last executing test programs: 3.353114168s ago: executing program 1 (id=903): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="15ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.265104165s ago: executing program 0 (id=904): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000580)='\x00', 0x1}], 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30b5bf", 0x96}], 0x1, &(0x7f0000000140)=ANY=[], 0x170}}], 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 3.256369126s ago: executing program 1 (id=905): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) 3.115339837s ago: executing program 4 (id=908): socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty}, 0x20) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) lseek(0xffffffffffffffff, 0x401, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e60, 0xfffffffd, @private2, 0xa}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], @ndisc_ra}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x62, 0x5, 0x3b0, 0x0, 0x2a8, 0xffffffff, 0x2a8, 0xe0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @icmp_id}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") 3.008616606s ago: executing program 3 (id=910): set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xd) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff00000000, 0x5, 0xfffffff8, {0x2, 0x3, 0x5, 0xd5c, 0x3ff, 0x0, 0x5, 0x20, 0x4, 0x6000, 0x400, 0xffffffffffffffff, 0x0, 0x6, 0x1}}}, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900)="fc", 0x1}], 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001040)='./bus\x00', &(0x7f0000001080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='contex']) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000400)={[], [{@flag='lazytime'}, {@obj_user={'obj_user', 0x3d, '('}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcsa#\x00'}}]}, 0xfe, 0x51d, &(0x7f00000010c0)="$eJzs3V9rLGcZAPBnJtmcpElNql7UQmuxyjlFz27S2DZ60VYU7wpKvT+GZBNCNtmQ3bQnoUiKH0AQ0YJXXnkj+AEE6UeQQsHei4oieqoXXqgjszt7mm5mmxya3c1Jfj+Y2Xfe+fM8b3Iy+86fMxPAtfV0RLwSERMR8WxEzBf1aTHEcXfIl/vg3ptr+ZDPee3vSSRFXf82Z4vVprsfpVqHR9urjUZ9v5iutXf2aq3Do9tbO6ub9c367vLy0gsrL648v7L44I1aOF2Vt+ulb/35pz/65bdf+u1X3vjDnb/e+kGe/zd7CxyfbsdFeL8zruQ/i/smI2J/GMHGYKJoT2XciQAAcC55H//TEfGFTv9/PiY6vbmO/i7d9OizAwAAAC5C9vJc/CeJyAAAAIAr6+WImIskrRb3AsxFmlar3Xt4PxuPpI1mq/3ljebB7no+L2IhKunGVqO+WNxTuxCVJJ9eKm677U0/1ze9/LWIxyLiJ/MznenqWrOxPu6THwAAAHBNzPYd//9rvnv8DwAAAFwxJc/LAgAAAK6Yheg8y/uU0koAAADgoTTo+v+NEecBAAAADMV3Xn01H7Lee7zXXz882G6+fnu93tqu7hysVdea+3vVzWZzs/PMvp2zttdoNve+GrsHd2vteqtdax0e3dlpHuy272x5fyAAAACMy2Off+f9JCKOvz7TGXJT+WhiwAqeFQBXRvogC/9peHkAozfoax64+ibHnQAwPsfjTgAYt4886qOkU3Dy5p305MK/G2JSAADAhbr5ufLr//khQGXcyQFD9UDX/4ErxfV/uL7Odf3/w5P/7w4zF2C0KnoAcO2d9aqPgQ/vKLv+P1W2YJaduS0AAGCo5jrjJK0W1wLnIk2r1YhHO//Vv5JsbDXqixHxqYj4/XzlRj691F0nEj15AAAAAAAAAAAAAAAAAAAAAAAAADiXLEsiAwAAAK60iPQvSUTMDDg/MJX8ez6KV3q98fPXfnZ3td3eX8rr/3G/vv12Uf/cSE9dAAAAAAP0jtN7x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJE+uPfmWjFMjTLu374REQsfib/WnTMZ053P6ahExCP/TGLyxHpJRExcQPzjtyLi8bL4SZ5WLBRZ9MdPI2JmNPGfzLKsNP7sBcSH6+ydfP/zStnfXxpPdz7L//4ni+GTGrz/S+/v/yYG7P8ePWeMJ977dW1g/Lcinpgs3//04icD4j9TtsGSH8r3v3d0dKqyu/HIfhFxM8rjn4xVa+/s1VqHR7e3dlY365v13eXlpRdWXlx5fmWxtrHVqBfj0jb++Mnf/K+v6r9ZV6f9MSD+whnt/2JeqJyozPrDFMHeu3vvM91ipW8Tnfi3nin//T/+MfHzfxNfKr4H8vk3e+Xjbvmkp3717lOliRXx1we0/6zf/61BG+3z7Hd/+MdzLgoAjEDr8Gh7tdGo7w+98HaWZaOKda7C3uylSOOyFHq9u6GFmL4sLX0YCzciYnRBL+LMFgAAcNl82OkfdyYAAAAAAAAAAAAAAAAAAABwfbUOIx3248T6Yx6Pp6kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/r/wEAAP//7ZzaEA==") r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={r4}) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r5, 0x3, 0xffffffffffffffff, 0x5}) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) socket$netlink(0x10, 0x3, 0x1d) read(r3, &(0x7f0000000000)=""/239, 0xef) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) 2.967349959s ago: executing program 0 (id=911): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000090000008ab2bec8fc360ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.95524248s ago: executing program 2 (id=912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}}, 0x0) 2.357053939s ago: executing program 0 (id=913): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x0, {0x0, 0x80000001, 0x6}}) 1.831046171s ago: executing program 3 (id=914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000400), &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, 0xfffffffffffffffd}}, 0x10) 1.821142152s ago: executing program 4 (id=915): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="15ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.712780821s ago: executing program 2 (id=916): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {{0x6c}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x3c}}, 0x0) 1.693035132s ago: executing program 0 (id=917): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x2}}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1519, &(0x7f0000002280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/240, 0xf0) 1.684684043s ago: executing program 3 (id=918): pipe(&(0x7f0000000e80)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x5761, 0x0) 1.673751724s ago: executing program 1 (id=919): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.535824755s ago: executing program 3 (id=920): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x80fe}}, 0x1c) 1.525058436s ago: executing program 4 (id=921): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000580)='\x00', 0x1}], 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30b5bf", 0x96}], 0x1, &(0x7f0000000140)=ANY=[], 0x170}}], 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 1.500383908s ago: executing program 2 (id=922): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 1.335229192s ago: executing program 3 (id=923): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000001980)={[{@gid}, {@discard}, {@umask={'umask', 0x3d, 0x4ee5}}, {@discard}, {@namecase}, {@fmask={'fmask', 0x3d, 0x2}}, {}, {@allow_utime={'allow_utime', 0x3d, 0x12}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@dmask={'dmask', 0x3d, 0x8}}]}, 0x3, 0x1507, &(0x7f0000000440)="$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") mkdir(&(0x7f0000000380)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 1.289794446s ago: executing program 4 (id=924): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) 538.664736ms ago: executing program 0 (id=925): r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000052c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002040)=[{&(0x7f0000000580)='R', 0x1}], 0x1}}], 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x800, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), 0x4) 497.24029ms ago: executing program 2 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}}, 0x0) 465.790792ms ago: executing program 1 (id=927): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x0, {0x0, 0x80000001, 0x6}}) 408.811966ms ago: executing program 4 (id=928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000400), &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, 0xfffffffffffffffd}}, 0x10) 342.970702ms ago: executing program 3 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0) 254.675039ms ago: executing program 2 (id=930): pipe(&(0x7f0000000e80)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r0, 0x5761, 0x0) 188.258715ms ago: executing program 0 (id=931): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 187.678825ms ago: executing program 1 (id=932): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x0, 0x0, {{0x6c}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x3c}}, 0x0) 142.089029ms ago: executing program 4 (id=933): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x80fe}}, 0x1c) 118.10153ms ago: executing program 2 (id=934): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=935): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) kernel console output (not intermixed with test programs): 66][ T4641] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.648697][ T5433] loop1: detected capacity change from 0 to 1024 [ 185.128013][ T5449] loop4: detected capacity change from 0 to 256 [ 185.231475][ T5448] loop2: detected capacity change from 0 to 4096 [ 185.247751][ T5448] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 185.273843][ T5448] ntfs3: loop2: Failed to load $Volume. [ 185.307440][ T5422] loop0: detected capacity change from 0 to 32768 [ 185.470971][ T5422] XFS (loop0): Mounting V5 Filesystem [ 185.597827][ T5422] XFS (loop0): Ending clean mount [ 185.635256][ T5422] XFS (loop0): Quotacheck needed: Please wait. [ 185.697554][ T5422] XFS (loop0): Quotacheck: Done. [ 185.876948][ T4107] XFS (loop0): Unmounting Filesystem [ 185.886511][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 185.976707][ T5473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 186.220728][ T5484] loop1: detected capacity change from 0 to 256 [ 186.247764][ T1171] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.494337][ T5491] loop3: detected capacity change from 0 to 128 [ 186.549296][ T5491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.583755][ T5491] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038 (0x7fffffff) [ 186.662748][ T1171] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 186.681346][ T1171] usb 5-1: config 0 has no interface number 0 [ 186.689241][ T1171] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.703788][ T1171] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.801881][ T1171] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 186.815618][ T4075] EXT4-fs (loop3): unmounting filesystem. [ 186.832333][ T1171] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 186.842496][ T1171] usb 5-1: Manufacturer: syz [ 186.855683][ T1171] usb 5-1: config 0 descriptor?? [ 187.324825][ T1171] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.000C/input/input9 [ 187.445729][ T1171] sony 0003:054C:03D5.000C: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 187.774367][ T5500] loop2: detected capacity change from 0 to 32768 [ 187.796122][ T5500] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 187.808999][ T5506] loop3: detected capacity change from 0 to 32768 [ 187.813674][ T5500] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 188.004527][ T5500] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 188.024898][ T5506] XFS (loop3): Mounting V5 Filesystem [ 188.101195][ T1171] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 188.134245][ T5506] XFS (loop3): Ending clean mount [ 188.143255][ T5506] XFS (loop3): Quotacheck needed: Please wait. [ 188.151874][ T1171] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 188.214663][ T5506] XFS (loop3): Quotacheck: Done. [ 189.099279][ T3595] usb 5-1: USB disconnect, device number 5 [ 189.133562][ T1171] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 981ms [ 189.166826][ T1171] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 189.185083][ T5500] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 189.201166][ T4075] XFS (loop3): Unmounting Filesystem [ 189.418706][ T5541] loop1: detected capacity change from 0 to 16 [ 189.466465][ T5541] erofs: (device loop1): mounted with root inode @ nid 36. [ 189.531072][ T5546] loop4: detected capacity change from 0 to 512 [ 189.837590][ T5546] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.503: casefold flag without casefold feature [ 189.970029][ T5546] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.503: missing EA_INODE flag [ 190.045740][ T5546] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.503: error while reading EA inode 2 err=-117 [ 190.073311][ T5547] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 190.100804][ T5547] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 190.262074][ T5547] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 190.406249][ T5546] EXT4-fs (loop4): 1 orphan inode deleted [ 190.504150][ T5546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.757876][ T5555] loop2: detected capacity change from 0 to 4096 [ 190.771644][ T5555] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 190.851266][ T4864] EXT4-fs (loop4): unmounting filesystem. [ 190.887917][ T5560] trusted_key: encrypted_key: keylen parameter is missing [ 192.516870][ T5590] loop3: detected capacity change from 0 to 16 [ 192.592141][ T5590] erofs: (device loop3): mounted with root inode @ nid 36. [ 192.619510][ T5594] loop1: detected capacity change from 0 to 512 [ 193.003777][ T5599] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 193.043401][ T5599] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 193.211240][ T5599] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 193.292252][ T5594] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.518: casefold flag without casefold feature [ 193.335193][ T5594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.518: missing EA_INODE flag [ 193.349234][ T5594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.518: error while reading EA inode 2 err=-117 [ 193.362259][ T5594] EXT4-fs (loop1): 1 orphan inode deleted [ 193.368053][ T5594] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 193.575978][ T5569] loop0: detected capacity change from 0 to 32768 [ 193.690652][ T4489] EXT4-fs (loop1): unmounting filesystem. [ 193.692140][ T5609] loop4: detected capacity change from 0 to 4096 [ 193.712620][ T5609] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 193.725312][ T5569] XFS (loop0): Mounting V5 Filesystem [ 193.923419][ T5625] trusted_key: encrypted_key: keylen parameter is missing [ 194.001472][ T5569] XFS (loop0): Ending clean mount [ 194.062519][ T5569] XFS (loop0): Quotacheck needed: Please wait. [ 194.263971][ T1257] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271326][ T1257] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.306322][ T5569] XFS (loop0): Quotacheck: Done. [ 194.405971][ T4107] XFS (loop0): Unmounting Filesystem [ 194.463637][ T5633] loop4: detected capacity change from 0 to 1024 [ 194.599313][ T5633] hfsplus: request for non-existent node 3 in B*Tree [ 194.609018][ T52] block nbd4: Possible stuck request ffff88801fb20000: control (read@0,4096B). Runtime 60 seconds [ 194.701307][ T5633] hfsplus: request for non-existent node 3 in B*Tree [ 194.749340][ T27] audit: type=1800 audit(1720077554.640:21): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.527" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 194.750214][ T5633] hfsplus: bad catalog folder thread [ 194.951820][ T4300] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 195.070937][ T5642] loop1: detected capacity change from 0 to 4096 [ 195.112221][ T5642] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 195.200999][ T5642] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 195.208484][ T4300] usb 4-1: Using ep0 maxpacket: 16 [ 195.332563][ T4300] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.352474][ T4300] usb 4-1: config 1 has no interface number 1 [ 195.371150][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 195.380854][ T4300] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 195.409688][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 195.425942][ T4300] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.457733][ T5652] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 195.488162][ T3674] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 195.502313][ T4489] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 195.642004][ T4300] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.651211][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.679989][ T4300] usb 4-1: Product: syz [ 195.698935][ T4300] usb 4-1: Manufacturer: syz [ 195.719418][ T4300] usb 4-1: SerialNumber: syz [ 195.869434][ T5661] trusted_key: encrypted_key: keylen parameter is missing [ 196.101881][ T4300] usb 4-1: 2:1: invalid format type 0x1005 is detected, processed as PCM [ 196.111201][ T4300] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 196.126552][ T4300] usb 4-1: 2:1 : invalid channels 0 [ 196.896300][ T4300] usb 4-1: USB disconnect, device number 7 [ 196.989319][ T5669] loop3: detected capacity change from 0 to 1024 [ 197.063065][ T5669] hfsplus: request for non-existent node 3 in B*Tree [ 197.106635][ T5645] loop2: detected capacity change from 0 to 32768 [ 197.114506][ T5669] hfsplus: request for non-existent node 3 in B*Tree [ 197.129610][ T5677] loop1: detected capacity change from 0 to 1024 [ 197.141024][ T5645] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 197.167098][ T27] audit: type=1800 audit(1720077557.060:22): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.542" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 197.171694][ T5645] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 197.198413][ T5669] hfsplus: bad catalog folder thread [ 197.288809][ T5645] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 197.301108][ T5680] netlink: 'syz.1.546': attribute type 4 has an invalid length. [ 197.314796][ T3595] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 197.322251][ T3595] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 197.363690][ T5680] netlink: 'syz.1.546': attribute type 4 has an invalid length. [ 197.565646][ T3595] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 243ms [ 197.625382][ T3595] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 197.656384][ T5645] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 197.729859][ T5683] loop3: detected capacity change from 0 to 4096 [ 197.746949][ T5683] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 197.868193][ T5683] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 198.217477][ T1060] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 198.242248][ T4075] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 198.406773][ T5702] fuse: root generation should be zero [ 198.752190][ T4300] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.799912][ T5717] loop3: detected capacity change from 0 to 1024 [ 198.853294][ T5717] hfsplus: request for non-existent node 3 in B*Tree [ 198.860067][ T5717] hfsplus: request for non-existent node 3 in B*Tree [ 198.892888][ T5722] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 198.946291][ T27] audit: type=1800 audit(1720077558.840:23): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.558" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 198.980365][ T5726] hfsplus: bad catalog folder thread [ 199.111926][ T4300] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 199.136163][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.172530][ T4300] usb 5-1: config 0 descriptor?? [ 199.225213][ T4300] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 200.337369][ T1171] usb 5-1: USB disconnect, device number 6 [ 200.644910][ T5720] loop1: detected capacity change from 0 to 32768 [ 200.731983][ T5730] loop2: detected capacity change from 0 to 32768 [ 200.751157][ T5720] XFS (loop1): Mounting V5 Filesystem [ 200.830343][ T5730] XFS (loop2): Mounting V5 Filesystem [ 200.843625][ T5720] XFS (loop1): Ending clean mount [ 200.861287][ T5720] XFS (loop1): Quotacheck needed: Please wait. [ 200.951899][ T5720] XFS (loop1): Quotacheck: Done. [ 201.041857][ T5730] XFS (loop2): Ending clean mount [ 201.064402][ T5730] XFS (loop2): Quotacheck needed: Please wait. [ 201.077888][ T5724] loop0: detected capacity change from 0 to 32768 [ 201.139523][ T5724] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 201.153707][ T4489] XFS (loop1): Unmounting Filesystem [ 201.178637][ T5730] XFS (loop2): Quotacheck: Done. [ 201.178808][ T5724] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 201.243248][ T5724] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 2ms [ 201.268159][ T26] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 201.289767][ T26] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 201.424078][ T4332] XFS (loop2): Unmounting Filesystem [ 201.429782][ T26] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 140ms [ 201.440906][ T26] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 201.454822][ T5724] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 201.719401][ T5768] loop4: detected capacity change from 0 to 1024 [ 201.774885][ T5768] hfsplus: request for non-existent node 3 in B*Tree [ 201.791980][ T5768] hfsplus: request for non-existent node 3 in B*Tree [ 201.860377][ T27] audit: type=1800 audit(1720077561.750:24): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.574" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 201.885197][ T5768] hfsplus: bad catalog folder thread [ 202.984431][ T5788] loop0: detected capacity change from 0 to 1024 [ 203.188512][ T5793] netlink: 'syz.0.577': attribute type 4 has an invalid length. [ 203.317695][ T5796] netlink: 'syz.0.577': attribute type 4 has an invalid length. [ 204.461102][ T5805] loop2: detected capacity change from 0 to 2048 [ 204.594088][ T5805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.716042][ T5813] loop4: detected capacity change from 0 to 1024 [ 204.750081][ T5815] loop1: detected capacity change from 0 to 128 [ 204.774367][ T5813] hfsplus: request for non-existent node 3 in B*Tree [ 204.782917][ T27] audit: type=1800 audit(1720077564.680:25): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.583" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 204.810406][ T5815] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 204.835094][ T5813] hfsplus: request for non-existent node 3 in B*Tree [ 204.873947][ T5815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.917836][ T27] audit: type=1800 audit(1720077564.810:26): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.586" name="bus" dev="loop1" ino=105 res=0 errno=0 [ 204.949827][ T5819] hfsplus: bad catalog folder thread [ 205.001663][ T27] audit: type=1804 audit(1720077564.840:27): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.586" name="/newroot/68/file0/bus" dev="loop1" ino=105 res=1 errno=0 [ 205.023033][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.038615][ T5820] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 205.117349][ T27] audit: type=1804 audit(1720077564.840:28): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.586" name="/newroot/68/file0/bus" dev="loop1" ino=105 res=1 errno=0 [ 205.138748][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.423085][ T27] audit: type=1804 audit(1720077564.840:29): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.586" name="/newroot/68/file0/bus" dev="loop1" ino=105 res=1 errno=0 [ 205.560572][ T5835] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 205.655783][ T5835] loop4: detected capacity change from 0 to 2048 [ 206.135771][ T27] audit: type=1800 audit(1720077564.880:30): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.585" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 206.346626][ T5835] loop4: p1 < > p3 [ 206.355452][ T5835] loop4: p3 size 134217728 extends beyond EOD, truncated [ 206.581696][ T3560] Bluetooth: hci1: command 0x0406 tx timeout [ 206.647981][ T5844] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 206.655155][ T4641] udevd[4641]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 206.686691][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 207.286469][ T5856] loop4: detected capacity change from 0 to 1024 [ 207.328503][ T5811] loop3: detected capacity change from 0 to 32768 [ 207.351704][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 207.363477][ T5811] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 207.372128][ T5338] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.390089][ T5811] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 207.397060][ T5825] loop2: detected capacity change from 0 to 32768 [ 207.406194][ T5825] XFS: ikeep mount option is deprecated. [ 207.406230][ T5858] loop1: detected capacity change from 0 to 2048 [ 207.414721][ T5825] XFS (loop2): sunit and swidth options incompatible with the noalign option [ 207.445242][ T5811] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 207.474527][ T5858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.487076][ T5859] netlink: 'syz.4.598': attribute type 4 has an invalid length. [ 207.502274][ T4189] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 207.519769][ T27] audit: type=1800 audit(1720077567.410:31): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.599" name="file2" dev="loop1" ino=1347 res=0 errno=0 [ 207.551851][ T4189] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 207.741760][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.779153][ T4189] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 227ms [ 207.787588][ T5860] netlink: 'syz.4.598': attribute type 4 has an invalid length. [ 207.801616][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.820280][ T4189] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 207.846101][ T5811] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 207.853647][ T26] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 207.885232][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.940581][ T26] usb 1-1: config 0 descriptor?? [ 208.665787][ T26] hid (null): nested delimiters [ 208.773462][ T26] hid-led 0003:27B8:01ED.000D: nested delimiters [ 208.805409][ T26] hid-led 0003:27B8:01ED.000D: item 0 1 2 10 parsing failed [ 209.092567][ T27] audit: type=1326 audit(1720077568.990:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.0.597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfcb75bd9 code=0x0 [ 209.115504][ T26] hid-led: probe of 0003:27B8:01ED.000D failed with error -22 [ 209.266083][ T26] usb 1-1: USB disconnect, device number 6 [ 209.293743][ T5874] loop2: detected capacity change from 0 to 512 [ 209.493380][ T5874] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.604: iget: bad extended attribute block 117440512 [ 209.548925][ T5874] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.604: couldn't read orphan inode 15 (err -117) [ 209.620597][ T5874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.667733][ T5882] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 209.764358][ T5882] loop4: detected capacity change from 0 to 2048 [ 210.462774][ T5882] loop4: p1 < > p3 [ 210.468092][ T5882] loop4: p3 size 134217728 extends beyond EOD, truncated [ 210.484544][ T5874] netlink: 'syz.2.604': attribute type 4 has an invalid length. [ 210.521437][ T5874] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.604'. [ 210.540292][ T4641] udevd[4641]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 210.563952][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 210.580448][ T5865] loop1: detected capacity change from 0 to 32768 [ 210.605747][ T5887] syz.2.604 (pid 5887) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 210.616543][ T5865] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.603 (5865) [ 210.626858][ T5888] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 211.713898][ T5865] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.797978][ T5865] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 211.814841][ T4332] EXT4-fs (loop2): unmounting filesystem. [ 211.837619][ T5865] BTRFS info (device loop1): using free space tree [ 212.105782][ T5865] BTRFS error (device loop1): open_ctree failed [ 212.213817][ T1171] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.671873][ T1171] usb 3-1: Using ep0 maxpacket: 16 [ 212.693363][ T5930] overlayfs: missing 'lowerdir' [ 212.894521][ T1171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 213.003321][ T1171] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 213.116191][ T1171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 213.501965][ T1171] usb 3-1: New USB device found, idVendor=d625, idProduct=0100, bcdDevice=25.8b [ 213.513355][ T1171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.553370][ T5920] loop3: detected capacity change from 0 to 32768 [ 213.563040][ T1171] usb 3-1: Product: syz [ 213.582575][ T5920] XFS: ikeep mount option is deprecated. [ 213.598827][ T5920] XFS (loop3): sunit and swidth options incompatible with the noalign option [ 213.912950][ T1171] usb 3-1: Manufacturer: syz [ 213.917806][ T1171] usb 3-1: SerialNumber: syz [ 214.725928][ T5947] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 214.756041][ T5947] loop1: detected capacity change from 0 to 2048 [ 214.933663][ T1171] usb 3-1: config 0 descriptor?? [ 215.352141][ T1171] usb 3-1: can't set config #0, error -71 [ 215.381420][ T1171] usb 3-1: USB disconnect, device number 7 [ 215.402891][ T5947] loop1: p1 < > p3 [ 215.407922][ T5947] loop1: p3 size 134217728 extends beyond EOD, truncated [ 215.535994][ T5953] loop4: detected capacity change from 0 to 1024 [ 215.560346][ T4641] udevd[4641]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 215.621273][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 215.703205][ T5953] hfsplus: bad catalog entry type [ 215.852247][ T5948] hfsplus: b-tree write err: -5, ino 4 [ 216.060508][ T5936] loop0: detected capacity change from 0 to 32768 [ 216.115244][ T5968] overlayfs: missing 'lowerdir' [ 216.173429][ T5936] XFS (loop0): Mounting V5 Filesystem [ 216.259640][ T5936] XFS (loop0): Ending clean mount [ 216.389093][ T4107] XFS (loop0): Unmounting Filesystem [ 217.315705][ T3567] Bluetooth: hci4: command 0x0406 tx timeout [ 217.323314][ T3560] Bluetooth: hci3: command 0x0406 tx timeout [ 217.858033][ T6008] loop4: detected capacity change from 0 to 128 [ 217.925976][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 218.021888][ T3020] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 218.137298][ T6018] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 218.472264][ T3020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.557593][ T3020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.771082][ T3020] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 218.962906][ T3020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.251857][ T3020] usb 2-1: config 0 descriptor?? [ 219.289256][ T6034] netlink: 'syz.4.653': attribute type 2 has an invalid length. [ 219.321486][ T6038] loop3: detected capacity change from 0 to 128 [ 219.419391][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 219.508867][ T6042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.657'. [ 219.551952][ T5949] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 219.681199][ T6021] loop0: detected capacity change from 0 to 32768 [ 219.732845][ T6021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.648 (6021) [ 219.879258][ T3020] hid (null): nested delimiters [ 219.887016][ T3020] hid-led 0003:27B8:01ED.000E: nested delimiters [ 219.894252][ T3020] hid-led 0003:27B8:01ED.000E: item 0 1 2 10 parsing failed [ 219.902197][ T3020] hid-led: probe of 0003:27B8:01ED.000E failed with error -22 [ 219.913730][ T6021] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.926301][ T6021] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 219.937676][ T6021] BTRFS info (device loop0): using free space tree [ 220.033247][ T6054] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 220.127602][ T6054] loop3: detected capacity change from 0 to 2048 [ 220.807512][ T5949] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 220.824491][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.843342][ T5949] usb 3-1: config 0 descriptor?? [ 220.873490][ T6054] loop3: p1 < > p3 [ 220.880060][ T6054] loop3: p3 size 134217728 extends beyond EOD, truncated [ 220.895675][ T5949] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 220.984908][ T3680] udevd[3680]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 220.985031][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 221.367186][ T6021] BTRFS error (device loop0): open_ctree failed [ 221.478428][ T6075] usb 3-1: USB disconnect, device number 8 [ 221.490163][ T27] audit: type=1326 audit(1720077581.380:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.1.641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ef8d75bd9 code=0x0 [ 222.759054][ T6058] loop4: detected capacity change from 0 to 32768 [ 222.857053][ T153] usb 2-1: USB disconnect, device number 5 [ 222.889504][ T6091] loop3: detected capacity change from 0 to 128 [ 222.918042][ T6089] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 222.953772][ T6058] XFS (loop4): Mounting V5 Filesystem [ 223.157392][ T6058] XFS (loop4): Ending clean mount [ 223.188461][ T6058] XFS (loop4): Quotacheck needed: Please wait. [ 223.279747][ T6058] XFS (loop4): Quotacheck: Done. [ 223.411851][ T4864] XFS (loop4): Unmounting Filesystem [ 223.750162][ T6124] loop2: detected capacity change from 0 to 2048 [ 223.799727][ T6124] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.846927][ T6124] syz.2.682: attempt to access beyond end of device [ 223.846927][ T6124] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 223.880026][ T6127] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.921643][ T153] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 223.985142][ T6129] loop3: detected capacity change from 0 to 128 [ 224.006524][ T6095] loop1: detected capacity change from 0 to 32768 [ 224.039457][ T6095] XFS: ikeep mount option is deprecated. [ 224.055643][ T6095] XFS (loop1): sunit and swidth options incompatible with the noalign option [ 224.106813][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 224.292112][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.315622][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.339051][ T153] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 224.368661][ T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.412031][ T153] usb 1-1: config 0 descriptor?? [ 224.655385][ T6150] loop3: detected capacity change from 0 to 512 [ 224.701324][ T6150] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 224.721773][ T6152] loop2: detected capacity change from 0 to 128 [ 224.746383][ T6150] EXT4-fs (loop3): orphan cleanup on readonly fs [ 224.771560][ T6150] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.692: bad orphan inode 15 [ 224.806768][ T6150] ext4_test_bit(bit=14, block=18) = 1 [ 224.821499][ T6150] is_bad_inode(inode)=0 [ 224.826376][ T6150] NEXT_ORPHAN(inode)=1023 [ 224.830727][ T6150] max_ino=32 [ 224.842073][ T6150] i_nlink=0 [ 224.849527][ T6152] FAT-fs (loop2): Directory bread(block 2326) failed [ 224.857159][ T3599] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 224.864931][ T6150] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz.3.692: corrupted xattr block 19 [ 224.872254][ T6152] FAT-fs (loop2): Directory bread(block 2326) failed [ 224.901467][ T6150] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 224.902647][ T153] hid (null): nested delimiters [ 224.942401][ T153] hid-led 0003:27B8:01ED.000F: nested delimiters [ 224.948831][ T153] hid-led 0003:27B8:01ED.000F: item 0 1 2 10 parsing failed [ 224.950045][ T6150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.992121][ T153] hid-led: probe of 0003:27B8:01ED.000F failed with error -22 [ 225.044717][ T52] block nbd4: Possible stuck request ffff88801fb20000: control (read@0,4096B). Runtime 90 seconds [ 225.124668][ T4075] EXT4-fs (loop3): unmounting filesystem. [ 225.272010][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.317144][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.332362][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.698'. [ 225.334043][ T3599] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.361157][ T3599] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 225.371038][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.410896][ T3599] usb 2-1: config 0 descriptor?? [ 225.445711][ T27] audit: type=1326 audit(1720077585.340:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.0.680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfcb75bd9 code=0x0 [ 225.492079][ T6162] loop3: detected capacity change from 0 to 2048 [ 225.515098][ T6162] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 225.549112][ T4296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.567871][ T6166] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.568256][ T6162] syz.3.697: attempt to access beyond end of device [ 225.568256][ T6162] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 225.745237][ T4296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.886118][ T4296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.904036][ T3599] kye 0003:0458:0087.0010: unknown main item tag 0x0 [ 225.934985][ T3599] kye 0003:0458:0087.0010: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.1-1/input0 [ 226.179224][ T3020] usb 2-1: USB disconnect, device number 6 [ 226.270123][ T4296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.371671][ T3566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.459378][ T6184] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 226.551169][ T6184] loop3: detected capacity change from 0 to 2048 [ 226.572175][ T3551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.585727][ T3551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.603628][ T3551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.635606][ T3551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.658671][ T3551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.989950][ T6184] loop3: p1 < > p3 [ 227.005666][ T6184] loop3: p3 size 134217728 extends beyond EOD, truncated [ 227.199272][ T155] usb 1-1: USB disconnect, device number 7 [ 227.375718][ T6188] loop4: detected capacity change from 0 to 512 [ 227.386976][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 227.397043][ T6189] loop0: detected capacity change from 0 to 128 [ 227.431057][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 227.458697][ T6188] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 227.480087][ T6188] EXT4-fs (loop4): orphan cleanup on readonly fs [ 227.496606][ T6188] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.708: bad orphan inode 15 [ 227.508924][ T6188] ext4_test_bit(bit=14, block=18) = 1 [ 227.520203][ T6188] is_bad_inode(inode)=0 [ 227.526699][ T6188] NEXT_ORPHAN(inode)=1023 [ 227.532079][ T6188] max_ino=32 [ 227.542047][ T6188] i_nlink=0 [ 227.573907][ T6188] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #15: comm syz.4.708: corrupted xattr block 19 [ 227.589845][ T6194] FAT-fs (loop0): Directory bread(block 2326) failed [ 227.607170][ T6194] FAT-fs (loop0): Directory bread(block 2326) failed [ 227.617605][ T6188] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 227.627777][ T6188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.821366][ T4864] EXT4-fs (loop4): unmounting filesystem. [ 228.598319][ T6182] chnl_net:caif_netlink_parms(): no params data found [ 228.602766][ T6202] loop3: detected capacity change from 0 to 2048 [ 228.621282][ T6202] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 228.673029][ T6206] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.673366][ T6202] syz.3.712: attempt to access beyond end of device [ 228.673366][ T6202] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 228.741811][ T3551] Bluetooth: hci2: command tx timeout [ 228.774784][ T6205] netlink: 'syz.4.711': attribute type 2 has an invalid length. [ 229.163112][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.170419][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.179446][ T6182] device bridge_slave_0 entered promiscuous mode [ 229.190646][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.198109][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.206724][ T6182] device bridge_slave_1 entered promiscuous mode [ 229.291617][ T4298] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 229.440745][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.466732][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.692453][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.818051][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.067137][ T4298] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 230.249760][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.420211][ T4298] usb 2-1: config 0 descriptor?? [ 230.438493][ T6230] loop3: detected capacity change from 0 to 2048 [ 230.488716][ T6230] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.607774][ T6235] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.608708][ T6230] syz.3.724: attempt to access beyond end of device [ 230.608708][ T6230] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 230.640516][ T6182] team0: Port device team_slave_0 added [ 230.669669][ T3567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.681748][ T3567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.687972][ T6182] team0: Port device team_slave_1 added [ 230.694959][ T3567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.703960][ T6237] netlink: 'syz.4.726': attribute type 2 has an invalid length. [ 230.735110][ T3567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.754691][ T3567] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.762259][ T3567] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.821648][ T3567] Bluetooth: hci2: command tx timeout [ 230.992468][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.999465][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.040081][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.058068][ T4298] hid (null): nested delimiters [ 231.075920][ T4298] hid-led 0003:27B8:01ED.0011: nested delimiters [ 231.099408][ T4298] hid-led 0003:27B8:01ED.0011: item 0 1 2 10 parsing failed [ 231.119018][ T4298] hid-led: probe of 0003:27B8:01ED.0011 failed with error -22 [ 231.589855][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.629940][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.810020][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.125191][ T27] audit: type=1326 audit(1720077592.020:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.1.717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ef8d75bd9 code=0x0 [ 232.164079][ T6182] device hsr_slave_0 entered promiscuous mode [ 232.188664][ T6182] device hsr_slave_1 entered promiscuous mode [ 232.197893][ T6265] loop3: detected capacity change from 0 to 512 [ 232.205494][ T6182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.238115][ T6182] Cannot create hsr debugfs directory [ 232.310887][ T6269] netlink: 48 bytes leftover after parsing attributes in process `syz.4.733'. [ 232.317524][ T6265] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 232.391056][ T6265] EXT4-fs (loop3): orphan cleanup on readonly fs [ 232.468518][ T6265] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.731: bad orphan inode 15 [ 232.492590][ T6265] ext4_test_bit(bit=14, block=18) = 1 [ 232.498114][ T6265] is_bad_inode(inode)=0 [ 232.511485][ T6265] NEXT_ORPHAN(inode)=1023 [ 232.534502][ T6265] max_ino=32 [ 232.563033][ T6274] loop4: detected capacity change from 0 to 128 [ 232.566317][ T6265] i_nlink=0 [ 232.586814][ T6265] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz.3.731: corrupted xattr block 19 [ 232.608345][ T6265] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 232.626594][ T6265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.714774][ T6274] FAT-fs (loop4): Directory bread(block 2326) failed [ 232.735487][ T4075] EXT4-fs (loop3): unmounting filesystem. [ 232.746847][ T6274] FAT-fs (loop4): Directory bread(block 2326) failed [ 232.770580][ T4296] device hsr_slave_0 left promiscuous mode [ 232.799604][ T4296] device hsr_slave_1 left promiscuous mode [ 232.821717][ T3567] Bluetooth: hci3: command tx timeout [ 232.840174][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.847846][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.856231][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.863959][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.876710][ T4296] device bridge_slave_1 left promiscuous mode [ 232.885931][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.888461][ T6280] loop3: detected capacity change from 0 to 2048 [ 232.901810][ T3567] Bluetooth: hci2: command tx timeout [ 232.910717][ T6280] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 232.932074][ T6280] syz.3.736: attempt to access beyond end of device [ 232.932074][ T6280] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 232.948960][ T6281] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.965799][ T4296] device bridge_slave_0 left promiscuous mode [ 232.985854][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.054548][ T4296] device veth1_macvtap left promiscuous mode [ 233.060758][ T4296] device veth0_macvtap left promiscuous mode [ 233.067057][ T4296] device veth1_vlan left promiscuous mode [ 233.073244][ T4296] device veth0_vlan left promiscuous mode [ 233.517086][ T155] usb 2-1: USB disconnect, device number 7 [ 233.597943][ T6285] loop1: detected capacity change from 0 to 1024 [ 233.758890][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 233.817085][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 233.877944][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.921383][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.493223][ T6294] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 234.582128][ T6294] loop1: detected capacity change from 0 to 2048 [ 234.655726][ T6294] loop1: p1 < > p3 [ 234.670680][ T6294] loop1: p3 size 134217728 extends beyond EOD, truncated [ 234.913570][ T3567] Bluetooth: hci3: command tx timeout [ 234.981641][ T3567] Bluetooth: hci2: command tx timeout [ 235.264090][ T5338] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.288764][ T6294] loop1: detected capacity change from 0 to 2048 [ 235.289797][ T5338] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.305069][ T5338] Buffer I/O error on dev loop1, logical block 0, async page read [ 235.318595][ T6294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.373143][ T4641] udevd[4641]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 235.374573][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 235.421134][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 235.429697][ T4641] udevd[4641]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 235.546981][ T4296] bond0 (unregistering): Released all slaves [ 235.616661][ T6296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.743'. [ 235.989362][ T6236] chnl_net:caif_netlink_parms(): no params data found [ 236.042607][ T6305] syz.3.746 uses obsolete (PF_INET,SOCK_PACKET) [ 236.884593][ T6330] vivid-006: disconnect [ 236.902610][ T6330] 9pnet_fd: p9_fd_create_unix (6330): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 236.991677][ T3567] Bluetooth: hci3: command tx timeout [ 237.305508][ T6317] vivid-006: reconnect [ 237.532353][ T3551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.551267][ T3551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.560340][ T3551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.599928][ T3551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.607943][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.616099][ T3551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 237.629592][ T3551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.631741][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.712556][ T6236] device bridge_slave_0 entered promiscuous mode [ 237.722116][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.729326][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.740300][ T6236] device bridge_slave_1 entered promiscuous mode [ 237.895022][ T6343] netlink: 48 bytes leftover after parsing attributes in process `syz.1.754'. [ 237.918775][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.947380][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.123800][ T6236] team0: Port device team_slave_0 added [ 238.158422][ T6236] team0: Port device team_slave_1 added [ 238.344243][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.351236][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.421650][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.455794][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.481782][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.559402][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.203189][ T3567] Bluetooth: hci3: command tx timeout [ 239.701737][ T3551] Bluetooth: hci5: command tx timeout [ 239.905346][ T6182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.955988][ T6236] device hsr_slave_0 entered promiscuous mode [ 239.993540][ T6236] device hsr_slave_1 entered promiscuous mode [ 240.003534][ T6236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.011236][ T6236] Cannot create hsr debugfs directory [ 240.055994][ T6182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.112136][ T6331] chnl_net:caif_netlink_parms(): no params data found [ 240.214803][ T6182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.377408][ T6382] vivid-006: disconnect [ 240.397074][ T6382] 9pnet_fd: p9_fd_create_unix (6382): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 240.887181][ T6375] vivid-006: reconnect [ 241.784022][ T3551] Bluetooth: hci5: command tx timeout [ 242.088473][ T6182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.511901][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.519229][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.537175][ T6331] device bridge_slave_0 entered promiscuous mode [ 242.553887][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.561034][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.579294][ T6331] device bridge_slave_1 entered promiscuous mode [ 242.639338][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.110164][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.677175][ T6236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.715994][ T6331] team0: Port device team_slave_0 added [ 243.783898][ T6331] team0: Port device team_slave_1 added [ 243.827720][ T6236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.862535][ T3551] Bluetooth: hci5: command tx timeout [ 243.965581][ T6236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.984733][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.992083][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.033677][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.131733][ T6075] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 244.170443][ T4296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.233573][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.289749][ T6236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.337624][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.357651][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.428967][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.495808][ T4296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.551921][ T6075] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 244.570386][ T6075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.619160][ T6075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.648362][ T6075] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 244.769113][ T4296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.781994][ T6075] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 244.810662][ T6075] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 244.860140][ T6075] usb 4-1: Manufacturer: syz [ 244.929145][ T6075] usb 4-1: config 0 descriptor?? [ 244.989120][ T4296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.038082][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.052641][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.090717][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.120054][ T6331] device hsr_slave_0 entered promiscuous mode [ 245.155628][ T6331] device hsr_slave_1 entered promiscuous mode [ 245.192395][ T6331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.221131][ T6331] Cannot create hsr debugfs directory [ 245.239914][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.270813][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.280005][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.287221][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.369906][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.378407][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.387743][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.396778][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.404009][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.412097][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.429530][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.443798][ T6075] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 245.481142][ T6075] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 245.534320][ T6075] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 245.580537][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.591333][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.616335][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.642709][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.725840][ T6236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.736507][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.745424][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.756274][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.799126][ T6236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.852597][ T153] usb 4-1: USB disconnect, device number 8 [ 245.915216][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.940728][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.941889][ T3567] Bluetooth: hci5: command tx timeout [ 245.965416][ T6454] loop1: detected capacity change from 0 to 64 [ 245.998316][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.091829][ T6236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.430486][ T6236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.428032][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.542058][ T3567] Bluetooth: hci0: command 0x0406 tx timeout [ 247.612494][ T3598] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 247.661587][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.761922][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.770118][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.968691][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.977287][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.985300][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.011701][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.031860][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.049140][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.074876][ T3598] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 248.085184][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.092403][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.099864][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.110404][ T3598] usb 2-1: config 0 descriptor?? [ 248.116265][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.260514][ T6493] vivid-006: disconnect [ 248.278618][ T6493] 9pnet_fd: p9_fd_create_unix (6493): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 248.829268][ T6489] vivid-006: reconnect [ 248.917568][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.930527][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.937726][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.946339][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.969370][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.046446][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.050382][ T6495] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 249.145241][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.283211][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.300837][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.318872][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.330781][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.416376][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.432386][ T3598] hid (null): nested delimiters [ 249.440486][ T3598] hid-led 0003:27B8:01ED.0013: nested delimiters [ 249.459351][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.478647][ T3598] hid-led 0003:27B8:01ED.0013: item 0 1 2 10 parsing failed [ 249.489677][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.503100][ T6075] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 249.507698][ T3598] hid-led: probe of 0003:27B8:01ED.0013 failed with error -22 [ 249.519715][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.539952][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.670787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.700457][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.835327][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.853083][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.866161][ T27] audit: type=1326 audit(1720077609.760:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.1.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ef8d75bd9 code=0x0 [ 249.892153][ T6075] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 249.911720][ T6075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.931679][ T6075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.968416][ T6075] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 249.984708][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.998685][ T6182] device veth0_vlan entered promiscuous mode [ 250.015390][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.033387][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.082498][ T6182] device veth1_vlan entered promiscuous mode [ 250.113287][ T6075] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 250.126237][ T6075] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 250.144650][ T6075] usb 4-1: Manufacturer: syz [ 250.158334][ T6075] usb 4-1: config 0 descriptor?? [ 250.338113][ T6182] device veth0_macvtap entered promiscuous mode [ 250.357015][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.374704][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.393160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.420245][ T6331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.466794][ T6331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.534114][ T6331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.558260][ T6182] device veth1_macvtap entered promiscuous mode [ 250.567672][ T6331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.627438][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.636923][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.647000][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.663704][ T6075] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 250.676345][ T6075] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 250.703780][ T6075] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 250.807817][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.832617][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.853867][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.869774][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.884941][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.902625][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.922700][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.941273][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.971281][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.001691][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.017113][ T3593] usb 4-1: USB disconnect, device number 9 [ 251.038152][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.060159][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.113122][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.132091][ T3597] usb 2-1: USB disconnect, device number 8 [ 251.133792][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.219480][ T4296] device hsr_slave_0 left promiscuous mode [ 251.243183][ T4296] device hsr_slave_1 left promiscuous mode [ 251.253552][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.261294][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.277765][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.289222][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.303265][ T4296] device bridge_slave_1 left promiscuous mode [ 251.309864][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.328568][ T4296] device bridge_slave_0 left promiscuous mode [ 251.339699][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.368957][ T4296] device hsr_slave_0 left promiscuous mode [ 251.380508][ T4296] device hsr_slave_1 left promiscuous mode [ 251.402310][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.413936][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.429547][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.440740][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.455478][ T4296] device bridge_slave_1 left promiscuous mode [ 251.480758][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.490723][ T4296] device bridge_slave_0 left promiscuous mode [ 251.506618][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.629739][ T4296] device veth1_macvtap left promiscuous mode [ 251.637925][ T4296] device veth0_macvtap left promiscuous mode [ 251.652223][ T4296] device veth1_vlan left promiscuous mode [ 251.658394][ T4296] device veth0_vlan left promiscuous mode [ 251.676878][ T4296] device veth1_macvtap left promiscuous mode [ 251.691257][ T4296] device veth0_macvtap left promiscuous mode [ 251.708087][ T4296] device veth1_vlan left promiscuous mode [ 251.727785][ T4296] device veth0_vlan left promiscuous mode [ 252.443838][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 252.478149][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 252.524451][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.566186][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.996853][ T4296] bond0 (unregistering): Released all slaves [ 253.539367][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 253.587918][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 253.627089][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.674339][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.120915][ T4296] bond0 (unregistering): Released all slaves [ 254.213873][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.224578][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.235263][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.246273][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.256624][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.267665][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.279812][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.305889][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.323589][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.387816][ T6182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.398731][ T6182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.416941][ T6182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.431749][ T6182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.467339][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.481288][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.498358][ T6236] device veth0_vlan entered promiscuous mode [ 254.562276][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.571129][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.680948][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.702653][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.727363][ T6236] device veth1_vlan entered promiscuous mode [ 254.836298][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.876770][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.142839][ T6569] vivid-006: disconnect [ 255.161060][ T6569] 9pnet_fd: p9_fd_create_unix (6569): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 255.218941][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.617505][ T6561] vivid-006: reconnect [ 255.695061][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.712599][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.720445][ T1257] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.727050][ T1257] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.732511][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.741878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.750203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.758387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.787717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.833324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.852777][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.859937][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.877007][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.902105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.910707][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.917903][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.933498][ T6579] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 255.950641][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.971981][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.000487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.032732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.077294][ T52] block nbd4: Possible stuck request ffff88801fb20000: control (read@0,4096B). Runtime 120 seconds [ 256.086960][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.112599][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.172559][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.202393][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.229117][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.260664][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.304649][ T6236] device veth0_macvtap entered promiscuous mode [ 256.383449][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.392320][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.422438][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.443289][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.484612][ T3566] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.497676][ T6236] device veth1_macvtap entered promiscuous mode [ 256.520321][ T3566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.532604][ T3566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.543979][ T3566] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.561937][ T3566] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 256.581809][ T3566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.589592][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.628756][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.643212][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.676106][ T6331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.709514][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.784944][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.801635][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.842463][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.863666][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.883641][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.901924][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.923307][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.940935][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.983437][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.999837][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.023565][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.054001][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.082812][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.111870][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.168259][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.249753][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.269779][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.291542][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.312248][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.341546][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.368576][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.399936][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.716116][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.740540][ T6627] loop3: detected capacity change from 0 to 512 [ 257.794038][ T6627] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 257.839731][ T6628] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 257.928528][ T6628] loop2: detected capacity change from 0 to 2048 [ 257.974999][ T6628] loop2: p1 < > p3 [ 257.984767][ T6628] loop2: p3 size 134217728 extends beyond EOD, truncated [ 258.181872][ T6628] loop2: detected capacity change from 0 to 2048 [ 258.219245][ T6628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.525714][ T6627] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.579990][ T5338] udevd[5338]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 258.602252][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.614064][ T6236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.633096][ T4641] udevd[4641]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 258.637648][ T6236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.652727][ T6236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.658470][ T6627] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 258.661587][ T6236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.677150][ T3566] Bluetooth: hci6: command tx timeout [ 258.686102][ T6627] EXT4-fs (loop3): 1 truncate cleaned up [ 258.722861][ T6627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.905763][ T6627] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 258.936240][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.950301][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.972955][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.007702][ T4075] EXT4-fs (loop3): unmounting filesystem. [ 259.205635][ T4895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.229399][ T4895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.266660][ T6641] loop3: detected capacity change from 0 to 1024 [ 259.284816][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.317983][ T6591] chnl_net:caif_netlink_parms(): no params data found [ 259.416822][ T4895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.450275][ T4895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.514568][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.558235][ T6641] hfsplus: request for non-existent node 33423360 in B*Tree [ 259.616588][ T6641] hfsplus: request for non-existent node 33423360 in B*Tree [ 259.643013][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.650233][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.669868][ T6591] device bridge_slave_0 entered promiscuous mode [ 259.711627][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.718807][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.748636][ T6648] loop0: detected capacity change from 0 to 512 [ 259.755726][ T6591] device bridge_slave_1 entered promiscuous mode [ 259.812275][ T6648] ext2: Unknown parameter 'mask' [ 259.904764][ T4641] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.918292][ T27] audit: type=1400 audit(1720077619.810:37): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A2020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153 pid=6650 comm="syz.3.808" [ 260.035939][ T6655] loop0: detected capacity change from 0 to 2048 [ 260.045466][ T6654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.053390][ T6654] IPv6: NLM_F_CREATE should be set when creating new route [ 260.065594][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.111885][ T6655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 260.144647][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.331607][ T6664] binder_alloc: 6663: pid 6663 spamming oneway? 1 buffers allocated for a total size of 4096 [ 260.331812][ T6591] team0: Port device team_slave_0 added [ 260.387144][ T6591] team0: Port device team_slave_1 added [ 260.465479][ T6667] loop2: detected capacity change from 0 to 2048 [ 260.517576][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.533631][ T5338] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.554978][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.556815][ T6669] loop3: detected capacity change from 0 to 2048 [ 260.628355][ T6236] EXT4-fs (loop0): unmounting filesystem. [ 260.684857][ T6669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.741674][ T3566] Bluetooth: hci6: command tx timeout [ 260.748083][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.933810][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.940905][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.166808][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.189150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.440678][ T6678] loop0: detected capacity change from 0 to 512 [ 262.234056][ T6681] vivid-006: disconnect [ 262.545021][ T6676] sched: RT throttling activated [ 262.917809][ T6681] 9pnet_fd: p9_fd_create_unix (6681): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 262.955417][ T3566] Bluetooth: hci6: command tx timeout [ 263.175399][ T6675] vivid-006: reconnect [ 263.329362][ T6678] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 263.337815][ T6678] System zones: 0-2, 18-18, 34-35 [ 263.357853][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.366850][ T6678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 263.374978][ T6331] device veth0_vlan entered promiscuous mode [ 263.376190][ T6678] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 263.466929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.498290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.681072][ T6236] EXT4-fs (loop0): unmounting filesystem. [ 263.693743][ T6331] device veth1_vlan entered promiscuous mode [ 263.729177][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.750034][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.768327][ T6694] binder_alloc: 6693: pid 6693 spamming oneway? 1 buffers allocated for a total size of 4096 [ 263.788243][ T6591] device hsr_slave_0 entered promiscuous mode [ 263.847323][ T6591] device hsr_slave_1 entered promiscuous mode [ 263.961068][ T6698] loop2: detected capacity change from 0 to 512 [ 264.006031][ T6698] ext2: Unknown parameter 'mask' [ 264.060261][ T6701] loop3: detected capacity change from 0 to 2048 [ 264.086898][ T5338] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.135035][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.153725][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.205036][ T6331] device veth0_macvtap entered promiscuous mode [ 264.214823][ T6701] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.279682][ T6705] loop2: detected capacity change from 0 to 2048 [ 264.285289][ T6704] loop0: detected capacity change from 0 to 2048 [ 264.323085][ T6702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.330399][ T6702] IPv6: NLM_F_CREATE should be set when creating new route [ 264.368299][ T5338] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.434285][ T6705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 264.603526][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.657238][ T6331] device veth1_macvtap entered promiscuous mode [ 264.859364][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.902627][ T6182] EXT4-fs (loop2): unmounting filesystem. [ 264.908829][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.932569][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.362717][ T6715] vivid-006: disconnect [ 265.389187][ T6715] 9pnet_fd: p9_fd_create_unix (6715): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 265.400831][ T3566] Bluetooth: hci6: command tx timeout [ 265.623283][ T6711] vivid-006: reconnect [ 265.712363][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.759292][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.769898][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.779856][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.810880][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.851556][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.855735][ T6720] loop3: detected capacity change from 0 to 64 [ 265.902766][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.933661][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.052813][ T6727] binder_alloc: 6726: pid 6726 spamming oneway? 1 buffers allocated for a total size of 4096 [ 266.280725][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.301419][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.410510][ T6733] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 266.503150][ T6733] loop0: detected capacity change from 0 to 2048 [ 267.103489][ T6737] loop2: detected capacity change from 0 to 512 [ 267.189671][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.203796][ T6733] loop0: p1 < > p3 [ 267.208801][ T6733] loop0: p3 size 134217728 extends beyond EOD, truncated [ 267.239436][ T3680] udevd[3680]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 267.264563][ T3635] udevd[3635]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 267.299441][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.327176][ T6737] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.837: inode #1: comm syz.2.837: iget: illegal inode # [ 267.362725][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.379819][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.395143][ T6737] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.837: error while reading EA inode 1 err=-117 [ 267.427753][ T6737] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.837: inode #1: comm syz.2.837: iget: illegal inode # [ 267.458523][ T6737] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.837: error while reading EA inode 1 err=-117 [ 267.518984][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.519711][ T6744] loop0: detected capacity change from 0 to 8 [ 267.536174][ T6737] EXT4-fs (loop2): 1 orphan inode deleted [ 267.536880][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.557098][ T6737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.563395][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.577328][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.616060][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.628996][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.640959][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.660323][ T6745] EXT4-fs error (device loop2): ext4_lookup:1855: inode #15: comm syz.2.837: unexpected EA_INODE flag [ 267.683609][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.703597][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.732059][ T6331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.741617][ T5338] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.751200][ T27] audit: type=1326 audit(1720077627.640:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 267.764177][ T6331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.811654][ T27] audit: type=1326 audit(1720077627.640:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 267.913398][ T6331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.960348][ T27] audit: type=1326 audit(1720077627.640:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 267.977194][ T6331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.019724][ T27] audit: type=1326 audit(1720077627.640:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 268.022929][ T6182] EXT4-fs (loop2): unmounting filesystem. [ 268.046263][ T27] audit: type=1326 audit(1720077627.640:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 268.073390][ T6746] netlink: 'syz.0.838': attribute type 11 has an invalid length. [ 268.170152][ T27] audit: type=1326 audit(1720077627.640:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 268.206699][ T6591] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.235641][ T27] audit: type=1326 audit(1720077627.640:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 268.704945][ T6755] vivid-006: disconnect [ 268.739769][ T27] audit: type=1326 audit(1720077627.640:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 268.796385][ T6756] 9pnet_fd: p9_fd_create_unix (6756): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 268.891676][ T3598] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 269.218765][ T6747] vivid-006: reconnect [ 269.248618][ T27] audit: type=1326 audit(1720077627.640:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 269.288977][ T27] audit: type=1326 audit(1720077627.640:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 269.345730][ T6591] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.604625][ T6591] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.641060][ T6760] loop3: detected capacity change from 0 to 64 [ 269.676509][ T3638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.702868][ T3638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.733191][ T3598] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 269.744676][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.783445][ T3598] usb 1-1: config 0 descriptor?? [ 269.828036][ T3598] dw2102: su3000_identify_state [ 269.841631][ T3598] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 269.848930][ T3598] dw2102: su3000_power_ctrl: 1, initialized 0 [ 269.864446][ T3598] dvb-usb: bulk message failed: -22 (2/0) [ 269.889721][ T3598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.910329][ T6591] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.929654][ T3598] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 269.930422][ T6750] loop2: detected capacity change from 0 to 32768 [ 269.948478][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.965222][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.969856][ T3598] usb 1-1: media controller created [ 269.999642][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.004068][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 270.024630][ T3598] dw2102: i2c transfer failed. [ 270.032300][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 270.038799][ T3598] dw2102: i2c transfer failed. [ 270.046388][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 270.048835][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.065149][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.126545][ T3598] dw2102: i2c transfer failed. [ 270.135894][ T6750] XFS (loop2): Mounting V5 Filesystem [ 270.151166][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 270.161698][ T3598] dw2102: i2c transfer failed. [ 270.167293][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 270.181604][ T3598] dw2102: i2c transfer failed. [ 270.186970][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 270.207230][ T3598] dw2102: i2c transfer failed. [ 270.232080][ T3598] dvb-usb: MAC address: 02:02:02:02:02:02 [ 270.258283][ T6591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.319986][ T3598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.371772][ T3598] dvb-usb: bulk message failed: -22 (3/0) [ 270.377662][ T3598] dw2102: command 0x0e transfer failed. [ 270.393056][ T3598] dvb-usb: bulk message failed: -22 (3/0) [ 270.399120][ T3598] dw2102: command 0x0e transfer failed. [ 270.425624][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.431714][ T6750] XFS (loop2): Ending clean mount [ 270.441831][ T6591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.458596][ T6750] XFS (loop2): Quotacheck needed: Please wait. [ 270.470930][ T6591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.496595][ T6591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.578744][ T6750] XFS (loop2): Quotacheck: Done. [ 270.642266][ T6182] XFS (loop2): Unmounting Filesystem [ 270.728371][ T3598] dvb-usb: bulk message failed: -22 (3/0) [ 270.734359][ T3598] dw2102: command 0x0e transfer failed. [ 270.739986][ T3598] dvb-usb: bulk message failed: -22 (3/0) [ 270.754960][ T3598] dw2102: command 0x0e transfer failed. [ 270.766715][ T3598] dvb-usb: bulk message failed: -22 (1/0) [ 270.773307][ T3598] dw2102: command 0x51 transfer failed. [ 270.778900][ T3598] dvb-usb: bulk message failed: -22 (5/0) [ 270.785029][ T3598] dw2102: i2c probe for address 0x68 failed. [ 270.791933][ T3598] dvb-usb: bulk message failed: -22 (5/0) [ 270.821897][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.883817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.908345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.940787][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.983341][ T3598] dw2102: i2c probe for address 0x69 failed. [ 270.989888][ T3598] dvb-usb: bulk message failed: -22 (5/0) [ 270.995776][ T3598] dw2102: i2c probe for address 0x6a failed. [ 271.001874][ T3598] dw2102: probing for demodulator failed. Is the external power switched on? [ 271.010760][ T3598] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 271.048739][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.079898][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.183576][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.190777][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.363065][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.414603][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.492199][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.540076][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.547380][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.657303][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.674197][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.692326][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.715416][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.786727][ T6785] loop4: detected capacity change from 0 to 8 [ 271.826452][ T6591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.847556][ T6591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.994639][ T6773] loop3: detected capacity change from 0 to 40427 [ 272.010465][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.018793][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.052784][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.072375][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.082552][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.094206][ T6787] netlink: 'syz.4.849': attribute type 11 has an invalid length. [ 272.122358][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.142514][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.161768][ T3598] rc_core: IR keymap rc-tt-1500 not found [ 272.174330][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.175435][ T3598] Registered IR keymap rc-empty [ 272.190153][ T6773] F2FS-fs (loop3): invalid crc value [ 272.222866][ T3598] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 272.255106][ T6773] F2FS-fs (loop3): Found nat_bits in checkpoint [ 272.262596][ T3598] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 272.288596][ T3598] dvb-usb: schedule remote query interval to 250 msecs. [ 272.328701][ T3598] dw2102: su3000_power_ctrl: 0, initialized 1 [ 272.348868][ T3598] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 272.397949][ T3598] usb 1-1: USB disconnect, device number 8 [ 272.533237][ T3598] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 272.614686][ T6773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 272.735288][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.751720][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.787614][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.844032][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.844769][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.878350][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.879085][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.880014][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.880620][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.886243][ T6591] device veth0_vlan entered promiscuous mode [ 272.894717][ T6591] device veth1_vlan entered promiscuous mode [ 272.935788][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.936480][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.937046][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.937651][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.942874][ T6591] device veth0_macvtap entered promiscuous mode [ 272.948397][ T6591] device veth1_macvtap entered promiscuous mode [ 272.989974][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.990001][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.990014][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.990030][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.990043][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.990059][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.990072][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.990087][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.990100][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.990134][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.990147][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.990162][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.998891][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.999065][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.999899][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.000556][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.001206][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.001607][ T6802] loop4: detected capacity change from 0 to 512 [ 273.002191][ T6802] ext2: Unknown parameter 'obj_user' [ 273.019545][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.019570][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.019584][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.019599][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.019613][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.019628][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.019641][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.019655][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.019669][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.019684][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.019696][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.019711][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.027975][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.028108][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.028821][ T3020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.038824][ T6591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.038867][ T6591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.038899][ T6591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.038931][ T6591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.043473][ T3598] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 273.046696][ T5338] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.067835][ T4075] syz-executor: attempt to access beyond end of device [ 273.067835][ T4075] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.094819][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 273.094836][ T27] audit: type=1326 audit(1720077632.990:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6799 comm="syz.4.851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7575975bd9 code=0x0 [ 273.681804][ T3598] usb 1-1: Using ep0 maxpacket: 16 [ 273.801849][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.822798][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.851669][ T3598] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.898971][ T3598] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 273.949253][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.950422][ T6808] loop3: detected capacity change from 0 to 2048 [ 273.977956][ T6808] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.988225][ T3598] usb 1-1: config 0 descriptor?? [ 274.290388][ T6814] loop4: detected capacity change from 0 to 512 [ 274.335766][ T6814] ext2: Unknown parameter 'mask' [ 274.498595][ T6816] loop3: detected capacity change from 0 to 512 [ 274.544626][ T3793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.650197][ T3793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.743300][ T6816] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 274.752046][ T6816] System zones: 0-2, 18-18, 34-35 [ 274.816085][ T6816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 274.826025][ T6816] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038 (0x7fffffff) [ 275.144683][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.252124][ T6820] fuse: Bad value for 'fd' [ 275.272802][ T3793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.304228][ T3793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.345812][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.512986][ T5338] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.552654][ T4075] EXT4-fs (loop3): unmounting filesystem. [ 275.600477][ T6823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.607792][ T6823] IPv6: NLM_F_CREATE should be set when creating new route [ 275.696256][ T3598] uclogic 0003:5543:0064.0015: unknown main item tag 0x0 [ 275.714322][ T3598] uclogic 0003:5543:0064.0015: No inputs registered, leaving [ 275.733143][ T3598] uclogic 0003:5543:0064.0015: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0 [ 275.775218][ T6824] loop4: detected capacity change from 0 to 2048 [ 275.865338][ T6824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 275.898901][ T14] usb 1-1: USB disconnect, device number 9 [ 275.977294][ T6836] loop2: detected capacity change from 0 to 2048 [ 276.009706][ T6841] capability: warning: `syz.1.862' uses 32-bit capabilities (legacy support in use) [ 276.190092][ T6331] EXT4-fs (loop4): unmounting filesystem. [ 276.290578][ T6843] loop1: detected capacity change from 0 to 512 [ 276.345068][ T6843] ext2: Unknown parameter 'obj_user' [ 276.367362][ T27] audit: type=1326 audit(1720077636.260:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.1.863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bf1d75bd9 code=0x0 [ 276.604138][ T6858] loop0: detected capacity change from 0 to 8 [ 276.665769][ T6846] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.685232][ T27] audit: type=1326 audit(1720077636.580:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 276.819969][ T27] audit: type=1326 audit(1720077636.580:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 276.843419][ T27] audit: type=1326 audit(1720077636.580:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 276.895167][ T3598] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 276.923219][ T27] audit: type=1326 audit(1720077636.580:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 276.949883][ T27] audit: type=1326 audit(1720077636.580:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 276.975468][ T6859] netlink: 'syz.0.866': attribute type 11 has an invalid length. [ 276.978498][ T27] audit: type=1326 audit(1720077636.580:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 277.027556][ T27] audit: type=1326 audit(1720077636.580:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 277.061844][ T27] audit: type=1326 audit(1720077636.580:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.0.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 277.266813][ T3598] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 277.291878][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.318707][ T3598] usb 4-1: config 0 descriptor?? [ 277.384276][ T3598] dw2102: su3000_identify_state [ 277.390954][ T3598] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 277.416739][ T3598] dw2102: su3000_power_ctrl: 1, initialized 0 [ 277.444402][ T3598] dvb-usb: bulk message failed: -22 (2/0) [ 277.465787][ T3598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.512026][ T3598] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 277.561201][ T3598] usb 4-1: media controller created [ 277.588961][ T6852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.602004][ T6852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.611705][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 277.617710][ T3598] dw2102: i2c transfer failed. [ 277.661926][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 277.698339][ T3598] dw2102: i2c transfer failed. [ 277.709273][ T6885] loop1: detected capacity change from 0 to 256 [ 277.721780][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 277.751873][ T3598] dw2102: i2c transfer failed. [ 277.756737][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 277.797310][ T3598] dw2102: i2c transfer failed. [ 277.821741][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 277.828916][ T3598] dw2102: i2c transfer failed. [ 277.834953][ T6882] loop2: detected capacity change from 0 to 4096 [ 277.851643][ T3598] dvb-usb: bulk message failed: -22 (6/0) [ 277.873369][ T3598] dw2102: i2c transfer failed. [ 277.879353][ T3598] dvb-usb: MAC address: 02:02:02:02:02:02 [ 277.887868][ T6882] NILFS (loop2): invalid segment: Checksum error in segment payload [ 277.921785][ T6882] NILFS (loop2): trying rollback from an earlier position [ 277.958806][ T3598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.982813][ T6882] NILFS (loop2): recovery complete [ 278.030034][ T6896] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.033531][ T3598] dvb-usb: bulk message failed: -22 (3/0) [ 278.081693][ T3598] dw2102: command 0x0e transfer failed. [ 278.087311][ T3598] dvb-usb: bulk message failed: -22 (3/0) [ 278.116214][ T6882] netlink: 104 bytes leftover after parsing attributes in process `syz.2.876'. [ 278.131873][ T3598] dw2102: command 0x0e transfer failed. [ 278.165619][ T6898] loop0: detected capacity change from 0 to 256 [ 278.224720][ T5338] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.399572][ T6908] loop0: detected capacity change from 0 to 8 [ 278.451819][ T3598] dvb-usb: bulk message failed: -22 (3/0) [ 278.457616][ T3598] dw2102: command 0x0e transfer failed. [ 278.483838][ T3598] dvb-usb: bulk message failed: -22 (3/0) [ 278.489635][ T3598] dw2102: command 0x0e transfer failed. [ 278.536282][ T3598] dvb-usb: bulk message failed: -22 (1/0) [ 278.559473][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 278.559490][ T27] audit: type=1326 audit(1720077638.450:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 278.741121][ T27] audit: type=1326 audit(1720077638.490:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 278.798264][ T3598] dw2102: command 0x51 transfer failed. [ 278.804125][ T3598] dvb-usb: bulk message failed: -22 (5/0) [ 278.809909][ T3598] dw2102: i2c probe for address 0x68 failed. [ 278.816068][ T3598] dvb-usb: bulk message failed: -22 (5/0) [ 278.821925][ T3598] dw2102: i2c probe for address 0x69 failed. [ 278.827959][ T3598] dvb-usb: bulk message failed: -22 (5/0) [ 278.833802][ T3598] dw2102: i2c probe for address 0x6a failed. [ 278.839819][ T3598] dw2102: probing for demodulator failed. Is the external power switched on? [ 278.848762][ T3598] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 278.861208][ T6920] netlink: 'syz.0.888': attribute type 11 has an invalid length. [ 278.951363][ T27] audit: type=1326 audit(1720077638.490:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 279.005502][ T27] audit: type=1326 audit(1720077638.490:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 279.041294][ T27] audit: type=1326 audit(1720077638.490:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 279.064526][ T3598] rc_core: IR keymap rc-tt-1500 not found [ 279.072807][ T3598] Registered IR keymap rc-empty [ 279.078597][ T3598] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 279.089349][ T3598] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 279.100762][ T27] audit: type=1326 audit(1720077638.490:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 279.127644][ T3598] dvb-usb: schedule remote query interval to 250 msecs. [ 279.135520][ T3598] dw2102: su3000_power_ctrl: 0, initialized 1 [ 279.142021][ T3598] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 279.150844][ T27] audit: type=1326 audit(1720077638.490:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 279.285858][ T27] audit: type=1326 audit(1720077638.490:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 279.315519][ T3598] usb 4-1: USB disconnect, device number 10 [ 279.435622][ T6928] loop2: detected capacity change from 0 to 512 [ 279.624939][ T6928] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 279.633413][ T6928] System zones: 0-2, 18-18, 34-35 [ 279.658003][ T27] audit: type=1326 audit(1720077638.490:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 279.743266][ T6928] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 279.752782][ T6928] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 280.162340][ T6182] EXT4-fs (loop2): unmounting filesystem. [ 280.188855][ T27] audit: type=1326 audit(1720077638.490:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129775bd9 code=0x7ffc0000 [ 280.299062][ T3598] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 280.338070][ T6940] loop2: detected capacity change from 0 to 128 [ 280.404797][ T6942] loop3: detected capacity change from 0 to 256 [ 280.429086][ T6940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.494339][ T4641] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.522010][ T6940] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 280.774240][ T6960] loop1: detected capacity change from 0 to 512 [ 280.853858][ T6960] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.905: inode #1: comm syz.1.905: iget: illegal inode # [ 280.930854][ T6969] loop3: detected capacity change from 0 to 512 [ 280.940624][ T6969] ext2: Unknown parameter 'obj_user' [ 280.949731][ T6960] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.905: error while reading EA inode 1 err=-117 [ 281.089609][ T6960] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.905: inode #1: comm syz.1.905: iget: illegal inode # [ 281.146298][ T6960] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.905: error while reading EA inode 1 err=-117 [ 281.155709][ T6182] EXT4-fs (loop2): unmounting filesystem. [ 281.189456][ T6960] EXT4-fs (loop1): 1 orphan inode deleted [ 281.196434][ T6960] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 281.334057][ T6976] loop4: detected capacity change from 0 to 512 [ 281.672496][ T6976] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 281.681059][ T6976] System zones: 0-2, 18-18, 34-35 [ 281.697819][ T6976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 281.707287][ T6976] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 282.089200][ T6331] EXT4-fs (loop4): unmounting filesystem. [ 282.099850][ T6960] EXT4-fs error (device loop1): ext4_lookup:1855: inode #15: comm syz.1.905: unexpected EA_INODE flag [ 282.268078][ T6591] EXT4-fs (loop1): unmounting filesystem. [ 282.346991][ T6991] loop0: detected capacity change from 0 to 256 [ 282.515994][ T6991] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d) [ 282.650272][ T7005] loop3: detected capacity change from 0 to 256 [ 282.756068][ T7007] loop1: detected capacity change from 0 to 512 [ 282.828709][ T7005] exfat: Deprecated parameter 'namecase' [ 282.933430][ T7007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 282.943037][ T7007] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 283.049287][ T7007] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.919: corrupted inode contents [ 283.075743][ T7007] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz.1.919: mark_inode_dirty error [ 283.091243][ T7007] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.919: corrupted inode contents [ 283.107674][ T7007] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.919: mark_inode_dirty error [ 283.374824][ T7005] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 283.454939][ T6591] EXT4-fs (loop1): unmounting filesystem. [ 283.771820][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 283.800318][ T7025] loop0: detected capacity change from 0 to 128 [ 283.871642][ T28] INFO: task syz.4.256:4706 blocked for more than 144 seconds. [ 283.879264][ T28] Not tainted 6.1.96-syzkaller #0 [ 283.952510][ T7025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 283.973030][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.982541][ T7025] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 284.047942][ T28] task:syz.4.256 state:D stack:26848 pid:4706 ppid:3917 flags:0x00004004 [ 284.081757][ T28] Call Trace: [ 284.085096][ T28] [ 284.088050][ T28] __schedule+0x142d/0x4550 [ 284.095877][ T28] ? __sched_text_start+0x8/0x8 [ 284.106384][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 284.112344][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 284.117708][ T28] schedule+0xbf/0x180 [ 284.123953][ T28] schedule_preempt_disabled+0xf/0x20 [ 284.129371][ T28] __mutex_lock+0x6b9/0xd80 [ 284.134263][ T28] ? __mutex_lock+0x53c/0xd80 [ 284.139024][ T28] ? blkdev_put+0x100/0x750 [ 284.143702][ T28] ? mutex_lock_nested+0x10/0x10 [ 284.151595][ T28] ? __fsnotify_parent+0x50b/0x730 [ 284.156780][ T28] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 284.174933][ T28] blkdev_put+0x100/0x750 [ 284.180856][ T28] ? task_work_run+0x1fc/0x300 [ 284.194192][ T28] blkdev_close+0x56/0x80 [ 284.198928][ T28] ? blkdev_open+0x2e0/0x2e0 [ 284.204099][ T28] __fput+0x3b7/0x890 [ 284.208142][ T28] task_work_run+0x246/0x300 [ 284.213150][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 284.218213][ T28] ? blkdev_ioctl+0x3a9/0x760 [ 284.223954][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 284.229475][ T28] exit_to_user_mode_loop+0xde/0x100 [ 284.237468][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 284.244253][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 284.249939][ T28] do_syscall_64+0x47/0xb0 [ 284.254988][ T28] ? clear_bhb_loop+0x45/0xa0 [ 284.259725][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.266202][ T28] RIP: 0033:0x7f18b7175bd9 [ 284.270668][ T28] RSP: 002b:00007f18b800e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.282684][ T28] RAX: 0000000000000000 RBX: 00007f18b7303f60 RCX: 00007f18b7175bd9 [ 284.290700][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 284.298816][ T28] RBP: 00007f18b71e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 284.307095][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.315215][ T28] R13: 000000000000000b R14: 00007f18b7303f60 R15: 00007ffed84fe318 [ 284.323471][ T28] [ 284.328922][ T6236] EXT4-fs (loop0): unmounting filesystem. [ 284.338518][ T28] INFO: task syz.4.256:4710 blocked for more than 145 seconds. [ 284.355625][ T28] Not tainted 6.1.96-syzkaller #0 [ 284.361462][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.378190][ T28] task:syz.4.256 state:D stack:27560 pid:4710 ppid:3917 flags:0x00004004 [ 284.425701][ T28] Call Trace: [ 284.429194][ T28] [ 284.432687][ T28] __schedule+0x142d/0x4550 [ 284.437284][ T28] ? __mutex_lock+0x6b4/0xd80 [ 284.442067][ T28] ? __sched_text_start+0x8/0x8 [ 284.447100][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 284.454744][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 284.459989][ T28] schedule+0xbf/0x180 [ 284.464161][ T28] schedule_preempt_disabled+0xf/0x20 [ 284.469736][ T28] __mutex_lock+0x6b9/0xd80 [ 284.474334][ T28] ? __mutex_lock+0x53c/0xd80 [ 284.479171][ T28] ? blkdev_get_by_dev+0x148/0xa10 [ 284.485998][ T28] ? mutex_lock_nested+0x10/0x10 [ 284.490959][ T28] ? _atomic_dec_and_lock+0x96/0x130 [ 284.496437][ T28] ? iput+0x401/0x980 [ 284.500648][ T28] ? ilookup+0x1c8/0x200 [ 284.509717][ T28] ? disk_block_events+0xa1/0x110 [ 284.515251][ T28] ? blkdev_get_by_dev+0xe7/0xa10 [ 284.520316][ T28] blkdev_get_by_dev+0x148/0xa10 [ 284.525373][ T28] blkdev_open+0x12e/0x2e0 [ 284.529973][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 284.534650][ T28] do_dentry_open+0x7f9/0x10f0 [ 284.539687][ T28] path_openat+0x2644/0x2e60 [ 284.544369][ T28] ? mark_lock+0x9a/0x340 [ 284.548898][ T28] ? do_filp_open+0x480/0x480 [ 284.553684][ T28] do_filp_open+0x230/0x480 [ 284.558379][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 284.564645][ T28] ? _raw_spin_unlock+0x24/0x40 [ 284.569525][ T28] ? alloc_fd+0x59c/0x640 [ 284.573949][ T28] do_sys_openat2+0x13b/0x500 [ 284.578872][ T28] ? do_sys_open+0x220/0x220 [ 284.583779][ T28] ? xfd_validate_state+0x6a/0x140 [ 284.589613][ T28] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 284.595661][ T28] __x64_sys_openat+0x243/0x290 [ 284.600712][ T28] ? __ia32_sys_open+0x270/0x270 [ 284.605737][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 284.612043][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 284.617300][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 284.623429][ T28] do_syscall_64+0x3b/0xb0 [ 284.629623][ T28] ? clear_bhb_loop+0x45/0xa0 [ 284.634418][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.640474][ T28] RIP: 0033:0x7f18b7174610 [ 284.644983][ T28] RSP: 002b:00007f18b7fecb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 284.653702][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f18b7174610 [ 284.661794][ T28] RDX: 0000000000000000 RSI: 00007f18b7fecc20 RDI: 00000000ffffff9c [ 284.669949][ T28] RBP: 00007f18b7fecc20 R08: 0000000000000000 R09: 002364626e2f7665 [ 284.679839][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 284.687911][ T28] R13: 000000000000006e R14: 00007f18b7304038 R15: 00007ffed84fe318 [ 284.697052][ T28] [ 284.700183][ T28] [ 284.700183][ T28] Showing all locks held in the system: [ 284.708422][ T28] 1 lock held by rcu_tasks_kthre/12: [ 284.713827][ T28] #0: ffffffff8d12ae90 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 284.724641][ T28] 1 lock held by rcu_tasks_trace/13: [ 284.729939][ T28] #0: ffffffff8d12b690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 284.741184][ T28] 1 lock held by khungtaskd/28: [ 284.746476][ T28] #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 284.756822][ T28] 2 locks held by getty/3308: [ 284.761859][ T28] #0: ffff8880288be098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 284.771977][ T28] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 284.783921][ T28] 1 lock held by udevd/3627: [ 284.788541][ T28] #0: ffff88801fa934c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 284.800656][ T28] 2 locks held by kworker/u4:8/3674: [ 284.806038][ T28] #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 284.816077][ T28] #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 284.827659][ T28] 1 lock held by syz.4.256/4706: [ 284.832676][ T28] #0: ffff88801fa934c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 284.842231][ T28] 1 lock held by syz.4.256/4710: [ 284.847193][ T28] #0: ffff88801fa934c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 284.857337][ T28] [ 284.859677][ T28] ============================================= [ 284.859677][ T28] [ 284.869046][ T28] NMI backtrace for cpu 0 [ 284.873406][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 284.881242][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 284.891306][ T28] Call Trace: [ 284.894597][ T28] [ 284.897537][ T28] dump_stack_lvl+0x1e3/0x2cb [ 284.902243][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 284.907722][ T28] ? panic+0x764/0x764 [ 284.911796][ T28] ? vprintk_emit+0x622/0x740 [ 284.916489][ T28] ? printk_sprint+0x490/0x490 [ 284.921308][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 284.926444][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 284.931403][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 284.937571][ T28] ? _printk+0xd1/0x111 [ 284.941732][ T28] ? panic+0x764/0x764 [ 284.945806][ T28] ? __wake_up_klogd+0xcc/0x100 [ 284.950667][ T28] ? panic+0x764/0x764 [ 284.954743][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 284.960828][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 284.966938][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 284.972961][ T28] watchdog+0xf88/0xfd0 [ 284.977131][ T28] ? watchdog+0x1f8/0xfd0 [ 284.981474][ T28] kthread+0x28d/0x320 [ 284.985555][ T28] ? hungtask_pm_notify+0x50/0x50 [ 284.990590][ T28] ? kthread_blkcg+0xd0/0xd0 [ 284.995186][ T28] ret_from_fork+0x1f/0x30 [ 284.999631][ T28] [ 285.003588][ T28] Sending NMI from CPU 0 to CPUs 1: [ 285.008845][ C1] NMI backtrace for cpu 1 [ 285.008859][ C1] CPU: 1 PID: 2986 Comm: syslogd Not tainted 6.1.96-syzkaller #0 [ 285.008877][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.008887][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x3f/0xe0 [ 285.008917][ C1] Code: f8 07 0f 87 ac 00 00 00 b9 8b 00 00 00 0f a3 c1 0f 83 9e 00 00 00 4c 8b 16 4d 85 d2 0f 84 92 00 00 00 4c 8b 04 c5 38 0a f0 8a <4c> 8b 4c 24 20 65 4c 8b 1d c4 d6 77 7e 31 d2 eb 08 48 ff c2 49 39 [ 285.008933][ C1] RSP: 0018:ffffc9000315fa80 EFLAGS: 00000202 [ 285.008948][ C1] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 000000000000008b [ 285.008959][ C1] RDX: 0000000000000000 RSI: ffffffff8d792710 RDI: 0000000000000006 [ 285.008971][ C1] RBP: 0000000000000062 R08: 0000000000000001 R09: ffffed100b401e9c [ 285.008983][ C1] R10: 0000000000000002 R11: dffffc0000000001 R12: dffffc0000000000 [ 285.008995][ C1] R13: 0000000000000000 R14: 0000000000000062 R15: ffffc9000315fd90 [ 285.009007][ C1] FS: 00007fadf5bca380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 285.009024][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.009036][ C1] CR2: 00007f21298ce2d8 CR3: 000000007edcf000 CR4: 00000000003506e0 [ 285.009051][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.009062][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.009073][ C1] Call Trace: [ 285.009078][ C1] [ 285.009084][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 285.009113][ C1] ? read_lock_is_recursive+0x10/0x10 [ 285.009141][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 285.009170][ C1] ? nmi_handle+0x25/0x440 [ 285.009222][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 285.009252][ C1] ? nmi_handle+0x12e/0x440 [ 285.009279][ C1] ? nmi_handle+0x25/0x440 [ 285.009310][ C1] ? __sanitizer_cov_trace_switch+0x3f/0xe0 [ 285.009332][ C1] ? default_do_nmi+0x62/0x150 [ 285.009351][ C1] ? exc_nmi+0xa8/0x100 [ 285.009367][ C1] ? end_repeat_nmi+0x16/0x31 [ 285.009399][ C1] ? __sanitizer_cov_trace_switch+0x3f/0xe0 [ 285.009422][ C1] ? __sanitizer_cov_trace_switch+0x3f/0xe0 [ 285.009446][ C1] ? __sanitizer_cov_trace_switch+0x3f/0xe0 [ 285.009470][ C1] [ 285.009474][ C1] [ 285.009481][ C1] fault_in_iov_iter_readable+0x45/0x270 [ 285.009506][ C1] generic_perform_write+0x207/0x5e0 [ 285.009532][ C1] ? generic_file_direct_write+0x460/0x460 [ 285.009551][ C1] ? __file_remove_privs+0x640/0x640 [ 285.009579][ C1] ? generic_write_checks+0x15c/0x1c0 [ 285.009599][ C1] ? clear_nonspinnable+0x60/0x60 [ 285.009624][ C1] __generic_file_write_iter+0x176/0x400 [ 285.009647][ C1] generic_file_write_iter+0xab/0x310 [ 285.009667][ C1] vfs_write+0x7ae/0xba0 [ 285.009687][ C1] ? file_end_write+0x250/0x250 [ 285.009713][ C1] ? __fdget_pos+0x2c1/0x360 [ 285.009732][ C1] ksys_write+0x19c/0x2c0 [ 285.009749][ C1] ? print_irqtrace_events+0x210/0x210 [ 285.009775][ C1] ? __ia32_sys_read+0x80/0x80 [ 285.009793][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 285.009813][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 285.009833][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 285.009855][ C1] do_syscall_64+0x3b/0xb0 [ 285.009880][ C1] ? clear_bhb_loop+0x45/0xa0 [ 285.009906][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.009929][ C1] RIP: 0033:0x7fadf5d1ebf2 [ 285.009942][ C1] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 285.009956][ C1] RSP: 002b:00007ffd2b9d9428 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.009974][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fadf5d1ebf2 [ 285.009986][ C1] RDX: 0000000000000062 RSI: 000055c152a03c50 RDI: 0000000000000003 [ 285.009997][ C1] RBP: 000055c152a03c50 R08: 0000000000000001 R09: 0000000000000000 [ 285.010009][ C1] R10: 00007fadf5ebd3a3 R11: 0000000000000246 R12: 0000000000000062 [ 285.010020][ C1] R13: 00007fadf5bca300 R14: 0000000000000004 R15: 000055c152a03a60 [ 285.010041][ C1] [ 285.421639][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 285.428546][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 285.436385][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.446466][ T28] Call Trace: [ 285.449742][ T28] [ 285.452704][ T28] dump_stack_lvl+0x1e3/0x2cb [ 285.457394][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 285.462860][ T28] ? panic+0x764/0x764 [ 285.466927][ T28] ? llist_add_batch+0x160/0x1d0 [ 285.471871][ T28] ? vscnprintf+0x59/0x80 [ 285.476201][ T28] panic+0x318/0x764 [ 285.480104][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 285.486277][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 285.491696][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 285.497870][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 285.504033][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 285.510205][ T28] watchdog+0xfc7/0xfd0 [ 285.514415][ T28] ? watchdog+0x1f8/0xfd0 [ 285.518750][ T28] kthread+0x28d/0x320 [ 285.522811][ T28] ? hungtask_pm_notify+0x50/0x50 [ 285.527831][ T28] ? kthread_blkcg+0xd0/0xd0 [ 285.532426][ T28] ret_from_fork+0x1f/0x30 [ 285.536882][ T28] [ 285.540208][ T28] Kernel Offset: disabled [ 285.544567][ T28] Rebooting in 86400 seconds..