change from 0 to 32768 [ 491.771190][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.859286][T18084] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 492.135134][T18112] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6257'. [ 492.185064][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 492.359003][ T26] audit: type=1326 audit(1770112535.061:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.4.6261" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf9af9aeb9 code=0x0 [ 492.493315][T18126] loop0: detected capacity change from 0 to 512 [ 492.529417][T18126] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 492.582922][T18126] EXT4-fs (loop0): 1 truncate cleaned up [ 492.633254][T18126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 492.642350][ T4350] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 492.737492][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 492.855681][ T4350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.876791][ T4350] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 492.914625][ T4350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.950072][ T4350] usb 6-1: config 0 descriptor?? [ 493.342699][T18143] loop0: detected capacity change from 0 to 4096 [ 493.370618][T18143] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 493.389984][ T4350] lenovo 0003:17EF:6009.0009: hidraw0: USB HID v0.07 Device [HID 17ef:6009] on usb-dummy_hcd.5-1/input0 [ 493.574594][ T4350] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 493.595052][T17056] usb 6-1: USB disconnect, device number 2 [ 493.738597][T18151] fido_id[18151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 493.803180][ T4350] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 493.834561][ T4350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 493.854362][ T4350] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 493.884457][ T4350] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 493.913260][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.939388][ T4350] usb 4-1: config 0 descriptor?? [ 494.028771][T18161] loop1: detected capacity change from 0 to 4096 [ 494.101327][T18161] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 494.172543][ T4350] usbhid 4-1:0.0: can't add hid device: -71 [ 494.191209][ T4350] usbhid: probe of 4-1:0.0 failed with error -71 [ 494.229392][ T4350] usb 4-1: USB disconnect, device number 29 [ 494.347908][ T4265] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 494.694387][T17056] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 494.734371][ T127] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 494.894403][T17056] usb 1-1: Using ep0 maxpacket: 16 [ 494.901352][T17056] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.935999][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.946145][T17056] usb 1-1: config 0 interface 0 has no altsetting 0 [ 494.954837][T18170] loop5: detected capacity change from 0 to 32768 [ 494.964396][ T127] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 494.977073][T17056] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a52, bcdDevice= 0.00 [ 495.001832][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.013459][T17056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.064585][T18179] loop1: detected capacity change from 0 to 32768 [ 495.072386][ T127] usb 5-1: config 0 descriptor?? [ 495.085476][T18179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6286 (18179) [ 495.089818][T17056] usb 1-1: config 0 descriptor?? [ 495.111639][T18179] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 495.125656][T18179] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 495.136357][T18179] BTRFS info (device loop1): using free space tree [ 495.163804][T18170] XFS (loop5): Mounting V5 Filesystem [ 495.255077][T18170] XFS (loop5): Ending clean mount [ 495.399981][T17512] XFS (loop5): Unmounting Filesystem [ 495.431011][T18179] BTRFS info (device loop1): enabling ssd optimizations [ 495.533583][ T127] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 495.561347][ T127] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 495.582603][T17056] hid-generic 0003:1B1C:0A52.000B: unbalanced delimiter at end of report description [ 495.607404][ T4265] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 495.614555][ T127] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 495.645058][T17056] hid-generic: probe of 0003:1B1C:0A52.000B failed with error -22 [ 495.670142][ T127] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 495.696066][ T127] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 495.734678][ T127] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 495.741709][ T127] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 495.796419][ T127] elecom 0003:056E:00FE.000A: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 495.849432][ T127] usb 5-1: USB disconnect, device number 23 [ 495.897847][ T4350] usb 1-1: USB disconnect, device number 25 [ 496.189365][T18218] fido_id[18218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 496.863158][T18244] device bridge6 entered promiscuous mode [ 496.878773][T18244] team0: Port device bridge6 added [ 497.070937][T14267] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 497.218134][T18252] loop4: detected capacity change from 0 to 512 [ 497.250732][T18252] EXT4-fs: Ignoring removed mblk_io_submit option [ 497.285989][T14267] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.315204][T18252] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 497.326828][T14267] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.371773][T18252] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.6303: attempt to clear invalid blocks 2 len 1 [ 497.394881][T14267] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.428522][T14267] usb 1-1: config 0 interface 0 has no altsetting 0 [ 497.444816][T18252] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 497.462027][T14267] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 497.486531][T14267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.498628][T18252] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6303: invalid indirect mapped block 1819239214 (level 0) [ 497.516226][T18233] loop5: detected capacity change from 0 to 32768 [ 497.533394][T14267] usb 1-1: config 0 descriptor?? [ 497.545159][T18233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.6289 (18233) [ 497.559509][T18252] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6303: invalid indirect mapped block 1819239214 (level 1) [ 497.622982][T18233] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 497.637149][T18252] EXT4-fs (loop4): 1 truncate cleaned up [ 497.642884][T18252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 497.652795][T18233] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 497.705268][T18233] BTRFS info (device loop5): using free space tree [ 497.891739][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 497.955862][T14267] magicmouse 0003:05AC:0265.000C: unknown main item tag 0x0 [ 497.999044][T18233] BTRFS info (device loop5): enabling ssd optimizations [ 498.016537][T14267] magicmouse 0003:05AC:0265.000C: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 498.056229][T14267] magicmouse 0003:05AC:0265.000C: magicmouse input not registered [ 498.097006][T14267] magicmouse: probe of 0003:05AC:0265.000C failed with error -12 [ 498.184200][T14267] usb 1-1: USB disconnect, device number 26 [ 498.447548][T18288] fido_id[18288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 498.464221][T17512] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 498.544485][ T8732] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 498.756102][ T8732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.807525][ T8732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64 [ 498.849224][ T8732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 498.894150][ T8732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.930739][ T8732] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 498.941134][ T8732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.988494][ T8732] usb 2-1: config 0 descriptor?? [ 498.994031][T18290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 499.154440][ T4310] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 499.195020][T18307] netlink: 'syz.5.6318': attribute type 3 has an invalid length. [ 499.234429][ T5512] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 499.349534][ T4310] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 499.364414][ T4310] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.376765][T18309] loop5: detected capacity change from 0 to 4096 [ 499.383215][ T4310] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 499.406558][T18309] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 499.416628][ T4310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 499.424812][ T5512] usb 5-1: Using ep0 maxpacket: 16 [ 499.427344][ T4310] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 499.442173][ T5512] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 499.443780][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.463956][ T8732] nzxt-smart2 0003:1E71:2019.000D: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.1-1/input0 [ 499.480011][ T5512] usb 5-1: config 0 has no interface number 0 [ 499.499451][ T4310] usb 1-1: config 0 descriptor?? [ 499.521095][ T5512] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 499.540470][ T5512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.557969][ T5512] usb 5-1: Product: syz [ 499.562179][ T5512] usb 5-1: Manufacturer: syz [ 499.570754][ T5512] usb 5-1: SerialNumber: syz [ 499.611352][ T5512] usb 5-1: config 0 descriptor?? [ 499.653798][T17055] usb 2-1: USB disconnect, device number 38 [ 499.834590][ T5512] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 499.841013][ T5512] usb 5-1: No valid video chain found. [ 499.853840][T18311] fido_id[18311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 499.931945][ T4310] hid-alps 0003:044E:120C.000E: unbalanced collection at end of report description [ 499.965068][ T4310] hid-alps 0003:044E:120C.000E: parse failed [ 499.971244][ T4310] hid-alps: probe of 0003:044E:120C.000E failed with error -22 [ 500.055948][ T5512] usb 5-1: USB disconnect, device number 24 [ 500.144478][ T4310] usb 1-1: USB disconnect, device number 27 [ 501.139793][T18353] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 501.307921][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.408418][T18364] loop4: detected capacity change from 0 to 256 [ 501.447064][T18365] Bluetooth: MGMT ver 1.22 [ 501.938016][T18382] device bridge5 entered promiscuous mode [ 501.984083][T18382] team0: Port device bridge5 added [ 503.164326][ T5512] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 503.347428][T18399] loop1: detected capacity change from 0 to 32768 [ 503.359311][ T5512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.384567][ T5512] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 503.444579][ T5512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.487309][ T5512] usb 1-1: config 0 descriptor?? [ 503.725800][T18427] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 4, id = 0 [ 503.925526][ T5512] elecom 0003:056E:00FE.000F: unknown main item tag 0x0 [ 503.932561][ T5512] elecom 0003:056E:00FE.000F: unknown main item tag 0x0 [ 503.984664][ T5512] elecom 0003:056E:00FE.000F: unknown main item tag 0x0 [ 503.991681][ T5512] elecom 0003:056E:00FE.000F: unknown main item tag 0x0 [ 504.024132][T18431] MTD: Couldn't look up 'memory.events': -15 [ 504.057097][ T5512] elecom 0003:056E:00FE.000F: unknown main item tag 0x0 [ 504.064132][ T5512] elecom 0003:056E:00FE.000F: unknown main item tag 0x0 [ 504.121446][ T5512] elecom 0003:056E:00FE.000F: unknown main item tag 0x0 [ 504.162055][T18416] loop4: detected capacity change from 0 to 32768 [ 504.169465][ T5512] elecom 0003:056E:00FE.000F: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.0-1/input0 [ 504.219235][ T5512] usb 1-1: USB disconnect, device number 28 [ 504.286793][T18416] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 504.286793][T18416] [ 504.563972][T18434] fido_id[18434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 504.913799][T18447] IPVS: ip_vs_add_dest(): server weight less than zero [ 505.039524][ T5512] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 505.106712][T18423] loop5: detected capacity change from 0 to 40427 [ 505.173809][T18423] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 505.196185][T18423] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x2 [ 505.224511][ T5512] usb 4-1: Using ep0 maxpacket: 16 [ 505.231542][ T5512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.262994][ T5512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.277685][T18423] F2FS-fs (loop5): invalid crc value [ 505.314694][T18423] F2FS-fs (loop5): Found nat_bits in checkpoint [ 505.321075][ T5512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.380576][ T5512] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 505.424881][ T5512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.485329][ T5512] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 505.520988][ T5512] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 505.554367][ T5512] usb 4-1: Manufacturer: syz [ 505.581207][ T5512] usb 4-1: config 0 descriptor?? [ 505.623685][T18423] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 505.949561][T17512] syz-executor: attempt to access beyond end of device [ 505.949561][T17512] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 505.987129][T18479] loop4: detected capacity change from 0 to 256 [ 506.050015][T18479] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6379'. [ 506.124465][ T5512] rc_core: IR keymap rc-hauppauge not found [ 506.130445][ T5512] Registered IR keymap rc-empty [ 506.152445][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.214366][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.259443][ T5512] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 506.315741][ T5512] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 506.393005][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.464407][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.505225][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.518642][T18490] netlink: 'syz.0.6383': attribute type 1 has an invalid length. [ 506.534682][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.582829][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.624471][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6383'. [ 506.644497][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.674405][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.709991][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.764508][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.794448][ T5512] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 506.825932][ T5512] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 506.855740][ T5512] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 506.934533][ T5512] usb 4-1: USB disconnect, device number 30 [ 507.157350][T18505] netlink: 'syz.0.6388': attribute type 38 has an invalid length. [ 507.323242][T18508] loop4: detected capacity change from 0 to 2048 [ 507.394662][T18508] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 507.466816][T18514] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6390'. [ 507.683581][T18103] udevd[18103]: incorrect nilfs2 checksum on /dev/loop4 [ 507.793283][T18526] loop5: detected capacity change from 0 to 256 [ 507.934436][T18526] FAT-fs (loop5): Directory bread(block 64) failed [ 507.941098][T18526] FAT-fs (loop5): Directory bread(block 65) failed [ 507.976144][T18526] FAT-fs (loop5): Directory bread(block 66) failed [ 507.982743][T18526] FAT-fs (loop5): Directory bread(block 67) failed [ 508.008953][T18530] comedi comedi3: pcl818: I/O port conflict (0x8001,16) [ 508.043062][T18526] FAT-fs (loop5): Directory bread(block 68) failed [ 508.085219][T18526] FAT-fs (loop5): Directory bread(block 69) failed [ 508.091967][T18526] FAT-fs (loop5): Directory bread(block 70) failed [ 508.139474][T18526] FAT-fs (loop5): Directory bread(block 71) failed [ 508.194419][T18526] FAT-fs (loop5): Directory bread(block 72) failed [ 508.221311][T18526] FAT-fs (loop5): Directory bread(block 73) failed [ 508.288149][T18537] program syz.4.6400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.384519][T17055] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 508.584570][T17055] usb 4-1: Using ep0 maxpacket: 32 [ 508.592243][T17055] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.654246][T17055] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 508.664037][T17055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.735735][T17055] usb 4-1: config 0 descriptor?? [ 508.822326][T18554] loop4: detected capacity change from 0 to 1024 [ 508.861701][T18554] EXT4-fs: Ignoring removed oldalloc option [ 508.948387][T18554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 509.005290][T18554] System zones: 0-1, 3-12 [ 509.085718][T18554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 509.148201][T18561] trusted_key: encrypted_key: insufficient parameters specified [ 509.171273][T17055] elo 0003:04E7:0009.0010: unknown main item tag 0x1 [ 509.192221][T17055] elo 0003:04E7:0009.0010: item fetching failed at offset 4/5 [ 509.249080][T17055] elo 0003:04E7:0009.0010: parse failed [ 509.278466][T17055] elo: probe of 0003:04E7:0009.0010 failed with error -22 [ 509.390375][T17054] usb 4-1: USB disconnect, device number 31 [ 509.418017][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 509.711782][T18575] device bridge0 entered promiscuous mode [ 509.779053][T18575] bridge0: port 3(macvtap1) entered blocking state [ 509.796508][T18575] bridge0: port 3(macvtap1) entered disabled state [ 509.842561][T18575] device bridge0 left promiscuous mode [ 510.139052][T18563] loop0: detected capacity change from 0 to 32768 [ 510.180499][T18563] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6408 (18563) [ 510.246491][T18563] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 510.287898][T18563] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 510.304717][T18563] BTRFS info (device loop0): using free space tree [ 510.655410][T18615] loop1: detected capacity change from 0 to 128 [ 510.666082][T18615] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 510.706461][T18580] loop4: detected capacity change from 0 to 32768 [ 510.724389][T18615] hpfs: filesystem error: improperly stopped [ 510.730536][T18615] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 510.738864][T18615] hpfs: You really don't want any checks? You are crazy... [ 510.746647][T18615] hpfs: hpfs_map_sector(): read error [ 510.753858][T18615] hpfs: code page support is disabled [ 510.759612][T18615] hpfs: hpfs_map_4sectors(): unaligned read [ 510.768949][T18615] hpfs: hpfs_map_4sectors(): unaligned read [ 510.775066][T18615] hpfs: filesystem error: unable to find root dir [ 510.811242][T18580] XFS (loop4): Mounting V5 Filesystem [ 510.829268][T18615] hpfs: hpfs_map_4sectors(): unaligned read [ 510.840473][T18563] BTRFS info (device loop0): enabling ssd optimizations [ 510.896216][T18580] XFS (loop4): Ending clean mount [ 510.950515][T18580] XFS (loop4): Quotacheck needed: Please wait. [ 511.052255][T18580] XFS (loop4): Quotacheck: Done. [ 511.107208][ T4267] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 511.607328][ T4273] XFS (loop4): Unmounting Filesystem [ 512.352418][T18638] loop1: detected capacity change from 0 to 32768 [ 512.413997][T18638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6435 (18638) [ 512.527152][T18638] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 512.579412][T18638] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 512.624236][T18638] BTRFS info (device loop1): using free space tree [ 512.890415][T18638] BTRFS info (device loop1): enabling ssd optimizations [ 512.903673][T18683] loop0: detected capacity change from 0 to 512 [ 512.937859][T18685] ubi31: attaching mtd0 [ 512.954784][T18683] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 513.039393][T18683] EXT4-fs (loop0): 1 truncate cleaned up [ 513.054348][T18683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 513.136765][ T4265] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 513.218590][T18683] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 513.379598][T18693] loop5: detected capacity change from 0 to 128 [ 513.422025][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 513.449698][T18693] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 513.587098][T18693] hpfs: filesystem error: improperly stopped [ 513.593170][T18693] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 513.714379][T18693] hpfs: You really don't want any checks? You are crazy... [ 513.722005][T18693] hpfs: hpfs_map_sector(): read error [ 513.762388][T18693] hpfs: code page support is disabled [ 513.797410][T18693] hpfs: hpfs_map_4sectors(): unaligned read [ 513.821572][T18693] hpfs: hpfs_map_4sectors(): unaligned read [ 513.842316][T18693] hpfs: filesystem error: unable to find root dir [ 513.976314][T18693] hpfs: hpfs_map_4sectors(): unaligned read [ 514.375844][T18713] device dummy0 entered promiscuous mode [ 514.383858][T18714] IPVS: ip_vs_add_dest(): server weight less than zero [ 514.406673][T18713] device dummy0 left promiscuous mode [ 514.511837][T18716] loop1: detected capacity change from 0 to 4096 [ 514.538569][T18716] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 514.581179][T18716] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 514.647188][T18722] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.398161][T17053] kernel write not supported for file /sg0 (pid: 17053 comm: kworker/1:13) [ 515.417620][T18718] loop0: detected capacity change from 0 to 32768 [ 515.502625][T18718] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 515.618567][T18748] loop4: detected capacity change from 0 to 128 [ 515.697403][T18748] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 515.754384][T18748] hpfs: filesystem error: improperly stopped [ 515.786045][T18748] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 515.794214][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 515.836807][T18748] hpfs: You really don't want any checks? You are crazy... [ 515.893903][T18748] hpfs: hpfs_map_sector(): read error [ 515.924371][T18748] hpfs: code page support is disabled [ 515.949707][T18748] hpfs: hpfs_map_4sectors(): unaligned read [ 515.977666][T18748] hpfs: hpfs_map_4sectors(): unaligned read [ 515.983628][T18748] hpfs: filesystem error: unable to find root dir [ 516.055145][T18748] hpfs: hpfs_map_4sectors(): unaligned read [ 516.244551][T17053] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 516.454421][T17053] usb 6-1: Using ep0 maxpacket: 16 [ 516.463017][T17053] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.505070][T17053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 516.555013][T18771] device veth1_macvtap left promiscuous mode [ 516.564800][T17053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 516.584759][T18771] device macsec0 entered promiscuous mode [ 516.614551][T17053] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 516.628008][T18773] device veth1_macvtap entered promiscuous mode [ 516.651678][T18773] device macsec0 left promiscuous mode [ 516.654468][T17053] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.718911][T17053] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 516.758337][T17053] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 516.792251][T17053] usb 6-1: Manufacturer: syz [ 516.810643][T17053] usb 6-1: config 0 descriptor?? [ 516.896447][T18776] loop1: detected capacity change from 0 to 128 [ 516.932314][T18776] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 516.969005][T18776] hpfs: filesystem error: improperly stopped [ 516.992675][T18776] hpfs: You really don't want any checks? You are crazy... [ 517.017181][T18776] hpfs: hpfs_map_sector(): read error [ 517.032162][T18776] hpfs: code page support is disabled [ 517.040477][T18776] hpfs: hpfs_map_4sectors(): unaligned read [ 517.074466][T18776] hpfs: hpfs_map_4sectors(): unaligned read [ 517.080429][T18776] hpfs: filesystem error: unable to find root dir [ 517.324524][T17053] rc_core: IR keymap rc-hauppauge not found [ 517.330502][T17053] Registered IR keymap rc-empty [ 517.356129][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.406229][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.426723][T18764] loop0: detected capacity change from 0 to 40427 [ 517.451335][T17053] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 517.462251][T18764] F2FS-fs (loop0): invalid crc value [ 517.495628][T17053] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24 [ 517.543163][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.563587][T18764] F2FS-fs (loop0): Found nat_bits in checkpoint [ 517.614403][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.654473][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.694484][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.744408][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.774624][T18764] F2FS-fs (loop0): Start checkpoint disabled! [ 517.784972][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.832482][T18764] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 517.844522][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.894579][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.925585][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.984162][ T26] audit: type=1800 audit(1770112560.681:178): pid=18764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6458" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 518.005347][T17053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 518.035460][T17053] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 518.054969][T17053] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 518.097239][T17053] usb 6-1: USB disconnect, device number 3 [ 518.293524][T18811] loop1: detected capacity change from 0 to 512 [ 518.316502][ T4605] kworker/u4:16: attempt to access beyond end of device [ 518.316502][ T4605] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 518.340974][T18811] EXT4-fs: Ignoring removed nobh option [ 518.348133][T18811] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.363356][T18811] EXT4-fs: inline encryption not supported [ 518.371527][T18811] EXT4-fs: Ignoring removed mblk_io_submit option [ 518.415779][T18811] EXT4-fs (loop1): Test dummy encryption mode enabled [ 518.444142][T18811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 518.504862][T18811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 518.513341][T18811] System zones: 1-12 [ 518.595011][T18811] EXT4-fs (loop1): 1 truncate cleaned up [ 518.702564][T18811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 518.754779][ T4338] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 518.771918][T18822] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 518.807567][ T26] audit: type=1800 audit(1770112561.511:179): pid=18811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6471" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 518.846342][T14269] kernel write not supported for file task/128/attr/keycreate (pid: 14269 comm: kworker/0:16) [ 518.951460][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 518.954817][ T4338] usb 5-1: Using ep0 maxpacket: 16 [ 518.972768][ T4338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.044360][ T4338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.089028][ T4338] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 519.105171][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.135759][ T4338] usb 5-1: config 0 descriptor?? [ 519.380190][T18834] loop0: detected capacity change from 0 to 1024 [ 519.552080][ T4338] nzxt-kraken2 0003:1E71:170E.0011: unbalanced delimiter at end of report description [ 519.587625][ T4338] nzxt-kraken2 0003:1E71:170E.0011: hid parse failed with -22 [ 519.613496][T18843] netlink: 'syz.1.6484': attribute type 1 has an invalid length. [ 519.619926][ T4338] nzxt-kraken2: probe of 0003:1E71:170E.0011 failed with error -22 [ 519.787654][T17048] usb 5-1: USB disconnect, device number 25 [ 519.948656][T18853] loop1: detected capacity change from 0 to 256 [ 519.955762][T18852] loop0: detected capacity change from 0 to 512 [ 519.962869][T18852] ext3: Unknown parameter 'rootcontext' [ 519.992111][T18853] exfat: Deprecated parameter 'namecase' [ 520.015479][T18853] exfat: Deprecated parameter 'utf8' [ 520.076726][T18853] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 520.530970][T18846] loop5: detected capacity change from 0 to 32768 [ 520.563843][T18866] loop0: detected capacity change from 0 to 128 [ 520.570456][T18846] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.6485 (18846) [ 520.619588][T18846] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 520.660776][T18846] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 520.682736][T18868] loop1: detected capacity change from 0 to 1024 [ 520.704116][T18846] BTRFS info (device loop5): force zlib compression, level 3 [ 520.742194][T18846] BTRFS info (device loop5): force clearing of disk cache [ 520.774527][T18846] BTRFS info (device loop5): setting nodatasum [ 520.815208][T18846] BTRFS info (device loop5): allowing degraded mounts [ 520.864693][T18846] BTRFS info (device loop5): enabling disk space caching [ 520.890703][T18846] BTRFS info (device loop5): disk space caching is enabled [ 521.053178][T18878] netlink: 'syz.4.6499': attribute type 10 has an invalid length. [ 521.123453][T18846] BTRFS info (device loop5): rebuilding free space tree [ 521.141709][T18846] BTRFS info (device loop5): disabling free space tree [ 521.149726][T18846] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 521.159753][T18846] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 521.172832][T18878] batman_adv: batadv0: Adding interface: team0 [ 521.218075][T18893] loop1: detected capacity change from 0 to 64 [ 521.239130][T18878] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.342566][T18878] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 521.380161][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6497'. [ 521.404356][T18894] netlink: 'syz.4.6499': attribute type 10 has an invalid length. [ 521.444899][T17512] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 521.485495][T18894] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6499'. [ 521.629156][T18894] device team0 entered promiscuous mode [ 521.673169][T18894] device team_slave_0 entered promiscuous mode [ 521.711813][T18894] device team_slave_1 entered promiscuous mode [ 521.756373][T18894] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.763266][T18894] batman_adv: batadv0: Interface activated: team0 [ 521.786630][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.799058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.811306][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.823527][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.828347][T18894] batman_adv: batadv0: Interface deactivated: team0 [ 521.836205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.854495][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.866831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.879051][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.891247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.903590][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 521.924592][T18894] batman_adv: batadv0: Removing interface: team0 [ 522.010810][T18894] bridge0: port 3(team0) entered blocking state [ 522.020906][T18894] bridge0: port 3(team0) entered disabled state [ 522.051353][T18894] bridge0: port 3(team0) entered blocking state [ 522.057765][T18894] bridge0: port 3(team0) entered forwarding state [ 523.545264][T18936] loop4: detected capacity change from 0 to 2048 [ 523.605922][T18936] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.673349][T18908] loop5: detected capacity change from 0 to 40427 [ 523.701655][T18908] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 523.732393][T18908] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 523.848492][T17053] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 523.863456][T18908] F2FS-fs (loop5): Found nat_bits in checkpoint [ 524.101387][T18908] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 524.112519][T18908] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 524.266047][T18908] syz.5.6506: attempt to access beyond end of device [ 524.266047][T18908] loop5: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 524.305401][T17053] usb 2-1: Using ep0 maxpacket: 16 [ 524.352295][T18954] loop4: detected capacity change from 0 to 164 [ 524.372926][T18908] syz.5.6506: attempt to access beyond end of device [ 524.372926][T18908] loop5: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 524.423306][ T26] audit: type=1800 audit(1770112567.121:180): pid=18908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6506" name="/" dev="loop5" ino=8 res=0 errno=0 [ 524.446296][T18954] rock: directory entry would overflow storage [ 524.446310][T18954] rock: sig=0x66, size=4, remaining=3 [ 524.467696][T18954] rock: directory entry would overflow storage [ 524.473910][T18954] rock: sig=0x66, size=4, remaining=3 [ 524.532683][T17053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.546918][T17053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.565360][T17053] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 524.597567][T17053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.623275][T17053] usb 2-1: config 0 descriptor?? [ 525.138126][T17053] topre 0003:0853:0148.0012: unknown main item tag 0xd [ 525.151850][T17053] topre 0003:0853:0148.0012: unexpected long global item [ 525.172736][T18965] loop4: detected capacity change from 0 to 4096 [ 525.184763][T17053] topre: probe of 0003:0853:0148.0012 failed with error -22 [ 525.386125][T17053] usb 2-1: USB disconnect, device number 39 [ 525.456255][T18965] ntfs3: loop4: ino=21, "bus" fiemap is not supported for compressed file (cp -r) [ 525.681896][ T4273] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 525.689322][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 525.848253][T18973] loop5: detected capacity change from 0 to 512 [ 525.919989][T18973] EXT4-fs: Ignoring removed i_version option [ 525.954714][T18973] EXT4-fs: Ignoring removed oldalloc option [ 526.012050][T18973] EXT4-fs (loop5): Test dummy encryption mode enabled [ 526.097151][T18973] EXT4-fs (loop5): 1 truncate cleaned up [ 526.122084][T18979] loop1: detected capacity change from 0 to 1764 [ 526.135149][T18973] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 526.382616][T17512] EXT4-fs (loop5): unmounting filesystem. [ 526.541475][T18986] loop5: detected capacity change from 0 to 764 [ 526.684963][T18986] rock: directory entry would overflow storage [ 526.704781][T18986] rock: sig=0x5850, size=36, remaining=7 [ 526.794305][ C1] net_ratelimit: 8520 callbacks suppressed [ 526.794321][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.812514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.824773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.837007][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.849255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.861518][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.873803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.886090][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.898337][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.910596][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 527.109671][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6545'. [ 527.149211][T18993] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6545'. [ 527.271865][T18991] loop5: detected capacity change from 0 to 4096 [ 527.337693][T18991] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 527.674462][T17935] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 527.708160][T19001] loop4: detected capacity change from 0 to 128 [ 527.777170][T19001] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 527.875998][T17935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.907169][T17935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 527.940680][T19001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 528.014688][T17935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 528.060409][T19001] ext2 filesystem being mounted at /1347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.092150][T17935] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.174383][T17935] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 528.206820][T19013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6554'. [ 528.216019][T17935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.231652][T19013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6554'. [ 528.241487][T17935] usb 4-1: config 0 descriptor?? [ 528.275381][T19010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6554'. [ 528.293170][T17935] gspca_main: spca561-2.14.0 probing abcd:cdee [ 528.314720][T19010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6554'. [ 528.329965][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 528.344922][T19010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6554'. [ 528.425587][T19010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6554'. [ 528.483905][T17935] spca561: probe of 4-1:0.0 failed with error -22 [ 528.514121][T17935] usb 4-1: MIDIStreaming interface descriptor not found [ 528.541335][T19010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6554'. [ 528.612868][T19010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6554'. [ 528.645814][T17935] usb 4-1: USB disconnect, device number 32 [ 529.307200][T19040] loop1: detected capacity change from 0 to 512 [ 529.380921][T19040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 529.400351][T19040] ext4 filesystem being mounted at /1237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.489860][T19040] ext4: Unexpected value for 'quota' [ 529.503621][T19034] loop0: detected capacity change from 0 to 8192 [ 529.584436][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 529.741105][T19034] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 529.914108][T19056] loop4: detected capacity change from 0 to 1024 [ 529.967945][T19056] EXT4-fs: Ignoring removed bh option [ 530.007562][T19050] loop5: detected capacity change from 0 to 4096 [ 530.206309][T19056] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 530.447218][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 531.474567][T19058] loop0: detected capacity change from 0 to 40427 [ 531.521091][T19058] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 531.555434][T19058] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 531.712745][T19058] F2FS-fs (loop0): invalid crc value [ 531.803559][T19083] loop1: detected capacity change from 0 to 128 [ 531.842087][ C1] net_ratelimit: 8744 callbacks suppressed [ 531.842103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.860281][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.872606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.884848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.897078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.909374][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.921643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.933944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.946248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 531.958645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.028221][T19058] F2FS-fs (loop0): Found nat_bits in checkpoint [ 532.310226][T19058] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 532.334670][T19058] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 532.519572][T19075] loop4: detected capacity change from 0 to 32768 [ 532.805538][T19075] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 532.878063][T19075] (syz.4.6579,19075,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 533.122790][T19107] loop5: detected capacity change from 0 to 256 [ 533.153806][T19107] exfat: Deprecated parameter 'namecase' [ 533.164337][T19107] exfat: Deprecated parameter 'namecase' [ 533.241905][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 533.305495][T19107] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 533.434011][T19114] __nla_validate_parse: 75 callbacks suppressed [ 533.434027][T19114] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6595'. [ 533.712848][T19121] loop1: detected capacity change from 0 to 512 [ 533.983782][T19121] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 534.103533][T19121] ext4 filesystem being mounted at /1246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.224502][T19137] loop0: detected capacity change from 0 to 1764 [ 534.415295][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 534.723503][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6608'. [ 534.863049][T19150] tipc: Enabling of bearer rejected, failed to enable media [ 535.352371][T19166] loop5: detected capacity change from 0 to 8 [ 535.430312][T19166] SQUASHFS error: Failed to read block 0x18e: -5 [ 535.460859][T19166] SQUASHFS error: Unable to read metadata cache entry [18c] [ 536.025601][T19180] loop5: detected capacity change from 0 to 4096 [ 536.101711][T19180] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 536.864592][ C1] net_ratelimit: 7014 callbacks suppressed [ 536.864610][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.868772][T19178] loop0: detected capacity change from 0 to 40427 [ 536.871477][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.901202][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.913591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.925912][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.938172][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.950508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.962771][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.975041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 536.987326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.121646][T19178] F2FS-fs (loop0): invalid crc value [ 537.189040][T19178] F2FS-fs (loop0): Found nat_bits in checkpoint [ 537.335231][T19178] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 537.825403][T19216] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6634'. [ 538.970859][T19225] loop4: detected capacity change from 0 to 32768 [ 539.040222][T19240] loop5: detected capacity change from 0 to 2048 [ 539.098064][T19240] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 539.166947][T19240] UDF-fs: unknown compression code (0) [ 539.462463][T19244] loop5: detected capacity change from 0 to 256 [ 540.019410][T19254] loop5: detected capacity change from 0 to 1024 [ 540.080134][T19257] loop0: detected capacity change from 0 to 128 [ 540.300972][ T4616] hfsplus: b-tree write err: -5, ino 4 [ 541.396679][T19294] tipc: Started in network mode [ 541.401605][T19294] tipc: Node identity , cluster identity 4711 [ 541.418786][T14264] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 541.616643][T14264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.651077][T14264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.739195][T14264] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 541.764960][T19302] loop1: detected capacity change from 0 to 1024 [ 541.775950][T14264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.823331][T14264] usb 5-1: config 0 descriptor?? [ 541.874669][ C1] net_ratelimit: 8604 callbacks suppressed [ 541.874684][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.892926][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.905215][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.917440][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.929707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.942100][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.954386][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.966623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.978843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 541.991041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.098353][ T4596] hfsplus: b-tree write err: -5, ino 4 [ 542.252281][T14264] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 542.284416][T14264] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 542.346367][T14264] itetech 0003:048D:8595.0013: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0 [ 542.378821][T19310] loop1: detected capacity change from 0 to 128 [ 542.525232][T14264] usb 5-1: USB disconnect, device number 26 [ 542.772193][T19311] fido_id[19311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 543.480807][T19313] loop5: detected capacity change from 0 to 40427 [ 543.528211][T19313] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 543.557781][T19313] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1c [ 543.579181][T19313] F2FS-fs (loop5): invalid crc value [ 543.649074][T19313] F2FS-fs (loop5): Found nat_bits in checkpoint [ 543.833558][T19313] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 543.864223][T19324] netlink: 'syz.0.6687': attribute type 30 has an invalid length. [ 543.927347][T19313] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 544.405804][T17512] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x63/0x210 [ 544.978521][T19347] loop4: detected capacity change from 0 to 1024 [ 545.149330][ T26] audit: type=1800 audit(1770112587.851:181): pid=19347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6699" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 545.385280][ T4596] hfsplus: b-tree write err: -5, ino 4 [ 545.460164][T19356] loop1: detected capacity change from 0 to 128 [ 545.565249][T19356] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 545.689378][T17054] kernel read not supported for file /vcs (pid: 17054 comm: kworker/1:14) [ 545.732968][T19356] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 546.637698][T19382] [U]  [ 546.808750][T19387] device vlan2 entered promiscuous mode [ 546.834459][T19387] device bridge0 entered promiscuous mode [ 546.857430][T19387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 546.884357][ C1] net_ratelimit: 8150 callbacks suppressed [ 546.884371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.902499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.903981][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 546.914742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.915391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.946223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.958517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.970705][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.982890][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 546.995204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.007600][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.221645][T19397] tipc: Started in network mode [ 547.244205][T19397] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 547.273097][T19397] tipc: Enabling of bearer rejected, failed to enable media [ 547.308589][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6723'. [ 547.383892][T19404] netlink: 'syz.0.6723': attribute type 21 has an invalid length. [ 547.411881][T19373] loop5: detected capacity change from 0 to 32768 [ 547.461111][T19404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6723'. [ 547.579754][T19408] loop1: detected capacity change from 0 to 64 [ 547.620047][T19408] hfs: unable to locate alternate MDB [ 547.631799][T19408] hfs: continuing without an alternate MDB [ 548.343564][T17054] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 548.522212][T19428] smc: net device bond0 applied user defined pnetid SYZ0 [ 548.576874][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6735'. [ 548.588512][T19426] loop0: detected capacity change from 0 to 4096 [ 548.589351][T19426] EXT4-fs: Ignoring removed bh option [ 548.626974][T19426] EXT4-fs (loop0): Test dummy encryption mode enabled [ 548.673485][T19426] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 548.682233][T19426] System zones: 0-5 [ 548.696697][T19426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 548.751881][T19426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.765466][T19426] EXT4-fs: can't change dax mount option while remounting [ 548.852793][T17054] usb 5-1: Using ep0 maxpacket: 32 [ 548.888484][T19436] netlink: 'syz.3.6737': attribute type 5 has an invalid length. [ 548.943288][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 549.029695][T17054] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 549.051069][T17054] usb 5-1: config 0 has no interface number 0 [ 549.093971][T19441] usb usb8: usbfs: process 19441 (syz.0.6739) did not claim interface 5 before use [ 549.174496][T14269] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 549.203666][T17054] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 549.212802][T17054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.239922][T17054] usb 5-1: Product: syz [ 549.244164][T17054] usb 5-1: Manufacturer: syz [ 549.265284][T17054] usb 5-1: SerialNumber: syz [ 549.294031][T17054] usb 5-1: config 0 descriptor?? [ 549.314721][T17935] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 549.325285][T17054] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 549.332858][T17054] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 549.364469][T14269] usb 2-1: Using ep0 maxpacket: 32 [ 549.371522][T14269] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 549.401156][T14269] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 549.421399][T14269] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 549.440887][T14269] usb 2-1: config 1 has no interface number 0 [ 549.460922][T14269] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.481495][T14269] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 549.504402][T17935] usb 4-1: Using ep0 maxpacket: 16 [ 549.509917][T14269] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 549.521287][T17935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.543588][T14269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.547799][T17054] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 549.552974][T17935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.582349][T17935] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.599121][T17935] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 549.608500][T17935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.622494][T14269] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 549.651227][T17935] usb 4-1: config 0 descriptor?? [ 549.714213][T19445] loop5: detected capacity change from 0 to 512 [ 549.767606][T17054] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 549.777158][T19445] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 549.823685][T19445] EXT4-fs (loop5): invalid journal inode [ 549.836451][T14269] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 549.843663][T19445] EXT4-fs (loop5): can't get journal size [ 549.853069][T19447] loop0: detected capacity change from 0 to 64 [ 549.970823][T14269] usb 5-1: USB disconnect, device number 27 [ 549.984935][T14269] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 550.010586][T19445] EXT4-fs (loop5): 1 truncate cleaned up [ 550.016341][T19445] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 550.086908][T17935] microsoft 0003:045E:07DA.0014: unknown main item tag 0x4 [ 550.104860][T17935] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 550.135831][T17935] microsoft 0003:045E:07DA.0014: item 0 4 0 8 parsing failed [ 550.154221][T17935] microsoft 0003:045E:07DA.0014: parse failed [ 550.171890][T17935] microsoft: probe of 0003:045E:07DA.0014 failed with error -22 [ 550.273314][T17512] EXT4-fs (loop5): unmounting filesystem. [ 550.289491][ T8731] usb 4-1: USB disconnect, device number 33 [ 550.339145][T17935] usb 2-1: USB disconnect, device number 40 [ 550.398653][T17935] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 550.520093][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6746'. [ 550.592290][T19457] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6747'. [ 551.345607][T19483] loop0: detected capacity change from 0 to 128 [ 551.412178][T19483] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 551.454491][T19483] hpfs: filesystem error: improperly stopped [ 551.460553][T19483] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 551.469496][T19483] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 551.534002][T19483] hpfs: You really don't want any checks? You are crazy... [ 551.585264][T19483] hpfs: hpfs_map_sector(): read error [ 551.590702][T19483] hpfs: code page support is disabled [ 551.643642][T19483] hpfs: hpfs_map_4sectors(): unaligned read [ 551.649983][T19483] hpfs: hpfs_map_4sectors(): unaligned read [ 551.671294][T19483] hpfs: filesystem error: unable to find root dir [ 551.894497][ C1] net_ratelimit: 7499 callbacks suppressed [ 551.894514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.912807][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.925112][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.937448][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.949953][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.962319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.974606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.215325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.227770][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.240225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.313053][T19505] loop1: detected capacity change from 0 to 128 [ 552.330722][T19505] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 552.407221][T19505] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 552.524412][T17935] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 552.614693][T17594] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 552.714624][T17935] usb 6-1: Using ep0 maxpacket: 16 [ 552.721774][T17935] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 552.758040][T17935] usb 6-1: config 0 has no interface number 0 [ 552.784204][T17935] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 552.820651][T17935] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 552.876646][T17935] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 552.902171][T17935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.917529][T17935] usb 6-1: Product: syz [ 552.921872][T17935] usb 6-1: Manufacturer: syz [ 552.947106][T17935] usb 6-1: SerialNumber: syz [ 552.959057][T17935] usb 6-1: config 0 descriptor?? [ 552.976351][T19503] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 552.983765][T19503] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 553.208556][T17054] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 553.234570][T19503] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 553.242187][T19503] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 553.468557][T17935] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 553.540482][T17054] usb 5-1: Using ep0 maxpacket: 16 [ 553.641489][T17054] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 553.664281][T17054] usb 5-1: config 0 has no interface number 0 [ 553.670460][T17054] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 553.671552][T17935] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 553.696977][T17935] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 553.709015][T17935] asix: probe of 6-1:0.34 failed with error -71 [ 553.719878][T17935] usb 6-1: USB disconnect, device number 4 [ 553.833217][T17054] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 553.855549][T17054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.863589][T17054] usb 5-1: Product: syz [ 553.874878][T17054] usb 5-1: Manufacturer: syz [ 553.879618][T17054] usb 5-1: SerialNumber: syz [ 553.906549][T17054] usb 5-1: config 0 descriptor?? [ 554.396216][T19523] loop5: detected capacity change from 0 to 128 [ 554.614411][T17054] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 554.654321][T17054] usb 5-1: USB disconnect, device number 28 [ 555.252396][T19540] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6788'. [ 555.599585][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6794'. [ 555.642462][T19553] loop5: detected capacity change from 0 to 256 [ 555.784665][T19553] FAT-fs (loop5): Directory bread(block 64) failed [ 555.791307][T19553] FAT-fs (loop5): Directory bread(block 65) failed [ 555.841557][T19553] FAT-fs (loop5): Directory bread(block 66) failed [ 555.848218][T19553] FAT-fs (loop5): Directory bread(block 67) failed [ 555.871465][T19553] FAT-fs (loop5): Directory bread(block 68) failed [ 555.914327][T19553] FAT-fs (loop5): Directory bread(block 69) failed [ 555.921319][T19553] FAT-fs (loop5): Directory bread(block 70) failed [ 555.964082][T19557] loop1: detected capacity change from 0 to 4096 [ 555.984054][T19553] FAT-fs (loop5): Directory bread(block 71) failed [ 556.004410][T19553] FAT-fs (loop5): Directory bread(block 72) failed [ 556.043288][T19553] FAT-fs (loop5): Directory bread(block 73) failed [ 556.048950][T19561] loop0: detected capacity change from 0 to 512 [ 556.075684][T19561] EXT4-fs: Ignoring removed nobh option [ 556.107821][T19561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 556.150651][T19561] EXT4-fs (loop0): 1 truncate cleaned up [ 556.156420][T19557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 556.165832][T19561] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 556.226446][T17054] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 556.353917][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 556.432889][T19568] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.6795: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 556.505608][T19568] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.6795: directory missing '..' [ 556.523366][T19572] loop5: detected capacity change from 0 to 2048 [ 556.711041][T17054] usb 4-1: Using ep0 maxpacket: 8 [ 556.756612][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 556.769521][T19572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.914402][ C1] net_ratelimit: 9282 callbacks suppressed [ 556.914419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 556.932761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 556.945150][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 556.957481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 556.969799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 556.982073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 556.994373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 557.006661][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 557.018924][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 557.031214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 557.234320][T17054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.261465][T17054] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 557.307274][T17054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.332499][T17054] usb 4-1: config 0 descriptor?? [ 557.617335][T19603] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136) [ 557.718386][T19603] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 557.828930][T17054] hid-alps 0003:044E:121E.0015: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.3-1/input0 [ 558.076197][T17050] usb 4-1: USB disconnect, device number 34 [ 558.089567][T19614] netlink: 'syz.5.6820': attribute type 1 has an invalid length. [ 558.351036][T19613] fido_id[19613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 558.426038][T19618] loop4: detected capacity change from 0 to 512 [ 558.453743][T19618] EXT4-fs: Ignoring removed nobh option [ 558.459541][T19620] netlink: 'syz.0.6824': attribute type 1 has an invalid length. [ 558.574817][T19618] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 558.906722][T19618] EXT4-fs (loop4): 1 truncate cleaned up [ 558.912443][T19618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 559.172535][T19638] loop0: detected capacity change from 0 to 1024 [ 559.343272][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 559.425157][T17054] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 559.539132][T19644] ucma_write: process 264 (syz.5.6835) changed security contexts after opening file descriptor, this is not allowed. [ 559.624895][T19646] can0: slcan on ptm0. [ 559.953763][T17054] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.974450][T17054] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 560.003870][T17054] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 560.036769][T17054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.115419][T19634] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 560.396758][T19662] sp0: Synchronizing with TNC [ 561.004924][T19674] program syz.5.6843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.484100][T19655] loop0: detected capacity change from 0 to 32768 [ 561.650511][T19683] loop5: detected capacity change from 0 to 2048 [ 561.852378][T19655] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 561.852378][T19655] [ 561.904099][T19685] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 561.924383][ C0] net_ratelimit: 13176 callbacks suppressed [ 561.924398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.924623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 561.931133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.942983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 561.954897][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.966878][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 561.978885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.990844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 562.002756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.014804][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 562.051760][T19655] ERROR: (device loop0): remounting filesystem as read-only [ 562.187494][T17935] usb 2-1: USB disconnect, device number 41 [ 562.317211][T19645] can0 (unregistered): slcan off ptm0. [ 562.816451][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.694891][T19699] loop4: detected capacity change from 0 to 32768 [ 563.734747][T19699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.6850 (19699) [ 563.809395][T19699] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.834398][T19699] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 563.843171][T19699] BTRFS info (device loop4): using free space tree [ 564.111002][T19717] loop1: detected capacity change from 0 to 4096 [ 564.517387][T19699] BTRFS info (device loop4): enabling ssd optimizations [ 565.067812][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 565.903556][ T4265] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 565.924279][ T4265] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 566.072094][ T4350] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 566.346135][T17047] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 566.503552][ T4350] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 566.543825][ T4350] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.563334][ T4350] usb 5-1: config 0 has no interface number 0 [ 566.584921][ T4350] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 566.635205][ T4350] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.658660][T17047] usb 4-1: Using ep0 maxpacket: 32 [ 566.764332][T17047] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.772399][T17047] usb 4-1: config 0 has no interface number 0 [ 566.820818][ T4350] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 566.834746][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.842795][ T4350] usb 5-1: Product: syz [ 566.874270][ T4350] usb 5-1: Manufacturer: syz [ 566.878927][ T4350] usb 5-1: SerialNumber: syz [ 566.920039][ T4350] usb 5-1: config 0 descriptor?? [ 566.942635][ C0] net_ratelimit: 15176 callbacks suppressed [ 566.942653][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.945803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 566.949615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.961166][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 566.973237][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.985141][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 566.997266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.009457][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 567.021073][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.033115][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 567.096781][T17047] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 567.118578][T17047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.134276][T17047] usb 4-1: Product: syz [ 567.138494][T17047] usb 4-1: Manufacturer: syz [ 567.143125][T17047] usb 4-1: SerialNumber: syz [ 567.161646][T17047] usb 4-1: config 0 descriptor?? [ 567.215228][T17047] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 567.224078][T17047] usb 4-1: selecting invalid altsetting 1 [ 567.264279][T17047] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 567.292855][T17047] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 567.322673][T17047] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 567.385694][T17047] usb 4-1: media controller created [ 567.413605][T17047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.582475][T17047] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 567.604579][T17047] zl10353_read_register: readreg error (reg=127, ret==-71) [ 567.623292][T17047] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 567.773727][T17047] usb 4-1: USB disconnect, device number 35 [ 567.815120][ T5512] usb 5-1: USB disconnect, device number 29 [ 568.364848][T19763] overlayfs: './file0' not a directory [ 569.034906][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6872'. [ 569.123949][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6872'. [ 570.443687][T17047] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 570.854276][ T5512] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 571.034453][T17047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.057298][T17047] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 571.105801][T17047] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 571.162283][T17047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.191073][T17047] usb 2-1: config 0 descriptor?? [ 571.256187][T17047] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 571.262907][T17047] dvb-usb: bulk message failed: -22 (3/0) [ 571.290492][T17047] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 571.327859][T17047] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 571.353431][T17047] usb 2-1: media controller created [ 571.373340][T17047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.385965][ T5512] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 571.396053][ T5512] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 571.430947][T17047] dvb-usb: bulk message failed: -22 (6/0) [ 571.434412][ T5512] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 571.439138][T17047] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 571.462192][T19793] dvb-usb: bulk message failed: -22 (2/0) [ 571.491860][ T5512] usb 4-1: config 220 has no interface number 2 [ 571.504001][ T5512] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 571.574545][ T5512] usb 4-1: config 220 interface 0 has no altsetting 0 [ 571.581388][ T5512] usb 4-1: config 220 interface 76 has no altsetting 0 [ 571.637703][ T5512] usb 4-1: config 220 interface 1 has no altsetting 0 [ 571.655068][T17047] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 571.684795][T17047] dvb-usb: schedule remote query interval to 150 msecs. [ 571.691932][T17047] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 571.776331][T19809] loop4: detected capacity change from 0 to 32768 [ 571.823980][T19809] XFS: attr2 mount option is deprecated. [ 571.853234][T17047] usb 2-1: USB disconnect, device number 42 [ 571.874727][T17047] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 571.939583][ T5512] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 571.949142][ C1] net_ratelimit: 10824 callbacks suppressed [ 571.949157][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 571.967447][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 571.971015][ T5512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.982500][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 571.998370][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.000608][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 572.012443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.031629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 572.036259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.048162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 572.060203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.121456][ T5512] usb 4-1: Product: syz [ 572.131588][ T5512] usb 4-1: Manufacturer: syz [ 572.141057][ T5512] usb 4-1: SerialNumber: syz [ 572.253670][T19809] XFS (loop4): Mounting V5 Filesystem [ 572.629731][ T5512] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 572.654472][ T5512] usb 4-1: No valid video chain found. [ 572.660041][ T5512] usb 4-1: selecting invalid altsetting 0 [ 572.842577][ T5512] usb 4-1: selecting invalid altsetting 0 [ 572.849279][ T5512] usbtest: probe of 4-1:220.1 failed with error -22 [ 572.947173][ T5512] usb 4-1: USB disconnect, device number 36 [ 573.135913][T19846] loop0: detected capacity change from 0 to 256 [ 573.970998][T19809] XFS (loop4): Ending clean mount [ 574.114296][T19809] XFS (loop4): Quotacheck needed: Please wait. [ 574.418014][T19809] XFS (loop4): Quotacheck: Done. [ 574.592824][ T4273] XFS (loop4): Unmounting Filesystem [ 574.646461][ T26] audit: type=1326 audit(1770112617.351:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 574.731805][ T26] audit: type=1326 audit(1770112617.371:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 574.824299][ T26] audit: type=1326 audit(1770112617.371:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 574.923893][ T26] audit: type=1326 audit(1770112617.371:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 574.983096][ T26] audit: type=1326 audit(1770112617.371:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 575.026721][ T26] audit: type=1326 audit(1770112617.381:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 575.081441][T19846] FAT-fs (loop0): Directory bread(block 64) failed [ 575.088248][T19846] FAT-fs (loop0): Directory bread(block 65) failed [ 575.105278][T19846] FAT-fs (loop0): Directory bread(block 66) failed [ 575.112015][ T26] audit: type=1326 audit(1770112617.381:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.6914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa722b9aeb9 code=0x7ffc0000 [ 575.134856][T19846] FAT-fs (loop0): Directory bread(block 67) failed [ 575.152777][T19846] FAT-fs (loop0): Directory bread(block 68) failed [ 575.169137][T19846] FAT-fs (loop0): Directory bread(block 69) failed [ 575.176197][T19846] FAT-fs (loop0): Directory bread(block 70) failed [ 575.202638][T19846] FAT-fs (loop0): Directory bread(block 71) failed [ 575.228856][T19846] FAT-fs (loop0): Directory bread(block 72) failed [ 575.245293][T19846] FAT-fs (loop0): Directory bread(block 73) failed [ 575.947346][T19885] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6919'. [ 575.991494][T19883] loop0: detected capacity change from 0 to 8192 [ 576.314021][T17935] Process accounting resumed [ 576.612517][T19894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6923'. [ 576.957243][ C0] net_ratelimit: 9790 callbacks suppressed [ 576.957261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.966331][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 576.975823][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.987649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 576.999930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.013686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 577.023779][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.035612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 577.047590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.061429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.028508][T19904] loop0: detected capacity change from 0 to 32768 [ 578.934756][T19904] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 579.371088][T19943] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 579.395515][T19943] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 579.418081][T19943] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 579.431902][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 579.444433][T19943] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 579.471284][T19943] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 579.498369][T19943] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 579.540420][T19943] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 579.586702][T19943] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 579.712498][T19947] loop1: detected capacity change from 0 to 1024 [ 579.723055][T19949] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6947'. [ 579.769589][T19949] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6947'. [ 580.000336][T19953] loop5: detected capacity change from 0 to 764 [ 580.297780][ T4601] hfsplus: b-tree write err: -5, ino 4 [ 580.319404][T19953] rock: directory entry would overflow storage [ 580.348492][T19953] rock: sig=0x4654, size=5, remaining=4 [ 581.167563][T19967] loop5: detected capacity change from 0 to 4096 [ 581.964472][ C1] net_ratelimit: 9635 callbacks suppressed [ 581.964489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 581.965046][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.972775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 581.983122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.995019][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 582.007023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.020812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 582.031075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.043032][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 582.055077][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.352960][T17935] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 582.578057][T17512] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 582.584685][T17512] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 582.905066][T17935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.934295][T17935] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 582.963439][T17935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.000907][T17935] usb 2-1: config 0 descriptor?? [ 583.010361][T19985] ipvlan0: default FDB implementation only supports local addresses [ 583.207965][T19986] loop5: detected capacity change from 0 to 8192 [ 583.250597][T19988] mkiss: ax0: crc mode is auto. [ 583.540011][T17935] hid-picolcd 0003:04D8:C002.0016: unbalanced collection at end of report description [ 583.550834][T17935] hid-picolcd 0003:04D8:C002.0016: device report parse failed [ 583.568409][T17935] hid-picolcd: probe of 0003:04D8:C002.0016 failed with error -22 [ 583.804364][ T4350] usb 2-1: USB disconnect, device number 43 [ 584.047818][T19997] loop0: detected capacity change from 0 to 1024 [ 584.055088][T19997] EXT4-fs: inline encryption not supported [ 584.115601][T19997] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 584.335103][T19997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 584.596890][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 585.368878][T20019] netlink: 'syz.1.6981': attribute type 5 has an invalid length. [ 585.752468][T20028] netlink: 'syz.0.6984': attribute type 12 has an invalid length. [ 585.801557][T20028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6984'. [ 586.057405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 586.058164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 586.078079][T17055] kernel write not supported for file /2862/net/rt_cache (pid: 17055 comm: kworker/1:15) [ 586.102580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 586.109129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 586.111772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 586.127740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 586.228866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 586.237255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 586.240554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 586.353172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 586.974352][ C0] net_ratelimit: 12461 callbacks suppressed [ 586.974369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.976045][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 586.981205][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.993221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 587.005083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.018479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 587.029090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.041075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 587.052956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.066499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 587.627733][T17047] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 587.993616][T17047] usb 2-1: Using ep0 maxpacket: 16 [ 588.118726][T17047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.129715][T17047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.173449][T17047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.254277][T17047] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 588.263374][T17047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.363983][T17047] usb 2-1: config 0 descriptor?? [ 588.884865][T17047] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 588.892191][T17047] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 589.099346][T17047] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 589.148665][T17047] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 589.160510][T17047] microsoft 0003:045E:07DA.0017: no inputs found [ 589.183331][T17047] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 589.264065][T17047] usb 2-1: USB disconnect, device number 44 [ 589.579471][T20061] fido_id[20061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 589.993221][T20076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7007'. [ 590.037421][T20077] loop5: detected capacity change from 0 to 512 [ 590.568366][T20077] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 590.604382][T20077] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.948832][T20098] nbd: socks must be embedded in a SOCK_ITEM attr [ 591.131382][T17512] EXT4-fs (loop5): unmounting filesystem. [ 591.376163][T20105] [ 591.378564][T20105] ====================================================== [ 591.385661][T20105] WARNING: possible circular locking dependency detected [ 591.392812][T20105] syzkaller #0 Not tainted [ 591.397250][T20105] ------------------------------------------------------ [ 591.404278][T20105] syz.4.7022/20105 is trying to acquire lock: [ 591.410355][T20105] ffff888072caf1d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 591.420062][T20105] [ 591.420062][T20105] but task is already holding lock: [ 591.427444][T20105] ffff8880187b1580 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 591.438351][T20105] [ 591.438351][T20105] which lock already depends on the new lock. [ 591.438351][T20105] [ 591.448763][T20105] [ 591.448763][T20105] the existing dependency chain (in reverse order) is: [ 591.457786][T20105] [ 591.457786][T20105] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 591.466498][T20105] down_write+0x36/0x60 [ 591.471213][T20105] process_measurement+0x3a2/0x1c30 [ 591.476950][T20105] ima_file_mmap+0x102/0x150 [ 591.482082][T20105] __se_sys_remap_file_pages+0x559/0x7b0 [ 591.488250][T20105] do_syscall_64+0x4c/0xa0 [ 591.493204][T20105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.499650][T20105] [ 591.499650][T20105] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 591.507232][T20105] __lock_acquire+0x2d07/0x7d10 [ 591.512656][T20105] lock_acquire+0x1bb/0x4a0 [ 591.517708][T20105] down_read_killable+0x4c/0x340 [ 591.523196][T20105] mmap_read_lock_killable+0x1d/0x60 [ 591.529041][T20105] lock_mm_and_find_vma+0x2b1/0x2f0 [ 591.534818][T20105] do_user_addr_fault+0x2db/0xb10 [ 591.540407][T20105] exc_page_fault+0x60/0x100 [ 591.545568][T20105] asm_exc_page_fault+0x22/0x30 [ 591.550959][T20105] fault_in_readable+0x13e/0x1f0 [ 591.556456][T20105] fault_in_iov_iter_readable+0x18e/0x2e0 [ 591.562729][T20105] generic_perform_write+0x1f1/0x5c0 [ 591.568559][T20105] __generic_file_write_iter+0x148/0x2a0 [ 591.574740][T20105] generic_file_write_iter+0xab/0x2e0 [ 591.580670][T20105] do_iter_write+0x642/0xb10 [ 591.585816][T20105] do_pwritev+0x23d/0x3a0 [ 591.590680][T20105] do_syscall_64+0x4c/0xa0 [ 591.595651][T20105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.602107][T20105] [ 591.602107][T20105] other info that might help us debug this: [ 591.602107][T20105] [ 591.612350][T20105] Possible unsafe locking scenario: [ 591.612350][T20105] [ 591.619817][T20105] CPU0 CPU1 [ 591.625206][T20105] ---- ---- [ 591.630603][T20105] lock(&sb->s_type->i_mutex_key#13); [ 591.636111][T20105] lock(&mm->mmap_lock); [ 591.642985][T20105] lock(&sb->s_type->i_mutex_key#13); [ 591.650996][T20105] lock(&mm->mmap_lock); [ 591.655336][T20105] [ 591.655336][T20105] *** DEADLOCK *** [ 591.655336][T20105] [ 591.663487][T20105] 2 locks held by syz.4.7022/20105: [ 591.668688][T20105] #0: ffff888053d34460 (sb_writers#5){.+.+}-{0:0}, at: do_pwritev+0x226/0x3a0 [ 591.677680][T20105] #1: ffff8880187b1580 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 591.689019][T20105] [ 591.689019][T20105] stack backtrace: [ 591.694926][T20105] CPU: 1 PID: 20105 Comm: syz.4.7022 Not tainted syzkaller #0 [ 591.702406][T20105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.712493][T20105] Call Trace: [ 591.715815][T20105] [ 591.718829][T20105] dump_stack_lvl+0x188/0x24e [ 591.723541][T20105] ? load_image+0x400/0x400 [ 591.728068][T20105] ? show_regs_print_info+0x12/0x12 [ 591.733300][T20105] ? print_circular_bug+0x12b/0x1a0 [ 591.738520][T20105] check_noncircular+0x296/0x330 [ 591.743487][T20105] ? add_chain_block+0x940/0x940 [ 591.748457][T20105] ? lockdep_lock+0xf1/0x1f0 [ 591.753076][T20105] ? _find_first_zero_bit+0xcf/0x100 [ 591.758384][T20105] __lock_acquire+0x2d07/0x7d10 [ 591.763262][T20105] ? verify_lock_unused+0x140/0x140 [ 591.768496][T20105] ? cgroup_rstat_updated+0xd7/0x350 [ 591.773800][T20105] ? verify_lock_unused+0x140/0x140 [ 591.779024][T20105] ? verify_lock_unused+0x140/0x140 [ 591.784241][T20105] ? mark_lock+0x94/0x320 [ 591.788588][T20105] lock_acquire+0x1bb/0x4a0 [ 591.793105][T20105] ? mmap_read_lock_killable+0x1d/0x60 [ 591.798605][T20105] ? read_lock_is_recursive+0x10/0x10 [ 591.804006][T20105] ? cmp_ex_search+0x1a/0x70 [ 591.808615][T20105] ? bsearch+0x8a/0xb0 [ 591.812696][T20105] ? fault_in_readable+0x13e/0x1f0 [ 591.817840][T20105] ? search_extable+0x8c/0xd0 [ 591.822536][T20105] ? trim_init_extable+0x3b0/0x3b0 [ 591.827746][T20105] ? mmap_read_lock_killable+0x1d/0x60 [ 591.833227][T20105] down_read_killable+0x4c/0x340 [ 591.838182][T20105] ? mmap_read_lock_killable+0x1d/0x60 [ 591.843651][T20105] mmap_read_lock_killable+0x1d/0x60 [ 591.848951][T20105] lock_mm_and_find_vma+0x2b1/0x2f0 [ 591.854162][T20105] do_user_addr_fault+0x2db/0xb10 [ 591.859235][T20105] ? _raw_spin_unlock_irq+0x1f/0x40 [ 591.864456][T20105] exc_page_fault+0x60/0x100 [ 591.869097][T20105] asm_exc_page_fault+0x22/0x30 [ 591.873966][T20105] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 591.879705][T20105] Code: f8 60 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 d7 60 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 ba 60 [ 591.899343][T20105] RSP: 0018:ffffc9000365f990 EFLAGS: 00050287 [ 591.905430][T20105] RAX: ffffffff81be1199 RBX: 0000000000001000 RCX: 0000000000080000 [ 591.913415][T20105] RDX: ffffc9000e9f2000 RSI: 0000000000021fb9 RDI: 0000000000021fba [ 591.921393][T20105] RBP: 0000000000000000 R08: ffff88802dae9dc0 R09: 0000000000000002 [ 591.929385][T20105] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000142000 [ 591.937372][T20105] R13: 0000000000001000 R14: 0000200000140241 R15: 0000200000141000 [ 591.945355][T20105] ? fault_in_readable+0x139/0x1f0 [ 591.950500][T20105] fault_in_iov_iter_readable+0x18e/0x2e0 [ 591.956257][T20105] generic_perform_write+0x1f1/0x5c0 [ 591.961590][T20105] ? generic_file_direct_write+0x330/0x330 [ 591.967505][T20105] ? __file_remove_privs+0x5f0/0x5f0 [ 591.972804][T20105] ? rwsem_write_trylock+0x135/0x1c0 [ 591.978107][T20105] ? clear_nonspinnable+0x60/0x60 [ 591.983143][T20105] ? generic_write_checks_count+0x3d9/0x4c0 [ 591.989075][T20105] __generic_file_write_iter+0x148/0x2a0 [ 591.994743][T20105] generic_file_write_iter+0xab/0x2e0 [ 592.000138][T20105] do_iter_write+0x642/0xb10 [ 592.004761][T20105] ? vfs_iter_write+0xa0/0xa0 [ 592.009469][T20105] ? rcu_read_lock_any_held+0xb0/0x130 [ 592.014959][T20105] do_pwritev+0x23d/0x3a0 [ 592.019309][T20105] ? do_preadv+0x390/0x390 [ 592.023835][T20105] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 592.029847][T20105] ? lock_chain_count+0x20/0x20 [ 592.034730][T20105] ? lockdep_hardirqs_on+0x94/0x140 [ 592.039966][T20105] ? __x64_sys_pwritev2+0xba/0x100 [ 592.045101][T20105] do_syscall_64+0x4c/0xa0 [ 592.049539][T20105] ? clear_bhb_loop+0x60/0xb0 [ 592.054238][T20105] ? clear_bhb_loop+0x60/0xb0 [ 592.058935][T20105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.064846][T20105] RIP: 0033:0x7fdf9af9aeb9 [ 592.069285][T20105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.088909][T20105] RSP: 002b:00007fdf9be80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 592.097337][T20105] RAX: ffffffffffffffda RBX: 00007fdf9b215fa0 RCX: 00007fdf9af9aeb9 [ 592.105315][T20105] RDX: 0000000000000001 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 592.113300][T20105] RBP: 00007fdf9b008c1f R08: 000000000000000c R09: 0000000000000004 [ 592.121284][T20105] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000000 [ 592.129274][T20105] R13: 00007fdf9b216038 R14: 00007fdf9b215fa0 R15: 00007ffe932f6dd8 [ 592.137266][T20105] [ 592.140357][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.162585][ C0] net_ratelimit: 11143 callbacks suppressed [ 592.162601][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.180839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.193370][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.193907][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 592.205964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.217723][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 592.229853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.244546][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 592.253882][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.265613][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 595.552678][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 597.164341][ C1] net_ratelimit: 33925 callbacks suppressed [ 597.164363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 597.165831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.171974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 597.182915][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.194824][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 597.206819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.220073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 597.230844][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.242707][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:d2:04:36:f1:d6:23, vlan:0) [ 597.254765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)