last executing test programs: 1m27.113236569s ago: executing program 0 (id=88): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269", @ANYRESDEC, @ANYRES16, @ANYRES64], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 1m26.619139728s ago: executing program 0 (id=92): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000048000)=0x1, 0x0) 1m24.654876955s ago: executing program 0 (id=102): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x808808, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2f0, &(0x7f0000000c00)="$eJzs3c9u00oUx/HfOEmb/lFvbturK93NRYVKsKkosEBsglC27FkhoEmliqiItkjAhoJYIh4AseUVeAg2IF4AVrDhAbozmvHYcVLHSSBu2vL9SHGd8cz4uLbjOa5SC8Af60bjy7vL3+zLSCWVJF2TAklVqSzpH/1bfbS9t7XXbjXzOiq5FvZlFLU00YKZTp2N7VZWU9vOtfBq9l1Z8+kyFCMMw+tf3Y9w0qFggtzZnyGQpv156JZXjziuouxL/086hrH6PrhKegebAx3osRaKDAkAcPz563/gLxPzrsgoCKRVf9k/Vdf/g0kHMF5X2oeK8sfzqeu/G92Fxu7fv9yiTr7nUji7PIizxGGCqfS8n1J0ZHUNMM2grNLFEsxsbpW1tvFczUAvVPdS1ZbdtBkdurEB0a7Euelw+vdW0c3ZaGvciLJXHNLmVrs1bWcy4l8abY2/z3wwn8xtU9MbNZPxXzk0mtLbuE7XngoqNv6L/Xucs5OarSWf9tfr9aCryt9uJf/5Y8EbsJXV7Iwk3Wd8g2A/iSAvTrfuRXXfVoi2bn1Aq6WsVrXkXZ9Wy12tSv5IWNt40M69lVKMeBPNa3PLrOiH3quRGv8HNr5Vpc7MvI9642r6IyPanqnsmsnvpqe7zulyprfm9EjbBW+0u2WvdE9XtbD75On9Urvd2rEzdzNmHs7vGF9SeSll1il+pqScOtrvlITWszActuewyOAvjLVD+/mRlNjTJ6uyPcuSkuCod9Opm7FnSsaixkflHZAnZyYMpT6LivqYwnGya+Kd7gtmJhwQjpodd5ko/3MjeT+qcymSndRyxukD/2iU6nE9yeC6h4KLbjo7UgY31z+DS63xUp+c0eVcZ89L51KFRrlrrPk4TwnT0Gfd4f4/AAAAAAAAAAAAAAAAAADASTPGrxPE32Q8tGjCmwgAAAAAAAAAAAAAAAAAAAAAwIn3S8//zfof8e75v7WM5/+mjO/5v/lPBgIwlJ8BAAD//zsJeO4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m23.970753858s ago: executing program 0 (id=106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./bus/file1\x00', 0x0, 0x4000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) 1m22.873442695s ago: executing program 0 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2004}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000012400)={0x2020}, 0x2020) 1m19.480996798s ago: executing program 0 (id=121): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 1m18.731455199s ago: executing program 32 (id=121): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 44.183891571s ago: executing program 4 (id=313): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x60240, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) close_range(r1, r1, 0x0) 43.895331818s ago: executing program 4 (id=317): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@check_strict}, {@map_off}, {@nocompress}, {@cruft}]}, 0x1, 0x51d, &(0x7f0000000680)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000000000000000000200000000070000000000000803000000000000000000000d00000000008c9d00305f2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000) 43.498284504s ago: executing program 4 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9831fef0d631e6d8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) 43.250479708s ago: executing program 4 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 43.030322887s ago: executing program 4 (id=328): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 42.516527122s ago: executing program 4 (id=333): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f800000000000000fb1564"], 0x206082) 41.913611831s ago: executing program 33 (id=333): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f800000000000000fb1564"], 0x206082) 4.75651206s ago: executing program 5 (id=533): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0xffffff00, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 3.987231078s ago: executing program 5 (id=538): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 3.387512277s ago: executing program 5 (id=551): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000001380)=@ethtool_perm_addr={0x20, 0x6, "e1d85d1a0178"}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) 3.315036503s ago: executing program 3 (id=541): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r1 = socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 3.138508071s ago: executing program 5 (id=544): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2.909034968s ago: executing program 2 (id=545): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000c004300ad"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) 2.687362487s ago: executing program 3 (id=549): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ff00", 0x30, 0x11, 0x0, @private1, @local, {[], {0xfffc, 0xe22, 0x30, 0x0, @opaque="b553a348094e726b07cdafd056e28b1cbe1992fe230695e6d6aee9d953910d403587da16ae607440"}}}}}}, 0x0) 2.585335799s ago: executing program 6 (id=550): bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0xf, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b000000000008510"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) 2.54105814s ago: executing program 2 (id=552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd32, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x0, 0x1, 0x5, 0x1, 0x4, 0x5, 0x8, 0x7, 0x7, 0xc, 0x7, 0x4, 0xc, 0x9, 0x4], 0x0, [0x9, 0x2, 0x6, 0x6, 0x6, 0x80, 0x7, 0x2, 0x8, 0x6, 0x6, 0x3, 0x30, 0x9, 0x4, 0x5], [0xe9, 0x3, 0x3, 0x2, 0x10, 0xfff8, 0xf89b, 0x2427, 0x1, 0x9, 0x78, 0xbd, 0x7f, 0x4, 0x6, 0xea49]}}}}]}, 0x88}}, 0x40000) 2.530750498s ago: executing program 5 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000b0000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 2.327916001s ago: executing program 6 (id=554): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.327335631s ago: executing program 2 (id=564): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x6093, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) gettimeofday(&(0x7f0000002940), 0x0) 2.326841041s ago: executing program 3 (id=555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x100, 0xfff3, 0x8004, 0x3, 0x2, 0x8, 0x2, 0x200}, &(0x7f0000000340)=0x20) 1.988571028s ago: executing program 5 (id=568): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b16, 0x0) 1.950445341s ago: executing program 2 (id=558): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f00000027c0)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000000f00)=ANY=[@ANYRES64], 0xfe, 0xc22, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 1.654913136s ago: executing program 6 (id=559): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x3, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000100)=0x9) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x8) 1.654256586s ago: executing program 1 (id=571): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)="1adb", 0x2, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.587456734s ago: executing program 3 (id=560): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xf4ff) 1.281468247s ago: executing program 1 (id=561): r0 = socket$inet6(0xa, 0x3, 0xa) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfe26}, 0x1}], 0x1, 0x0, 0x0) 1.24373805s ago: executing program 2 (id=562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="f1c2b93b2849", @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote}}}}, 0x0) socket$unix(0x1, 0x1, 0x0) 1.209580574s ago: executing program 6 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESOCT], 0xa6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 948.642866ms ago: executing program 1 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001"], 0x50) unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 881.113103ms ago: executing program 6 (id=566): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./bus\x00', 0x4812, &(0x7f00000001c0)=ANY=[], 0x1, 0x68b, &(0x7f0000000640)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, &(0x7f0000000040)=""/48, 0x30) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 844.316937ms ago: executing program 3 (id=567): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r0, 0x5501) 622.529915ms ago: executing program 1 (id=569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x81}, 0x1c) 445.226893ms ago: executing program 6 (id=570): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x186, 0x4) 317.465759ms ago: executing program 1 (id=572): setresgid(0xee00, 0xee01, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 101.050799ms ago: executing program 2 (id=573): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') 1.04147ms ago: executing program 3 (id=574): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3be2b02884f95c63}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=584): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000240)={0x2, r1}) fcntl$notify(r0, 0x402, 0x80000027) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) kernel console output (not intermixed with test programs): becomes ready [ 114.226603][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.246950][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.261638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.282408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.297801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.341673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.353826][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.368561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.380653][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.390930][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.404187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.416159][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.426780][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.435928][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.445998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.458115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.474998][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.505832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.523239][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.534608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.545878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.557557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.603001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.614975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.627944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.640050][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.651322][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.664599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.676041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.686289][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.694747][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.705534][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.718214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.734322][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.745421][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.781435][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.799754][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.814967][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.825945][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.840971][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.854280][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.883206][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.897617][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.922468][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.937620][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.952962][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.964131][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.983785][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.008962][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.039105][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.076363][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.115861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.128221][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.145376][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.158423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.178025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.193832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.205386][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.256817][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.289097][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.302550][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.316104][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.330262][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.355062][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.366472][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.376207][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.385674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.404729][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.423557][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.432038][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.453229][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.471789][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.480437][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 115.488716][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 115.495627][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 115.498029][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.503493][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 115.540604][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.553385][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.587331][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.604683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.639494][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 115.642959][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.702321][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.711690][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.740880][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.770320][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.811857][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.831808][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.848060][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.858249][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.867578][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.874867][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.900362][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.920174][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.946660][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.982343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.993306][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.005554][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.022701][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.030545][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.046352][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.090319][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.113893][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.141400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.190114][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.212282][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.228187][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.250299][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.265719][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.275034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.290239][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.302619][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.335767][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.378283][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.387838][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.405016][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.461450][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.469920][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.491001][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.536729][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.559106][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.609635][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.618658][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.658405][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.694795][ T4281] device veth0_vlan entered promiscuous mode [ 116.706348][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.718974][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.740580][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.761683][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.781017][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.811800][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.847171][ T4281] device veth1_vlan entered promiscuous mode [ 116.865931][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.879057][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.888969][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.905934][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.917916][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.941264][ T4278] device veth0_vlan entered promiscuous mode [ 116.963938][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.983580][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.995442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.025510][ T4278] device veth1_vlan entered promiscuous mode [ 117.083152][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.094505][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.105059][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.118393][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.131022][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.141579][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.162920][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.190638][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.213507][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.236789][ T4278] device veth0_macvtap entered promiscuous mode [ 117.251688][ T4272] device veth0_vlan entered promiscuous mode [ 117.265547][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.277543][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.287303][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.298513][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.311561][ T4281] device veth0_macvtap entered promiscuous mode [ 117.336250][ T4272] device veth1_vlan entered promiscuous mode [ 117.352883][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.377606][ T4278] device veth1_macvtap entered promiscuous mode [ 117.394959][ T4281] device veth1_macvtap entered promiscuous mode [ 117.424102][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.437827][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.488299][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.509651][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.530372][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.560480][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 117.569122][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 117.570366][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 117.577545][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 117.600385][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.618176][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.639011][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.659372][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.689277][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.720680][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 117.721659][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.749092][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.760324][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.771830][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.784205][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.802533][ T4272] device veth0_macvtap entered promiscuous mode [ 117.820934][ T4272] device veth1_macvtap entered promiscuous mode [ 117.884100][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.901671][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.917901][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.968749][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.988585][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.003949][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.025962][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.043056][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.056413][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.074181][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.095703][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.116810][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.139780][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.155461][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.173999][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.188785][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.206256][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.224700][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.241914][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.255988][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.271240][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.297365][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.315387][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.327471][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.348914][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.401541][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.426519][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.448086][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.461334][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.476515][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.491599][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.514003][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.532530][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.544856][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.559088][ T4273] device veth0_vlan entered promiscuous mode [ 118.588916][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.619269][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.639418][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.650119][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.667730][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.680708][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.706154][ T4273] device veth1_vlan entered promiscuous mode [ 118.802349][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.821362][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.859078][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.882594][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.901003][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.943982][ T4273] device veth0_macvtap entered promiscuous mode [ 119.012949][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.025945][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.037215][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.065279][ T4273] device veth1_macvtap entered promiscuous mode [ 119.081139][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.092586][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.142507][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.152416][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.165580][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.181022][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.213205][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.223767][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.245064][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.267081][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.285835][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.306122][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.324955][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.342657][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.357984][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.367360][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.378903][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.392983][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.406835][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.426094][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.458356][ T4284] device veth0_vlan entered promiscuous mode [ 119.485532][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.517483][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.552600][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.588464][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.602881][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.618660][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.632431][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.647805][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.664675][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.676056][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.681404][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.722723][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.805186][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.823468][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.843794][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.866028][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.904386][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.917322][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.943161][ T4284] device veth1_vlan entered promiscuous mode [ 120.011727][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.142125][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.169465][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.193462][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.277919][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.314982][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.337426][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.351185][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.391574][ T4284] device veth0_macvtap entered promiscuous mode [ 120.445381][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.497656][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.528334][ T4284] device veth1_macvtap entered promiscuous mode [ 120.580451][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.608495][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.656796][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.681520][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.718961][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.787033][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.816390][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.860474][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.881417][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.904159][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.927325][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.952959][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.986332][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.024183][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.055883][ T73] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.103844][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.134745][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.197110][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.235967][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.275229][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.313577][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.357992][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.389305][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.405769][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.441160][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.462653][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.506906][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.555473][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.578593][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.656623][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698151][ T4322] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.763293][ T4322] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.102978][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.135033][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.157826][ T4394] loop2: detected capacity change from 0 to 16 [ 122.194175][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.268170][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.309712][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.364040][ T4394] erofs: (device loop2): mounted with root inode @ nid 36. [ 122.378056][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.626895][ T27] audit: type=1800 audit(1772735156.666:2): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 123.717970][ T4396] loop0: detected capacity change from 0 to 40427 [ 123.844775][ T4396] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 123.909587][ T4396] F2FS-fs (loop0): invalid crc value [ 124.179205][ C1] sched: RT throttling activated [ 124.275261][ T4396] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.409975][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.527906][ T4396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.540951][ T4325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.649265][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 124.700903][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 124.752763][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 124.764582][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.794988][ T4325] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 124.847026][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.868079][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.911404][ T4325] usb 5-1: config 0 descriptor?? [ 124.948328][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.010507][ T4325] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 125.049268][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.154177][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.235773][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.578757][ T14] usb 2-1: usb_control_msg returned -32 [ 125.587201][ T4408] loop3: detected capacity change from 0 to 262144 [ 125.597225][ T14] usbtmc 2-1:16.0: can't read capabilities [ 125.618970][ T4408] F2FS-fs (loop3): invalid crc value [ 125.670208][ T4408] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.717832][ T4408] F2FS-fs (loop3): Start checkpoint disabled! [ 125.745434][ T4408] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.022652][ T4325] gspca_vc032x: reg_w err -71 [ 126.043177][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.073704][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.104135][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.154336][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.208241][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.247483][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.282358][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.338704][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.363341][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.397578][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.450771][ T4417] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 126.470833][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.477327][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.529196][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.537937][ T4367] usb 2-1: USB disconnect, device number 2 [ 126.546436][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.546455][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.546465][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.546475][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.546485][ T4325] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.546494][ T4325] gspca_vc032x: Unknown sensor... [ 126.546554][ T4325] vc032x: probe of 5-1:0.0 failed with error -22 [ 126.590113][ T4325] usb 5-1: USB disconnect, device number 2 [ 127.207909][ T4450] loop3: detected capacity change from 0 to 8 [ 127.329370][ T4450] unable to read fragment index table [ 127.501648][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 127.874897][ T4462] loop3: detected capacity change from 0 to 128 [ 127.919868][ T4462] ======================================================= [ 127.919868][ T4462] WARNING: The mand mount option has been deprecated and [ 127.919868][ T4462] and is ignored by this kernel. Remove the mand [ 127.919868][ T4462] option from the mount to silence this warning. [ 127.919868][ T4462] ======================================================= [ 128.100869][ T4462] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.179694][ T4462] hpfs: filesystem error: improperly stopped [ 128.187232][ T4462] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.219340][ T4462] hpfs: You really don't want any checks? You are crazy... [ 128.300287][ T4462] hpfs: hpfs_map_sector(): read error [ 128.339339][ T4462] hpfs: code page support is disabled [ 128.415419][ T4462] hpfs: hpfs_map_4sectors(): unaligned read [ 128.440404][ T4462] hpfs: hpfs_map_4sectors(): unaligned read [ 128.491116][ T4462] hpfs: filesystem error: unable to find root dir [ 128.649324][ T4367] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.859806][ T4367] usb 5-1: Using ep0 maxpacket: 32 [ 128.896379][ T4367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.965059][ T4367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.009088][ T4367] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 129.017700][ T4475] loop3: detected capacity change from 0 to 1024 [ 129.049295][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.095248][ T4367] usb 5-1: config 0 descriptor?? [ 129.332426][ T4475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.390507][ T4475] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.679189][ T4475] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.39: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.873940][ T4475] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 130.016959][ T4475] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.016959][ T4475] [ 130.159056][ T4487] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.39: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 130.254796][ T4478] loop2: detected capacity change from 0 to 131072 [ 130.274398][ T4478] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 130.284351][ T4478] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 130.296297][ T4478] F2FS-fs (loop2): invalid crc value [ 130.316217][ T4487] EXT4-fs error (device loop3) in ext4_setattr:5676: Corrupt filesystem [ 130.335711][ T4478] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.349617][ T1174] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.400535][ T4478] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 130.409778][ T4478] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 130.592312][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 130.616626][ T1174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.640035][ T1174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.684486][ T1174] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.802411][ T4367] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 130.819394][ T1174] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.876798][ T1174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.965247][ T4500] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.995295][ T1174] usb 1-1: config 0 descriptor?? [ 131.073127][ T4325] usb 5-1: USB disconnect, device number 3 [ 131.470273][ T4503] fido_id[4503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 131.503393][ T1174] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 131.510355][ T4508] loop1: detected capacity change from 0 to 4096 [ 131.570983][ T1174] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 131.720114][ T1174] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 131.863081][ T1174] usb 1-1: USB disconnect, device number 2 [ 132.080992][ T4513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.51'. [ 132.144304][ T27] audit: type=1800 audit(1772735166.186:3): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.48" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 132.412664][ T4514] fido_id[4514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 133.019847][ T4322] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.194283][ T4511] loop3: detected capacity change from 0 to 32768 [ 133.265785][ T4322] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 133.292890][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.334476][ T4322] usb 2-1: Product: syz [ 133.356659][ T27] audit: type=1800 audit(1772735167.396:4): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.50" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 133.383181][ T4322] usb 2-1: Manufacturer: syz [ 133.388295][ T4322] usb 2-1: SerialNumber: syz [ 133.433326][ T4322] usb 2-1: config 0 descriptor?? [ 133.724023][ T4322] usb 2-1: USB disconnect, device number 3 [ 133.986167][ T4532] syz.3.58 uses obsolete (PF_INET,SOCK_PACKET) [ 134.404074][ T4536] loop4: detected capacity change from 0 to 256 [ 134.457081][ T4536] exfat: Deprecated parameter 'namecase' [ 134.530073][ T4536] exfat: Deprecated parameter 'utf8' [ 134.624294][ T4536] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 134.805096][ T4536] 9pnet_fd: p9_fd_create_unix (4536): problem connecting socket: ./file0: -111 [ 136.261507][ T4556] loop0: detected capacity change from 0 to 32768 [ 136.263891][ T4550] loop4: detected capacity change from 0 to 40427 [ 136.340586][ T4550] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 136.369630][ T4550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 136.390017][ T4550] F2FS-fs (loop4): invalid crc value [ 136.431100][ T4550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.552584][ T4556] JBD2: Ignoring recovery information on journal [ 136.674928][ T4568] netlink: 72 bytes leftover after parsing attributes in process `syz.3.71'. [ 136.715821][ T4550] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 136.757290][ T4550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.844206][ T4556] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.868586][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.031339][ T4572] device team_slave_0 entered promiscuous mode [ 137.039388][ T4572] device team_slave_1 entered promiscuous mode [ 137.104157][ T4560] loop1: detected capacity change from 0 to 40427 [ 137.117456][ T4574] device team_slave_0 left promiscuous mode [ 137.125382][ T4574] device team_slave_1 left promiscuous mode [ 137.202373][ T4560] F2FS-fs (loop1): invalid crc value [ 137.234903][ T4560] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.282543][ T4284] syz-executor: attempt to access beyond end of device [ 137.282543][ T4284] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 137.445260][ T4560] F2FS-fs (loop1): Start checkpoint disabled! [ 137.531439][ T4278] ocfs2: Unmounting device (7,0) on (node local) [ 137.549771][ T4560] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 137.949550][ T3535] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 138.009421][ T1174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.069003][ T33] kworker/u4:2: attempt to access beyond end of device [ 138.069003][ T33] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 138.095728][ T4584] loop0: detected capacity change from 0 to 512 [ 138.110516][ T33] kworker/u4:2: attempt to access beyond end of device [ 138.110516][ T33] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 138.134703][ T33] kworker/u4:2: attempt to access beyond end of device [ 138.134703][ T33] loop1: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 138.157353][ T4584] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.163800][ T3535] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.192810][ T4584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.228584][ T1174] usb 3-1: Using ep0 maxpacket: 8 [ 138.241514][ T1174] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 138.266743][ T3535] usb 4-1: not running at top speed; connect to a high speed hub [ 138.277028][ T1174] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.277065][ T1174] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.277089][ T1174] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.277133][ T1174] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.336209][ T1174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.411005][ T4584] EXT4-fs (loop0): 1 orphan inode deleted [ 138.418407][ T4584] EXT4-fs (loop0): 1 truncate cleaned up [ 138.468434][ T3535] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.490732][ T4584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.550647][ T3535] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.568099][ T1174] usb 3-1: GET_CAPABILITIES returned 0 [ 138.595436][ T1174] usbtmc 3-1:16.0: can't read capabilities [ 138.627721][ T4584] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 138.636722][ T3535] usb 4-1: string descriptor 0 read error: -22 [ 138.728212][ T4584] EXT4-fs (loop0): Remounting filesystem read-only [ 138.740548][ T3535] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.769259][ T3535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.844304][ T4367] usb 3-1: USB disconnect, device number 2 [ 138.869557][ T3535] usb 4-1: 0:2 : does not exist [ 138.923776][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.967501][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 139.146377][ T4593] loop1: detected capacity change from 0 to 512 [ 139.252753][ T4593] EXT4-fs (loop1): 1 truncate cleaned up [ 139.357989][ T4593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 139.593387][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 139.897686][ T3535] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 139.955215][ T3535] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 140.032340][ T3535] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 140.188896][ T4607] loop4: detected capacity change from 0 to 32768 [ 140.263560][ T4607] JBD2: Ignoring recovery information on journal [ 140.298755][ T4607] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 140.351395][ T3535] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 140.401085][ T27] audit: type=1800 audit(1772735174.446:5): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.84" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 140.485569][ T4616] loop1: detected capacity change from 0 to 4096 [ 140.539583][ T3535] usb 4-1: USB disconnect, device number 2 [ 140.737506][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 141.173144][ T4616] EXT4-fs (loop1): Test dummy encryption mode enabled [ 141.265940][ T4616] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 141.338641][ T4616] System zones: 0-5 [ 141.396313][ T4616] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.188649][ T4616] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 142.258605][ T4649] overlayfs: failed to resolve './bus': -2 [ 142.316647][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 143.023152][ T4665] loop0: detected capacity change from 0 to 64 [ 143.439374][ T4671] loop2: detected capacity change from 0 to 1024 [ 143.502730][ T4671] EXT4-fs: inline encryption not supported [ 143.550507][ T4671] EXT4-fs: Ignoring removed bh option [ 143.643132][ T4671] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.695588][ T4674] loop0: detected capacity change from 0 to 512 [ 143.756733][ T4674] EXT4-fs: Ignoring removed nobh option [ 143.830136][ T4674] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.877260][ T4671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.944325][ T4682] loop3: detected capacity change from 0 to 256 [ 144.022587][ T4674] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.047220][ T4682] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 144.121246][ T4674] EXT4-fs (loop0): 1 truncate cleaned up [ 144.158212][ T4674] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.285950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 144.297524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 144.450298][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 144.593162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 144.629042][ T4278] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /20/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 144.681861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 144.691695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 144.712630][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 144.780491][ T4278] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 144.884081][ T4667] loop4: detected capacity change from 0 to 32768 [ 144.929053][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 144.955247][ T4278] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /20/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 145.035766][ T4667] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.104 (4667) [ 145.095078][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 145.135564][ T4278] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 145.223047][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 145.246307][ T4278] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /20/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 145.328630][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 145.352567][ T4278] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 145.448089][ T4699] loop2: detected capacity change from 0 to 512 [ 145.469499][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 145.536022][ T4278] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /20/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 145.677617][ T4699] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.114: invalid block [ 145.787517][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 145.799645][ T4699] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.114: invalid indirect mapped block 10 (level 1) [ 145.858827][ T4278] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 145.957509][ T4699] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.114: invalid indirect mapped block 8 (level 1) [ 146.035917][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 146.096631][ T4699] EXT4-fs (loop2): 1 truncate cleaned up [ 146.109104][ T4278] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /20/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 146.182388][ T4699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.349388][ T4278] EXT4-fs (loop0): Remounting filesystem read-only [ 146.358383][ T4278] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 146.550227][ T4696] loop1: detected capacity change from 0 to 131072 [ 146.571208][ T4667] BTRFS error (device loop4): open_ctree failed: -4 [ 146.582618][ T4696] F2FS-fs (loop1): invalid crc value [ 146.608511][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 146.698304][ T4696] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.769623][ T4696] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 146.820888][ T4696] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 147.463726][ T4697] loop3: detected capacity change from 0 to 40427 [ 147.549538][ T4697] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 147.609528][ T4697] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 147.691943][ T4697] F2FS-fs (loop3): invalid crc value [ 147.806431][ T4697] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 148.196042][ T4697] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 148.221357][ T4697] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.237548][ T4336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.565702][ T4336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.836665][ T4336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.965461][ T4728] loop1: detected capacity change from 0 to 128 [ 149.103789][ T4336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.153107][ T4728] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 149.242653][ T4728] hpfs: filesystem error: improperly stopped [ 149.264318][ T4713] loop4: detected capacity change from 0 to 32768 [ 149.293496][ T4728] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 149.379759][ T4728] hpfs: You really don't want any checks? You are crazy... [ 149.388361][ T4728] hpfs: hpfs_map_sector(): read error [ 149.503286][ T4728] hpfs: code page support is disabled [ 149.542684][ T4728] hpfs: hpfs_map_4sectors(): unaligned read [ 149.574034][ T4728] hpfs: hpfs_map_4sectors(): unaligned read [ 149.635819][ T4728] hpfs: filesystem error: unable to find root dir [ 149.681666][ T4732] input: syz0 as /devices/virtual/input/input6 [ 150.324073][ T4740] loop1: detected capacity change from 0 to 128 [ 150.360071][ T4740] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.435704][ T4740] hpfs: filesystem error: improperly stopped [ 150.539328][ T4740] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.547271][ T4740] hpfs: You really don't want any checks? You are crazy... [ 150.678574][ T4740] hpfs: hpfs_map_sector(): read error [ 150.712863][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.723729][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.733457][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.742854][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.760926][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.769533][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.829947][ T4740] hpfs: code page support is disabled [ 150.903615][ T4740] hpfs: hpfs_map_4sectors(): unaligned read [ 150.959622][ T4740] hpfs: hpfs_map_4sectors(): unaligned read [ 151.000409][ T4742] loop3: detected capacity change from 0 to 4096 [ 151.049253][ T4740] hpfs: filesystem error: unable to find root dir [ 151.196038][ T4749] hpfs: hpfs_map_4sectors(): unaligned read [ 151.410211][ T4739] loop2: detected capacity change from 0 to 131072 [ 151.425939][ T4739] F2FS-fs (loop2): invalid crc value [ 151.450174][ T27] audit: type=1800 audit(1772735185.496:6): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.129" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 151.508385][ T4739] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.549218][ T4739] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 151.578247][ T4739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 152.235892][ T4763] loop1: detected capacity change from 0 to 32768 [ 152.311568][ T4763] JBD2: Ignoring recovery information on journal [ 152.409869][ T4763] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 152.498472][ T27] audit: type=1800 audit(1772735186.536:7): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.142" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 152.672594][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 152.704823][ T4743] chnl_net:caif_netlink_parms(): no params data found [ 152.839363][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 153.422791][ T4795] loop2: detected capacity change from 0 to 128 [ 153.483472][ T4795] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 153.555389][ T4795] hpfs: filesystem error: improperly stopped [ 153.599316][ T4795] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 153.648194][ T4795] hpfs: You really don't want any checks? You are crazy... [ 153.691056][ T4795] hpfs: hpfs_map_sector(): read error [ 153.739451][ T4795] hpfs: code page support is disabled [ 153.750289][ T4795] hpfs: hpfs_map_4sectors(): unaligned read [ 153.757911][ T4795] hpfs: hpfs_map_4sectors(): unaligned read [ 153.812809][ T4795] hpfs: filesystem error: unable to find root dir [ 153.950952][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.981865][ T4743] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.038585][ T4743] device bridge_slave_0 entered promiscuous mode [ 154.098736][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.136929][ T4743] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.159701][ T4743] device bridge_slave_1 entered promiscuous mode [ 154.333094][ T4798] loop4: detected capacity change from 0 to 4096 [ 154.364249][ T4743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.395436][ T4798] EXT4-fs (loop4): Test dummy encryption mode enabled [ 154.498624][ T4798] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 154.527764][ T4790] loop3: detected capacity change from 0 to 32768 [ 154.537223][ T4798] System zones: 0-5 [ 154.578704][ T4798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.710883][ T4743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.895770][ T4743] team0: Port device team_slave_0 added [ 154.919470][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 155.006246][ T4743] team0: Port device team_slave_1 added [ 155.020624][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 155.128804][ T4336] device hsr_slave_0 left promiscuous mode [ 155.239488][ T4336] device hsr_slave_1 left promiscuous mode [ 155.313561][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.342670][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.421107][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.465688][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.493936][ T4336] device bridge_slave_1 left promiscuous mode [ 155.520482][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.565630][ T4811] loop4: detected capacity change from 0 to 4096 [ 155.597570][ T4336] device bridge_slave_0 left promiscuous mode [ 155.607535][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.745839][ T27] audit: type=1800 audit(1772735189.786:8): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.146" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 155.817144][ T4336] device veth1_macvtap left promiscuous mode [ 155.835298][ T4336] device veth0_macvtap left promiscuous mode [ 155.848616][ T4336] device veth1_vlan left promiscuous mode [ 155.883046][ T4336] device veth0_vlan left promiscuous mode [ 156.136514][ T4815] loop2: detected capacity change from 0 to 32768 [ 156.185599][ T4815] JBD2: Ignoring recovery information on journal [ 156.217746][ T4815] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.260154][ T27] audit: type=1800 audit(1772735190.306:9): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 156.436220][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 156.999559][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 157.927134][ T4830] loop3: detected capacity change from 0 to 40427 [ 157.972944][ T4830] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 158.015359][ T4830] F2FS-fs (loop3): invalid crc value [ 158.085834][ T4830] F2FS-fs (loop3): Found nat_bits in checkpoint [ 158.347102][ T4830] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.689932][ T4272] syz-executor: attempt to access beyond end of device [ 158.689932][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.961675][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 159.079478][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 159.172525][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 159.209266][ T3535] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.366212][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.399600][ T3535] usb 3-1: Using ep0 maxpacket: 32 [ 159.407071][ T3535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.433486][ T3535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.445961][ T3535] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 159.456050][ T3535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.503550][ T3535] usb 3-1: config 0 descriptor?? [ 159.590031][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.963674][ T3535] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 160.230453][ T1174] usb 3-1: USB disconnect, device number 3 [ 160.321227][ T4867] fido_id[4867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 161.055347][ T4336] bond0 (unregistering): Released all slaves [ 161.432351][ T4743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.450250][ T4743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.572217][ T4743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.592383][ T4895] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 161.618004][ T4743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.638283][ T4743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.666841][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 161.691024][ T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.734989][ T4743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.899475][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 161.907821][ T127] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 161.931753][ T4743] device hsr_slave_0 entered promiscuous mode [ 161.944379][ T127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.977432][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.998872][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.036007][ T127] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.067317][ T4905] loop3: detected capacity change from 0 to 128 [ 162.073838][ T127] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.099928][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.132959][ T4743] device hsr_slave_1 entered promiscuous mode [ 162.338985][ T127] usb 5-1: usb_control_msg returned -32 [ 162.359294][ T127] usbtmc 5-1:16.0: can't read capabilities [ 162.871877][ T4743] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.900420][ T4743] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.948568][ T4743] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.965496][ T4893] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 162.975832][ T4743] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.988670][ T4322] usb 5-1: USB disconnect, device number 4 [ 163.299909][ T4743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.333311][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.352574][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.394362][ T4743] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.454974][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.473780][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.503220][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.511560][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.578197][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.598841][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.611055][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.631384][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.638735][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.669697][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.739390][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.764185][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.839232][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.882951][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.930679][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.972217][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.983576][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.014076][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.034019][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.054430][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.084427][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.147112][ T4945] 8021q: VLANs not supported on syzkaller0 [ 164.285288][ T4943] loop3: detected capacity change from 0 to 32768 [ 164.367268][ T4943] JBD2: Ignoring recovery information on journal [ 164.432708][ T4943] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.491154][ T27] audit: type=1800 audit(1772735198.536:10): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.187" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 164.709613][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 164.829618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 165.009771][ T4960] device syzkaller1 entered promiscuous mode [ 165.775370][ T4981] loop4: detected capacity change from 0 to 128 [ 165.851444][ T4981] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 165.886851][ T4982] loop2: detected capacity change from 0 to 2048 [ 165.952412][ T4981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.064666][ T4982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.135581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.147949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.205819][ T4743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.797320][ T4970] loop3: detected capacity change from 0 to 40427 [ 166.835177][ T4970] F2FS-fs (loop3): invalid crc value [ 166.840528][ T4367] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.867189][ T4970] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.989331][ T4970] F2FS-fs (loop3): Start checkpoint disabled! [ 167.007310][ T4970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 167.019501][ T4367] usb 5-1: Using ep0 maxpacket: 32 [ 167.026817][ T4367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.080633][ T4367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.111635][ T4367] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 167.153559][ T4367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.194878][ T4367] usb 5-1: config 0 descriptor?? [ 167.409030][ T4334] kworker/u4:6: attempt to access beyond end of device [ 167.409030][ T4334] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 167.433843][ T4334] kworker/u4:6: attempt to access beyond end of device [ 167.433843][ T4334] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 167.449917][ T4334] kworker/u4:6: attempt to access beyond end of device [ 167.449917][ T4334] loop3: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 167.507801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.518561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.561381][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.577003][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.589476][ T4743] device veth0_vlan entered promiscuous mode [ 167.608010][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.623542][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.637976][ T4367] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 167.653445][ T4743] device veth1_vlan entered promiscuous mode [ 167.693650][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.705181][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.724517][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.737498][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.766515][ T4743] device veth0_macvtap entered promiscuous mode [ 167.798597][ T4743] device veth1_macvtap entered promiscuous mode [ 167.840554][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.857235][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.868098][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.895090][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.936112][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.964566][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.988445][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.024675][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.036992][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.060091][ T1174] usb 5-1: USB disconnect, device number 5 [ 168.078429][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.096236][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.111139][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.120776][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.132199][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.143985][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.158115][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.170979][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.182243][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.193047][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.204305][ T4743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.215160][ T4743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.227117][ T5005] fido_id[5005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.227911][ T4743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.254754][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.270167][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.294929][ T4743] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.311822][ T4743] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.322130][ T4743] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.332124][ T4743] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.445387][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.458032][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.495303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.507456][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.518980][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.528177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.979301][ T1174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.087520][ T5033] loop1: detected capacity change from 0 to 512 [ 169.144938][ T5033] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 169.181173][ T1174] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 169.204646][ T1174] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 169.248003][ T1174] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 169.300214][ T1174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.348822][ T1174] usb 4-1: Product: syz [ 169.367436][ T1174] usb 4-1: Manufacturer: syz [ 169.373833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 169.411267][ T1174] usb 4-1: SerialNumber: syz [ 169.460745][ T1174] usb 4-1: config 0 descriptor?? [ 169.468707][ T5019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.487624][ T5019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.651378][ T5041] loop1: detected capacity change from 0 to 512 [ 169.658879][ T5041] EXT4-fs: Ignoring removed i_version option [ 169.725338][ T5019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.752281][ T5041] EXT4-fs: Ignoring removed bh option [ 169.765037][ T5019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.834405][ T5041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.865527][ T5041] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.068404][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 170.213784][ T1174] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 170.415161][ T1174] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 170.475638][ T1174] usb 4-1: USB disconnect, device number 3 [ 170.552408][ T5058] loop4: detected capacity change from 0 to 2048 [ 170.576261][ T5058] EXT4-fs: Ignoring removed i_version option [ 170.645611][ T5058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.689378][ T5058] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.782786][ T5058] EXT4-fs (loop4): shut down requested (2) [ 170.805407][ T5058] fs-verity: sha512 using implementation "sha512-avx2" [ 171.026750][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 171.085968][ T5077] loop5: detected capacity change from 0 to 256 [ 171.489207][ T1174] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.533932][ T5095] loop1: detected capacity change from 0 to 1024 [ 171.692644][ T1174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.724020][ T1174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.777589][ T1174] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 171.815052][ T1174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.867632][ T1174] usb 5-1: config 0 descriptor?? [ 171.978075][ T9] hfsplus: b-tree write err: -5, ino 25 [ 172.011974][ T9] hfsplus: b-tree write err: -5, ino 4 [ 172.017922][ T9] hfsplus: b-tree write err: -5, ino 2 [ 172.049570][ T127] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 172.242516][ T127] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.266620][ T127] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.312025][ T1174] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 172.329899][ T127] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.344208][ T1174] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 172.361908][ T1174] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0006/input/input7 [ 172.379635][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.426974][ T1174] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 172.619612][ T3535] usb 5-1: USB disconnect, device number 6 [ 172.620083][ T127] usb 3-1: usb_control_msg returned -32 [ 172.662231][ T127] usbtmc 3-1:16.0: can't read capabilities [ 172.817901][ T5115] fido_id[5115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 172.985727][ T5122] loop1: detected capacity change from 0 to 2048 [ 173.412664][ T5140] loop1: detected capacity change from 0 to 128 [ 173.447513][ T5140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 173.456715][ T5140] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.518539][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 173.574675][ T5149] loop5: detected capacity change from 0 to 512 [ 173.599430][ T5146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 173.657408][ T5146] Zero length message leads to an empty skb [ 173.682945][ T5149] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 173.692444][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.700304][ T5149] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.779991][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 173.909246][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 173.922216][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.971322][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.012713][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.048551][ T4743] EXT4-fs (loop5): unmounting filesystem. [ 174.061755][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.089391][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.125463][ T7] usb 5-1: config 0 descriptor?? [ 174.211766][ T5163] process 'syz.1.246' launched './file0' with NULL argv: empty string added [ 174.233720][ T5163] Invalid argument reading file caps for ./file0 [ 174.580589][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input8 [ 174.655462][ T7] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 174.733527][ T3535] usb 3-1: USB disconnect, device number 4 [ 174.867564][ T4367] usb 5-1: USB disconnect, device number 7 [ 174.921616][ T4290] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 174.930500][ T4290] Bluetooth: hci1: Injecting HCI hardware error event [ 174.941863][ T4277] Bluetooth: hci1: hardware error 0x00 [ 175.238157][ T5181] fido_id[5181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 175.339318][ T3535] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.529246][ T3535] usb 3-1: Using ep0 maxpacket: 8 [ 175.537641][ T3535] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 175.555849][ T3535] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.615236][ T3535] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.657432][ T3535] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.704114][ T3535] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.727652][ T3535] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.766050][ T3535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.028056][ T3535] usb 3-1: usb_control_msg returned -32 [ 176.040955][ T3535] usbtmc 3-1:16.0: can't read capabilities [ 176.363780][ T5215] Illegal XDP return value 4294967274 on prog (id 12) dev syz_tun, expect packet loss! [ 176.586789][ T4367] usb 3-1: USB disconnect, device number 5 [ 176.990018][ T5228] loop1: detected capacity change from 0 to 2048 [ 177.079339][ T4277] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 177.211401][ T5228] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 177.400697][ T5228] UDF-fs: Scanning with blocksize 512 failed [ 177.482153][ T5228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.543793][ T5223] loop3: detected capacity change from 0 to 32768 [ 177.603108][ T5223] JBD2: Ignoring recovery information on journal [ 177.697265][ T5223] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 178.027390][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 178.778400][ T5238] loop2: detected capacity change from 0 to 32768 [ 178.989941][ T5238] XFS (loop2): Mounting V5 Filesystem [ 179.093751][ T5238] XFS (loop2): Ending clean mount [ 179.382317][ T5292] loop3: detected capacity change from 0 to 64 [ 179.390728][ T4281] XFS (loop2): Unmounting Filesystem [ 179.673782][ T3535] kernel read not supported for file /dsp1 (pid: 3535 comm: kworker/1:2) [ 180.089024][ T5306] loop4: detected capacity change from 0 to 128 [ 180.212654][ T4506] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.399602][ T4328] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.503716][ T5341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.303'. [ 181.549888][ T5312] loop5: detected capacity change from 0 to 32768 [ 181.589516][ T4328] usb 5-1: Using ep0 maxpacket: 32 [ 181.599971][ T4328] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 181.628745][ T5312] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 181.645420][ T4328] usb 5-1: config 0 has no interface number 0 [ 181.676371][ T5312] JBD2: Ignoring recovery information on journal [ 181.742858][ T4328] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 181.839457][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.874701][ T4328] usb 5-1: Product: syz [ 181.892238][ T4328] usb 5-1: Manufacturer: syz [ 181.897038][ T4328] usb 5-1: SerialNumber: syz [ 181.914055][ T5312] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 181.971471][ T4328] usb 5-1: config 0 descriptor?? [ 182.007845][ T4328] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 182.216297][ T4328] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 182.270421][ T4328] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 182.306900][ T4743] ocfs2: Unmounting device (7,5) on (node local) [ 182.604071][ T5361] loop3: detected capacity change from 0 to 2048 [ 182.621217][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 182.635416][ T4328] usb 5-1: USB disconnect, device number 8 [ 182.666090][ T4328] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 182.694801][ T5361] loop3: p2 < > p4 [ 182.735220][ T5361] loop3: p4 size 262144 extends beyond EOD, truncated [ 182.760237][ T4328] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 182.811609][ T4328] quatech2 5-1:0.51: device disconnected [ 182.822020][ T5361] F2FS-fs (loop3p2): Unable to read 1th superblock [ 182.859515][ T5361] F2FS-fs (loop3p2): Unable to read 2th superblock [ 182.968002][ T5363] loop1: detected capacity change from 0 to 256 [ 183.237406][ T4430] udevd[4430]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 183.266309][ T4389] udevd[4389]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 183.683989][ T5386] loop4: detected capacity change from 0 to 164 [ 183.758748][ T5386] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 184.479161][ T5410] device syzkaller1 entered promiscuous mode [ 185.069361][ T5418] loop3: detected capacity change from 0 to 1024 [ 185.101979][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.172117][ T5418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.206517][ T5418] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.353167][ T5418] EXT4-fs (loop3): shut down requested (2) [ 185.503285][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.520232][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 185.688152][ T5417] loop2: detected capacity change from 0 to 32768 [ 185.775389][ T5417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.332 (5417) [ 185.793348][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.879967][ T5417] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.880193][ T5417] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 185.880273][ T5417] BTRFS info (device loop2): force clearing of disk cache [ 185.880309][ T5417] BTRFS info (device loop2): enabling auto defrag [ 185.880330][ T5417] BTRFS info (device loop2): enabling ssd optimizations [ 185.880374][ T5417] BTRFS info (device loop2): max_inline at 0 [ 185.880398][ T5417] BTRFS info (device loop2): enabling disk space caching [ 185.880415][ T5417] BTRFS info (device loop2): disk space caching is enabled [ 186.096892][ T5417] BTRFS info (device loop2): rebuilding free space tree [ 186.178976][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.532340][ T5417] BTRFS info (device loop2): disabling free space tree [ 186.641483][ T5417] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.683642][ T5417] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.870615][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.882051][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.896185][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.910492][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.929298][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 186.945821][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.183586][ T5432] loop5: detected capacity change from 0 to 32768 [ 187.303232][ T5432] JBD2: Ignoring recovery information on journal [ 187.458291][ T5432] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 187.484171][ T4281] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.764072][ T4743] ocfs2: Unmounting device (7,5) on (node local) [ 188.355935][ T5456] chnl_net:caif_netlink_parms(): no params data found [ 188.499422][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.506680][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.515216][ T5456] device bridge_slave_0 entered promiscuous mode [ 188.526412][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.533711][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.542164][ T5456] device bridge_slave_1 entered promiscuous mode [ 188.603660][ T5456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.617985][ T5456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.649352][ T5456] team0: Port device team_slave_0 added [ 188.662387][ T5456] team0: Port device team_slave_1 added [ 188.707884][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.715068][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.742178][ T5456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.762981][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.777082][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.810372][ T5456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.948237][ T5456] device hsr_slave_0 entered promiscuous mode [ 188.976298][ T5456] device hsr_slave_1 entered promiscuous mode [ 188.999642][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 189.025205][ T5456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.043376][ T5456] Cannot create hsr debugfs directory [ 189.250530][ T11] device hsr_slave_0 left promiscuous mode [ 189.257070][ T11] device hsr_slave_1 left promiscuous mode [ 189.263976][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.271641][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.281148][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.288725][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.309956][ T11] device bridge_slave_1 left promiscuous mode [ 189.316299][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.336945][ T11] device bridge_slave_0 left promiscuous mode [ 189.344462][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.376227][ T11] device veth1_macvtap left promiscuous mode [ 189.382464][ T11] device veth0_macvtap left promiscuous mode [ 189.388645][ T11] device veth1_vlan left promiscuous mode [ 189.395147][ T11] device veth0_vlan left promiscuous mode [ 190.305480][ T11] team0 (unregistering): Port device team_slave_1 removed [ 190.356882][ T11] team0 (unregistering): Port device team_slave_0 removed [ 190.411918][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.470311][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.876565][ T11] bond0 (unregistering): Released all slaves [ 191.080203][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 191.179186][ T5456] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.199898][ T5456] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.216847][ T5456] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.234591][ T5456] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.387147][ T5456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.428130][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.444857][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.475084][ T5456] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.494994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.511078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.527121][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.534380][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.566020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.576104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.593247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.608645][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.615912][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.631798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.648732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.676124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.701054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.713189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.722814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.741566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.750827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.770735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.780490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.789755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.810633][ T5456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.176425][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.187606][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.205503][ T5456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.746929][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.762292][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.795917][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.811558][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.827375][ T5456] device veth0_vlan entered promiscuous mode [ 192.836973][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.850998][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.868511][ T5456] device veth1_vlan entered promiscuous mode [ 192.903074][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.912378][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.926457][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.935897][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.948330][ T5456] device veth0_macvtap entered promiscuous mode [ 192.965464][ T5456] device veth1_macvtap entered promiscuous mode [ 192.992052][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.003755][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.014476][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.025360][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.038479][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.054368][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.068436][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.082499][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.095554][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.111158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.121004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.129864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.143637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.155967][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.167621][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 193.174776][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.185637][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.196579][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.207885][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.218892][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.229089][ T5456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.241711][ T5456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.253804][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.261933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.275112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.288972][ T5456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.303089][ T5456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.315566][ T5456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.335889][ T5456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.497920][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.513106][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.532410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.556999][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.566027][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.575714][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.751046][ T5560] loop6: detected capacity change from 0 to 764 [ 194.163864][ T5571] loop2: detected capacity change from 0 to 1024 [ 194.201727][ T5571] EXT4-fs: inline encryption not supported [ 194.246143][ T5571] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.382009][ T5571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.568104][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 194.885143][ T5590] loop1: detected capacity change from 0 to 4096 [ 194.964736][ T5590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.246397][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 195.812541][ T5590] fs-verity (loop1, inode 13): Error -4 building Merkle tree [ 196.118910][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 196.241330][ T5628] loop3: detected capacity change from 0 to 256 [ 196.379014][ T5596] loop5: detected capacity change from 0 to 32768 [ 196.465935][ T5596] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.345 (5596) [ 196.543988][ T5596] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 196.589245][ T5596] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 196.607417][ T5636] loop2: detected capacity change from 0 to 512 [ 196.693437][ T5596] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 196.708049][ T5636] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 196.722077][ T5631] loop6: detected capacity change from 0 to 8192 [ 196.754857][ T5596] BTRFS info (device loop5): use zstd compression, level 3 [ 196.784542][ T5596] BTRFS info (device loop5): using free space tree [ 196.825996][ T5636] EXT4-fs (loop2): 1 truncate cleaned up [ 196.835653][ T5631] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 196.899325][ T5636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 196.908516][ T5631] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 196.974428][ T5631] REISERFS (device loop6): using ordered data mode [ 196.983389][ T27] audit: type=1800 audit(1772735231.036:11): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.368" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 res=0 errno=0 [ 197.037022][ T5631] reiserfs: using flush barriers [ 197.046047][ T5631] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.064178][ T5631] REISERFS (device loop6): checking transaction log (loop6) [ 197.232433][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 197.270277][ T5596] BTRFS info (device loop5): enabling ssd optimizations [ 197.272182][ T5631] REISERFS (device loop6): Using tea hash to sort names [ 197.321152][ T5631] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 197.921139][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 197.946425][ T4743] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 198.194293][ T5686] loop2: detected capacity change from 0 to 1024 [ 198.302781][ T5688] input: syz0 as /devices/virtual/input/input9 [ 198.774995][ T5703] loop5: detected capacity change from 0 to 512 [ 198.821358][ T5705] capability: warning: `syz.2.378' uses deprecated v2 capabilities in a way that may be insecure [ 198.882534][ T4506] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.920476][ T5710] vivid-000: disconnect [ 198.935183][ T5701] kernel write not supported for file /vcs (pid: 5701 comm: kworker/0:20) [ 198.951341][ T5710] vivid-000: reconnect [ 200.257852][ T5717] loop1: detected capacity change from 0 to 131072 [ 200.362810][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.511894][ T5717] XFS (loop1): Mounting V5 Filesystem [ 200.690002][ T5717] XFS (loop1): Starting recovery (logdev: internal) [ 200.760642][ T5717] XFS (loop1): Ending recovery (logdev: internal) [ 200.828882][ T5719] loop6: detected capacity change from 0 to 40427 [ 200.901193][ T4273] XFS (loop1): Unmounting Filesystem [ 200.949335][ T3535] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.969738][ T5719] F2FS-fs (loop6): Found nat_bits in checkpoint [ 201.139598][ T5719] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 201.149240][ T3535] usb 6-1: Using ep0 maxpacket: 8 [ 201.171153][ T3535] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 201.208648][ T3535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.246138][ T3535] usb 6-1: config 0 descriptor?? [ 201.268079][ T3535] asix: probe of 6-1:0.0 failed with error -22 [ 201.287166][ T5719] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 202.469062][ T5801] loop2: detected capacity change from 0 to 2048 [ 202.623141][ T5801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 202.914765][ T5809] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.044241][ T4281] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 203.324161][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 203.416213][ T5799] loop6: detected capacity change from 0 to 131072 [ 203.432112][ T5813] loop3: detected capacity change from 0 to 764 [ 203.488912][ T5799] XFS (loop6): Mounting V5 Filesystem [ 203.519508][ T5814] loop1: detected capacity change from 0 to 1024 [ 203.551807][ T5814] EXT4-fs: inline encryption not supported [ 203.578160][ T5814] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.630939][ T5814] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 203.693511][ T5799] XFS (loop6): Starting recovery (logdev: internal) [ 203.726353][ T5799] XFS (loop6): Ending recovery (logdev: internal) [ 203.880283][ T5699] usb 6-1: USB disconnect, device number 2 [ 203.975166][ T5456] XFS (loop6): Unmounting Filesystem [ 204.000975][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 204.126812][ T5836] loop5: detected capacity change from 0 to 1024 [ 204.425673][ T5840] loop2: detected capacity change from 0 to 256 [ 204.521409][ T4389] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.829389][ T5699] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 205.002120][ T5856] netlink: 104 bytes leftover after parsing attributes in process `syz.6.420'. [ 205.042619][ T5699] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 205.068155][ T5699] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.139027][ T5699] usb 3-1: config 1 interface 0 has no altsetting 0 [ 205.159275][ T5701] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 205.167650][ T5699] usb 3-1: string descriptor 0 read error: -22 [ 205.187340][ T5699] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 205.233901][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.279500][ T5840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.286841][ T5840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.375678][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.428983][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.460936][ T5701] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 205.483206][ T5701] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 205.520210][ T5701] usb 6-1: Manufacturer: syz [ 205.545129][ T5701] usb 6-1: config 0 descriptor?? [ 205.571710][ T5840] loop2: detected capacity change from 0 to 512 [ 205.619680][ T5840] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.716574][ T5840] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.416: bad orphan inode 131083 [ 205.768617][ T5840] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 205.808814][ T3535] usb 3-1: USB disconnect, device number 6 [ 206.092614][ T5878] loop6: detected capacity change from 0 to 2048 [ 206.188670][ T5878] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 206.224932][ T5878] UDF-fs: Scanning with blocksize 512 failed [ 206.297021][ T5878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.493065][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 206.649255][ T5871] loop3: detected capacity change from 0 to 131072 [ 206.668173][ T5871] XFS (loop3): Mounting V5 Filesystem [ 206.792885][ T5891] loop2: detected capacity change from 0 to 1764 [ 206.816982][ T5871] XFS (loop3): Starting recovery (logdev: internal) [ 206.839655][ T9] wlan1: Trigger new scan to find an IBSS to join [ 206.865447][ T5701] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0008/input/input10 [ 206.910400][ T5871] XFS (loop3): Ending recovery (logdev: internal) [ 206.974503][ T5701] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0008/input/input11 [ 207.029783][ T5896] Bluetooth: MGMT ver 1.22 [ 207.036936][ T5894] loop6: detected capacity change from 0 to 1024 [ 207.045522][ T5701] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0008/input/input12 [ 207.135399][ T5701] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0008/input/input13 [ 207.222811][ T4272] XFS (loop3): Unmounting Filesystem [ 207.310909][ T5701] uclogic 0003:256C:006D.0008: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 207.323755][ T27] audit: type=1800 audit(1772735241.366:12): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.429" name=80E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E [ 207.368473][ T5701] usb 6-1: USB disconnect, device number 3 [ 207.611367][ T65] hfsplus: b-tree write err: -5, ino 4 [ 207.616996][ T65] hfsplus: b-tree write err: -5, ino 2 [ 208.043489][ T5904] fido_id[5904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 208.067482][ T5913] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.777089][ T5932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.441'. [ 208.790801][ T5934] loop3: detected capacity change from 0 to 1024 [ 208.835085][ T5934] EXT4-fs: inline encryption not supported [ 208.883120][ T5934] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.973576][ T5934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 209.314382][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 209.792936][ T5920] loop6: detected capacity change from 0 to 32768 [ 209.919775][ T5920] JBD2: Ignoring recovery information on journal [ 210.158419][ T5920] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 210.194128][ T5961] loop3: detected capacity change from 0 to 512 [ 210.266324][ T5961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.404924][ T4336] wlan1: Trigger new scan to find an IBSS to join [ 210.434185][ T5961] EXT4-fs (loop3): 1 truncate cleaned up [ 210.475585][ T5961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 210.495016][ T5950] loop5: detected capacity change from 0 to 131072 [ 210.555737][ T27] audit: type=1800 audit(1772735244.596:13): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.448" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 res=0 errno=0 [ 210.705991][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 210.724045][ T5950] XFS (loop5): Mounting V5 Filesystem [ 210.749481][ T5456] ocfs2: Unmounting device (7,6) on (node local) [ 210.776090][ T5973] loop2: detected capacity change from 0 to 4096 [ 210.884668][ T5950] XFS (loop5): Starting recovery (logdev: internal) [ 210.924442][ T5950] XFS (loop5): Ending recovery (logdev: internal) [ 210.934274][ T5973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.118807][ T4743] XFS (loop5): Unmounting Filesystem [ 211.165717][ T5973] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.259423][ T5973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.335280][ T5985] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 211.480406][ T4336] wlan1: Creating new IBSS network, BSSID ce:4c:72:4b:fc:64 [ 211.623349][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 211.738572][ T5994] loop6: detected capacity change from 0 to 512 [ 211.868054][ T5994] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.452: iget: bad i_size value: 38620345925642 [ 211.989695][ T5994] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.452: couldn't read orphan inode 15 (err -117) [ 212.031107][ T5994] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 212.129465][ T5994] EXT4-fs (loop6): shut down requested (1) [ 212.361840][ T5456] EXT4-fs (loop6): unmounting filesystem. [ 212.617785][ T6017] loop6: detected capacity change from 0 to 128 [ 212.663229][ T6017] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.751394][ T6017] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.903180][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 212.962517][ T6025] netlink: 'syz.3.465': attribute type 30 has an invalid length. [ 213.033259][ T6025] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.042806][ T6025] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.051699][ T6025] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.060748][ T6025] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.217894][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 213.274635][ T6025] netlink: 'syz.3.465': attribute type 30 has an invalid length. [ 213.316201][ T6032] loop6: detected capacity change from 0 to 4096 [ 213.456353][ T6032] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 213.605571][ T6032] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 213.646952][ T6032] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 213.723300][ T6044] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 213.937550][ T5456] EXT4-fs (loop6): unmounting filesystem. [ 214.269613][ T6038] sctp: failed to load transform for md5: -2 [ 214.419402][ T5699] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.616824][ T6069] Bluetooth: MGMT ver 1.22 [ 214.621523][ T5699] usb 7-1: Using ep0 maxpacket: 8 [ 214.630737][ T5699] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.669377][ T5699] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.717661][ T5699] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.746610][ T5699] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.766828][ T5699] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.777481][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.958528][ T6077] loop2: detected capacity change from 0 to 1024 [ 215.040600][ T5699] usb 7-1: GET_CAPABILITIES returned 0 [ 215.057810][ T5699] usbtmc 7-1:16.0: can't read capabilities [ 215.130522][ T6077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 215.265180][ T5699] usb 7-1: USB disconnect, device number 2 [ 215.274711][ T6085] loop1: detected capacity change from 0 to 2048 [ 215.333116][ T6085] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.375936][ T6093] loop3: detected capacity change from 0 to 2048 [ 215.386464][ T6085] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 215.442014][ T6085] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 215.462254][ T6093] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.489887][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 215.620556][ T6096] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 215.884215][ T6096] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 216.289531][ T4322] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 216.482581][ T4322] usb 4-1: Using ep0 maxpacket: 32 [ 216.493852][ T4322] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 216.497751][ T6103] loop2: detected capacity change from 0 to 32768 [ 216.524225][ T4322] usb 4-1: config 0 has no interface number 0 [ 216.535831][ T6103] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.484 (6103) [ 216.542863][ T4322] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.605308][ T4322] usb 4-1: config 0 interface 85 has no altsetting 0 [ 216.633935][ T4322] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 216.649199][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.669610][ T6103] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 216.688725][ T4322] usb 4-1: Product: syz [ 216.693836][ T4322] usb 4-1: Manufacturer: syz [ 216.708368][ T4322] usb 4-1: SerialNumber: syz [ 216.730322][ T4322] usb 4-1: config 0 descriptor?? [ 216.744824][ T6103] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 216.774199][ T6103] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 216.808688][ T6103] BTRFS info (device loop2): use zstd compression, level 3 [ 216.837277][ T6103] BTRFS info (device loop2): using free space tree [ 217.284266][ T6103] BTRFS info (device loop2): enabling ssd optimizations [ 217.349251][ T5701] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 217.480207][ T6162] loop6: detected capacity change from 0 to 1024 [ 217.563080][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.594750][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.627768][ T4281] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 217.651701][ T5701] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 217.691812][ T5701] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 217.732095][ T5701] usb 6-1: Manufacturer: syz [ 217.734278][ T4322] appletouch 4-1:0.85: Geyser mode initialized. [ 217.779834][ T5701] usb 6-1: config 0 descriptor?? [ 217.799701][ T4322] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input14 [ 218.050164][ T5699] usb 4-1: USB disconnect, device number 4 [ 218.204942][ T5701] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 218.246331][ T5701] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 218.259262][ T5701] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 218.283792][ T5701] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 218.312097][ T5701] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 218.327464][ T5701] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 218.352220][ T5701] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 218.390460][ T5701] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 218.447203][ T5699] appletouch 4-1:0.85: input: appletouch disconnected [ 218.858533][ T5701] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 218.874010][ T6190] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.874954][ T5701] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 218.900268][ T5701] pyra: probe of 0003:1E7D:2CF6.0009 failed with error -71 [ 218.946357][ T5701] usb 6-1: USB disconnect, device number 4 [ 219.351396][ T6204] loop2: detected capacity change from 0 to 1024 [ 219.548210][ T6199] fido_id[6199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 219.601513][ T33] hfsplus: b-tree write err: -5, ino 25 [ 219.607317][ T33] hfsplus: b-tree write err: -5, ino 4 [ 219.644913][ T33] hfsplus: b-tree write err: -5, ino 2 [ 220.551314][ T6214] loop1: detected capacity change from 0 to 32768 [ 220.595143][ T6214] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.509 (6214) [ 220.694073][ T6214] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 220.744046][ T6214] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 220.797759][ T6214] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 220.872293][ T6214] BTRFS info (device loop1): use zstd compression, level 3 [ 220.929150][ T6214] BTRFS info (device loop1): using free space tree [ 220.957373][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.520'. [ 221.056427][ T6250] device bond_slave_0 entered promiscuous mode [ 221.063327][ T6250] device bond_slave_1 entered promiscuous mode [ 221.088394][ T6256] loop3: detected capacity change from 0 to 1024 [ 221.102518][ T6250] device macvlan2 entered promiscuous mode [ 221.108405][ T6250] device bond0 entered promiscuous mode [ 221.116102][ T6250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.170232][ T6259] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 221.176285][ T6259] syzkaller1: linktype set to 769 [ 221.212897][ T6256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 221.344831][ T6214] BTRFS info (device loop1): enabling ssd optimizations [ 221.547397][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 221.620772][ T6280] loop6: detected capacity change from 0 to 128 [ 221.690655][ T6280] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 221.786555][ T6280] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.896493][ T4273] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 222.405134][ T6295] loop2: detected capacity change from 0 to 4096 [ 222.407651][ T5456] EXT4-fs (loop6): unmounting filesystem. [ 222.490748][ T6286] loop3: detected capacity change from 0 to 32768 [ 223.163467][ T4281] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 223.210665][ T4281] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 223.458495][ T6320] Invalid argument reading file caps for ./file0 [ 223.706309][ T6322] loop1: detected capacity change from 0 to 1024 [ 223.887905][ T6322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 224.195653][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 225.694610][ T6382] loop2: detected capacity change from 0 to 2048 [ 225.745846][ T6382] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 225.765753][ T6382] UDF-fs: Scanning with blocksize 512 failed [ 225.782161][ T6382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.809305][ T5701] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 226.022536][ T5701] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.049170][ T5701] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.070730][ T6390] loop3: detected capacity change from 0 to 512 [ 226.109985][ T5701] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.132233][ T6390] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.560: iget: bad i_size value: 38620345925642 [ 226.145433][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.178516][ T6390] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.560: couldn't read orphan inode 15 (err -117) [ 226.281099][ T6390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 226.311077][ T6394] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 [ 226.443662][ T5701] usb 6-1: usb_control_msg returned -32 [ 226.449654][ T5701] usbtmc 6-1:16.0: can't read capabilities [ 226.651768][ T9] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 226.680785][ T6406] loop6: detected capacity change from 0 to 1024 [ 226.713885][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 62 with error 28 [ 226.757440][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 226.757440][ T9] [ 226.797640][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 226.836460][ T9] EXT4-fs (loop3): Free/Dirty block details [ 226.851432][ T6409] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 226.875555][ T9] EXT4-fs (loop3): free_blocks=0 [ 226.912878][ T9] EXT4-fs (loop3): dirty_blocks=62 [ 226.936019][ T9] EXT4-fs (loop3): Block reservation details [ 226.953304][ T9] EXT4-fs (loop3): i_reserved_data_blocks=62 [ 226.974881][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 227.213874][ T6418] input: syz1 as /devices/virtual/input/input15 [ 227.681180][ T6431] [ 227.683607][ T6431] ===================================================== [ 227.690584][ T6431] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 227.698110][ T6431] syzkaller #0 Not tainted [ 227.702569][ T6431] ----------------------------------------------------- [ 227.709557][ T6431] syz.1.584/6431 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 227.717156][ T6431] ffffffff8c80a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xf5/0x360 [ 227.725794][ T6431] [ 227.725794][ T6431] and this task is already holding: [ 227.733200][ T6431] ffff8880294f4b30 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x360 [ 227.742072][ T6431] which would create a new lock dependency: [ 227.748014][ T6431] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 227.755827][ T6431] [ 227.755827][ T6431] but this new dependency connects a HARDIRQ-irq-safe lock: [ 227.765292][ T6431] (&dev->event_lock#2){-.-.}-{2:2} [ 227.765324][ T6431] [ 227.765324][ T6431] ... which became HARDIRQ-irq-safe at: [ 227.778271][ T6431] lock_acquire+0x1bb/0x4a0 [ 227.782894][ T6431] _raw_spin_lock_irqsave+0xb0/0x100 [ 227.788286][ T6431] input_event+0x76/0xb0 [ 227.792630][ T6431] psmouse_report_standard_packet+0x4f/0x200 [ 227.798769][ T6431] psmouse_process_byte+0x42b/0x620 [ 227.804093][ T6431] psmouse_handle_byte+0x43/0x490 [ 227.809252][ T6431] psmouse_interrupt+0x699/0x1130 [ 227.814402][ T6431] serio_interrupt+0x87/0x130 [ 227.820976][ T6431] i8042_interrupt+0x365/0x710 [ 227.828176][ T6431] __handle_irq_event_percpu+0x293/0xa50 [ 227.833944][ T6431] handle_irq_event+0x87/0x1e0 [ 227.838858][ T6431] handle_edge_irq+0x243/0xb20 [ 227.843755][ T6431] __common_interrupt+0xd7/0x1e0 [ 227.848852][ T6431] common_interrupt+0xb0/0xd0 [ 227.853642][ T6431] asm_common_interrupt+0x22/0x40 [ 227.858783][ T6431] sched_clock_local+0x36/0x1e0 [ 227.863763][ T6431] sched_clock_cpu+0x104/0x260 [ 227.868661][ T6431] __set_page_owner_handle+0x1a9/0x3c0 [ 227.874241][ T6431] __set_page_owner+0x41/0x60 [ 227.879016][ T6431] post_alloc_hook+0x173/0x1a0 [ 227.883939][ T6431] get_page_from_freelist+0x1a1e/0x1ab0 [ 227.889604][ T6431] __alloc_pages+0x1ec/0x4f0 [ 227.894305][ T6431] alloc_page_interleave+0x24/0x1e0 [ 227.899621][ T6431] alloc_slab_page+0x5d/0x160 [ 227.904456][ T6431] new_slab+0x87/0x2c0 [ 227.908620][ T6431] ___slab_alloc+0xbc6/0x1240 [ 227.913393][ T6431] __kmem_cache_alloc_node+0x1a0/0x260 [ 227.918959][ T6431] kmalloc_trace+0x26/0xe0 [ 227.923548][ T6431] kobject_uevent_env+0x270/0x8a0 [ 227.928674][ T6431] kset_register+0x188/0x1f0 [ 227.933358][ T6431] bus_register+0x21c/0x6c0 [ 227.937955][ T6431] rmi_bus_init+0x19/0x69c [ 227.942476][ T6431] do_one_initcall+0x26a/0x840 [ 227.947345][ T6431] do_initcall_level+0x137/0x1e4 [ 227.952382][ T6431] do_initcalls+0x4b/0x8a [ 227.956849][ T6431] kernel_init_freeable+0x415/0x5be [ 227.962175][ T6431] kernel_init+0x19/0x1b0 [ 227.966671][ T6431] ret_from_fork+0x1f/0x30 [ 227.971223][ T6431] [ 227.971223][ T6431] to a HARDIRQ-irq-unsafe lock: [ 227.978292][ T6431] (tasklist_lock){.+.+}-{2:2} [ 227.978318][ T6431] [ 227.978318][ T6431] ... which became HARDIRQ-irq-unsafe at: [ 227.991030][ T6431] ... [ 227.991038][ T6431] lock_acquire+0x1bb/0x4a0 [ 227.998233][ T6431] _raw_read_lock+0x32/0x40 [ 228.002853][ T6431] do_wait+0x2b6/0xb60 [ 228.007047][ T6431] kernel_wait+0xd3/0x1c0 [ 228.011484][ T6431] call_usermodehelper_exec_work+0xb5/0x220 [ 228.017516][ T6431] process_one_work+0x8a2/0x1160 [ 228.022563][ T6431] worker_thread+0xaa2/0x1270 [ 228.027343][ T6431] kthread+0x29d/0x330 [ 228.031508][ T6431] ret_from_fork+0x1f/0x30 [ 228.036043][ T6431] [ 228.036043][ T6431] other info that might help us debug this: [ 228.036043][ T6431] [ 228.046326][ T6431] Chain exists of: [ 228.046326][ T6431] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 228.046326][ T6431] [ 228.059580][ T6431] Possible interrupt unsafe locking scenario: [ 228.059580][ T6431] [ 228.067913][ T6431] CPU0 CPU1 [ 228.073547][ T6431] ---- ---- [ 228.078920][ T6431] lock(tasklist_lock); [ 228.083197][ T6431] local_irq_disable(); [ 228.089966][ T6431] lock(&dev->event_lock#2); [ 228.097202][ T6431] lock(&f->f_owner.lock); [ 228.104252][ T6431] [ 228.107714][ T6431] lock(&dev->event_lock#2); [ 228.112590][ T6431] [ 228.112590][ T6431] *** DEADLOCK *** [ 228.112590][ T6431] [ 228.120750][ T6431] 5 locks held by syz.1.584/6431: [ 228.125781][ T6431] #0: ffff88802b0e8460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 228.135083][ T6431] #1: ffff8880733be140 (&type->i_mutex_dir_key#5){++++}-{3:3}, at: path_openat+0x7d2/0x2ee0 [ 228.145295][ T6431] #2: ffffffff96cca788 (&fsnotify_mark_srcu){....}-{0:0}, at: fsnotify+0x529/0x1d00 [ 228.154817][ T6431] #3: ffff8880187b5038 (&mark->lock){+.+.}-{2:2}, at: dnotify_handle_event+0x5e/0x420 [ 228.164545][ T6431] #4: ffff8880294f4b30 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x360 [ 228.173810][ T6431] [ 228.173810][ T6431] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 228.184231][ T6431] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 228.190000][ T6431] IN-HARDIRQ-W at: [ 228.194175][ T6431] lock_acquire+0x1bb/0x4a0 [ 228.200707][ T6431] _raw_spin_lock_irqsave+0xb0/0x100 [ 228.208022][ T6431] input_event+0x76/0xb0 [ 228.214290][ T6431] psmouse_report_standard_packet+0x4f/0x200 [ 228.222331][ T6431] psmouse_process_byte+0x42b/0x620 [ 228.229554][ T6431] psmouse_handle_byte+0x43/0x490 [ 228.236600][ T6431] psmouse_interrupt+0x699/0x1130 [ 228.243725][ T6431] serio_interrupt+0x87/0x130 [ 228.250433][ T6431] i8042_interrupt+0x365/0x710 [ 228.257226][ T6431] __handle_irq_event_percpu+0x293/0xa50 [ 228.264972][ T6431] handle_irq_event+0x87/0x1e0 [ 228.271770][ T6431] handle_edge_irq+0x243/0xb20 [ 228.278648][ T6431] __common_interrupt+0xd7/0x1e0 [ 228.285614][ T6431] common_interrupt+0xb0/0xd0 [ 228.292328][ T6431] asm_common_interrupt+0x22/0x40 [ 228.299430][ T6431] sched_clock_local+0x36/0x1e0 [ 228.306319][ T6431] sched_clock_cpu+0x104/0x260 [ 228.313107][ T6431] __set_page_owner_handle+0x1a9/0x3c0 [ 228.320592][ T6431] __set_page_owner+0x41/0x60 [ 228.327288][ T6431] post_alloc_hook+0x173/0x1a0 [ 228.334083][ T6431] get_page_from_freelist+0x1a1e/0x1ab0 [ 228.341659][ T6431] __alloc_pages+0x1ec/0x4f0 [ 228.348280][ T6431] alloc_page_interleave+0x24/0x1e0 [ 228.355511][ T6431] alloc_slab_page+0x5d/0x160 [ 228.362240][ T6431] new_slab+0x87/0x2c0 [ 228.368361][ T6431] ___slab_alloc+0xbc6/0x1240 [ 228.375066][ T6431] __kmem_cache_alloc_node+0x1a0/0x260 [ 228.382647][ T6431] kmalloc_trace+0x26/0xe0 [ 228.389096][ T6431] kobject_uevent_env+0x270/0x8a0 [ 228.396148][ T6431] kset_register+0x188/0x1f0 [ 228.402755][ T6431] bus_register+0x21c/0x6c0 [ 228.409280][ T6431] rmi_bus_init+0x19/0x69c [ 228.415724][ T6431] do_one_initcall+0x26a/0x840 [ 228.422514][ T6431] do_initcall_level+0x137/0x1e4 [ 228.429477][ T6431] do_initcalls+0x4b/0x8a [ 228.435824][ T6431] kernel_init_freeable+0x415/0x5be [ 228.443044][ T6431] kernel_init+0x19/0x1b0 [ 228.449392][ T6431] ret_from_fork+0x1f/0x30 [ 228.455834][ T6431] IN-SOFTIRQ-W at: [ 228.460015][ T6431] lock_acquire+0x1bb/0x4a0 [ 228.466542][ T6431] _raw_spin_lock_irqsave+0xb0/0x100 [ 228.473853][ T6431] input_event+0x76/0xb0 [ 228.480114][ T6431] atp_complete_geyser_3_4+0xf03/0x1d80 [ 228.487684][ T6431] __usb_hcd_giveback_urb+0x35f/0x520 [ 228.495088][ T6431] dummy_timer+0xbf6/0x3090 [ 228.501791][ T6431] __hrtimer_run_queues+0x54a/0xd50 [ 228.509013][ T6431] hrtimer_run_softirq+0x183/0x2a0 [ 228.516273][ T6431] handle_softirqs+0x2a1/0x930 [ 228.523176][ T6431] __irq_exit_rcu+0x13b/0x230 [ 228.529874][ T6431] irq_exit_rcu+0x5/0x20 [ 228.536176][ T6431] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 228.543830][ T6431] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 228.551839][ T6431] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 228.559579][ T6431] dummy_urb_enqueue+0x586/0x770 [ 228.566537][ T6431] usb_hcd_submit_urb+0x30f/0x19c0 [ 228.573767][ T6431] atp_open+0x5f/0xc0 [ 228.579764][ T6431] input_open_device+0x16c/0x2e0 [ 228.586728][ T6431] mousedev_open_device+0xc3/0x150 [ 228.593888][ T6431] mousedev_open+0x2e5/0x4a0 [ 228.600522][ T6431] chrdev_open+0x5c5/0x6a0 [ 228.606965][ T6431] do_dentry_open+0x7e9/0x10d0 [ 228.613759][ T6431] path_openat+0x2635/0x2ee0 [ 228.620371][ T6431] do_filp_open+0x1f1/0x430 [ 228.626983][ T6431] do_sys_openat2+0x150/0x4b0 [ 228.633693][ T6431] __x64_sys_openat+0x135/0x160 [ 228.640662][ T6431] do_syscall_64+0x4c/0xa0 [ 228.647102][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.655020][ T6431] INITIAL USE at: [ 228.659142][ T6431] lock_acquire+0x1bb/0x4a0 [ 228.665671][ T6431] _raw_spin_lock_irqsave+0xb0/0x100 [ 228.672910][ T6431] input_inject_event+0xa7/0x310 [ 228.679784][ T6431] led_trigger_event+0x12f/0x210 [ 228.686657][ T6431] kbd_led_trigger_activate+0xb9/0x100 [ 228.694055][ T6431] led_trigger_set+0x50c/0x910 [ 228.700748][ T6431] led_trigger_set_default+0x19c/0x1e0 [ 228.708144][ T6431] led_classdev_register_ext+0x625/0x860 [ 228.715827][ T6431] input_leds_connect+0x4e7/0x6b0 [ 228.723000][ T6431] input_register_device+0xdfd/0x1310 [ 228.730324][ T6431] atkbd_connect+0x6f8/0x9a0 [ 228.736861][ T6431] serio_driver_probe+0x76/0x90 [ 228.743741][ T6431] really_probe+0x2aa/0xc70 [ 228.750184][ T6431] __driver_probe_device+0x18c/0x330 [ 228.757582][ T6431] driver_probe_device+0x4f/0x420 [ 228.764551][ T6431] __driver_attach+0x44a/0x6e0 [ 228.771274][ T6431] bus_for_each_dev+0x182/0x1f0 [ 228.778064][ T6431] serio_handle_event+0x29c/0x840 [ 228.785033][ T6431] process_one_work+0x8a2/0x1160 [ 228.792082][ T6431] worker_thread+0xaa2/0x1270 [ 228.798787][ T6431] kthread+0x29d/0x330 [ 228.804870][ T6431] ret_from_fork+0x1f/0x30 [ 228.811235][ T6431] } [ 228.813968][ T6431] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 228.823203][ T6431] -> (&new->fa_lock){....}-{2:2} { [ 228.828452][ T6431] INITIAL USE at: [ 228.832452][ T6431] lock_acquire+0x1bb/0x4a0 [ 228.838727][ T6431] _raw_write_lock_irq+0xab/0xf0 [ 228.845429][ T6431] fasync_remove_entry+0xf0/0x1c0 [ 228.852223][ T6431] lease_modify+0x1a2/0x390 [ 228.858495][ T6431] locks_remove_file+0x52f/0xec0 [ 228.865194][ T6431] __fput+0x188/0x920 [ 228.870955][ T6431] task_work_run+0x1d0/0x260 [ 228.877315][ T6431] exit_to_user_mode_loop+0xe6/0x110 [ 228.884370][ T6431] exit_to_user_mode_prepare+0xee/0x180 [ 228.891770][ T6431] syscall_exit_to_user_mode+0x16/0x40 [ 228.898989][ T6431] do_syscall_64+0x58/0xa0 [ 228.905179][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.912841][ T6431] INITIAL READ USE at: [ 228.917276][ T6431] lock_acquire+0x1bb/0x4a0 [ 228.923979][ T6431] _raw_read_lock_irqsave+0xb8/0x100 [ 228.931455][ T6431] kill_fasync+0x18e/0x4b0 [ 228.938069][ T6431] lease_break_callback+0x22/0x30 [ 228.945556][ T6431] __break_lease+0x4a6/0x1430 [ 228.952428][ T6431] do_dentry_open+0x74f/0x10d0 [ 228.959406][ T6431] path_openat+0x2635/0x2ee0 [ 228.966403][ T6431] do_filp_open+0x1f1/0x430 [ 228.973198][ T6431] do_sys_openat2+0x150/0x4b0 [ 228.980076][ T6431] __x64_sys_openat+0x135/0x160 [ 228.987162][ T6431] do_syscall_64+0x4c/0xa0 [ 228.993780][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.001869][ T6431] } [ 229.004478][ T6431] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 229.013269][ T6431] ... acquired at: [ 229.017178][ T6431] _raw_read_lock_irqsave+0xb8/0x100 [ 229.022659][ T6431] kill_fasync+0x18e/0x4b0 [ 229.027287][ T6431] mousedev_notify_readers+0x6eb/0xc00 [ 229.033035][ T6431] mousedev_event+0x568/0x11f0 [ 229.038007][ T6431] input_pass_values+0x9c7/0x12f0 [ 229.044465][ T6431] input_event_dispose+0x346/0x6c0 [ 229.049790][ T6431] input_inject_event+0x1f5/0x310 [ 229.055084][ T6431] evdev_write+0x35b/0x490 [ 229.059733][ T6431] vfs_write+0x2e6/0xa30 [ 229.064176][ T6431] ksys_write+0x14c/0x250 [ 229.068718][ T6431] do_syscall_64+0x4c/0xa0 [ 229.073352][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.079447][ T6431] [ 229.081795][ T6431] -> (&f->f_owner.lock){....}-{2:2} { [ 229.087236][ T6431] INITIAL USE at: [ 229.091157][ T6431] lock_acquire+0x1bb/0x4a0 [ 229.097258][ T6431] _raw_write_lock_irq+0xab/0xf0 [ 229.103782][ T6431] __f_setown+0x37/0x330 [ 229.109627][ T6431] generic_setlease+0xf6a/0x1400 [ 229.116241][ T6431] fcntl_setlease+0x262/0x330 [ 229.122752][ T6431] do_fcntl+0x117/0x1270 [ 229.128585][ T6431] __se_sys_fcntl+0xc9/0x190 [ 229.135025][ T6431] do_syscall_64+0x4c/0xa0 [ 229.141305][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.148794][ T6431] INITIAL READ USE at: [ 229.153141][ T6431] lock_acquire+0x1bb/0x4a0 [ 229.159673][ T6431] _raw_read_lock_irqsave+0xb8/0x100 [ 229.166987][ T6431] send_sigio+0x2f/0x360 [ 229.173255][ T6431] kill_fasync+0x224/0x4b0 [ 229.179731][ T6431] lease_break_callback+0x22/0x30 [ 229.186783][ T6431] __break_lease+0x4a6/0x1430 [ 229.193479][ T6431] do_dentry_open+0x74f/0x10d0 [ 229.200274][ T6431] path_openat+0x2635/0x2ee0 [ 229.206893][ T6431] do_filp_open+0x1f1/0x430 [ 229.213500][ T6431] do_sys_openat2+0x150/0x4b0 [ 229.220210][ T6431] __x64_sys_openat+0x135/0x160 [ 229.227097][ T6431] do_syscall_64+0x4c/0xa0 [ 229.233538][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.241538][ T6431] } [ 229.244064][ T6431] ... key at: [] __alloc_file.__key+0x0/0x10 [ 229.252161][ T6431] ... acquired at: [ 229.255980][ T6431] _raw_read_lock_irqsave+0xb8/0x100 [ 229.261462][ T6431] send_sigio+0x2f/0x360 [ 229.265926][ T6431] kill_fasync+0x224/0x4b0 [ 229.270542][ T6431] lease_break_callback+0x22/0x30 [ 229.275850][ T6431] __break_lease+0x4a6/0x1430 [ 229.280716][ T6431] do_dentry_open+0x74f/0x10d0 [ 229.285680][ T6431] path_openat+0x2635/0x2ee0 [ 229.290461][ T6431] do_filp_open+0x1f1/0x430 [ 229.295157][ T6431] do_sys_openat2+0x150/0x4b0 [ 229.300040][ T6431] __x64_sys_openat+0x135/0x160 [ 229.305093][ T6431] do_syscall_64+0x4c/0xa0 [ 229.309707][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.315796][ T6431] [ 229.318134][ T6431] [ 229.318134][ T6431] the dependencies between the lock to be acquired [ 229.318144][ T6431] and HARDIRQ-irq-unsafe lock: [ 229.331700][ T6431] -> (tasklist_lock){.+.+}-{2:2} { [ 229.336851][ T6431] HARDIRQ-ON-R at: [ 229.340854][ T6431] lock_acquire+0x1bb/0x4a0 [ 229.347075][ T6431] _raw_read_lock+0x32/0x40 [ 229.353256][ T6431] do_wait+0x2b6/0xb60 [ 229.359014][ T6431] kernel_wait+0xd3/0x1c0 [ 229.365031][ T6431] call_usermodehelper_exec_work+0xb5/0x220 [ 229.372607][ T6431] process_one_work+0x8a2/0x1160 [ 229.379213][ T6431] worker_thread+0xaa2/0x1270 [ 229.385570][ T6431] kthread+0x29d/0x330 [ 229.391308][ T6431] ret_from_fork+0x1f/0x30 [ 229.397399][ T6431] SOFTIRQ-ON-R at: [ 229.401406][ T6431] lock_acquire+0x1bb/0x4a0 [ 229.407591][ T6431] _raw_read_lock+0x32/0x40 [ 229.413770][ T6431] do_wait+0x2b6/0xb60 [ 229.419522][ T6431] kernel_wait+0xd3/0x1c0 [ 229.425526][ T6431] call_usermodehelper_exec_work+0xb5/0x220 [ 229.433098][ T6431] process_one_work+0x8a2/0x1160 [ 229.439803][ T6431] worker_thread+0xaa2/0x1270 [ 229.446153][ T6431] kthread+0x29d/0x330 [ 229.451896][ T6431] ret_from_fork+0x1f/0x30 [ 229.457991][ T6431] INITIAL USE at: [ 229.461931][ T6431] lock_acquire+0x1bb/0x4a0 [ 229.468041][ T6431] _raw_write_lock_irq+0xab/0xf0 [ 229.474565][ T6431] copy_process+0x2557/0x4030 [ 229.480831][ T6431] kernel_clone+0x24b/0x900 [ 229.486932][ T6431] user_mode_thread+0x10d/0x180 [ 229.493371][ T6431] rest_init+0x23/0x300 [ 229.499198][ T6431] start_kernel+0x0/0x53c [ 229.505120][ T6431] start_kernel+0x493/0x53c [ 229.511291][ T6431] secondary_startup_64_no_verify+0xcf/0xdb [ 229.518771][ T6431] INITIAL READ USE at: [ 229.523119][ T6431] lock_acquire+0x1bb/0x4a0 [ 229.529650][ T6431] _raw_read_lock+0x32/0x40 [ 229.536170][ T6431] do_wait+0x2b6/0xb60 [ 229.542268][ T6431] kernel_wait+0xd3/0x1c0 [ 229.548644][ T6431] call_usermodehelper_exec_work+0xb5/0x220 [ 229.556602][ T6431] process_one_work+0x8a2/0x1160 [ 229.563570][ T6431] worker_thread+0xaa2/0x1270 [ 229.570267][ T6431] kthread+0x29d/0x330 [ 229.576441][ T6431] ret_from_fork+0x1f/0x30 [ 229.582925][ T6431] } [ 229.585463][ T6431] ... key at: [] tasklist_lock+0x18/0x40 [ 229.593215][ T6431] ... acquired at: [ 229.597034][ T6431] _raw_read_lock+0x32/0x40 [ 229.601732][ T6431] send_sigio+0xf5/0x360 [ 229.606174][ T6431] dnotify_handle_event+0x14f/0x420 [ 229.611574][ T6431] fsnotify+0x191c/0x1d00 [ 229.616099][ T6431] path_openat+0x137c/0x2ee0 [ 229.620886][ T6431] do_filp_open+0x1f1/0x430 [ 229.625612][ T6431] do_sys_openat2+0x150/0x4b0 [ 229.630489][ T6431] __x64_sys_openat+0x135/0x160 [ 229.635555][ T6431] do_syscall_64+0x4c/0xa0 [ 229.640176][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.646268][ T6431] [ 229.648610][ T6431] [ 229.648610][ T6431] stack backtrace: [ 229.654619][ T6431] CPU: 0 PID: 6431 Comm: syz.1.584 Not tainted syzkaller #0 [ 229.661928][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.672043][ T6431] Call Trace: [ 229.675353][ T6431] [ 229.678328][ T6431] dump_stack_lvl+0x188/0x24e [ 229.683035][ T6431] ? load_image+0x400/0x400 [ 229.687563][ T6431] ? show_regs_print_info+0x12/0x12 [ 229.692793][ T6431] ? load_image+0x400/0x400 [ 229.697325][ T6431] ? print_shortest_lock_dependencies+0xf0/0x160 [ 229.703697][ T6431] __lock_acquire+0x66c8/0x7d10 [ 229.708588][ T6431] ? verify_lock_unused+0x140/0x140 [ 229.713829][ T6431] lock_acquire+0x1bb/0x4a0 [ 229.718446][ T6431] ? send_sigio+0xf5/0x360 [ 229.722896][ T6431] ? read_lock_is_recursive+0x10/0x10 [ 229.728308][ T6431] ? do_raw_read_lock+0x39/0x80 [ 229.733279][ T6431] ? _raw_read_lock_irqsave+0xc4/0x100 [ 229.738873][ T6431] ? _raw_read_lock+0x40/0x40 [ 229.743587][ T6431] ? do_raw_spin_lock+0x128/0x2f0 [ 229.748811][ T6431] _raw_read_lock+0x32/0x40 [ 229.753518][ T6431] ? send_sigio+0xf5/0x360 [ 229.757962][ T6431] send_sigio+0xf5/0x360 [ 229.762246][ T6431] dnotify_handle_event+0x14f/0x420 [ 229.767522][ T6431] fsnotify+0x191c/0x1d00 [ 229.771877][ T6431] ? attach_dn+0x240/0x240 [ 229.776319][ T6431] ? fsnotify+0x529/0x1d00 [ 229.780754][ T6431] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 229.787017][ T6431] ? _raw_spin_unlock+0x24/0x40 [ 229.791893][ T6431] ? shmem_mknod+0x18d/0x1c0 [ 229.796524][ T6431] path_openat+0x137c/0x2ee0 [ 229.801329][ T6431] ? do_filp_open+0x430/0x430 [ 229.806040][ T6431] do_filp_open+0x1f1/0x430 [ 229.810577][ T6431] ? vfs_tmpfile+0x480/0x480 [ 229.815195][ T6431] ? _raw_spin_unlock+0x24/0x40 [ 229.820071][ T6431] ? alloc_fd+0x58f/0x630 [ 229.824438][ T6431] do_sys_openat2+0x150/0x4b0 [ 229.829157][ T6431] ? do_sys_open+0xe0/0xe0 [ 229.833602][ T6431] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 229.839611][ T6431] ? lock_chain_count+0x20/0x20 [ 229.844493][ T6431] __x64_sys_openat+0x135/0x160 [ 229.849372][ T6431] do_syscall_64+0x4c/0xa0 [ 229.853820][ T6431] ? clear_bhb_loop+0x60/0xb0 [ 229.858518][ T6431] ? clear_bhb_loop+0x60/0xb0 [ 229.863261][ T6431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.869196][ T6431] RIP: 0033:0x7f6a90d9c799 [ 229.873647][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.893362][ T6431] RSP: 002b:00007f6a91ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.901801][ T6431] RAX: ffffffffffffffda RBX: 00007f6a91015fa0 RCX: 00007f6a90d9c799 [ 229.909813][ T6431] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 229.917804][ T6431] RBP: 00007f6a90e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 229.925800][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.933797][ T6431] R13: 00007f6a91016038 R14: 00007f6a91015fa0 R15: 00007ffd29264568 [ 229.943986][ T6431] [ 229.999014][ T6296] usb 6-1: USB disconnect, device number 5 [ 233.159335][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 233.165403][ T4277] Bluetooth: hci0: command 0x0406 tx timeout