last executing test programs: 2m27.703972841s ago: executing program 0 (id=488): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) fchown(r0, 0x0, 0xee01) 2m27.435462183s ago: executing program 0 (id=490): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16, @ANYBLOB="dd085975f0516531a170f3908238b45d5bb98f33da2737fcd016c7a8adccfd58f4b77b762af149cbe65cab6d918eeb4cf7e8953ab7961e2ba2a8095289d8e8e2720060208c8ab2026d9533170ad66162a4b44e7065995926e98e3a5afb814da7f465a8d5c0d1b239bd946e2ac2943ac76f9c8896f164bfb2cbbbc6ab3d55ea57edae688303cfb823489ce8321563d840ddc4b7e8356fd480efecd33b2eaaab7c2cb77bfd12f7b03b28737921f25dfa3304841cf820b621aae58f47ae06e4328c738f8eaf18935cd0d11d8d0a2749a9d922d0c5d26a9283e000edf44e992d09c8a10d3812df72ea4089ded541bdf7e450cd27a6854a31bc5096", @ANYRESHEX], 0x2, 0xa8f, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x244) sendfile(r0, r0, 0x0, 0x800000009) 2m26.843226471s ago: executing program 0 (id=497): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x2, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x4, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e6, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x5, 0xfffffff9, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x8000086, 0x2, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x4000080, 0x3, 0x8000004, 0x2950bfaf, 0xffd, 0xa2, 0x7, 0xa9, 0x4005, 0x7, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa61d, 0x2, 0x1, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x0, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x7, 0x9602, 0x8, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x8, 0x30b1d696, 0x0, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m25.171096315s ago: executing program 0 (id=502): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 2m24.001809779s ago: executing program 0 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(r0, r1, 0x2) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) 2m23.561461715s ago: executing program 0 (id=518): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m8.443269993s ago: executing program 32 (id=518): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1m3.545674751s ago: executing program 3 (id=1188): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000000) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 1m3.365554675s ago: executing program 3 (id=1193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000180)={0x5000, 0x6000, 0x2, 0x1, 0x75}) 1m3.119228985s ago: executing program 3 (id=1198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 1m2.944925069s ago: executing program 3 (id=1201): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2) 1m2.535698402s ago: executing program 3 (id=1205): sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="8fed4f33ebca615146bd1ef6a8", 0xd}], 0x1}, 0x404c844) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000380)) 1m2.029639233s ago: executing program 3 (id=1211): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x4, 0x0) connect$pppoe(r1, &(0x7f0000000740)={0x18, 0x0, {0x6, @empty, 'ip_vti0\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 1m1.725051808s ago: executing program 33 (id=1211): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x4, 0x0) connect$pppoe(r1, &(0x7f0000000740)={0x18, 0x0, {0x6, @empty, 'ip_vti0\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0x8) 38.452982332s ago: executing program 1 (id=1388): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) shutdown(r0, 0x1) 38.165517705s ago: executing program 1 (id=1393): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) process_madvise(0xffffffffffffffff, &(0x7f0000000000), 0x1000000000000048, 0x64, 0x0) 37.921645305s ago: executing program 1 (id=1394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 37.700779503s ago: executing program 1 (id=1398): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000000)=""/39, 0x27) 37.208215503s ago: executing program 1 (id=1401): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) 34.76130933s ago: executing program 4 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40085507, 0x0) 33.366891682s ago: executing program 4 (id=1429): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"]) 32.380331231s ago: executing program 1 (id=1435): r0 = syz_io_uring_setup(0xeaa, &(0x7f00000001c0), &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0xfc84}, 0x0, 0xe3d08660d3cd4684, 0x1}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 31.934334587s ago: executing program 34 (id=1435): r0 = syz_io_uring_setup(0xeaa, &(0x7f00000001c0), &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0xfc84}, 0x0, 0xe3d08660d3cd4684, 0x1}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 31.609697913s ago: executing program 5 (id=1442): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x3, 0xb}, {0x0, 0x6}}}], 0x38) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 31.330304986s ago: executing program 5 (id=1454): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) shutdown(r0, 0x1) 31.174027309s ago: executing program 4 (id=1447): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000002280)='./file0\x00', 0x6) 30.981015794s ago: executing program 5 (id=1448): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000540)={[{@pquota}]}, 0x0, 0x965a, &(0x7f0000012c40)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0385868, &(0x7f0000000180)=ANY=[]) 30.91260782s ago: executing program 4 (id=1450): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000000)=""/39, 0x27) 30.275561801s ago: executing program 4 (id=1456): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="8b", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\a', 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) 26.950168529s ago: executing program 5 (id=1466): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000000)=""/39, 0x27) 25.57496304s ago: executing program 5 (id=1470): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x49d4, 0x80, 0x4, 0x803cc}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = socket$pptp(0x18, 0x1, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 25.441636651s ago: executing program 4 (id=1472): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x2, 0x9}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 25.014446535s ago: executing program 35 (id=1472): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x2, 0x9}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 22.380664867s ago: executing program 5 (id=1479): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 22.106521849s ago: executing program 36 (id=1479): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 3.984443739s ago: executing program 9 (id=1482): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) 3.774805236s ago: executing program 9 (id=1613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x4ae7, &(0x7f0000000580), &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}) io_uring_enter(r1, 0x15ed, 0x0, 0x0, 0x0, 0x0) 3.415950955s ago: executing program 9 (id=1619): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220508", @ANYRES16=0x0], 0x0}, 0x0) 2.971199951s ago: executing program 6 (id=1626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 2.665741346s ago: executing program 6 (id=1627): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0xfa, 0x6, &(0x7f0000000040)={0xd, "5bec34631fe7c0988a080797c0a0f30d34b664e88d3ef24141fda6a2b4acb8afbe"}}) 2.664754746s ago: executing program 7 (id=1637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, r2, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x4c}, 0x1, 0xffffffff00000003}, 0x0) 2.511130108s ago: executing program 7 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000000500)=""/186, 0xba}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000002f40)=""/205, 0xcd}, {&(0x7f00000007c0)=""/4077, 0xfed}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 2.311202254s ago: executing program 7 (id=1631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) 1.98167203s ago: executing program 7 (id=1634): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) 1.695692193s ago: executing program 7 (id=1638): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.589414322s ago: executing program 7 (id=1639): syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES16], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e7780) 1.406168847s ago: executing program 2 (id=1641): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x4f}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffff80}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}]}}]}, 0x50}}, 0x0) 1.37019542s ago: executing program 9 (id=1642): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1200800, &(0x7f0000000040)=ANY=[], 0x1, 0x186, &(0x7f0000000600)="$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") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc21, &(0x7f00000019c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 1.251467729s ago: executing program 2 (id=1644): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) read(r0, &(0x7f0000001240)=""/4096, 0x1000) 1.138379508s ago: executing program 2 (id=1646): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000040005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) 1.078667213s ago: executing program 9 (id=1647): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000006200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @broadcast, @val={@void, {0x4305, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x2, 0x24, 0x65, 0x0, 0x2, 0x21, 0x0, @broadcast, @broadcast}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x9, 0x0, 0x0, 0x4, 0x6, "1175bd", 0xc0, "b2cbc2"}}}}}}, 0x0) 1.063542194s ago: executing program 8 (id=1648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 1.021012998s ago: executing program 2 (id=1649): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) 928.720535ms ago: executing program 9 (id=1650): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) 910.087527ms ago: executing program 6 (id=1651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000008c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) 888.983419ms ago: executing program 8 (id=1652): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x7) 683.715745ms ago: executing program 8 (id=1653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e240000000000000200001000"], 0xb8}}, 0x0) 589.865942ms ago: executing program 6 (id=1654): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000200)=0x6) 365.476771ms ago: executing program 8 (id=1655): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x400, &(0x7f0000000400)=ANY=[], 0xfe, 0x163, &(0x7f00000005c0)="$eJzs0UGrElEYxvH/mTkzTqBkZCBBKbSxJDCldi00koRsIGjTSrCpBMVIKFulRLsWQlsXUasggj6BplAUurn3c7i7cJdzOTP3Xq/f4f3t5jnvvA9z5v7ddUGxda/fe/U6GAyCZ/nHfrPuMZtVTe7C8NfOeTw/r8JLNHMNmzGYeJlyeN7pBla73zXPmyokgD/vMLkDnD/pq2U0Yw23iN8vXIPFpWjOIgzjoW0WVHCi6LKOj0xWAsLOuXjfhTgz+w4AG5Ryj8uu2HxsFHMXFQynxZ8//j9a/WvcvJEOPpXrk+vJrF18D1+pKe/v8sW+DZirWa+aD/2mv66Uy3cqJc/i9p4LmtEE/SD5Bp4q0GafRbTPJXtVP4EPCj5HXZvfKgUsvhz6vcTpXY/e2nlQuWm7lXW+tTJpC7sQfVcYDX0/+2NMo+HtZDZCCCGEEEIIIYQQQgghhBBCCCEEcBQAAP//v8FSFQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000040c0)=""/4098, 0x1002) 298.530836ms ago: executing program 6 (id=1656): r0 = syz_io_uring_setup(0xd, &(0x7f0000000200)={0x0, 0xfffffffc, 0x0, 0x1}, &(0x7f0000000400)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r0, 0x19bc, 0x0, 0x0, 0x0, 0x0) 250.12047ms ago: executing program 2 (id=1657): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) 160.099227ms ago: executing program 6 (id=1658): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)={[{0x29, 0x4e00, "0c927471c42b580cd53d22735006f8b8bb6a9bfe78ce9d1490a646c3da505abf311bb8beccdeb0f828"}, {0x5, 0x4e00, "f8d471728b"}, {}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 148.101088ms ago: executing program 8 (id=1659): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x50, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x20000000) 66.117015ms ago: executing program 2 (id=1660): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x9, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r0, 0x6, 0x0) 0s ago: executing program 8 (id=1661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3ec, 0x200, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004801}, 0x20020000) kernel console output (not intermixed with test programs): : syz [ 222.528971][ T7015] usb 3-1: Manufacturer: syz [ 222.542109][ T7015] usb 3-1: SerialNumber: syz [ 222.558230][ T7015] usb 3-1: config 0 descriptor?? [ 222.579087][ T7015] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 222.733484][ T7344] tipc: Started in network mode [ 222.738549][ T7344] tipc: Node identity , cluster identity 4711 [ 222.768087][ T7344] tipc: Failed to set node id, please configure manually [ 222.784320][ T7015] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 222.785850][ T7344] tipc: Enabling of bearer rejected, failed to enable media [ 222.809555][ T7015] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 222.819036][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1059'. [ 223.159162][ T7357] loop3: detected capacity change from 0 to 512 [ 223.173650][ T7357] EXT4-fs: inline encryption not supported [ 223.186622][ T7357] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1064: casefold flag without casefold feature [ 223.201251][ T7357] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1064: couldn't read orphan inode 15 (err -117) [ 223.215344][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 223.220653][ T129] usb 3-1: USB disconnect, device number 9 [ 223.232370][ T7357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.242813][ T129] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 223.269119][ T129] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 223.281703][ T129] quatech2 3-1:0.51: device disconnected [ 223.315632][ T7357] EXT4-fs (loop3): shut down requested (1) [ 223.342006][ T5835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 223.413908][ T7364] netlink: 'syz.4.1066': attribute type 11 has an invalid length. [ 223.437887][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 223.441830][ T7364] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1066'. [ 223.444324][ T4277] Bluetooth: hci6: command 0x1003 tx timeout [ 223.452848][ T4282] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 223.532148][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 223.539278][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.586460][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.632910][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.668272][ T5835] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.687591][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.721409][ T5835] usb 6-1: config 0 descriptor?? [ 223.886815][ T7375] tipc: Started in network mode [ 223.897769][ T7375] tipc: Node identity , cluster identity 4711 [ 223.912579][ T7375] tipc: Failed to set node id, please configure manually [ 223.920368][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 224.196113][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x2 [ 224.214322][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 224.250235][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 224.270525][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 224.311211][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 224.322817][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 224.345580][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 224.353559][ T7388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.381282][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 224.399699][ T5835] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 224.441614][ T5835] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0013/input/input19 [ 224.484094][ T5835] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 224.557757][ T5835] usb 6-1: USB disconnect, device number 3 [ 224.821512][ T7395] fido_id[7395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 225.370024][ T7418] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 225.481926][ T4573] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 225.656020][ T7394] loop3: detected capacity change from 0 to 32768 [ 225.674725][ T4573] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 225.691983][ T4573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.737058][ T4573] usb 2-1: config 0 descriptor?? [ 225.842768][ T7394] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 225.883956][ T7394] XFS (loop3): Quotacheck needed: Please wait. [ 225.949890][ T7411] loop5: detected capacity change from 0 to 32768 [ 225.954921][ T4573] ath6kl: Failed to submit usb control message: -71 [ 225.981622][ T4573] ath6kl: unable to send the bmi data to the device: -71 [ 226.028911][ T7437] tipc: New replicast peer: 255.255.255.255 [ 226.052112][ T4573] ath6kl: Unable to send get target info: -71 [ 226.101896][ T7394] XFS (loop3): Quotacheck: Done. [ 226.108162][ T7411] XFS (loop5): Mounting V5 Filesystem [ 226.112694][ T4573] ath6kl: Failed to init ath6kl core: -71 [ 226.192090][ T7437] tipc: Enabled bearer , priority 10 [ 226.238705][ T4573] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 226.263124][ T4573] usb 2-1: USB disconnect, device number 13 [ 226.298152][ T4265] XFS (loop3): Unmounting Filesystem [ 226.338475][ T7411] XFS (loop5): Ending clean mount [ 226.374172][ T7411] XFS (loop5): Quotacheck needed: Please wait. [ 226.409144][ T9] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 226.513169][ T7411] XFS (loop5): Quotacheck: Done. [ 226.686307][ T6204] XFS (loop5): Unmounting Filesystem [ 226.928407][ T7458] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 227.042181][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 227.184894][ T5835] tipc: Node number set to 2567062005 [ 227.451822][ T4277] Bluetooth: hci1: command 0x080f tx timeout [ 227.817706][ T7461] loop2: detected capacity change from 0 to 32768 [ 227.838179][ T7461] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1103 (7461) [ 227.888631][ T7461] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 227.900242][ T7461] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 227.914628][ T7461] BTRFS info (device loop2): enabling ssd optimizations [ 227.936269][ T7461] BTRFS info (device loop2): turning off barriers [ 227.949455][ T7461] BTRFS info (device loop2): use no compression [ 227.959087][ T7461] BTRFS info (device loop2): using free space tree [ 228.092372][ T7471] loop5: detected capacity change from 0 to 32768 [ 228.132429][ T7471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1105 (7471) [ 228.175889][ T7471] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.186328][ T7471] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 228.195677][ T7471] BTRFS info (device loop5): metadata ratio 2 [ 228.220273][ T7471] BTRFS info (device loop5): allowing degraded mounts [ 228.245208][ T7471] BTRFS info (device loop5): force zlib compression, level 3 [ 228.265730][ T7471] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 228.292787][ T7471] BTRFS info (device loop5): use zstd compression, level 3 [ 228.300104][ T7471] BTRFS info (device loop5): force clearing of disk cache [ 228.307628][ T7471] BTRFS info (device loop5): max_inline at 0 [ 228.340773][ T7471] BTRFS info (device loop5): using free space tree [ 228.406576][ T7507] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1112'. [ 228.418404][ T4709] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 228.606722][ T7475] loop4: detected capacity change from 0 to 40427 [ 228.614836][ T7475] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 228.620800][ T7471] BTRFS info (device loop5): enabling ssd optimizations [ 228.630996][ T7475] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 228.631686][ T7471] BTRFS info (device loop5): rebuilding free space tree [ 228.671416][ T7475] F2FS-fs (loop4): invalid crc value [ 228.718243][ T7475] F2FS-fs (loop4): Found nat_bits in checkpoint [ 228.736546][ T7526] loop1: detected capacity change from 0 to 1024 [ 228.862235][ T7475] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 228.869374][ T7475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 228.994392][ T7533] loop3: detected capacity change from 0 to 512 [ 229.060359][ T7533] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.131325][ T7536] loop1: detected capacity change from 0 to 8 [ 229.169734][ T7533] EXT4-fs (loop3): 1 truncate cleaned up [ 229.183284][ T7533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.194752][ T6204] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.275838][ T4349] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 229.294091][ T7533] fscrypt (loop3, inode 18): Mutually exclusive encryption flags (0x0c) [ 229.411195][ T4349] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 229.531121][ T4277] Bluetooth: hci1: command 0x080f tx timeout [ 229.621014][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 229.767590][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 229.990528][ T7559] loop3: detected capacity change from 0 to 8 [ 229.999582][ T7559] squashfs: Unknown parameter 'euid>00000000000000060928/2ã†~?]¬‘÷' [ 230.316427][ T7565] loop2: detected capacity change from 0 to 256 [ 230.327245][ T7564] loop4: detected capacity change from 0 to 1024 [ 230.351842][ T7565] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.364240][ T7564] EXT4-fs: Ignoring removed orlov option [ 230.370008][ T7564] EXT4-fs: Ignoring removed oldalloc option [ 230.380283][ T7546] loop5: detected capacity change from 0 to 32768 [ 230.387117][ T7565] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 230.399363][ T7564] EXT4-fs (loop4): Test dummy encryption mode enabled [ 230.431366][ T7565] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 230.456814][ T7564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 230.492080][ T7546] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 230.656561][ T7559] loop3: detected capacity change from 0 to 32768 [ 230.683679][ T7573] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 230.706863][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 230.788295][ T7559] XFS (loop3): Mounting V5 Filesystem [ 230.850264][ T6204] (syz-executor,6204,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 230.880852][ T6204] ocfs2: Unmounting device (7,5) on (node local) [ 231.022353][ T7559] XFS (loop3): Ending clean mount [ 231.170406][ T4265] XFS (loop3): Unmounting Filesystem [ 231.981504][ T7628] loop3: detected capacity change from 0 to 2048 [ 232.046301][ T7628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.113243][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 232.619854][ T7624] loop5: detected capacity change from 0 to 32768 [ 232.677970][ T7647] loop1: detected capacity change from 0 to 256 [ 232.692766][ T7647] exfat: Deprecated parameter 'namecase' [ 232.719310][ T7647] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 233.094805][ T7657] Non-string source [ 233.330511][ T7648] loop2: detected capacity change from 0 to 32768 [ 233.392936][ T7648] XFS (loop2): Mounting V5 Filesystem [ 233.480920][ T7648] XFS (loop2): Ending clean mount [ 233.489166][ T7648] XFS (loop2): Quotacheck needed: Please wait. [ 233.609646][ T7648] XFS (loop2): Quotacheck: Done. [ 233.771062][ T4709] XFS (loop2): Unmounting Filesystem [ 234.332069][ T4383] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 234.519321][ T7711] loop3: detected capacity change from 0 to 256 [ 234.531183][ T4383] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 234.540428][ T4383] usb 2-1: can't read configurations, error -71 [ 235.050713][ T7722] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 235.429214][ T7734] loop4: detected capacity change from 0 to 1024 [ 235.527113][ T7734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.652723][ T7734] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 235.668144][ T7751] loop3: detected capacity change from 0 to 16 [ 235.718409][ T7752] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 235.725391][ T7751] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 235.828111][ T7751] cramfs: Error -3 while decompressing! [ 235.851145][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 235.863294][ T7751] cramfs: ffffffff96d75158(42)->ffff88801aebd000(4096) [ 236.202701][ T5216] bridge0: port 3(syz_tun) entered disabled state [ 236.320245][ T5216] device syz_tun left promiscuous mode [ 236.332900][ T5216] bridge0: port 3(syz_tun) entered disabled state [ 236.709800][ T7760] loop4: detected capacity change from 0 to 40427 [ 236.731671][ T7760] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 236.741107][ T7760] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 236.757210][ T7760] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 236.801488][ T7760] F2FS-fs (loop4): invalid crc value [ 236.848049][ T7760] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.972697][ T7760] F2FS-fs (loop4): Start checkpoint disabled! [ 236.997725][ T7760] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 237.008398][ T7760] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 237.101869][ T5835] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.271237][ T51] kworker/u4:3: attempt to access beyond end of device [ 237.271237][ T51] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 237.322137][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 237.330133][ T5835] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 237.347457][ T5835] usb 6-1: config 0 has no interface number 0 [ 237.356050][ T5835] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 237.386376][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.413456][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.421360][ T5835] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 237.431649][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.439815][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.449071][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.459837][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.480592][ T5835] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 237.501953][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.510635][ T5835] usb 6-1: Product: syz [ 237.520242][ T5835] usb 6-1: Manufacturer: syz [ 237.525789][ T5835] usb 6-1: SerialNumber: syz [ 237.532280][ T5835] usb 6-1: config 0 descriptor?? [ 237.537891][ T7776] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.552112][ T7776] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.598361][ T7800] loop2: detected capacity change from 0 to 256 [ 237.659077][ T7800] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 237.784183][ T7776] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.821987][ T7776] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.834142][ T7795] chnl_net:caif_netlink_parms(): no params data found [ 238.025334][ T7795] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.042678][ T5835] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 238.061801][ T5835] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 238.072536][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.079609][ T5835] asix: probe of 6-1:0.251 failed with error -5 [ 238.092046][ T5835] usb 6-1: USB disconnect, device number 4 [ 238.118467][ T7795] device bridge_slave_0 entered promiscuous mode [ 238.166195][ T7795] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.182045][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.203254][ T7795] device bridge_slave_1 entered promiscuous mode [ 238.266849][ T7795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.299814][ T7795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.317956][ T7820] loop1: detected capacity change from 0 to 2048 [ 238.371934][ T7820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.416540][ T7820] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.1231: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 238.448431][ T7795] team0: Port device team_slave_0 added [ 238.493083][ T7795] team0: Port device team_slave_1 added [ 238.507811][ T7820] EXT4-fs (loop1): Remounting filesystem read-only [ 238.528147][ T7824] EXT4-fs error (device loop1): ext4_ext_precache:627: inode #2: comm syz.1.1231: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 238.630256][ T7795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.637546][ T7824] EXT4-fs (loop1): Remounting filesystem read-only [ 238.658968][ T7795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.727328][ T7816] loop4: detected capacity change from 0 to 32768 [ 238.736262][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 238.764126][ T7795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.781965][ T7816] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1230 (7816) [ 238.791222][ T7795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.801383][ T7795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.828574][ T7795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.884635][ T7816] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.913423][ T7816] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 238.933727][ T7816] BTRFS info (device loop4): using free space tree [ 238.945070][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 238.964162][ T7795] device hsr_slave_0 entered promiscuous mode [ 238.980273][ T7795] device hsr_slave_1 entered promiscuous mode [ 238.998025][ T7795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.008666][ T7795] Cannot create hsr debugfs directory [ 239.131127][ T7816] BTRFS info (device loop4): enabling ssd optimizations [ 239.318014][ T4270] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.331158][ T7795] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.349222][ T7795] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.397709][ T7795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 239.414393][ T129] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 239.533710][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 239.593855][ T7795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.644401][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.662191][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.672122][ T129] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 239.685212][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.702063][ T129] usb 2-1: config 0 descriptor?? [ 239.837166][ T7795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.891365][ T7795] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.911670][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.935318][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.971006][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.980739][ T7875] loop4: detected capacity change from 0 to 256 [ 239.988617][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.011994][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.019217][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.059675][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.091102][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.103633][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.123157][ T129] hid-led 0003:1D34:000A.0014: unknown main item tag 0x0 [ 240.125857][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.131270][ T129] hid-led 0003:1D34:000A.0014: unknown main item tag 0x0 [ 240.137412][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.164320][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.172388][ T129] hid-led 0003:1D34:000A.0014: unknown main item tag 0x0 [ 240.207659][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.220555][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.241335][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.258602][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.275365][ T7879] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.285086][ T7879] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.294388][ T7879] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.303186][ T7879] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.321522][ T129] hid-led: probe of 0003:1D34:000A.0014 failed with error -71 [ 240.338979][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.354387][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.370630][ T129] usb 2-1: USB disconnect, device number 16 [ 240.391460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.412283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.441396][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.466188][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.498823][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.505483][ T7883] loop2: detected capacity change from 0 to 64 [ 240.833896][ T26] audit: type=1326 audit(1756404092.524:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.5.1248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0675d8ebe9 code=0x0 [ 240.864940][ T7881] loop4: detected capacity change from 0 to 32768 [ 240.930794][ T7881] XFS (loop4): Mounting V5 Filesystem [ 240.956141][ T7901] loop5: detected capacity change from 0 to 164 [ 241.045156][ T7904] pimreg: tun_chr_ioctl cmd 2147767521 [ 241.069400][ T7881] XFS (loop4): Ending clean mount [ 241.077282][ T7901] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 241.096409][ T7881] XFS (loop4): Quotacheck needed: Please wait. [ 241.111064][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.129242][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.176228][ T7795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.210982][ T7881] XFS (loop4): Quotacheck: Done. [ 241.299820][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1252'. [ 241.345910][ T4270] XFS (loop4): Unmounting Filesystem [ 241.611760][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 241.811966][ T5834] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.886282][ T7922] loop5: detected capacity change from 0 to 2048 [ 241.956321][ T7922] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 241.987147][ T7922] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.1256: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 242.041852][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 242.050220][ T5834] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.068629][ T7922] EXT4-fs (loop5): Remounting filesystem read-only [ 242.080358][ T7930] EXT4-fs error (device loop5): ext4_ext_precache:627: inode #2: comm syz.5.1256: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 242.085426][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.117048][ T7930] EXT4-fs (loop5): Remounting filesystem read-only [ 242.126978][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 242.138700][ T5834] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 242.149236][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.159350][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.172675][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.180194][ T5834] usb 2-1: config 0 descriptor?? [ 242.201651][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.208920][ T7914] loop2: detected capacity change from 0 to 32768 [ 242.225102][ T7795] device veth0_vlan entered promiscuous mode [ 242.237234][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.247564][ T6204] EXT4-fs (loop5): unmounting filesystem. [ 242.267159][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.300526][ T7795] device veth1_vlan entered promiscuous mode [ 242.309854][ T7914] XFS (loop2): Mounting V5 Filesystem [ 242.346779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.356810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.366563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.376720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.389574][ T7795] device veth0_macvtap entered promiscuous mode [ 242.407829][ T7914] XFS (loop2): Ending clean mount [ 242.408899][ T7795] device veth1_macvtap entered promiscuous mode [ 242.435171][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.452122][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.464181][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.476635][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.488691][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.508252][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.523459][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.546015][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.571818][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.608773][ T5834] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 242.617343][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.637773][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.651070][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.672471][ T4709] XFS (loop2): Unmounting Filesystem [ 242.683842][ T7795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.692117][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.700717][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.746423][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.829010][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.855868][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.873917][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.889696][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.913616][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.928930][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.941631][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.958898][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.981947][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.999438][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.010741][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.025474][ T5834] usb 2-1: USB disconnect, device number 17 [ 243.031825][ T7795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.050247][ T7795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.083889][ T7795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.094829][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.118138][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.160676][ T7795] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.198015][ T7795] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.213977][ T7795] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.231889][ T7795] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.402330][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.429978][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.483127][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.484535][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.517360][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.576979][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.682272][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 243.825710][ T7962] loop6: detected capacity change from 0 to 128 [ 243.889811][ T7962] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 243.942633][ T7962] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.062280][ T7962] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes [ 244.131103][ T7973] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1268'. [ 244.161673][ T7973] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1268'. [ 244.174285][ T52] block nbd0: Possible stuck request ffff888024a60000: control (read@0,4096B). Runtime 120 seconds [ 244.182077][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1268'. [ 244.202501][ T7795] EXT4-fs (loop6): unmounting filesystem. [ 244.793681][ T7988] loop6: detected capacity change from 0 to 256 [ 245.131300][ T7975] loop2: detected capacity change from 0 to 32768 [ 245.277421][ T7975] XFS (loop2): Mounting V5 Filesystem [ 245.398087][ T7975] XFS (loop2): Ending clean mount [ 245.420355][ T7975] XFS (loop2): Quotacheck needed: Please wait. [ 245.503669][ T7975] XFS (loop2): Quotacheck: Done. [ 245.610498][ T8012] loop4: detected capacity change from 0 to 128 [ 245.649531][ T8012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 245.669773][ T7995] loop6: detected capacity change from 0 to 32768 [ 245.679743][ T8012] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.761282][ T8012] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 245.772766][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 245.782615][ T4709] XFS (loop2): Unmounting Filesystem [ 245.953288][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 246.226351][ T8021] loop1: detected capacity change from 0 to 256 [ 246.276574][ T8021] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 247.050478][ T8039] loop1: detected capacity change from 0 to 4096 [ 247.129118][ T8039] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 247.163114][ T8039] ntfs3: loop1: Failed to load $Extend. [ 247.309795][ T8044] loop2: detected capacity change from 0 to 128 [ 247.379730][ T8044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 247.396372][ T8031] loop4: detected capacity change from 0 to 32768 [ 247.402021][ T8044] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.410968][ T8031] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1289 (8031) [ 247.448973][ T8031] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.459364][ T8031] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 247.465392][ T8044] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 247.468359][ T8031] BTRFS info (device loop4): enabling auto defrag [ 247.487080][ T8031] BTRFS info (device loop4): doing ref verification [ 247.493875][ T8031] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 247.504034][ T8031] BTRFS info (device loop4): force lzo compression, level 0 [ 247.511806][ T8031] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 247.531869][ T8031] BTRFS info (device loop4): trying to use backup root at mount time [ 247.540065][ T8031] BTRFS info (device loop4): max_inline at 4096 [ 247.549746][ T8025] loop6: detected capacity change from 0 to 40427 [ 247.556419][ T8031] BTRFS info (device loop4): enabling ssd optimizations [ 247.564687][ T8031] BTRFS info (device loop4): using spread ssd allocation scheme [ 247.578192][ T8025] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 247.587201][ T8031] BTRFS info (device loop4): using free space tree [ 247.596958][ T8025] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 247.608584][ T8031] workqueue: max_active 65524 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 247.641902][ T8031] workqueue: max_active 65524 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 247.651100][ T4709] EXT4-fs (loop2): unmounting filesystem. [ 247.653466][ T8025] F2FS-fs (loop6): invalid crc value [ 247.680938][ T8031] workqueue: max_active 65524 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 247.731611][ T8025] F2FS-fs (loop6): Found nat_bits in checkpoint [ 247.744864][ T8031] workqueue: max_active 65524 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 247.789978][ T8031] workqueue: max_active 65524 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 247.832484][ T8025] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 247.849561][ T8031] workqueue: max_active 65524 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 247.871515][ T8025] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 247.896980][ T8031] workqueue: max_active 65524 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 247.960721][ T8031] workqueue: max_active 65524 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 248.035521][ T8031] workqueue: max_active 65524 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 248.488939][ T4270] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 249.024434][ T8074] loop5: detected capacity change from 0 to 32768 [ 249.062886][ T8074] XFS: ikeep mount option is deprecated. [ 249.068615][ T8074] XFS: ikeep mount option is deprecated. [ 249.094765][ T8074] XFS: noikeep mount option is deprecated. [ 249.227076][ T8074] XFS (loop5): Mounting V5 Filesystem [ 249.300512][ T8103] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1305'. [ 249.356062][ T8074] XFS (loop5): Ending clean mount [ 249.361363][ T8103] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1305'. [ 249.401912][ T8103] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1305'. [ 249.492929][ T7860] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.529687][ T6204] XFS (loop5): Unmounting Filesystem [ 249.731352][ T8090] loop4: detected capacity change from 0 to 32768 [ 249.738960][ T7860] usb 3-1: Using ep0 maxpacket: 16 [ 249.754276][ T7860] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 249.769574][ T7860] usb 3-1: config 0 has no interface number 0 [ 249.775818][ T7860] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 249.794669][ T8090] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1301 (8090) [ 249.821364][ T7860] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 249.850798][ T8090] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 249.867190][ T8090] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 249.882598][ T7860] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 249.898539][ T8090] BTRFS info (device loop4): force clearing of disk cache [ 249.905943][ T7860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.921774][ T8090] BTRFS info (device loop4): enabling ssd optimizations [ 249.929149][ T8090] BTRFS info (device loop4): using spread ssd allocation scheme [ 249.946487][ T7860] usb 3-1: Product: syz [ 249.950726][ T7860] usb 3-1: Manufacturer: syz [ 249.957639][ T7860] usb 3-1: SerialNumber: syz [ 249.968439][ T8090] BTRFS info (device loop4): using free space tree [ 249.982038][ T7860] usb 3-1: config 0 descriptor?? [ 249.988270][ T8092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.006540][ T8092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.224367][ T8092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.231980][ T8092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.253041][ T8090] BTRFS info (device loop4): rebuilding free space tree [ 250.298791][ T8107] loop6: detected capacity change from 0 to 32768 [ 250.308864][ T8107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1308 (8107) [ 250.336663][ T8107] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.361914][ T8107] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 250.370785][ T8107] BTRFS info (device loop6): metadata ratio 2 [ 250.386845][ T8107] BTRFS info (device loop6): allowing degraded mounts [ 250.387637][ T8109] loop1: detected capacity change from 0 to 32768 [ 250.393769][ T8107] BTRFS info (device loop6): force zlib compression, level 3 [ 250.393807][ T8107] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 250.393909][ T8107] BTRFS info (device loop6): use zstd compression, level 3 [ 250.393931][ T8107] BTRFS info (device loop6): force clearing of disk cache [ 250.415258][ T8109] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1309 (8109) [ 250.457379][ T8107] BTRFS info (device loop6): max_inline at 0 [ 250.466586][ T7860] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 250.467153][ T8107] BTRFS info (device loop6): using free space tree [ 250.481854][ T7860] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 250.501930][ T7860] asix: probe of 3-1:0.251 failed with error -5 [ 250.511217][ T7860] usb 3-1: USB disconnect, device number 10 [ 250.529198][ T4270] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 250.727241][ T8107] BTRFS info (device loop6): enabling ssd optimizations [ 250.744132][ T8107] BTRFS info (device loop6): rebuilding free space tree [ 250.891430][ T8120] loop5: detected capacity change from 0 to 40427 [ 250.923471][ T8120] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 250.951800][ T8120] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 250.986316][ T8120] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 251.028419][ T8120] F2FS-fs (loop5): invalid crc value [ 251.078990][ T8120] F2FS-fs (loop5): Found nat_bits in checkpoint [ 251.253474][ T8120] F2FS-fs (loop5): Start checkpoint disabled! [ 251.295630][ T8120] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 251.311868][ T8120] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 251.514566][ T7795] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.613140][ T32] kworker/u4:2: attempt to access beyond end of device [ 251.613140][ T32] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 252.037379][ T8154] loop2: detected capacity change from 0 to 32768 [ 252.080251][ T8169] loop4: detected capacity change from 0 to 64 [ 252.087931][ T8154] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1313 (8154) [ 252.139288][ T8154] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.181164][ T8154] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 252.221582][ T8154] BTRFS info (device loop2): enabling auto defrag [ 252.240445][ T8154] BTRFS info (device loop2): max_inline at 0 [ 252.262057][ T8154] BTRFS info (device loop2): force clearing of disk cache [ 252.269260][ T8154] BTRFS info (device loop2): turning on sync discard [ 252.307959][ T8154] BTRFS info (device loop2): using free space tree [ 252.538186][ T8188] loop4: detected capacity change from 0 to 512 [ 252.549885][ T8154] BTRFS info (device loop2): enabling ssd optimizations [ 252.572907][ T8154] BTRFS info (device loop2): rebuilding free space tree [ 252.615621][ T8188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 252.654310][ T8194] loop5: detected capacity change from 0 to 1024 [ 252.700146][ T8188] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 252.721126][ T8188] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 252.740458][ T26] audit: type=1800 audit(1756404104.424:42): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1313" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 252.746197][ T8194] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 252.770564][ T8188] System zones: 0-1, 15-15, 18-18, 34-34 [ 252.777447][ T8188] EXT4-fs (loop4): orphan cleanup on readonly fs [ 252.784317][ T8188] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 252.793751][ T8188] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 252.831783][ T8188] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 252.861773][ T8188] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1320: bg 0: block 40: padding at end of block bitmap is not set [ 252.904079][ T8188] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 252.922527][ T8188] EXT4-fs (loop4): 1 truncate cleaned up [ 252.931105][ T6204] EXT4-fs (loop5): unmounting filesystem. [ 252.937059][ T8188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.951372][ T4709] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.985069][ T8188] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1320: bad symlink. [ 253.031367][ T8204] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1320: bad symlink. [ 253.075443][ T8188] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1320: bad symlink. [ 253.304390][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 253.690195][ T8225] loop4: detected capacity change from 0 to 1024 [ 253.752841][ T8225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 253.814620][ T8225] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #11: comm syz.4.1332: directory missing '..' [ 253.911962][ T126] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 254.011112][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 254.114210][ T126] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.142011][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.161946][ T126] usb 3-1: config 0 descriptor?? [ 254.190672][ T126] cp210x 3-1:0.0: cp210x converter detected [ 254.218751][ T8216] loop1: detected capacity change from 0 to 32768 [ 254.236461][ T8216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1329 (8216) [ 254.271396][ T8216] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.290690][ T8216] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 254.301673][ T8216] BTRFS info (device loop1): metadata ratio 2 [ 254.320068][ T8216] BTRFS info (device loop1): allowing degraded mounts [ 254.337751][ T8216] BTRFS info (device loop1): force zlib compression, level 3 [ 254.361688][ T8216] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 254.379880][ T8216] BTRFS info (device loop1): use zstd compression, level 3 [ 254.405307][ T8216] BTRFS info (device loop1): force clearing of disk cache [ 254.421517][ T8216] BTRFS info (device loop1): max_inline at 0 [ 254.429234][ T8216] BTRFS info (device loop1): using free space tree [ 254.456617][ T8240] loop4: detected capacity change from 0 to 4096 [ 254.478575][ T8240] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 254.503789][ T8240] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 254.513523][ T8240] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 254.527096][ T8240] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 254.572264][ T8240] ntfs: volume version 3.1. [ 254.608225][ T8263] loop6: detected capacity change from 0 to 128 [ 254.633961][ T8263] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 254.643320][ T8263] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.668648][ T8263] fscrypt (loop6, inode 12): Unsupported encryption flags (0x10) [ 254.681985][ T8216] BTRFS info (device loop1): enabling ssd optimizations [ 254.693435][ T8216] BTRFS info (device loop1): rebuilding free space tree [ 254.798878][ T7795] EXT4-fs (loop6): unmounting filesystem. [ 254.808298][ T126] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 254.822273][ T126] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 254.840575][ T126] usb 3-1: cp210x converter now attached to ttyUSB0 [ 254.854834][ T126] usb 3-1: USB disconnect, device number 11 [ 254.874032][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 254.892074][ T126] cp210x 3-1:0.0: device disconnected [ 255.064950][ T4266] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.302064][ T14] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 255.490944][ T8277] loop6: detected capacity change from 0 to 32768 [ 255.518017][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 255.547580][ T14] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 255.565550][ T14] usb 5-1: can't read configurations, error -71 [ 255.577113][ T8277] XFS (loop6): Mounting V5 Filesystem [ 255.651272][ T8277] XFS (loop6): Ending clean mount [ 255.667192][ T8277] XFS (loop6): Quotacheck needed: Please wait. [ 255.694476][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.700912][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.745303][ T8277] XFS (loop6): Quotacheck: Done. [ 255.769820][ T8279] loop1: detected capacity change from 0 to 32768 [ 255.786144][ T8279] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 255.801679][ T8279] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 255.832397][ T7795] XFS (loop6): Unmounting Filesystem [ 255.888476][ T8293] loop5: detected capacity change from 0 to 1024 [ 255.921066][ T8293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.982293][ T8279] overlayfs: upper fs does not support tmpfile. [ 255.984428][ T8293] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 256.032369][ T8279] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 256.054158][ T8279] overlayfs: failed to set xattr on upper [ 256.059970][ T8279] overlayfs: ...falling back to index=off,metacopy=off. [ 256.069120][ T8279] overlayfs: upper fs missing required features. [ 256.250786][ T6204] EXT4-fs (loop5): unmounting filesystem. [ 256.274323][ T8300] loop4: detected capacity change from 0 to 512 [ 256.288729][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 256.411343][ T8300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.461630][ T8300] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.573289][ T8300] EXT4-fs (loop4): shut down requested (0) [ 256.823662][ T22] hid-generic 0005:10CF:8002.0016: collection stack underflow [ 256.851894][ T22] hid-generic 0005:10CF:8002.0016: item 0 0 0 12 parsing failed [ 256.860403][ T22] hid-generic: probe of 0005:10CF:8002.0016 failed with error -22 [ 256.966766][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 257.031906][ T6999] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 257.375187][ T8334] loop4: detected capacity change from 0 to 8 [ 257.400414][ T8308] loop5: detected capacity change from 0 to 32768 [ 257.489255][ T8308] XFS (loop5): Mounting V5 Filesystem [ 257.583749][ T8308] XFS (loop5): Ending clean mount [ 257.600222][ T8308] XFS (loop5): Quotacheck needed: Please wait. [ 257.712427][ T8308] XFS (loop5): Quotacheck: Done. [ 257.757967][ T8325] loop1: detected capacity change from 0 to 32768 [ 257.860219][ T8323] loop6: detected capacity change from 0 to 32768 [ 258.182104][ T6204] XFS (loop5): Unmounting Filesystem [ 258.298716][ T8354] loop1: detected capacity change from 0 to 2048 [ 258.307469][ T8354] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 258.365356][ T8354] UDF-fs: unknown compression code (0) [ 258.569775][ T8360] loop4: detected capacity change from 0 to 47 [ 258.674509][ T8360] MINIX-fs: deleted inode referenced: 9 [ 258.681606][ T8360] MINIX-fs: deleted inode referenced: 9 [ 258.709495][ T8363] loop5: detected capacity change from 0 to 64 [ 259.507678][ T8375] loop2: detected capacity change from 0 to 32768 [ 259.523206][ T8375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1380 (8375) [ 259.552153][ T8375] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.572314][ T8375] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 259.589090][ T8375] BTRFS info (device loop2): metadata ratio 2 [ 259.600984][ T8375] BTRFS info (device loop2): allowing degraded mounts [ 259.616302][ T8375] BTRFS info (device loop2): force zlib compression, level 3 [ 259.628535][ T8388] loop1: detected capacity change from 0 to 256 [ 259.631884][ T22] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 259.646030][ T8375] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 259.650406][ T8388] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 259.676293][ T8375] BTRFS info (device loop2): use zstd compression, level 3 [ 259.691840][ T8375] BTRFS info (device loop2): force clearing of disk cache [ 259.709236][ T8375] BTRFS info (device loop2): max_inline at 0 [ 259.721881][ T8375] BTRFS info (device loop2): using free space tree [ 259.842037][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 259.856981][ T22] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 259.885718][ T22] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 259.911312][ T22] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.951847][ T8375] BTRFS info (device loop2): enabling ssd optimizations [ 259.960612][ T8375] BTRFS info (device loop2): rebuilding free space tree [ 259.979245][ T22] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 260.031344][ T22] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 260.069258][ T22] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.097251][ T22] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.114944][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.338574][ T22] usb 6-1: GET_CAPABILITIES returned 0 [ 260.345341][ T22] usbtmc 6-1:16.0: can't read capabilities [ 260.445048][ T8418] loop4: detected capacity change from 0 to 4096 [ 260.455119][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1392'. [ 260.502218][ T8418] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 260.549141][ T126] usb 6-1: USB disconnect, device number 5 [ 260.577665][ T4709] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.915453][ T8431] loop1: detected capacity change from 0 to 512 [ 261.000501][ T8431] EXT4-fs error (device loop1): __ext4_iget:5077: inode #17: block 1803188595: comm syz.1.1398: invalid block [ 261.032154][ T8431] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1398: couldn't read orphan inode 17 (err -117) [ 261.060938][ T8431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.172373][ T8431] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.1398: path /: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 261.273189][ T4266] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /310/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 261.319323][ T4266] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 261.353452][ T4266] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 7: invalid block bitmap [ 261.386463][ T4266] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 261.415906][ T4620] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.439119][ T4266] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /310/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 261.471103][ T4266] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /310/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 261.495019][ T4266] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /310/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 261.517889][ T4266] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /310/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 261.555648][ T4266] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /310/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 261.605297][ T4266] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /310/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 261.660828][ T4620] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.694971][ T4620] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.730752][ T4620] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.748097][ T4620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.764822][ T8438] loop5: detected capacity change from 0 to 32768 [ 261.782044][ T8439] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.792896][ T8438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1399 (8438) [ 261.886368][ T8438] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.908503][ T8438] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 261.949780][ T8438] BTRFS info (device loop5): using free space tree [ 262.170655][ T8438] BTRFS info (device loop5): enabling ssd optimizations [ 262.187163][ T4620] usb 5-1: USB disconnect, device number 20 [ 262.262710][ T8446] loop6: detected capacity change from 0 to 32768 [ 262.278491][ T8446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1404 (8446) [ 262.331888][ T8446] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.356460][ T8446] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 262.365580][ T8446] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 262.378269][ T8446] BTRFS info (device loop6): use lzo compression, level 0 [ 262.385591][ T8446] BTRFS info (device loop6): using free space tree [ 262.655846][ T6204] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.682735][ T8446] BTRFS info (device loop6): enabling ssd optimizations [ 263.003794][ T8490] loop4: detected capacity change from 0 to 256 [ 263.027781][ T8490] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.052876][ T8490] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 263.090066][ T7795] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.106872][ T8490] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 263.166324][ T26] audit: type=1800 audit(1756404114.854:43): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1411" name="file1" dev="loop4" ino=1048648 res=0 errno=0 [ 263.581246][ T8496] loop2: detected capacity change from 0 to 1024 [ 263.598836][ T8496] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.701155][ T8496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.721208][ T8503] loop6: detected capacity change from 0 to 1024 [ 263.814880][ T8503] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 263.841514][ T8503] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.877612][ T4709] EXT4-fs (loop2): unmounting filesystem. [ 263.943772][ T8503] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 263.980989][ T8503] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 264.031986][ T14] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 264.066721][ T7795] EXT4-fs (loop6): unmounting filesystem. [ 264.142002][ T4344] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 264.157417][ T8512] loop2: detected capacity change from 0 to 4096 [ 264.189880][ T8514] tipc: Started in network mode [ 264.200746][ T8514] tipc: Node identity ac14140f, cluster identity 4711 [ 264.208488][ T8514] tipc: New replicast peer: 255.255.255.255 [ 264.213735][ T8512] ntfs: volume version 3.1. [ 264.226823][ T8514] tipc: Enabled bearer , priority 10 [ 264.235540][ T14] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 264.249924][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.270027][ T14] usb 5-1: config 0 descriptor?? [ 264.331960][ T4344] usb 6-1: Using ep0 maxpacket: 16 [ 264.332688][ T8517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.339098][ T4344] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.357013][ T4344] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.367163][ T4344] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 264.381885][ T4344] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.388647][ T4344] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 264.397833][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.408197][ T4344] usb 6-1: config 0 descriptor?? [ 264.487566][ T14] ath6kl: Failed to submit usb control message: -71 [ 264.511935][ T14] ath6kl: unable to send the bmi data to the device: -71 [ 264.539487][ T14] ath6kl: Unable to send get target info: -71 [ 264.570454][ T14] ath6kl: Failed to init ath6kl core: -71 [ 264.662468][ T14] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 264.690943][ T14] usb 5-1: USB disconnect, device number 21 [ 264.826564][ T4344] hid (null): report_id 0 is invalid [ 265.029593][ T22] usb 6-1: USB disconnect, device number 6 [ 265.066331][ T8534] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1428'. [ 265.091227][ T4349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.288298][ T4349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.342106][ T14] tipc: Node number set to 2886997007 [ 265.479387][ T4349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.512114][ T14] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 265.642622][ T4349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.742166][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 265.749262][ T14] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 265.782006][ T14] usb 5-1: config 0 has no interface number 0 [ 265.814355][ T14] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 265.866395][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.876012][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 265.897994][ T14] usb 5-1: Product: syz [ 265.912183][ T14] usb 5-1: Manufacturer: syz [ 265.938201][ T14] usb 5-1: SerialNumber: syz [ 265.959532][ T14] usb 5-1: config 0 descriptor?? [ 266.032196][ T14] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 266.237494][ T14] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 266.257555][ T14] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 266.371473][ T8552] loop2: detected capacity change from 0 to 4096 [ 266.404191][ T8552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 266.458838][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 97 [ 266.559661][ T4709] EXT4-fs (loop2): unmounting filesystem. [ 266.668506][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 266.697509][ T4308] usb 5-1: USB disconnect, device number 22 [ 266.716449][ T4308] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 266.747170][ T4308] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 266.766620][ T4308] quatech2 5-1:0.51: device disconnected [ 267.080371][ T8568] loop2: detected capacity change from 0 to 8 [ 267.423542][ T8579] loop2: detected capacity change from 0 to 1024 [ 267.431122][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.439910][ T8579] EXT4-fs: Ignoring removed orlov option [ 267.446877][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.458430][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.465784][ T8579] EXT4-fs: Ignoring removed oldalloc option [ 267.482443][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.490075][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.503738][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.514992][ T8579] EXT4-fs (loop2): Test dummy encryption mode enabled [ 267.612516][ T8579] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.767891][ T8587] loop4: detected capacity change from 0 to 512 [ 267.817328][ T4709] EXT4-fs (loop2): unmounting filesystem. [ 267.834914][ T8587] EXT4-fs error (device loop4): __ext4_iget:5077: inode #17: block 1803188595: comm syz.4.1450: invalid block [ 267.892849][ T8587] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1450: couldn't read orphan inode 17 (err -117) [ 267.963180][ T8587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 268.056582][ T8587] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.1450: path /: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 268.231023][ T4270] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /269/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 268.274302][ T4270] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 7: invalid block bitmap [ 268.292345][ T8577] chnl_net:caif_netlink_parms(): no params data found [ 268.297487][ T4270] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 268.413110][ T4270] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /269/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 268.415159][ T8583] loop5: detected capacity change from 0 to 32768 [ 268.473699][ T4270] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /269/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 268.527834][ T4270] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /269/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 268.580803][ T8583] XFS (loop5): Mounting V5 Filesystem [ 268.599048][ T4270] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /269/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 268.707549][ T4270] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /269/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 268.753249][ T4349] device hsr_slave_0 left promiscuous mode [ 268.763512][ T8621] loop2: detected capacity change from 0 to 1764 [ 268.770137][ T4349] device hsr_slave_1 left promiscuous mode [ 268.771001][ T4270] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /269/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 268.787704][ T8583] XFS (loop5): Ending clean mount [ 268.800746][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.809306][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.820365][ T8583] XFS (loop5): Quotacheck needed: Please wait. [ 268.832477][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.839954][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.848894][ T4349] device bridge_slave_1 left promiscuous mode [ 268.855403][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.873885][ T4349] device bridge_slave_0 left promiscuous mode [ 268.880180][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.939566][ T8583] XFS (loop5): Quotacheck: Done. [ 269.005610][ T4349] device veth1_macvtap left promiscuous mode [ 269.031963][ T4349] device veth0_macvtap left promiscuous mode [ 269.038171][ T4349] device veth1_vlan left promiscuous mode [ 269.051387][ T4349] device veth0_vlan left promiscuous mode [ 269.339243][ T8628] loop2: detected capacity change from 0 to 1024 [ 269.402109][ T9] hfsplus: b-tree write err: -5, ino 4 [ 269.522175][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 270.449856][ T4349] team0 (unregistering): Port device team_slave_1 removed [ 270.530428][ T4349] team0 (unregistering): Port device team_slave_0 removed [ 270.620611][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.736985][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.380734][ T4349] bond0 (unregistering): Released all slaves [ 271.540980][ T6204] XFS (loop5): Unmounting Filesystem [ 271.550775][ T4270] bridge0: port 3(syz_tun) entered disabled state [ 271.603096][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 271.606011][ T4270] device syz_tun left promiscuous mode [ 271.617730][ T4270] bridge0: port 3(syz_tun) entered disabled state [ 271.666262][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.680453][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.691551][ T8577] device bridge_slave_0 entered promiscuous mode [ 271.742681][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.750716][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.795204][ T8577] device bridge_slave_1 entered promiscuous mode [ 271.934321][ T8577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.983577][ T8577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.010784][ T8640] loop5: detected capacity change from 0 to 512 [ 272.083530][ T8640] EXT4-fs error (device loop5): __ext4_iget:5077: inode #17: block 1803188595: comm syz.5.1466: invalid block [ 272.113154][ T8640] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1466: couldn't read orphan inode 17 (err -117) [ 272.125985][ T8640] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 272.157480][ T8640] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.1466: path /: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.180104][ T8577] team0: Port device team_slave_0 added [ 272.188628][ T8577] team0: Port device team_slave_1 added [ 272.245946][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.253580][ T6204] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /133/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.287804][ T6204] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 7: invalid block bitmap [ 272.291006][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.300739][ T6204] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 272.365962][ T8577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.380838][ T6204] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /133/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.409086][ T6204] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /133/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.414344][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.444244][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.460081][ T6204] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /133/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.471647][ T8577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.548894][ T6204] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /133/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.596156][ T8577] device hsr_slave_0 entered promiscuous mode [ 272.610603][ T8577] device hsr_slave_1 entered promiscuous mode [ 272.617848][ T8577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.625571][ T8577] Cannot create hsr debugfs directory [ 272.638628][ T6204] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /133/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.661328][ T6204] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /133/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.785131][ T4349] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.946505][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 273.079335][ T4349] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.185897][ T8649] Non-string source [ 273.274703][ T4349] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.357514][ T8577] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 273.473753][ T4349] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.513925][ T8577] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 273.534413][ T8577] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 273.594069][ T8577] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 273.681834][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 273.964271][ T8577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.980872][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.009849][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.042974][ T8577] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.137345][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.156716][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.181444][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.188644][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.210895][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.222117][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.242161][ T52] block nbd0: Possible stuck request ffff888024a60000: control (read@0,4096B). Runtime 150 seconds [ 274.255361][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.287121][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.295318][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.303118][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.348451][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.360492][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.374595][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.389527][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.396725][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.415050][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.434853][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.462755][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.490023][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.555020][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.574744][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.590165][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.642034][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.650833][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.660461][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.669660][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.713508][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.232342][ T8666] chnl_net:caif_netlink_parms(): no params data found [ 275.317193][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.324527][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.334452][ T8666] device bridge_slave_0 entered promiscuous mode [ 275.342817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.350357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.442065][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.449302][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.457847][ T8666] device bridge_slave_1 entered promiscuous mode [ 275.469381][ T8577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.511627][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.567540][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.762454][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 275.777684][ T8666] team0: Port device team_slave_0 added [ 275.833291][ T8666] team0: Port device team_slave_1 added [ 275.848358][ T4349] device hsr_slave_0 left promiscuous mode [ 275.865384][ T4349] device hsr_slave_1 left promiscuous mode [ 275.877830][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.888488][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.902008][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.909484][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.942630][ T4349] device bridge_slave_1 left promiscuous mode [ 275.949541][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.979396][ T4349] device bridge_slave_0 left promiscuous mode [ 275.993149][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.055620][ T4349] device veth1_macvtap left promiscuous mode [ 276.063643][ T4349] device veth0_macvtap left promiscuous mode [ 276.065843][ T6204] EXT4-fs (loop5): unmounting filesystem. [ 276.069844][ T4349] device veth1_vlan left promiscuous mode [ 276.089627][ T4349] device veth0_vlan left promiscuous mode [ 276.321957][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 276.852727][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.878349][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.917625][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.937733][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.945708][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.956275][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.095819][ T4349] team0 (unregistering): Port device team_slave_1 removed [ 277.153713][ T4349] team0 (unregistering): Port device team_slave_0 removed [ 277.209238][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.267000][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.898234][ T4349] bond0 (unregistering): Released all slaves [ 278.067313][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.082547][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.119509][ T8666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.143777][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.150779][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.240279][ T8666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.304413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.313973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.335236][ T8695] loop6: detected capacity change from 0 to 512 [ 278.393066][ T8666] device hsr_slave_0 entered promiscuous mode [ 278.406427][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 278.429639][ T8666] device hsr_slave_1 entered promiscuous mode [ 278.440928][ T8695] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 278.451112][ T8695] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.455120][ T8666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.472346][ T8666] Cannot create hsr debugfs directory [ 278.528448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.562402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.583117][ T8577] device veth0_vlan entered promiscuous mode [ 278.613653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.633093][ T7795] EXT4-fs (loop6): unmounting filesystem. [ 278.641137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.764493][ T8577] device veth1_vlan entered promiscuous mode [ 278.906372][ T8709] loop2: detected capacity change from 0 to 16 [ 278.934449][ T8709] erofs: (device loop2): mounted with root inode @ nid 36. [ 278.948081][ T8709] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-22] [ 278.962078][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.986289][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.004808][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.021215][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.042335][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 279.053869][ T8577] device veth0_macvtap entered promiscuous mode [ 279.098142][ T8577] device veth1_macvtap entered promiscuous mode [ 279.149661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.159191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.200968][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.244369][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.255973][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.266653][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.279334][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.311324][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.323489][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.337641][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.361398][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.372595][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.384433][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.397807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.415167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.449852][ T8723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1496'. [ 279.466176][ T8688] chnl_net:caif_netlink_parms(): no params data found [ 279.485086][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.501797][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.522723][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.551772][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.561661][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.591861][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.611385][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.623605][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.634738][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.645387][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.657138][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.688321][ T8727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1497'. [ 279.704193][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.716014][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.734233][ T8577] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.752518][ T8577] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.774009][ T8577] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.790756][ T8577] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.959222][ T4349] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.023995][ T8666] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 280.077285][ T8666] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 280.168007][ T8734] loop6: detected capacity change from 0 to 32768 [ 280.177130][ T4349] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.187798][ T8734] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1501 (8734) [ 280.213510][ T8734] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.244995][ T8666] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 280.251664][ T8739] loop2: detected capacity change from 0 to 4096 [ 280.259454][ T8739] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 280.265420][ T8734] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 280.278504][ T8734] BTRFS info (device loop6): using free space tree [ 280.334724][ T4349] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.385833][ T8666] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 280.465509][ T4349] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.468374][ T8734] BTRFS info (device loop6): enabling ssd optimizations [ 280.489274][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 280.496147][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.503765][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.512585][ T8688] device bridge_slave_0 entered promiscuous mode [ 280.581934][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.582106][ T7795] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.589092][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.617645][ T8688] device bridge_slave_1 entered promiscuous mode [ 280.978391][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.988979][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.045649][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.046227][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.079994][ T8771] program syz.6.1505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.111560][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.121503][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.139007][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 281.148019][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.212618][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.298813][ T8688] team0: Port device team_slave_0 added [ 281.382294][ T8688] team0: Port device team_slave_1 added [ 281.546943][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.589240][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.625819][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.649753][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.755353][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.763363][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.825568][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.988154][ T8666] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.095688][ T8688] device hsr_slave_0 entered promiscuous mode [ 282.119736][ T8688] device hsr_slave_1 entered promiscuous mode [ 282.129702][ T8688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.145696][ T8688] Cannot create hsr debugfs directory [ 282.156225][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.179510][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.191135][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.201180][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.210033][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.215920][ T8804] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1521'. [ 282.217259][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.320301][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.346424][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.367239][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.404637][ T8808] loop2: detected capacity change from 0 to 1024 [ 282.410468][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.418214][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.426874][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.497828][ T8808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 282.524719][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.545462][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.557472][ T8808] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.568371][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 282.596456][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.617762][ T4709] EXT4-fs (loop2): unmounting filesystem. [ 282.621515][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.754702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.778205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.792193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.812701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.830175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.841605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.844726][ T4577] kernel write not supported for file /714/projid_map (pid: 4577 comm: kworker/1:10) [ 282.937160][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.010279][ T8827] loop7: detected capacity change from 0 to 1024 [ 283.096779][ T8827] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 283.134718][ T8827] EXT4-fs (loop7): orphan cleanup on readonly fs [ 283.202191][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 283.237141][ T8827] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz.7.1530: Invalid inode table block 0 in block_group 0 [ 283.319179][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.341786][ T8827] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 283.371841][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.387430][ T8827] EXT4-fs error (device loop7): ext4_quota_write:7228: inode #3: comm syz.7.1530: mark_inode_dirty error [ 283.420160][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.436083][ T8827] Quota error (device loop7): write_blk: dquota write failed [ 283.452865][ T8827] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 283.463314][ T8827] EXT4-fs error (device loop7): ext4_acquire_dquot:6816: comm syz.7.1530: Failed to acquire dquot type 0 [ 283.484284][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.491084][ T8827] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz.7.1530: Invalid inode table block 0 in block_group 0 [ 283.514105][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.520687][ T8827] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 283.545512][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.558667][ T8827] EXT4-fs error (device loop7): ext4_ext_truncate:4454: inode #15: comm syz.7.1530: mark_inode_dirty error [ 283.579611][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.587280][ T8827] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz.7.1530: Invalid inode table block 0 in block_group 0 [ 283.610988][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.617779][ T8827] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 283.642096][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.651237][ T8827] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 283.668939][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.675720][ T8827] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz.7.1530: Invalid inode table block 0 in block_group 0 [ 283.691288][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.699143][ T8827] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 283.709000][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.721007][ T8827] EXT4-fs error (device loop7): ext4_truncate:4312: inode #15: comm syz.7.1530: mark_inode_dirty error [ 283.746998][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.758117][ T8827] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 283.775193][ T8827] EXT4-fs (loop7): Remounting filesystem read-only [ 283.788435][ T8827] EXT4-fs (loop7): 1 truncate cleaned up [ 283.799368][ T8827] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 283.924638][ T8827] EXT4-fs (loop7): shut down requested (1) [ 284.053379][ T8577] EXT4-fs (loop7): unmounting filesystem. [ 284.380034][ T8844] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 284.442253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.466773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.482048][ T4618] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 284.517014][ T8666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.531296][ T8688] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 284.714003][ T4618] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.723310][ T4618] usb 8-1: config 0 has no interface number 0 [ 284.736148][ T8688] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 284.748057][ T4618] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 284.768341][ T4618] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.788609][ T4618] usb 8-1: Product: syz [ 284.798731][ T4618] usb 8-1: Manufacturer: syz [ 284.803631][ T4618] usb 8-1: SerialNumber: syz [ 284.820316][ T4618] usb 8-1: config 0 descriptor?? [ 284.834404][ T8688] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 284.867575][ T4349] device hsr_slave_0 left promiscuous mode [ 284.873687][ T5834] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 284.889544][ T4349] device hsr_slave_1 left promiscuous mode [ 284.906158][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.913949][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.922391][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.930341][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.945580][ T4349] device bridge_slave_1 left promiscuous mode [ 284.952566][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.984691][ T4349] device bridge_slave_0 left promiscuous mode [ 284.991141][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.040942][ T4618] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 285.055829][ T4618] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.067325][ T4618] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 285.076373][ T4618] usb 8-1: media controller created [ 285.081828][ T5834] usb 7-1: Using ep0 maxpacket: 16 [ 285.088832][ T5834] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.120950][ T4618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.129600][ T5834] usb 7-1: config 0 has no interface number 0 [ 285.135892][ T5834] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.150118][ T5834] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.170895][ T5834] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 285.180243][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.198667][ T5834] usb 7-1: config 0 descriptor?? [ 285.217349][ T4349] device veth1_macvtap left promiscuous mode [ 285.223800][ T4349] device veth0_macvtap left promiscuous mode [ 285.232162][ T4349] device veth1_vlan left promiscuous mode [ 285.238070][ T4349] device veth0_vlan left promiscuous mode [ 285.254404][ T4618] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 285.282261][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 285.303469][ T4618] usb 8-1: USB disconnect, device number 2 [ 285.822490][ T5834] uclogic 0003:28BD:0071.0018: pen parameters not found [ 285.840339][ T5834] uclogic 0003:28BD:0071.0018: interface is invalid, ignoring [ 285.850600][ T5834] usb 7-1: USB disconnect, device number 2 [ 286.502213][ T4349] team0 (unregistering): Port device team_slave_1 removed [ 286.617110][ T4349] team0 (unregistering): Port device team_slave_0 removed [ 286.726289][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.865923][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.008737][ T8897] loop2: detected capacity change from 0 to 8192 [ 288.071273][ T4349] bond0 (unregistering): Released all slaves [ 288.173836][ T8688] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 288.604866][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.664853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.685435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.764973][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.817844][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.862622][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.899196][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.906685][ T6999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.954934][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.004266][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.037788][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.059735][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.066924][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.105893][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.141447][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.160335][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.174175][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.201315][ T8899] loop2: detected capacity change from 0 to 40427 [ 289.211432][ T8899] F2FS-fs (loop2): invalid crc value [ 289.217796][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.232934][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.244637][ T8899] F2FS-fs (loop2): Found nat_bits in checkpoint [ 289.257787][ T8666] device veth0_vlan entered promiscuous mode [ 289.270274][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.280659][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.300473][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.324154][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.335641][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.361103][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.374870][ T8899] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 289.392683][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.401434][ T8899] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 289.417949][ T8688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.477027][ T8688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.523588][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.535161][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.554420][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.582782][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.609161][ T8666] device veth1_vlan entered promiscuous mode [ 289.620585][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.662984][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.730494][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.749448][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.779818][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.817846][ T8666] device veth0_macvtap entered promiscuous mode [ 289.828874][ T8935] loop6: detected capacity change from 0 to 4096 [ 289.845195][ T8666] device veth1_macvtap entered promiscuous mode [ 289.908531][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.949736][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.959858][ T26] audit: type=1800 audit(1756404141.634:44): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1569" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 290.010452][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.025466][ T26] audit: type=1804 audit(1756404141.644:45): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1569" name="/newroot/80/file1/file1" dev="loop6" ino=33 res=1 errno=0 [ 290.051652][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.069697][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.093222][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.105389][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.121567][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.139134][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.149967][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.165752][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.185452][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.202814][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.221404][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.241677][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.254496][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.289919][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.328580][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.361516][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.395003][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.428457][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.441105][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.459901][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.469900][ T8666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.488996][ T8666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.502958][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.511035][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.533123][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.585592][ T8666] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.621026][ T8666] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.664525][ T8666] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.685738][ T8666] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.809363][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.823193][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.965324][ T8946] loop2: detected capacity change from 0 to 32768 [ 291.276389][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.380793][ T6999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.404927][ T6999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.439644][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.464035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.478951][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.516432][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 291.578673][ T8958] program syz.7.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.701412][ T8961] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.710519][ T8961] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.719989][ T8961] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.729142][ T8961] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.886642][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 291.917956][ T8968] team0: Port device batadv1 added [ 292.207710][ T8978] loop7: detected capacity change from 0 to 2048 [ 292.281504][ T8984] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.351095][ T26] audit: type=1800 audit(1756404144.034:46): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1584" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 292.460585][ T8978] NILFS (loop7): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 292.501981][ T8978] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=16) [ 292.562357][ T8978] Remounting filesystem read-only [ 292.576046][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.589395][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.653421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.696051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.744496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.764026][ T8577] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 292.767699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.794349][ T8688] device veth0_vlan entered promiscuous mode [ 292.824794][ T8688] device veth1_vlan entered promiscuous mode [ 292.842343][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1593'. [ 292.844490][ T9001] delete_channel: no stack [ 292.925831][ T8688] device veth0_macvtap entered promiscuous mode [ 292.936698][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.951403][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 292.992211][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.015997][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.035582][ T8688] device veth1_macvtap entered promiscuous mode [ 293.052337][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.066899][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.109282][ T9011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.117384][ T9011] IPv6: NLM_F_CREATE should be set when creating new route [ 293.138844][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.159916][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.180352][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.219717][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.240231][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.273068][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.284778][ T9013] loop2: detected capacity change from 0 to 4096 [ 293.291758][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.303859][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.314187][ T9013] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 293.328860][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.358016][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.388685][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.429255][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.461166][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.489424][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.508764][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.522499][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.535714][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.571798][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.592883][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.615317][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.636058][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.639210][ T9009] loop6: detected capacity change from 0 to 32768 [ 293.661250][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.680568][ T9009] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1597 (9009) [ 293.687393][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.711494][ T9009] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.720082][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.729351][ T9009] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 293.747353][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.750079][ T9009] BTRFS info (device loop6): force clearing of disk cache [ 293.769329][ T9009] BTRFS info (device loop6): turning on sync discard [ 293.776400][ T9009] BTRFS info (device loop6): enabling auto defrag [ 293.779668][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.783020][ T9009] BTRFS info (device loop6): max_inline at 0 [ 293.799891][ T9009] BTRFS info (device loop6): enabling disk space caching [ 293.809305][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.818452][ T9009] BTRFS info (device loop6): disk space caching is enabled [ 293.830533][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.858864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.880884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.897923][ T8688] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.961768][ T8688] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.976751][ T8688] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.988798][ T8688] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.084624][ T9025] loop8: detected capacity change from 0 to 4096 [ 294.144872][ T9025] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 294.195047][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.218019][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.243527][ T6999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.254760][ T9009] BTRFS info (device loop6): enabling ssd optimizations [ 294.274055][ T9009] BTRFS info (device loop6): rebuilding free space tree [ 294.282688][ T6999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.293992][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.314139][ T9009] BTRFS info (device loop6): disabling free space tree [ 294.321212][ T9009] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 294.337647][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 294.412009][ T9009] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 294.552651][ T9052] loop7: detected capacity change from 0 to 64 [ 294.580949][ T9055] loop9: detected capacity change from 0 to 256 [ 294.713462][ T7795] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.421999][ T3910] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 295.450036][ T9085] loop2: detected capacity change from 0 to 512 [ 295.470235][ T9085] EXT4-fs: Ignoring removed i_version option [ 295.498770][ T9085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 295.575108][ T9085] EXT4-fs (loop2): 1 truncate cleaned up [ 295.581742][ T9085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 295.625152][ T3910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.638636][ T9093] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 295.673888][ T3910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.689131][ T9085] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1623: corrupted in-inode xattr [ 295.712554][ T3910] usb 10-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 295.742041][ T3910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.773487][ T9085] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1732: inode #15: comm syz.2.1623: unable to update i_inline_off [ 295.775211][ T3910] usb 10-1: config 0 descriptor?? [ 295.802372][ T9085] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1623: corrupted in-inode xattr [ 295.847537][ T9094] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1623: corrupted in-inode xattr [ 295.967612][ T4709] EXT4-fs (loop2): unmounting filesystem. [ 296.128528][ T9089] loop8: detected capacity change from 0 to 40427 [ 296.156705][ T9089] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff [ 296.173898][ T4618] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 296.178040][ T9089] F2FS-fs (loop8): invalid crc value [ 296.204021][ T9089] F2FS-fs (loop8): Found nat_bits in checkpoint [ 296.257430][ T3910] sony 0003:054C:024B.0019: unknown main item tag 0x0 [ 296.264677][ T3910] sony 0003:054C:024B.0019: unknown main item tag 0x0 [ 296.267881][ T9089] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 296.271521][ T3910] sony 0003:054C:024B.0019: unexpected long global item [ 296.317379][ T3910] sony 0003:054C:024B.0019: parse failed [ 296.331206][ T3910] sony: probe of 0003:054C:024B.0019 failed with error -22 [ 296.384036][ T8666] syz-executor: attempt to access beyond end of device [ 296.384036][ T8666] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.399986][ T4618] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.414438][ T4618] usb 7-1: config 0 has no interface number 0 [ 296.443046][ T4618] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 296.461796][ T4618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.471287][ T4618] usb 7-1: Product: syz [ 296.477043][ T4618] usb 7-1: Manufacturer: syz [ 296.482310][ T4618] usb 7-1: SerialNumber: syz [ 296.489685][ T4618] usb 7-1: config 0 descriptor?? [ 296.527917][ T4344] usb 10-1: USB disconnect, device number 2 [ 296.595817][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 296.705844][ T4618] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 296.723569][ T4618] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.745210][ T4618] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 296.757119][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 296.780145][ T4618] usb 7-1: media controller created [ 296.822140][ T4618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.916966][ T4618] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 296.992166][ T4618] usb 7-1: USB disconnect, device number 3 [ 297.122369][ T9129] sch_fq: defrate 1 ignored. [ 297.178438][ T9133] loop9: detected capacity change from 0 to 8 [ 297.179265][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1643'. [ 297.282504][ T5834] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 297.322256][ T9133] SQUASHFS error: Unable to read directory block [1d0:0] [ 297.504058][ T5834] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 297.525050][ T5834] usb 8-1: config 0 has no interface number 0 [ 297.531213][ T5834] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 297.623682][ T5834] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 297.670343][ T5834] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 297.700133][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.722235][ T5834] usb 8-1: config 0 descriptor?? [ 297.751178][ T9123] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 297.775098][ T5834] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input21 [ 298.054348][ T7015] usb 8-1: USB disconnect, device number 3 [ 298.156741][ T9159] loop8: detected capacity change from 0 to 16 [ 298.184595][ T9159] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 298.503754][ T9174] loop2: detected capacity change from 0 to 256 [ 298.562589][ T27] INFO: task syz.0.518:5891 blocked for more than 143 seconds. [ 298.588730][ T27] Not tainted syzkaller #0 [ 298.622179][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.651325][ T27] task:syz.0.518 state:D stack:27776 pid:5891 ppid:4267 flags:0x00004004 [ 298.671793][ T7015] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 298.688303][ T27] Call Trace: [ 298.693065][ T27] [ 298.698076][ T27] __schedule+0x10ec/0x40b0 [ 298.702852][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 298.708868][ T27] ? __mutex_trylock_common+0x80/0x250 [ 298.714765][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 298.721043][ T27] schedule+0xb9/0x180 [ 298.725336][ T27] schedule_preempt_disabled+0xf/0x20 [ 298.730753][ T27] __mutex_lock+0x555/0xaf0 [ 298.735604][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 298.740337][ T27] ? blkdev_get_by_dev+0x13d/0xa60 [ 298.746036][ T27] ? mutex_lock_nested+0x10/0x10 [ 298.751029][ T27] ? iput+0x3c0/0x980 [ 298.755108][ T27] ? ilookup+0x1c0/0x200 [ 298.759518][ T27] ? disk_block_events+0xa3/0x120 [ 298.766112][ T27] ? blkdev_get_by_dev+0xd6/0xa60 [ 298.771292][ T27] blkdev_get_by_dev+0x13d/0xa60 [ 298.776579][ T27] ? __rwlock_init+0x140/0x140 [ 298.781409][ T27] blkdev_open+0x11e/0x2e0 [ 298.787944][ T27] ? blkdev_mmap+0x1a0/0x1a0 [ 298.793080][ T27] do_dentry_open+0x7e9/0x10d0 [ 298.797911][ T27] path_openat+0x25c6/0x2e70 [ 298.806182][ T27] ? do_sys_openat2+0xcf/0x490 [ 298.811102][ T27] ? __x64_sys_openat+0x135/0x160 [ 298.816412][ T27] ? do_syscall_64+0x4c/0xa0 [ 298.821067][ T27] ? do_filp_open+0x3c0/0x3c0 [ 298.826061][ T27] do_filp_open+0x1c1/0x3c0 [ 298.830614][ T27] ? vfs_tmpfile+0x480/0x480 [ 298.835630][ T27] ? _raw_spin_unlock+0x24/0x40 [ 298.840653][ T27] ? alloc_fd+0x58f/0x630 [ 298.845167][ T27] do_sys_openat2+0x142/0x490 [ 298.849977][ T27] ? up_read+0x20/0x20 [ 298.854904][ T27] ? do_sys_open+0xe0/0xe0 [ 298.859369][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 298.865873][ T7015] usb 7-1: Using ep0 maxpacket: 32 [ 298.866274][ T27] ? lock_chain_count+0x20/0x20 [ 298.873462][ T7015] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 298.884544][ T27] __x64_sys_openat+0x135/0x160 [ 298.884590][ T27] do_syscall_64+0x4c/0xa0 [ 298.884614][ T27] ? clear_bhb_loop+0x60/0xb0 [ 298.884635][ T27] ? clear_bhb_loop+0x60/0xb0 [ 298.884660][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.884694][ T27] RIP: 0033:0x7f7a9458d550 [ 298.884725][ T27] RSP: 002b:00007f7a9531eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 298.884750][ T27] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f7a9458d550 [ 298.884765][ T27] RDX: 0000000000080000 RSI: 00007f7a9531ec10 RDI: 00000000ffffff9c [ 298.905128][ T7015] usb 7-1: config 0 has no interface number 0 [ 298.923981][ T27] RBP: 00007f7a9531ec10 R08: 0000000000000000 R09: 002364626e2f7665 [ 298.925997][ T7015] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.940884][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 298.941150][ T7015] usb 7-1: config 0 interface 85 has no altsetting 0 [ 298.947179][ T27] R13: 00007f7a947b6038 R14: 00007f7a947b5fa0 R15: 00007ffda319f9f8 [ 298.947221][ T27] [ 298.947251][ T27] INFO: task syz.0.518:5894 blocked for more than 143 seconds. [ 298.947266][ T27] Not tainted syzkaller #0 [ 298.947276][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.947284][ T27] task:syz.0.518 state:D stack:28960 pid:5894 ppid:4267 flags:0x00004004 [ 298.986076][ T7015] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 298.992155][ T27] Call Trace: [ 299.004894][ T7015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.006022][ T27] [ 299.021633][ T7015] usb 7-1: Product: syz [ 299.033035][ T27] __schedule+0x10ec/0x40b0 [ 299.047016][ T7015] usb 7-1: Manufacturer: syz [ 299.056818][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 299.061481][ T7015] usb 7-1: SerialNumber: syz [ 299.067399][ T27] ? __mutex_trylock_common+0x80/0x250 [ 299.067438][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 299.081356][ T7015] usb 7-1: config 0 descriptor?? [ 299.089417][ T27] schedule+0xb9/0x180 [ 299.095432][ T27] schedule_preempt_disabled+0xf/0x20 [ 299.100946][ T27] __mutex_lock+0x555/0xaf0 [ 299.105606][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 299.110500][ T27] ? blkdev_get_by_dev+0x13d/0xa60 [ 299.115928][ T27] ? mutex_lock_nested+0x10/0x10 [ 299.120910][ T27] ? iput+0x3c0/0x980 [ 299.125094][ T27] ? disk_block_events+0xa3/0x120 [ 299.130159][ T27] ? blkdev_get_by_dev+0x11a/0xa60 [ 299.135377][ T27] blkdev_get_by_dev+0x13d/0xa60 [ 299.140368][ T27] blkdev_get_by_path+0x1d6/0x3f0 [ 299.145578][ T27] ? security_fs_context_parse_param+0xb1/0xe0 [ 299.151904][ T27] ? bd_finish_claiming+0x2d0/0x2d0 [ 299.157142][ T27] ? aa_get_newest_label+0xf4/0x5c0 [ 299.162700][ T27] ? vfs_parse_fs_string+0xfe/0x160 [ 299.167960][ T27] ? end_current_label_crit_section+0x170/0x170 [ 299.174465][ T27] ? vfs_parse_fs_string+0xfe/0x160 [ 299.179721][ T27] ? udf_mount+0x40/0x40 [ 299.185222][ T27] mount_bdev+0x4a/0x3c0 [ 299.189535][ T27] legacy_get_tree+0xe6/0x180 [ 299.197392][ T27] ? lvid_get_unique_id+0x320/0x320 [ 299.214202][ T27] vfs_get_tree+0x88/0x270 [ 299.218769][ T27] do_new_mount+0x24a/0xa40 [ 299.223476][ T27] __se_sys_mount+0x2d6/0x3c0 [ 299.228212][ T27] ? __x64_sys_mount+0xc0/0xc0 [ 299.233056][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 299.238316][ T27] ? __x64_sys_mount+0x1c/0xc0 [ 299.243218][ T27] do_syscall_64+0x4c/0xa0 [ 299.247677][ T27] ? clear_bhb_loop+0x60/0xb0 [ 299.252540][ T27] ? clear_bhb_loop+0x60/0xb0 [ 299.257275][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.263244][ T27] RIP: 0033:0x7f7a9458ebe9 [ 299.267698][ T27] RSP: 002b:00007f7a927f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.276187][ T27] RAX: ffffffffffffffda RBX: 00007f7a947b6090 RCX: 00007f7a9458ebe9 [ 299.284500][ T27] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 299.296287][ T27] RBP: 00007f7a94611e19 R08: 0000000000000000 R09: 0000000000000000 [ 299.304469][ T27] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 299.313910][ T27] R13: 00007f7a947b6128 R14: 00007f7a947b6090 R15: 00007ffda319f9f8 [ 299.322031][ T27] [ 299.325157][ T27] [ 299.325157][ T27] Showing all locks held in the system: [ 299.333067][ T27] 1 lock held by rcu_tasks_kthre/12: [ 299.338417][ T27] #0: ffffffff8cb2b370 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 299.349000][ T27] 1 lock held by rcu_tasks_trace/13: [ 299.356755][ T27] #0: ffffffff8cb2bb90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 299.368025][ T27] 1 lock held by khungtaskd/27: [ 299.372963][ T27] #0: ffffffff8cb2a9e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 299.382954][ T27] 2 locks held by getty/4030: [ 299.387741][ T27] #0: ffff88802fd43098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 299.398827][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 299.410635][ T27] 1 lock held by udevd/4494: [ 299.415516][ T27] #0: ffff8880248ef4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 299.426072][ T27] 1 lock held by syz.0.518/5891: [ 299.431107][ T27] #0: ffff8880248ef4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 299.443368][ T27] 1 lock held by syz.0.518/5894: [ 299.448630][ T27] #0: ffff8880248ef4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60 [ 299.459060][ T27] 5 locks held by kworker/1:17/7015: [ 299.464759][ T27] #0: ffff88801d6fb538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 299.476792][ T27] #1: ffffc9000d94fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 299.488247][ T27] #2: ffff888027bdb190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0 [ 299.497603][ T27] #3: ffff88807511d190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 299.507661][ T27] #4: ffff88805ec6f118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 299.517054][ T27] [ 299.519505][ T27] ============================================= [ 299.519505][ T27] [ 299.528330][ T27] NMI backtrace for cpu 0 [ 299.532707][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 299.540026][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.550130][ T27] Call Trace: [ 299.553444][ T27] [ 299.556407][ T27] dump_stack_lvl+0x168/0x22e [ 299.561124][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 299.566542][ T27] ? show_regs_print_info+0x12/0x12 [ 299.571787][ T27] ? load_image+0x3b0/0x3b0 [ 299.576362][ T27] ? vprintk_emit+0x571/0x680 [ 299.581085][ T27] ? printk_sprint+0x460/0x460 [ 299.585987][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 299.591071][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 299.597277][ T27] ? _printk+0xcc/0x110 [ 299.601494][ T27] ? load_image+0x3b0/0x3b0 [ 299.606045][ T27] ? load_image+0x3b0/0x3b0 [ 299.610598][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 299.616713][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 299.622740][ T27] watchdog+0xeee/0xf30 [ 299.626936][ T27] ? watchdog+0x1ed/0xf30 [ 299.631310][ T27] kthread+0x29d/0x330 [ 299.635581][ T27] ? hungtask_pm_notify+0x40/0x40 [ 299.640630][ T27] ? kthread_blkcg+0xd0/0xd0 [ 299.645272][ T27] ret_from_fork+0x1f/0x30 [ 299.649806][ T27] [ 299.653977][ T27] Sending NMI from CPU 0 to CPUs 1: [ 299.659547][ C1] NMI backtrace for cpu 1 [ 299.659558][ C1] CPU: 1 PID: 4350 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 299.659575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.659585][ C1] Workqueue: phy13 ieee80211_iface_work [ 299.659611][ C1] RIP: 0010:unwind_next_frame+0xb21/0x20b0 [ 299.659635][ C1] Code: c0 20 c8 3c 01 0f 85 9f 0d 00 00 48 89 ef e8 16 1f 00 00 49 89 c7 49 bd 00 00 00 00 00 fc ff df 48 8b 44 24 28 42 80 3c 28 00 <4c> 8b 74 24 08 74 08 4c 89 f7 e8 50 7d 98 00 4d 89 3e 48 8b 44 24 [ 299.659650][ C1] RSP: 0018:ffffc900049a75f0 EFLAGS: 00000246 [ 299.659663][ C1] RAX: 1ffff92000934ee2 RBX: ffffc900049a76c8 RCX: 1ffff92000934e01 [ 299.659677][ C1] RDX: ffffc900049a7bc8 RSI: ffffffff8e7f35b0 RDI: ffffc900049a7bc0 [ 299.659689][ C1] RBP: ffffc900049a7bc0 R08: 000000000000000f R09: 0000000000000006 [ 299.659700][ C1] R10: fffff52000934ee5 R11: 1ffff92000934ee3 R12: 1ffff92000934eda [ 299.659712][ C1] R13: dffffc0000000000 R14: ffffc900049a0000 R15: ffffffff89937c03 [ 299.659725][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 299.659738][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.659750][ C1] CR2: 0000001b32d23ffc CR3: 000000000c88e000 CR4: 00000000003506e0 [ 299.659764][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.659773][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.659783][ C1] Call Trace: [ 299.659788][ C1] [ 299.659799][ C1] ? kfree_skb_reason+0x163/0x370 [ 299.659823][ C1] ? stack_trace_save+0xe0/0xe0 [ 299.659843][ C1] arch_stack_walk+0x10c/0x140 [ 299.659864][ C1] ? kfree_skb_reason+0x163/0x370 [ 299.659885][ C1] stack_trace_save+0x98/0xe0 [ 299.659903][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 299.659927][ C1] kasan_set_track+0x4b/0x70 [ 299.659947][ C1] ? kasan_set_track+0x4b/0x70 [ 299.659965][ C1] ? kasan_save_free_info+0x2d/0x50 [ 299.659988][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 299.660008][ C1] ? slab_free_freelist_hook+0x131/0x1a0 [ 299.660025][ C1] ? __kmem_cache_free+0xb6/0x1f0 [ 299.660039][ C1] ? skb_release_data+0x5db/0x7c0 [ 299.660058][ C1] ? kfree_skb_reason+0x163/0x370 [ 299.660098][ C1] ? __kmem_cache_free+0xb6/0x1f0 [ 299.660113][ C1] kasan_save_free_info+0x2d/0x50 [ 299.660136][ C1] ____kasan_slab_free+0x126/0x1e0 [ 299.660158][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 299.660184][ C1] ? skb_release_data+0x5db/0x7c0 [ 299.660203][ C1] __kmem_cache_free+0xb6/0x1f0 [ 299.660221][ C1] skb_release_data+0x5db/0x7c0 [ 299.660244][ C1] kfree_skb_reason+0x163/0x370 [ 299.660264][ C1] ieee80211_iface_work+0x7b3/0xc80 [ 299.660285][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 299.660311][ C1] ? process_one_work+0x7a1/0x1160 [ 299.660328][ C1] process_one_work+0x898/0x1160 [ 299.660352][ C1] ? worker_detach_from_pool+0x240/0x240 [ 299.660372][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 299.660395][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 299.660418][ C1] ? kthread_data+0x4b/0xc0 [ 299.660445][ C1] worker_thread+0xaa2/0x1250 [ 299.660471][ C1] ? __kthread_parkme+0x162/0x1c0 [ 299.660496][ C1] kthread+0x29d/0x330 [ 299.660518][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 299.660535][ C1] ? kthread_blkcg+0xd0/0xd0 [ 299.660559][ C1] ret_from_fork+0x1f/0x30 [ 299.660588][ C1] [ 299.661649][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 299.711634][ T7015] appletouch 7-1:0.85: Geyser mode initialized. [ 299.713126][ T7015] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input22 [ 300.011306][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 300.018518][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.028586][ T27] Call Trace: [ 300.031876][ T27] [ 300.034816][ T27] dump_stack_lvl+0x168/0x22e [ 300.039515][ T27] ? memcpy+0x3c/0x60 [ 300.043530][ T27] ? show_regs_print_info+0x12/0x12 [ 300.048738][ T27] ? load_image+0x3b0/0x3b0 [ 300.053267][ T27] panic+0x2c9/0x710 [ 300.057177][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 300.062999][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 300.067515][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 300.073122][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 300.079292][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 300.085559][ T27] watchdog+0xf2d/0xf30 [ 300.089736][ T27] ? watchdog+0x1ed/0xf30 [ 300.094103][ T27] kthread+0x29d/0x330 [ 300.098205][ T27] ? hungtask_pm_notify+0x40/0x40 [ 300.103253][ T27] ? kthread_blkcg+0xd0/0xd0 [ 300.107861][ T27] ret_from_fork+0x1f/0x30 [ 300.112315][ T27] [ 300.115646][ T27] Kernel Offset: disabled [ 300.120076][ T27] Rebooting in 86400 seconds..