last executing test programs: 15m51.638539861s ago: executing program 4 (id=3097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 15m51.2744087s ago: executing program 4 (id=3102): r0 = socket(0x23, 0x80805, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000060) 15m50.968223696s ago: executing program 4 (id=3105): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000600)="3001fb906475", 0x6}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 15m50.796376456s ago: executing program 4 (id=3109): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800c11, &(0x7f0000000080)={[{@barrier}, {@uid}, {@nodecompose}, {@type={'type', 0x3d, "25c3f159"}}, {@nls={'nls', 0x3d, 'iso8859-5'}}, {@nodecompose}]}, 0x1, 0x703, &(0x7f0000001240)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 15m50.469519863s ago: executing program 4 (id=3112): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x24201) 15m50.001464548s ago: executing program 4 (id=3117): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d12, 0x9, 0x0, 0xe], [0x10000, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x1000007, 0xffffffff, 0x0, 0xfffffffc, 0xc6df]], '\x00', [{}, {0x3, 0x8}, {0x5}, {0x0, 0x80000000}, {0x3, 0x100004, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xffffffff}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0xbd0}, {0x8000000, 0x5}], '\x00', 0x1000}) 15m49.551104932s ago: executing program 32 (id=3117): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d12, 0x9, 0x0, 0xe], [0x10000, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x1000007, 0xffffffff, 0x0, 0xfffffffc, 0xc6df]], '\x00', [{}, {0x3, 0x8}, {0x5}, {0x0, 0x80000000}, {0x3, 0x100004, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xffffffff}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0xbd0}, {0x8000000, 0x5}], '\x00', 0x1000}) 5m44.025421403s ago: executing program 3 (id=11598): r0 = syz_io_uring_setup(0x2e79, &(0x7f0000000180)={0x0, 0x46a, 0x2, 0xffffffff, 0x37b}, &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0x1081, 0x1, 0x9, 0x0, 0x0) 5m43.720509209s ago: executing program 3 (id=11604): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x48, &(0x7f00000000c0)=r0, 0x18) 5m43.51025205s ago: executing program 3 (id=11609): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x5, 0x20000246, 0x7ffffffffffffffd, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x8007fff, 0xffff348b}) 5m41.577240782s ago: executing program 3 (id=11634): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m40.941678486s ago: executing program 3 (id=11642): r0 = socket(0xa, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4040001, &(0x7f0000000500)={0x2, 0x4e22, @multicast2}, 0x10) 5m40.209371655s ago: executing program 3 (id=11650): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7ff, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0}) 5m39.687948612s ago: executing program 33 (id=11650): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7ff, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0}) 1m57.913953799s ago: executing program 6 (id=14321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) 1m57.347028629s ago: executing program 6 (id=14327): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, 0x0, 0x8) 1m57.042804825s ago: executing program 6 (id=14330): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) shutdown(r0, 0x0) 1m56.603990929s ago: executing program 6 (id=14333): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m55.918802535s ago: executing program 6 (id=14335): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff6}, {0xffe0, 0xa}, {0x1, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) 1m54.992874074s ago: executing program 6 (id=14342): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000) 1m54.264429233s ago: executing program 34 (id=14342): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000) 19.641835711s ago: executing program 7 (id=15177): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 18.581345646s ago: executing program 7 (id=15186): bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 18.397818086s ago: executing program 7 (id=15188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 18.13897327s ago: executing program 7 (id=15191): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@uid}, {@errors_continue}, {@discard}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}, {@uid}]}, 0x20, 0x61b6, &(0x7f00000075c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'syz2', 0x3a, '\x00', 0x3a, './file1', 0x3a, [0x46, 0x4f]}, 0x2e) 16.598005092s ago: executing program 7 (id=15197): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000040)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@minixdf}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 15.896671009s ago: executing program 7 (id=15203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x201, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) 15.236583423s ago: executing program 35 (id=15203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x201, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) 4.881810592s ago: executing program 0 (id=15277): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.343504926s ago: executing program 5 (id=15300): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000006d"], 0x24}}, 0x0) 1.970470906s ago: executing program 5 (id=15303): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) 1.776718766s ago: executing program 1 (id=15304): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x30, r0, 0x0, 0x600, 0x1000000, 0x0, 0x10}]) 1.659415522s ago: executing program 2 (id=15305): setuid(0xee00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0134012030d9"}) 1.597268345s ago: executing program 0 (id=15306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 1.558730218s ago: executing program 2 (id=15307): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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") symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') openat2$dir(0xffffff9c, &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000180)={0x220000, 0x0, 0x28}, 0x18) 1.394918816s ago: executing program 1 (id=15308): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x80000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}]}}]}, 0x44}}, 0x0) 1.394404366s ago: executing program 5 (id=15309): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000013c0)='./file0\x00', 0x1800a05, &(0x7f0000000300)=ANY=[], 0x1, 0xc56, &(0x7f0000000400)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.31258747s ago: executing program 0 (id=15310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 1.197420506s ago: executing program 2 (id=15311): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000200)=""/107, 0x6b}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) 999.423657ms ago: executing program 0 (id=15312): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 963.307499ms ago: executing program 1 (id=15313): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xa}}, 0x1c}}, 0x0) 789.217998ms ago: executing program 2 (id=15314): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000001b00)={0x2a, 0x3, 0x7fff}, 0xc) 726.698481ms ago: executing program 5 (id=15315): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup2(r0, r0) bind$vsock_stream(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, @local}, 0x10) 669.745984ms ago: executing program 0 (id=15316): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}, 0x2) 609.400498ms ago: executing program 1 (id=15317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000101010100000000000000000a001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 540.068801ms ago: executing program 2 (id=15318): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f2e9a26, 0xfffffffb, 0x8, 0x12, 0x1e, 0x7, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) 344.906072ms ago: executing program 0 (id=15319): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a0001000000000000600000010100800c000000010001000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x18) 344.605992ms ago: executing program 5 (id=15320): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x120c0cc, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 288.928615ms ago: executing program 2 (id=15321): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x5, 0x8}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x80000000, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 277.293925ms ago: executing program 1 (id=15322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.97595ms ago: executing program 5 (id=15323): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \n.'], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 1 (id=15324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000060008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): 940][ T3460] loop2: detected capacity change from 0 to 512 [ 1132.533239][ T3458] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 1132.587902][ T3460] EXT4-fs: Ignoring removed bh option [ 1132.627320][ T3460] EXT4-fs: Ignoring removed mblk_io_submit option [ 1132.686661][ T3460] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.14058: corrupted in-inode xattr [ 1132.709864][ T3460] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.14058: couldn't read orphan inode 15 (err -117) [ 1132.724648][ T3460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1132.878906][ T3460] EXT4-fs: old and new quota format mixing [ 1132.953683][ T3470] delete_channel: no stack [ 1132.971813][ T3468] delete_channel: no stack [ 1133.033769][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1134.004922][ T3506] netlink: 'syz.5.14082': attribute type 3 has an invalid length. [ 1134.048712][ T3508] block nbd2: not configured, cannot reconfigure [ 1134.486802][ T3520] netlink: 'syz.5.14089': attribute type 29 has an invalid length. [ 1134.521095][ T3520] netlink: 'syz.5.14089': attribute type 29 has an invalid length. [ 1134.564615][ T3523] netlink: 'syz.5.14089': attribute type 29 has an invalid length. [ 1134.575349][ T3518] loop1: detected capacity change from 0 to 4096 [ 1134.586443][ T3490] loop6: detected capacity change from 0 to 32768 [ 1134.694356][ T3490] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 1135.004537][ T4269] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 1135.025558][ T4269] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1135.132175][ T3534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14095'. [ 1135.272935][T30118] ocfs2: Unmounting device (7,6) on (node local) [ 1135.694050][ T3546] loop1: detected capacity change from 0 to 4096 [ 1135.788778][ T3554] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1135.790477][ T3546] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1135.873391][ T3546] Remounting filesystem read-only [ 1136.312304][ T5456] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1136.514246][ T5456] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1136.533546][ T5456] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.579849][ T5456] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1136.622207][ T5456] usb 6-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 1136.641684][ T5456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.674997][ T5456] usb 6-1: config 0 descriptor?? [ 1136.711120][ T3579] loop2: detected capacity change from 0 to 164 [ 1136.748895][ T3579] rock: directory entry would overflow storage [ 1136.800997][ T3579] rock: sig=0x4d4e, size=5, remaining=4 [ 1136.811620][ T3579] isofs: isofs_export_get_parent(): child directory not normalized! [ 1137.113588][ T5456] wacom 0003:056A:0144.0006: Unknown device_type for 'HID 056a:0144'. Ignoring. [ 1137.274868][ T3589] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1137.310212][ T5456] usb 6-1: USB disconnect, device number 39 [ 1137.523724][ T3591] loop2: detected capacity change from 0 to 4096 [ 1137.615022][ T3596] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1137.655745][ T3600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14126'. [ 1137.705856][ T3600] nbd: must specify at least one socket [ 1138.733345][ T3640] ALSA: mixer_oss: invalid OSS volume '' [ 1138.983599][ T3615] loop2: detected capacity change from 0 to 32768 [ 1139.272898][ T3653] loop6: detected capacity change from 0 to 1024 [ 1139.291496][ T3660] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 1139.321437][ T3653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1139.393914][ T3653] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1139.490642][ T3653] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1139.704119][T30118] EXT4-fs (loop6): unmounting filesystem. [ 1140.096380][ T3685] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1140.604468][ T3703] loop6: detected capacity change from 0 to 256 [ 1140.664484][ T3703] FAT-fs (loop6): Directory bread(block 64) failed [ 1140.671126][ T3703] FAT-fs (loop6): Directory bread(block 65) failed [ 1140.710327][ T3703] FAT-fs (loop6): Directory bread(block 66) failed [ 1140.732071][ T3703] FAT-fs (loop6): Directory bread(block 67) failed [ 1140.738851][ T3703] FAT-fs (loop6): Directory bread(block 68) failed [ 1140.766763][ T3703] FAT-fs (loop6): Directory bread(block 69) failed [ 1140.787138][ T3703] FAT-fs (loop6): Directory bread(block 70) failed [ 1140.807294][ T3703] FAT-fs (loop6): Directory bread(block 71) failed [ 1140.840614][ T3703] FAT-fs (loop6): Directory bread(block 72) failed [ 1140.862335][ T3703] FAT-fs (loop6): Directory bread(block 73) failed [ 1141.267808][ T3714] loop2: detected capacity change from 0 to 4096 [ 1141.322580][ T3714] __ntfs_error: 23 callbacks suppressed [ 1141.322601][ T3714] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1141.345360][ T3714] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1141.388192][ T3714] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1141.434650][ T3714] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1141.441941][ T3701] loop1: detected capacity change from 0 to 32768 [ 1141.461554][ T3714] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1141.513245][ T3714] ntfs: volume version 3.1. [ 1141.519987][ T3714] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1141.569557][ T3714] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1141.617511][ T3714] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1141.617834][ T3701] XFS (loop1): Mounting V5 Filesystem [ 1141.687112][ T3701] XFS (loop1): Ending clean mount [ 1141.695798][ T3701] XFS (loop1): Quotacheck needed: Please wait. [ 1141.704689][ T3714] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1141.762068][ T3714] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1141.836609][ T3701] XFS (loop1): Quotacheck: Done. [ 1142.028675][ T4269] XFS (loop1): Unmounting Filesystem [ 1142.292274][ T3741] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14184'. [ 1142.337484][ T3741] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14184'. [ 1142.469488][ T3745] cgroup: fork rejected by pids controller in /syz5 [ 1142.653400][ T3750] loop6: detected capacity change from 0 to 512 [ 1142.724026][ T3750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1142.796309][ T3750] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1142.876164][ T3750] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1142.879322][ T3756] loop2: detected capacity change from 0 to 512 [ 1142.918322][ T3750] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1142.949208][ T3750] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #13: comm syz.6.14189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1142.976921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.077821][ T3750] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.14189: couldn't read orphan inode 13 (err -117) [ 1143.079940][ T3750] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1143.318544][ T3765] loop2: detected capacity change from 0 to 128 [ 1143.345968][T30118] EXT4-fs (loop6): unmounting filesystem. [ 1143.360755][ T3765] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1143.740113][T28604] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.989286][T28604] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.105214][ T3778] loop1: detected capacity change from 0 to 764 [ 1144.216818][ T3778] Symlink component flag not implemented [ 1144.242063][ T3778] Symlink component flag not implemented (7) [ 1144.306901][T28604] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.604308][T28604] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.824416][ T3800] netlink: 'syz.1.14211': attribute type 29 has an invalid length. [ 1144.863917][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14211'. [ 1144.922536][ T3800] netlink: 'syz.1.14211': attribute type 29 has an invalid length. [ 1144.935585][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14211'. [ 1144.994016][ T3804] netlink: 'syz.1.14211': attribute type 29 has an invalid length. [ 1145.025173][ T3804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14211'. [ 1145.113529][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1145.128676][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1145.145419][T28604] device .*! left promiscuous mode [ 1145.153025][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1145.160930][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1145.169603][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1145.177696][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1145.381420][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14215'. [ 1145.471895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1146.418788][ T3849] loop6: detected capacity change from 0 to 2048 [ 1146.535784][ T3849] EXT4-fs: inline encryption not supported [ 1146.693018][ T3849] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1146.849313][ T3840] loop2: detected capacity change from 0 to 32768 [ 1146.880069][ T3840] XFS (loop2): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 1147.018432][T30118] EXT4-fs (loop6): unmounting filesystem. [ 1147.232550][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 1147.383605][ T3869] loop6: detected capacity change from 0 to 1024 [ 1147.484520][ T3869] hfsplus: failed to load catalog file [ 1148.056966][ T3883] device bridge0 entered promiscuous mode [ 1148.103733][ T3886] loop1: detected capacity change from 0 to 64 [ 1148.199230][ T3882] device bridge0 left promiscuous mode [ 1148.445064][ T3871] loop2: detected capacity change from 0 to 32768 [ 1148.725667][ T3871] XFS (loop2): Mounting V5 Filesystem [ 1148.942915][ T3871] XFS (loop2): Ending clean mount [ 1148.997735][ T3807] chnl_net:caif_netlink_parms(): no params data found [ 1149.159348][ T4273] XFS (loop2): Unmounting Filesystem [ 1149.313037][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 1149.447858][ T3926] loop6: detected capacity change from 0 to 512 [ 1149.692433][ T3928] loop1: detected capacity change from 0 to 4096 [ 1149.787919][ T3928] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1149.882124][ T3928] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 1150.000079][ T3807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.031967][ T3807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.033219][ T3807] device bridge_slave_0 entered promiscuous mode [ 1150.143290][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1150.371552][ T3807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.378743][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.406388][T23456] kernel read not supported for file /video7 (pid: 23456 comm: kworker/1:4) [ 1150.425633][ T3807] device bridge_slave_1 entered promiscuous mode [ 1150.853540][ T3807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.882044][ T3807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.926295][ T3958] device wireguard0 entered promiscuous mode [ 1150.967771][ T3958] team0: Device wireguard0 is of different type [ 1151.170531][ T3967] loop1: detected capacity change from 0 to 1024 [ 1151.277589][ T3967] hfsplus: bad catalog entry type [ 1151.366899][ T3807] team0: Port device team_slave_0 added [ 1151.398958][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 1151.439637][T11553] hfsplus: b-tree write err: -5, ino 25 [ 1151.456294][T11553] hfsplus: b-tree write err: -5, ino 4 [ 1151.468959][T11553] hfsplus: b-tree write err: -5, ino 2 [ 1151.484355][ T3807] team0: Port device team_slave_1 added [ 1151.628494][ T3807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.661685][ T3807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.731487][ T3807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.813322][T28604] device hsr_slave_0 left promiscuous mode [ 1151.842738][T28604] device hsr_slave_1 left promiscuous mode [ 1151.886480][T28604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.911530][T28604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.932276][T28604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.939790][T28604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.957344][ T3978] loop6: detected capacity change from 0 to 256 [ 1151.974932][T28604] device bridge_slave_0 left promiscuous mode [ 1151.981248][T28604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.062061][ T3978] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d) [ 1152.159474][ T3978] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000005) [ 1152.200120][ T3978] exFAT-fs (loop6): failed to initialize root inode [ 1152.217694][T28604] device veth0_macvtap left promiscuous mode [ 1152.224631][T28604] device veth1_vlan left promiscuous mode [ 1152.687008][ T3995] loop6: detected capacity change from 0 to 4096 [ 1152.785185][ T3995] ntfs: volume version 3.1. [ 1153.491445][T30123] Bluetooth: hci4: command 0x0419 tx timeout [ 1153.849040][ T4037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14286'. [ 1153.869807][T28604] bond3 (unregistering): Released all slaves [ 1153.918039][T28604] bond2 (unregistering): Released all slaves [ 1154.273909][T28604] bond1 (unregistering): Released all slaves [ 1155.472301][ T4053] loop6: detected capacity change from 0 to 32768 [ 1155.778135][T28604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.911977][T28604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.484862][T28604] bond0 (unregistering): Released all slaves [ 1156.613600][ T3807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.620641][ T3807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.647102][ T3807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.757325][ T4037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14286'. [ 1156.954754][ T3807] device hsr_slave_0 entered promiscuous mode [ 1157.012174][ T3807] device hsr_slave_1 entered promiscuous mode [ 1157.033115][ T3807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1157.052330][ T3807] Cannot create hsr debugfs directory [ 1157.171478][ T4258] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1157.387769][ T4258] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1157.407032][ T4258] usb 3-1: not running at top speed; connect to a high speed hub [ 1157.427900][ T4258] usb 3-1: config 3 has an invalid interface number: 155 but max is 0 [ 1157.456981][ T4258] usb 3-1: config 3 has no interface number 0 [ 1157.471771][ T4258] usb 3-1: config 3 interface 155 altsetting 15 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1157.511265][ T4258] usb 3-1: config 3 interface 155 altsetting 15 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 1157.566483][ T4258] usb 3-1: config 3 interface 155 has no altsetting 0 [ 1157.590058][ T4258] usb 3-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=8e.39 [ 1157.660311][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.687609][ T4258] usb 3-1: Product: syz [ 1157.712011][ T4258] usb 3-1: Manufacturer: syz [ 1157.720235][ T4258] usb 3-1: SerialNumber: syz [ 1157.744373][ T4082] loop6: detected capacity change from 0 to 4096 [ 1157.778417][ T4060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1157.863928][ T4082] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1157.944892][ T4082] ntfs3: loop6: Failed to load $Extend. [ 1158.002396][ T4258] appletouch 3-1:3.155: Failed to read mode from device. [ 1158.029995][ T4258] appletouch: probe of 3-1:3.155 failed with error -5 [ 1158.056110][ T4082] ntfs3: loop6: ino=5, "/" directory corrupted [ 1158.068600][ T4258] usb 3-1: USB disconnect, device number 49 [ 1158.491620][ T4102] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1158.498275][ T4102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1158.565285][ T4104] loop6: detected capacity change from 0 to 512 [ 1158.588740][ T4102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1158.614373][ T4104] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1158.653994][ T4102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1158.660551][ T4102] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1158.691878][ T4102] comedi comedi3: 8255: I/O port conflict (0xf8,4) [ 1158.698604][ T4102] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 1158.715817][ T4102] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 1158.750052][ T4102] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1158.770346][ T4102] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1158.799534][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1158.799552][ T27] audit: type=1800 audit(1777034107.460:690): pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.14308" name="file1" dev="loop6" ino=1048785 res=0 errno=0 [ 1158.812762][ T4102] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1158.860110][ T4104] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1158.892985][ T4104] FAT-fs (loop6): Filesystem has been set read-only [ 1158.900965][ T4104] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 1158.909717][ T4102] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1158.934494][ T4102] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1158.962270][ T4102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1158.991206][ T4102] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffbff,4) [ 1159.018325][ T4102] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1159.056316][ T4102] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1159.083978][ T4102] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 1159.120194][ T4102] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 1159.131948][ T4102] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1159.151457][ T4102] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1159.180904][ T4102] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 1159.359632][ T3807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1159.394732][ T3807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1159.474329][ T3807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1159.513319][ T3807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1159.833305][ T3807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.877482][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1159.890611][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1159.913955][ T3807] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.982165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1159.993544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.018647][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.025935][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.077856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.095127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.120474][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.127739][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.148593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1160.188251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1160.207464][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14322'. [ 1160.216993][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14322'. [ 1160.227123][ T4140] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14322'. [ 1160.233891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1160.295792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1160.339080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1160.434423][ T3807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1160.520167][ T3807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1160.563420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1160.591110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1160.628242][ T4150] loop2: detected capacity change from 0 to 64 [ 1160.639633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1160.667788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1160.697980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1160.714316][ T4150] hfs: bad catalog entry type 0 [ 1160.737630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1160.771599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1160.781172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1161.024064][ T4158] loop2: detected capacity change from 0 to 2048 [ 1161.128847][ T4158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1161.249917][ T4158] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1161.383220][ T4170] loop6: detected capacity change from 0 to 512 [ 1161.433598][ T4170] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1161.463291][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1161.489076][ T4170] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.14333: bad orphan inode 131083 [ 1161.550360][ T4170] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1161.682457][ T4170] overlayfs: upper fs needs to support d_type. [ 1161.839099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1161.858679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1161.902858][T30118] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /493/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1161.925766][ T3807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.405872][ T4189] xt_policy: too many policy elements [ 1162.704974][T30118] EXT4-fs (loop6): unmounting filesystem. [ 1163.003571][ T4203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14343'. [ 1163.016907][ T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.052339][ T4199] loop1: detected capacity change from 0 to 4096 [ 1163.092511][ T4199] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1163.130993][ T4199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1163.245836][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1163.506551][ T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.736537][ T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.892858][ T4219] loop1: detected capacity change from 0 to 4096 [ 1163.916293][ T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.032824][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1164.046302][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1164.048595][ T4219] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1164.073016][ T4225] loop2: detected capacity change from 0 to 256 [ 1164.114983][ T3807] device veth0_vlan entered promiscuous mode [ 1164.152274][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1164.172805][ T4219] ntfs3: loop1: Failed to load $Extend. [ 1164.184633][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1164.230702][ T3807] device veth1_vlan entered promiscuous mode [ 1164.271841][ T4219] ntfs3: loop1: ino=5, "/" directory corrupted [ 1164.283233][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1164.292344][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1164.342351][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1164.630636][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1164.661863][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1164.713308][ T3807] device veth0_macvtap entered promiscuous mode [ 1164.772776][ T3807] device veth1_macvtap entered promiscuous mode [ 1164.894748][ T3807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.926531][ T3807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.965492][ T3807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.999580][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1165.010953][ T3807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.021250][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1165.031851][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1165.039957][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1165.047795][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1165.055193][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1165.062584][ T3807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.141616][ T3807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.272427][ T3807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.312910][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1165.337075][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1165.349312][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1165.370086][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1165.399773][ T4234] loop1: detected capacity change from 0 to 32768 [ 1165.677419][ T3807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.710122][ T3807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.750717][ T3807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.800600][ T3807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.828944][ T3807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.881593][ T3807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.932061][ T3807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1165.984938][ T3807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.042182][ T3807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.052067][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1166.060974][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1166.206414][ T3807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.251593][ T3807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.260392][ T3807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.342126][ T3807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.152254][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 1167.213219][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.221147][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.408128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1167.452128][T11553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.460065][T11553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.611697][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1167.711535][ T4318] loop1: detected capacity change from 0 to 40427 [ 1167.746471][ T4318] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 1167.794328][ T4318] F2FS-fs (loop1): invalid crc value [ 1167.806063][ T4241] chnl_net:caif_netlink_parms(): no params data found [ 1167.844082][ T4334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14377'. [ 1167.855306][ T4318] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1168.042051][ T56] IPVS: stopping backup sync thread 1932 ... [ 1168.074477][ T5446] kernel write not supported for file /amidi2 (pid: 5446 comm: kworker/0:13) [ 1168.099561][ T4318] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1168.353959][ T4356] usb usb9: usbfs: process 4356 (syz.2.14379) did not claim interface 0 before use [ 1168.704611][ T4341] could not allocate digest TFM handle sha3-224-ce [ 1168.830670][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.858514][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.884230][ T4241] device bridge_slave_0 entered promiscuous mode [ 1168.931909][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14380'. [ 1168.966989][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14380'. [ 1169.011547][ T4364] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14380'. [ 1169.231377][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 1169.278171][ T4373] loop1: detected capacity change from 0 to 1024 [ 1169.442538][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.449737][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.495162][ T4241] device bridge_slave_1 entered promiscuous mode [ 1169.524453][T11553] hfsplus: b-tree write err: -5, ino 25 [ 1169.530310][T11553] hfsplus: b-tree write err: -5, ino 4 [ 1169.569336][ T5446] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1169.600368][T11553] hfsplus: b-tree write err: -5, ino 2 [ 1169.616377][ T4241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.645247][ T4378] loop2: detected capacity change from 0 to 4096 [ 1169.657058][ T4241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.772918][ T5446] usb 6-1: Using ep0 maxpacket: 16 [ 1169.783354][ T5446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.831828][ T5446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.861697][ T5446] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1169.910775][ T5446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.918039][ T4241] team0: Port device team_slave_0 added [ 1169.960146][ T5446] usb 6-1: config 0 descriptor?? [ 1169.969954][ T4241] team0: Port device team_slave_1 added [ 1170.017632][ T56] device hsr_slave_0 left promiscuous mode [ 1170.051827][ T56] device hsr_slave_1 left promiscuous mode [ 1170.080856][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.100006][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.124252][ T4392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14390'. [ 1170.152209][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.159721][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.211142][ T56] device hsr0 left promiscuous mode [ 1170.220744][ T56] bridge0: port 3(hsr0) entered disabled state [ 1170.257885][ T56] device bridge_slave_1 left promiscuous mode [ 1170.281949][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.324906][ T56] device bridge_slave_0 left promiscuous mode [ 1170.331241][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.411923][ T5446] razer 0003:1532:011B.0007: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.5-1/input0 [ 1170.492381][ T56] device veth1_macvtap left promiscuous mode [ 1170.506488][ T56] device veth0_macvtap left promiscuous mode [ 1170.519942][ T56] device veth1_vlan left promiscuous mode [ 1170.532703][ T56] device veth0_vlan left promiscuous mode [ 1170.615343][ T5446] usb 6-1: USB disconnect, device number 40 [ 1170.690559][ T4396] fido_id[4396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1170.930990][ T4390] loop2: detected capacity change from 0 to 32768 [ 1171.311601][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 1172.509774][ T4437] loop5: detected capacity change from 0 to 512 [ 1172.545171][ T4437] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1172.583895][ T4437] EXT4-fs (loop5): 1 truncate cleaned up [ 1172.601836][ T4437] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1172.658862][ T4437] EXT4-fs warning (device loop5): ext4_group_extend:1870: can't shrink FS - resize aborted [ 1172.730370][ T3807] EXT4-fs (loop5): unmounting filesystem. [ 1173.391547][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 1173.456453][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1173.603397][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1173.699450][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.822110][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.666307][ T4463] loop5: detected capacity change from 0 to 512 [ 1174.700060][ T56] bond0 (unregistering): Released all slaves [ 1174.713978][ T4463] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1174.741466][ T4463] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 1174.773036][ T4463] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.14406: Corrupt directory, running e2fsck is recommended [ 1174.814305][ T4463] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1174.822924][ T4463] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.14406: corrupted in-inode xattr [ 1174.844248][ T4463] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.14406: couldn't read orphan inode 15 (err -117) [ 1174.865044][ T4463] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1174.981831][ T3807] EXT4-fs (loop5): unmounting filesystem. [ 1175.127996][ T4455] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14413'. [ 1175.162121][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.169170][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.217153][ T4241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.230747][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.238217][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.311663][ T4241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.473387][ T4241] device hsr_slave_0 entered promiscuous mode [ 1175.487681][ T4241] device hsr_slave_1 entered promiscuous mode [ 1175.504335][ T4241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1175.538333][ T4241] Cannot create hsr debugfs directory [ 1176.315793][ T4241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1176.328387][ T4499] [U]  [ 1176.362603][ T4241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1176.424233][ T4241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1176.477441][ T4241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1176.872935][ T4241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.916679][ T4518] loop5: detected capacity change from 0 to 256 [ 1176.949553][ T4518] exfat: Deprecated parameter 'utf8' [ 1176.963856][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1176.982175][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1177.052688][ T4241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.065166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1177.072335][ T4518] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1177.118068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1177.172154][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.179528][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.260095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1177.295632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1177.322481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1177.381917][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.389117][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.397563][ T4526] loop1: detected capacity change from 0 to 512 [ 1177.441819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1177.458431][ T4529] loop2: detected capacity change from 0 to 512 [ 1177.475498][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.480182][ T4526] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.14432: iget: bad i_size value: 38620345925642 [ 1177.481905][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.511992][ T4529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1177.538147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1177.588508][ T4258] kernel write not supported for file /input/event0 (pid: 4258 comm: kworker/0:3) [ 1177.610494][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1177.635416][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1177.673040][ T4529] EXT4-fs (loop2): 1 truncate cleaned up [ 1177.678827][ T4529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1177.695089][ T4526] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.14432: couldn't read orphan inode 15 (err -117) [ 1177.716576][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1177.725094][ T4526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1177.735346][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1177.752704][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1177.772134][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1177.827606][ T4241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1177.884386][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1177.911200][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1177.922202][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1177.930419][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1177.992010][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1178.044984][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1178.126667][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1178.157615][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1178.280715][ T4545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14438'. [ 1178.962008][ T4567] sp0: Synchronizing with TNC [ 1179.189241][T28604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1179.221867][T28604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1179.251698][ T4241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.701537][T23471] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1179.874388][ T4599] Bluetooth: MGMT ver 1.22 [ 1179.903316][T23471] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1179.931751][T23471] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1179.961678][T23471] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.013840][T23471] usb 3-1: config 220 has no interface number 2 [ 1180.020235][T23471] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1180.101418][T23471] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1180.128136][T23471] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1180.155769][T23471] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1180.206101][T23471] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1180.232349][T23471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.250817][T23471] usb 3-1: Product: syz [ 1180.260824][T23471] usb 3-1: Manufacturer: syz [ 1180.270961][T23471] usb 3-1: SerialNumber: syz [ 1180.498219][T23471] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1180.526341][T23471] usb 3-1: No valid video chain found. [ 1180.550197][T23471] usb 3-1: selecting invalid altsetting 0 [ 1180.616347][T23471] usb 3-1: selecting invalid altsetting 0 [ 1180.641347][T23471] usbtest: probe of 3-1:220.1 failed with error -22 [ 1180.676901][T23471] usb 3-1: USB disconnect, device number 50 [ 1180.731226][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1180.753785][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1180.834497][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1180.853679][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1180.905315][ T4241] device veth0_vlan entered promiscuous mode [ 1180.912872][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1180.931966][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1180.967636][ T4241] device veth1_vlan entered promiscuous mode [ 1181.065746][ T4241] device veth0_macvtap entered promiscuous mode [ 1181.110092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1181.129021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1181.159830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1181.175691][ T4631] loop5: detected capacity change from 0 to 1024 [ 1181.218096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1181.283998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1181.346797][ T4241] device veth1_macvtap entered promiscuous mode [ 1181.377084][ T4631] hfsplus: extend alloc file! (8192,512,16777719) [ 1181.421589][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.471654][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.508917][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.543534][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.585666][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.623129][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.672554][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.699996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1181.708166][T11553] hfsplus: b-tree write err: -5, ino 8 [ 1181.727734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1181.742719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1181.776601][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.799868][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.812098][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.823449][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.842632][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.865930][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.900218][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.914240][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.927165][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.948742][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1181.967348][T11553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1181.992330][ T4241] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.007645][ T4241] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.051460][ T4241] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.060374][ T4241] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.320099][ T4660] loop1: detected capacity change from 0 to 8 [ 1182.357999][ T4660] unable to read id index table [ 1182.370612][T11553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.410807][T11553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.467884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1182.552991][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.560977][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.658975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1183.391762][ T4688] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 1183.408218][ T4690] IPVS: stopping master sync thread 4688 ... [ 1183.746071][ T4702] loop2: detected capacity change from 0 to 256 [ 1183.771190][ T4702] exfat: Deprecated parameter 'utf8' [ 1183.808919][ T4702] exfat: Deprecated parameter 'namecase' [ 1183.859203][ T4702] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9974f712, utbl_chksum : 0xe619d30d) [ 1185.226607][ T4722] loop1: detected capacity change from 0 to 32768 [ 1185.297185][ T4722] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1185.323856][ T4722] JBD2: Ignoring recovery information on journal [ 1185.477941][ T4729] loop2: detected capacity change from 0 to 40427 [ 1185.515528][ T4729] F2FS-fs (loop2): invalid crc value [ 1185.528093][ T4722] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1185.574822][ T4729] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1185.672576][ T4722] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 1185.748868][ T4722] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1185.791842][ T4729] F2FS-fs (loop2): Start checkpoint disabled! [ 1185.801581][ T4722] OCFS2: File system is now read-only. [ 1185.811806][ T4722] (syz.1.14496,4722,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 1185.843808][ T4729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1185.881808][ T4722] (syz.1.14496,4722,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 1185.890440][ T4722] (syz.1.14496,4722,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1185.942079][ T4722] (syz.1.14496,4722,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1185.980066][ T4722] (syz.1.14496,4722,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1186.002090][ T4722] (syz.1.14496,4722,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1186.010033][ T4722] (syz.1.14496,4722,0):ocfs2_mknod:385 ERROR: status = -30 [ 1186.034593][ T4722] (syz.1.14496,4722,0):ocfs2_mknod:502 ERROR: status = -30 [ 1186.053989][ T4722] (syz.1.14496,4722,0):ocfs2_mkdir:659 ERROR: status = -30 [ 1186.273303][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 1186.443326][ T11] kworker/u4:1: attempt to access beyond end of device [ 1186.443326][ T11] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1187.112385][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): gretap2: link becomes ready [ 1187.495172][ T4789] loop2: detected capacity change from 0 to 4096 [ 1187.543088][ T4789] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1187.734491][ T27] audit: type=1800 audit(1777034136.400:691): pid=4789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14506" name="file1" dev="loop2" ino=24 res=0 errno=0 [ 1187.923663][ T4273] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 1187.982420][ T4273] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 1187.989057][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1188.186301][ T4815] loop7: detected capacity change from 0 to 512 [ 1188.269464][ T4815] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.14525: inode #93: comm syz.7.14525: iget: illegal inode # [ 1188.281081][ T4819] rdma_op ffff888058c069f0 conn xmit_rdma 0000000000000000 [ 1188.377846][ T4827] loop5: detected capacity change from 0 to 2048 [ 1188.395138][ T4827] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1188.412474][ T4827] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1188.423238][ T4827] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1188.430961][ T4827] UDF-fs: Scanning with blocksize 512 failed [ 1188.441899][ T4815] EXT4-fs (loop7): Remounting filesystem read-only [ 1188.448542][ T4815] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.14525: error while reading EA inode 93 err=-117 [ 1188.486471][ T4827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1188.506351][ T4815] EXT4-fs (loop7): Remounting filesystem read-only [ 1188.535318][ T4815] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.14525: inode #93: comm syz.7.14525: iget: illegal inode # [ 1188.602314][ T4815] EXT4-fs (loop7): Remounting filesystem read-only [ 1188.608968][ T4815] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.14525: error while reading EA inode 93 err=-117 [ 1188.689231][ T4831] loop2: detected capacity change from 0 to 1024 [ 1188.700195][ T4815] EXT4-fs (loop7): Remounting filesystem read-only [ 1188.732082][ T4815] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.14525: ea_inode with extended attributes [ 1188.802646][ T4831] syz.2.14530: attempt to access beyond end of device [ 1188.802646][ T4831] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1188.824391][ T4815] EXT4-fs (loop7): Remounting filesystem read-only [ 1188.861886][ T4815] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.14525: error while reading EA inode 11 err=-117 [ 1188.876366][ T4831] Buffer I/O error on dev loop2, logical block 2889, async page read [ 1188.916450][ T4838] loop1: detected capacity change from 0 to 512 [ 1188.918903][ T4815] EXT4-fs (loop7): Remounting filesystem read-only [ 1188.953407][ T4836] syz.2.14530: attempt to access beyond end of device [ 1188.953407][ T4836] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1188.971993][ T4815] EXT4-fs (loop7): 1 orphan inode deleted [ 1188.977830][ T4815] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1189.014518][ T4838] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1189.026471][ T4831] syz.2.14530: attempt to access beyond end of device [ 1189.026471][ T4831] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1189.051938][ T4831] Buffer I/O error on dev loop2, logical block 2889, async page read [ 1189.098164][ T27] audit: type=1800 audit(1777034137.760:692): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14530" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1189.103868][ T4838] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.14533: corrupted in-inode xattr [ 1189.133627][ T4241] EXT4-fs (loop7): unmounting filesystem. [ 1189.316856][ T4838] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.14533: couldn't read orphan inode 15 (err -117) [ 1189.348040][ T4845] loop5: detected capacity change from 0 to 256 [ 1189.394063][ T4838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1189.543358][ T4838] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1189.602043][ T4845] FAT-fs (loop5): Directory bread(block 64) failed [ 1189.608678][ T4845] FAT-fs (loop5): Directory bread(block 65) failed [ 1189.674250][ T4845] FAT-fs (loop5): Directory bread(block 66) failed [ 1189.710668][ T4845] FAT-fs (loop5): Directory bread(block 67) failed [ 1189.736906][ T4845] FAT-fs (loop5): Directory bread(block 68) failed [ 1189.744974][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1189.769476][ T4845] FAT-fs (loop5): Directory bread(block 69) failed [ 1189.796636][ T4845] FAT-fs (loop5): Directory bread(block 70) failed [ 1189.831490][ T4845] FAT-fs (loop5): Directory bread(block 71) failed [ 1189.878437][ T4845] FAT-fs (loop5): Directory bread(block 72) failed [ 1189.905968][ T4845] FAT-fs (loop5): Directory bread(block 73) failed [ 1190.264492][ T4870] loop2: detected capacity change from 0 to 1024 [ 1190.374526][ T4870] hfsplus: b-tree write err: -5, ino 2 [ 1190.674792][ T56] hfsplus: b-tree write err: -5, ino 25 [ 1190.713290][ T56] hfsplus: b-tree write err: -5, ino 4 [ 1190.966987][ T4889] loop5: detected capacity change from 0 to 4096 [ 1191.028075][ T4896] loop1: detected capacity change from 0 to 1024 [ 1191.081694][ T4889] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1191.257725][ T4322] hfsplus: b-tree write err: -5, ino 25 [ 1191.264840][ T4322] hfsplus: b-tree write err: -5, ino 4 [ 1191.270498][ T4322] hfsplus: b-tree write err: -5, ino 2 [ 1191.595040][ T4889] ntfs3: Cannot use different iocharset when remounting! [ 1192.129776][ T27] audit: type=1326 audit(1777034140.790:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.14565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1192.163971][ T27] audit: type=1326 audit(1777034140.790:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.14565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1192.186459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.211591][ T4915] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14561'. [ 1192.362054][ T27] audit: type=1326 audit(1777034140.830:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.14565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1192.488222][ T27] audit: type=1326 audit(1777034140.830:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.14565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1192.604253][ T27] audit: type=1326 audit(1777034140.830:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.14565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1192.698824][ T27] audit: type=1326 audit(1777034140.830:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.14565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1192.797630][ T27] audit: type=1326 audit(1777034140.830:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.14565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1192.892649][ T27] audit: type=1326 audit(1777034140.830:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.14565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1193.376894][ T4948] loop5: detected capacity change from 0 to 2048 [ 1193.437338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.496941][ T4948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1193.519494][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.837897][ T4934] loop1: detected capacity change from 0 to 32768 [ 1193.940589][ T4934] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.14568 (4934) [ 1194.010646][ T4934] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1194.069802][ T4934] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1194.109155][ T4965] loop7: detected capacity change from 0 to 1024 [ 1194.114886][ T4934] BTRFS info (device loop1): setting nodatasum [ 1194.153111][ T4934] BTRFS info (device loop1): force zlib compression, level 3 [ 1194.160616][ T4934] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1194.249799][ T4934] BTRFS info (device loop1): use lzo compression, level 0 [ 1194.281407][ T4934] BTRFS info (device loop1): turning on flush-on-commit [ 1194.288473][ T4934] BTRFS info (device loop1): enabling auto defrag [ 1194.381776][ T4934] BTRFS info (device loop1): max_inline at 4096 [ 1194.388170][ T4934] BTRFS info (device loop1): using free space tree [ 1194.480752][ T4971] loop5: detected capacity change from 0 to 2048 [ 1194.673116][ T4971] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1194.755925][ T4971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1194.831894][ T4934] BTRFS info (device loop1): enabling ssd optimizations [ 1195.122085][ T4269] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1196.032520][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14595'. [ 1196.311830][ T5037] loop1: detected capacity change from 0 to 512 [ 1196.343586][ T5037] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1196.546860][ T5037] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1196.611517][ T5037] Quota error (device loop1): write_blk: dquota write failed [ 1196.632133][ T5037] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1196.662119][ T5037] Quota error (device loop1): write_blk: dquota write failed [ 1196.692937][ T5037] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1196.741418][ T5037] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.14597: Failed to acquire dquot type 1 [ 1196.821878][ T5037] EXT4-fs (loop1): 1 truncate cleaned up [ 1196.827651][ T5037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1196.906114][ T5037] EXT4-fs error (device loop1): __ext4_remount:6650: comm syz.1.14597: Abort forced by user [ 1196.968136][ T5050] loop2: detected capacity change from 0 to 1024 [ 1196.983328][ T5037] EXT4-fs (loop1): Remounting filesystem read-only [ 1196.989932][ T5037] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1197.320456][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1197.414395][ T5032] loop7: detected capacity change from 0 to 40427 [ 1197.473687][ T5032] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 1197.480135][ T5032] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1197.540287][ T5032] F2FS-fs (loop7): invalid crc value [ 1197.628737][ T5032] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1197.984362][ T5032] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1198.015824][ T5032] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1198.279476][ T4241] syz-executor: attempt to access beyond end of device [ 1198.279476][ T4241] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1198.523513][ T5089] loop1: detected capacity change from 0 to 1024 [ 1198.566729][ T5089] EXT4-fs: Ignoring removed mblk_io_submit option [ 1198.622020][ T5089] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1198.693398][ T5089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1199.017588][ T5098] loop5: detected capacity change from 0 to 1024 [ 1199.034485][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1199.145003][ T5098] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1199.253870][ T5069] loop2: detected capacity change from 0 to 40427 [ 1199.316923][ T5069] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 1199.353674][ T5069] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1199.386281][ T3807] EXT4-fs (loop5): unmounting filesystem. [ 1199.392675][ T5069] F2FS-fs (loop2): invalid crc value [ 1199.471439][ T5069] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1199.753794][ T5069] F2FS-fs (loop2): recover fsync data on readonly fs [ 1199.811755][ T5069] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 1199.819071][ T5069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1199.923892][ T5126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.530324][ T5144] loop5: detected capacity change from 0 to 1764 [ 1200.552539][ T5146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14633'. [ 1200.602442][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.654402][ T5146] device bridge_slave_1 left promiscuous mode [ 1200.716471][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.983182][ T5156] netlink: 22 bytes leftover after parsing attributes in process `syz.5.14635'. [ 1201.123316][ T5163] loop1: detected capacity change from 0 to 64 [ 1201.311008][ T5158] block device autoloading is deprecated and will be removed. [ 1201.329520][ T5169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14640'. [ 1202.018743][ T5187] netlink: 'syz.0.14648': attribute type 2 has an invalid length. [ 1202.033196][ T5023] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1202.063392][ T5190] loop7: detected capacity change from 0 to 1024 [ 1202.231512][ T5023] usb 2-1: Using ep0 maxpacket: 32 [ 1202.239810][ T5023] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1202.300490][ T5023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.315988][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1202.322047][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1202.327825][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1202.355271][ T5023] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1202.478820][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14652'. [ 1202.511700][ T5199] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1202.957724][ T5023] usb 2-1: USB disconnect, device number 59 [ 1203.210770][ T5223] loop5: detected capacity change from 0 to 1024 [ 1203.245876][ T5223] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1203.392519][ T5223] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1203.593294][ T3807] EXT4-fs (loop5): unmounting filesystem. [ 1204.647218][ T5270] loop7: detected capacity change from 0 to 128 [ 1204.684053][ T5270] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1204.721715][ T5270] hpfs: filesystem error: improperly stopped [ 1204.727819][ T5270] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1204.756727][ T5270] hpfs: You really don't want any checks? You are crazy... [ 1204.811694][ T5270] hpfs: hpfs_map_sector(): read error [ 1204.817172][ T5270] hpfs: code page support is disabled [ 1204.845889][ T5270] hpfs: hpfs_map_4sectors(): unaligned read [ 1204.868170][ T5270] hpfs: hpfs_map_4sectors(): unaligned read [ 1204.896179][ T5270] hpfs: filesystem error: unable to find root dir [ 1204.977382][ T5270] hpfs: hpfs_map_4sectors(): unaligned read [ 1204.994522][ T5270] hpfs: hpfs_map_sector(): read error [ 1205.143567][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14685'. [ 1205.447360][ T5300] netlink: 'syz.0.14690': attribute type 4 has an invalid length. [ 1205.474943][ T5300] netlink: 17 bytes leftover after parsing attributes in process `syz.0.14690'. [ 1205.704356][ T5310] loop1: detected capacity change from 0 to 64 [ 1205.810486][ T5310] hfs: request for non-existent node -16318464 in B*Tree [ 1205.842781][ T5310] hfs: request for non-existent node -16318464 in B*Tree [ 1205.915456][ T5316] loop7: detected capacity change from 0 to 256 [ 1205.929399][ T5314] loop0: detected capacity change from 0 to 4096 [ 1205.953377][ T5308] hfs: request for non-existent node -16318464 in B*Tree [ 1205.982248][ T5316] exfat: Deprecated parameter 'utf8' [ 1206.001781][ T5308] hfs: request for non-existent node -16318464 in B*Tree [ 1206.010416][ T5316] exfat: Deprecated parameter 'utf8' [ 1206.060556][ T5316] exfat: Deprecated parameter 'utf8' [ 1206.127864][ T5316] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1206.175364][ T4347] hfs: request for non-existent node -16318464 in B*Tree [ 1206.202338][ T4347] hfs: request for non-existent node -16318464 in B*Tree [ 1206.493147][ T4278] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 1206.511937][ T4278] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1206.820080][ T5331] loop0: detected capacity change from 0 to 128 [ 1207.065331][ T5344] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14705'. [ 1208.567935][ T5386] loop5: detected capacity change from 0 to 256 [ 1208.612625][ T5386] exfat: Deprecated parameter 'utf8' [ 1208.618125][ T5386] exfat: Deprecated parameter 'namecase' [ 1208.704093][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14724'. [ 1208.722778][ T5386] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1208.743423][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14724'. [ 1209.373166][ T5402] loop1: detected capacity change from 0 to 512 [ 1209.421599][ T5402] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1209.516542][ T5402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1209.550293][ T5402] CIFS: iocharset name too long [ 1209.609915][ T5409] can0: slcan on ptm0. [ 1209.622819][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1209.782650][ T5406] can0 (unregistered): slcan off ptm0. [ 1210.350796][ T5421] loop1: detected capacity change from 0 to 4096 [ 1210.432808][ T5421] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1210.486910][ T5421] NILFS (loop1): trying rollback from an earlier position [ 1210.586841][ T5421] NILFS (loop1): recovery complete [ 1210.601757][ T5434] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1211.492131][ T5024] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1211.703333][ T5426] loop5: detected capacity change from 0 to 40427 [ 1211.732984][ T5024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1211.732993][ T5426] F2FS-fs (loop5): invalid crc value [ 1211.733018][ T5024] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1211.841935][ T5426] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1211.847828][ T5024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1211.885929][ T5024] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1211.953595][ T5024] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1212.013819][ T5426] F2FS-fs (loop5): Start checkpoint disabled! [ 1212.014913][ T5024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.072350][ T5024] usb 2-1: Product: syz [ 1212.076672][ T5024] usb 2-1: Manufacturer: syz [ 1212.081724][ T5426] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1212.116062][ T5438] loop7: detected capacity change from 0 to 40427 [ 1212.121470][ T5024] usb 2-1: SerialNumber: syz [ 1212.162320][ T5024] usb 2-1: config 0 descriptor?? [ 1212.182955][ T5438] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 1212.216163][ T5024] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1212.223561][ T5438] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1212.295122][ T5438] F2FS-fs (loop7): invalid crc value [ 1212.353992][ T5438] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1212.429852][ T5024] scsi host1: usb-storage 2-1:0.0 [ 1212.455037][ T5024] usb 2-1: USB disconnect, device number 60 [ 1212.717285][ T5438] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1212.731712][ T5438] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1212.780021][ T4322] kworker/u4:6: attempt to access beyond end of device [ 1212.780021][ T4322] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1212.996448][ T5484] loop0: detected capacity change from 0 to 256 [ 1213.038634][ T4241] syz-executor: attempt to access beyond end of device [ 1213.038634][ T4241] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1213.066740][ T5484] FAT-fs (loop0): Directory bread(block 1285) failed [ 1213.147108][ T5484] FAT-fs (loop0): Directory bread(block 1286) failed [ 1213.210727][ T5484] FAT-fs (loop0): Directory bread(block 1287) failed [ 1213.261682][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14752'. [ 1213.273704][ T5484] FAT-fs (loop0): Directory bread(block 1288) failed [ 1213.306205][ T5484] FAT-fs (loop0): Directory bread(block 1285) failed [ 1213.325129][ T5484] FAT-fs (loop0): Directory bread(block 1286) failed [ 1213.342687][ T5484] FAT-fs (loop0): Directory bread(block 1287) failed [ 1213.349549][ T5484] FAT-fs (loop0): Directory bread(block 1288) failed [ 1213.371852][ T5484] FAT-fs (loop0): Directory bread(block 1285) failed [ 1213.378673][ T5484] FAT-fs (loop0): Directory bread(block 1286) failed [ 1213.821885][ T5498] loop0: detected capacity change from 0 to 64 [ 1214.247207][ T5510] loop0: detected capacity change from 0 to 1024 [ 1214.756602][ T5523] device vlan2 entered promiscuous mode [ 1214.785566][ T5523] device geneve1 entered promiscuous mode [ 1215.349926][ T5540] loop5: detected capacity change from 0 to 512 [ 1215.432503][ T5540] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1215.492141][ T5540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1215.561243][ T5540] EXT4-fs (loop5): 1 truncate cleaned up [ 1215.571135][ T5540] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1215.609763][ T5540] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 4294966271 (only 1 groups) [ 1215.739209][ T3807] EXT4-fs (loop5): unmounting filesystem. [ 1216.042023][ T5558] netlink: 612 bytes leftover after parsing attributes in process `syz.0.14777'. [ 1216.070766][ T5558] sch_tbf: burst 240 is lower than device lo mtu (65511) ! [ 1216.201740][ T5024] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1216.401476][ T5024] usb 2-1: Using ep0 maxpacket: 8 [ 1216.408857][ T5024] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1216.440857][ T5024] usb 2-1: config 179 has no interface number 0 [ 1216.467007][ T5024] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1216.501007][ T5024] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1216.531138][ T5577] vivid-000: disconnect [ 1216.537080][ T5024] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1216.550612][ T5574] vivid-000: reconnect [ 1216.560831][ T5024] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1216.586615][ T5024] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1216.616264][ T5024] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1216.631415][ T5024] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1216.653388][ T5024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.688420][ T5024] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input64 [ 1216.925325][ T5025] usb 2-1: USB disconnect, device number 61 [ 1216.931679][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1216.945286][ T5025] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1217.535356][ T5600] netlink: 480 bytes leftover after parsing attributes in process `syz.5.14789'. [ 1217.842621][ T5608] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1217.860209][ T5611] netlink: 6 bytes leftover after parsing attributes in process `syz.1.14794'. [ 1217.914776][ T5613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1218.184675][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14798'. [ 1219.085662][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14812'. [ 1219.331217][ T5667] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14816'. [ 1219.693407][ T5680] netlink: 'syz.0.14822': attribute type 2 has an invalid length. [ 1219.919675][ T5689] syz.0.14826 (5689): /proc/5688/oom_adj is deprecated, please use /proc/5688/oom_score_adj instead. [ 1220.140812][ T5695] random: crng reseeded on system resumption [ 1220.163485][ T5693] loop1: detected capacity change from 0 to 4096 [ 1220.212985][ T5693] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1220.233757][ T5693] NILFS (loop1): trying rollback from an earlier position [ 1220.275123][ T5693] NILFS (loop1): recovery complete [ 1220.315856][ T5698] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1220.628152][ T5703] loop1: detected capacity change from 0 to 512 [ 1220.679493][ T5703] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1220.764480][ T5703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1220.863360][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1221.026735][ T5713] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1221.461381][ T5718] loop5: detected capacity change from 0 to 32768 [ 1221.489238][ T5718] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1221.507582][ T5718] JBD2: Ignoring recovery information on journal [ 1221.539248][ T5718] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1221.656601][ T3807] ocfs2: Unmounting device (7,5) on (node local) [ 1221.773579][ T5729] loop0: detected capacity change from 0 to 256 [ 1221.804595][ T5729] exfat: Deprecated parameter 'utf8' [ 1221.853720][ T5729] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1222.736171][ T5733] loop5: detected capacity change from 0 to 32768 [ 1223.493346][ T5745] loop2: detected capacity change from 0 to 32768 [ 1223.561539][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14853'. [ 1224.519807][ T5754] loop7: detected capacity change from 0 to 32768 [ 1224.598038][ T5754] XFS (loop7): Mounting V5 Filesystem [ 1224.686246][ T5754] XFS (loop7): Ending clean mount [ 1224.703658][ T5754] XFS (loop7): Quotacheck needed: Please wait. [ 1224.821166][ T5754] XFS (loop7): Quotacheck: Done. [ 1225.028921][ T5780] loop5: detected capacity change from 0 to 32768 [ 1225.144264][ T5780] non-latin1 character 0x200 found in JFS file name [ 1225.170242][ T5780] mount with iocharset=utf8 to access [ 1225.197397][ T4241] XFS (loop7): Unmounting Filesystem [ 1226.289944][ T5812] loop0: detected capacity change from 0 to 32768 [ 1226.370041][ T5812] JBD2: Ignoring recovery information on journal [ 1226.557488][ T5812] (syz.0.14869,5812,0):ocfs2_clear_journal_error:1114 ERROR: File system error 33023 recorded in journal 0. [ 1226.596221][ T5812] (syz.0.14869,5812,0):ocfs2_clear_journal_error:1116 ERROR: File system on device loop0 needs checking. [ 1226.676740][ T5812] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1226.770859][ T4347] (kworker/u4:7,4347,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0 [ 1227.003607][ T4278] ocfs2: Unmounting device (7,0) on (node local) [ 1227.349533][ T27] audit: type=1326 audit(1777034176.010:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.2.14891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e759cdd9 code=0x7ffc0000 [ 1227.398399][ T5869] bridge0: port 3(bond0) entered blocking state [ 1227.447628][ T27] audit: type=1326 audit(1777034176.010:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.2.14891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e759cdd9 code=0x7ffc0000 [ 1227.462058][ T5869] bridge0: port 3(bond0) entered disabled state [ 1227.503410][ T5869] device bond0 entered promiscuous mode [ 1227.561622][ T27] audit: type=1326 audit(1777034176.010:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.2.14891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f93e759cdd9 code=0x7ffc0000 [ 1227.593290][ T5869] device bond_slave_0 entered promiscuous mode [ 1227.620420][ T5871] loop0: detected capacity change from 0 to 512 [ 1227.627838][ T5869] device bond_slave_1 entered promiscuous mode [ 1227.651463][ T5871] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1227.665226][ T27] audit: type=1326 audit(1777034176.010:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.2.14891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e759cdd9 code=0x7ffc0000 [ 1227.674107][ T5869] bridge0: port 3(bond0) entered blocking state [ 1227.694152][ T5869] bridge0: port 3(bond0) entered forwarding state [ 1227.736876][ T27] audit: type=1326 audit(1777034176.010:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5865 comm="syz.2.14891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e759cdd9 code=0x7ffc0000 [ 1227.771651][ T5871] EXT4-fs (loop0): 1 truncate cleaned up [ 1227.777536][ T5871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1227.838004][ T5839] loop7: detected capacity change from 0 to 40427 [ 1227.932848][ T5839] F2FS-fs (loop7): invalid crc value [ 1227.935265][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 1227.973508][ T5839] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1228.190660][ T5839] F2FS-fs (loop7): Start checkpoint disabled! [ 1228.240375][ T5839] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1228.811820][ T5879] loop2: detected capacity change from 0 to 32768 [ 1229.036637][ T5879] XFS (loop2): Mounting V5 Filesystem [ 1229.092128][ T5879] XFS (loop2): Ending clean mount [ 1229.099237][ T5879] XFS (loop2): Quotacheck needed: Please wait. [ 1229.256165][ T5879] XFS (loop2): Quotacheck: Done. [ 1229.499672][ T4273] XFS (loop2): Unmounting Filesystem [ 1229.656374][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14909'. [ 1229.849013][ T5895] loop1: detected capacity change from 0 to 32768 [ 1229.899829][ T5917] netlink: set zone limit has 4 unknown bytes [ 1230.368716][ T5902] loop7: detected capacity change from 0 to 32768 [ 1230.619628][ T5930] loop5: detected capacity change from 0 to 4096 [ 1230.636681][ T5902] XFS (loop7): Mounting V5 Filesystem [ 1230.675961][ T5919] loop0: detected capacity change from 0 to 32768 [ 1230.704917][ T5930] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1230.807594][ T5946] loop1: detected capacity change from 0 to 256 [ 1230.820390][ T5902] XFS (loop7): Ending clean mount [ 1230.833529][ T5902] XFS (loop7): Quotacheck needed: Please wait. [ 1230.855520][ T5946] FAT-fs (loop1): Directory bread(block 64) failed [ 1230.862497][ T5946] FAT-fs (loop1): Directory bread(block 65) failed [ 1230.869542][ T5946] FAT-fs (loop1): Directory bread(block 66) failed [ 1230.917529][ T5919] XFS (loop0): Mounting V5 Filesystem [ 1230.925015][ T5946] FAT-fs (loop1): Directory bread(block 67) failed [ 1230.974637][ T5946] FAT-fs (loop1): Directory bread(block 68) failed [ 1231.083606][ T5946] FAT-fs (loop1): Directory bread(block 69) failed [ 1231.090341][ T5946] FAT-fs (loop1): Directory bread(block 70) failed [ 1231.143913][ T5919] XFS (loop0): Ending clean mount [ 1231.152860][ T5902] XFS (loop7): Quotacheck: Done. [ 1231.159531][ T5946] FAT-fs (loop1): Directory bread(block 71) failed [ 1231.179937][ T5946] FAT-fs (loop1): Directory bread(block 72) failed [ 1231.196425][ T5946] FAT-fs (loop1): Directory bread(block 73) failed [ 1231.402843][ T4241] XFS (loop7): Unmounting Filesystem [ 1231.477645][ T4278] XFS (loop0): Unmounting Filesystem [ 1232.116125][ T5971] Bluetooth: MGMT ver 1.22 [ 1232.733964][ T27] audit: type=1326 audit(1777034181.400:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1232.819913][ T27] audit: type=1326 audit(1777034181.440:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1232.892180][ T5995] loop2: detected capacity change from 0 to 24 [ 1232.927385][ T5995] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1232.956597][ T27] audit: type=1326 audit(1777034181.460:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1232.996517][ T5995] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1233.057349][ T27] audit: type=1326 audit(1777034181.460:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1233.211350][ T27] audit: type=1326 audit(1777034181.460:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1233.331081][ T27] audit: type=1326 audit(1777034181.460:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1233.431381][ T27] audit: type=1326 audit(1777034181.460:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1233.563397][ T27] audit: type=1326 audit(1777034181.460:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.14917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cddb9cdd9 code=0x7ffc0000 [ 1233.723098][ T6021] netlink: 136 bytes leftover after parsing attributes in process `syz.2.14939'. [ 1234.250498][ T6031] loop1: detected capacity change from 0 to 512 [ 1234.288448][ T6031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1234.342274][ T6031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1234.415628][ T6007] loop5: detected capacity change from 0 to 32768 [ 1234.499607][ T6031] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.14943: bad orphan inode 131083 [ 1234.532111][ T6031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1234.790399][ T6017] loop7: detected capacity change from 0 to 32768 [ 1234.804799][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1234.845447][ T6017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.14937 (6017) [ 1234.953831][ T6017] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1235.029754][ T6017] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1235.091533][ T6017] BTRFS info (device loop7): using free space tree [ 1235.337892][ T6017] BTRFS info (device loop7): enabling ssd optimizations [ 1235.717211][ T6089] loop0: detected capacity change from 0 to 2048 [ 1235.822460][ T6089] loop0: p1 < > p3 p4 [ 1235.828897][ T6089] loop0: p3 size 134217728 extends beyond EOD, truncated [ 1235.872721][ T6089] loop0: p4 size 4278190080 extends beyond EOD, truncated [ 1236.226859][ T4241] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1236.437529][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1236.458740][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1236.459319][T11472] udevd[11472]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1236.701731][ T6113] netlink: 'syz.1.14966': attribute type 38 has an invalid length. [ 1236.739568][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1236.754579][T11472] udevd[11472]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1236.789844][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1236.810719][ T6119] netlink: 80 bytes leftover after parsing attributes in process `syz.2.14968'. [ 1236.880467][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14968'. [ 1237.675054][ T6139] Invalid ELF header magic: != ELF [ 1237.777245][ T6142] loop1: detected capacity change from 0 to 4096 [ 1237.808167][ T6142] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1238.089843][ T6151] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 1238.168210][ T6159] loop5: detected capacity change from 0 to 128 [ 1238.262218][ T6159] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1238.321033][ T6159] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1238.433551][ T4269] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 1238.440185][ T4269] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1238.553706][ T3807] EXT4-fs (loop5): unmounting filesystem. [ 1238.916319][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.922776][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.957289][ T6183] device netdevsim0 entered promiscuous mode [ 1240.207661][ T6229] netlink: 194188 bytes leftover after parsing attributes in process `syz.7.15009'. [ 1240.232019][ T6229] netlink: zone id is out of range [ 1240.237295][ T6229] netlink: zone id is out of range [ 1240.262840][ T6229] netlink: zone id is out of range [ 1240.268541][ T6229] netlink: zone id is out of range [ 1240.295438][ T6229] netlink: zone id is out of range [ 1240.310560][ T6229] netlink: zone id is out of range [ 1240.321534][ T5024] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1240.326576][ T6229] netlink: zone id is out of range [ 1240.351408][ T6229] netlink: zone id is out of range [ 1240.356626][ T6229] netlink: zone id is out of range [ 1240.407591][ T6229] netlink: zone id is out of range [ 1240.543205][ T5024] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1240.571554][ T5024] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1240.632593][ T5024] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.672923][ T5024] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1240.696431][ T5024] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1240.703594][ T5024] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1240.720215][ T5024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.741139][ T5024] usb 2-1: config 0 descriptor?? [ 1241.161130][ T5024] hid-alps 0003:044E:120C.0008: unbalanced delimiter at end of report description [ 1241.219913][ T5024] hid-alps 0003:044E:120C.0008: parse failed [ 1241.228006][ T5024] hid-alps: probe of 0003:044E:120C.0008 failed with error -22 [ 1241.377785][ T5024] usb 2-1: USB disconnect, device number 62 [ 1242.248338][ T6292] loop5: detected capacity change from 0 to 4096 [ 1242.321540][ T6295] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1242.375445][ T5025] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1242.384872][ T6297] device ip6gretap0 entered promiscuous mode [ 1242.407407][ T6297] device macvtap1 entered promiscuous mode [ 1242.425019][ T6297] device ip6gretap0 left promiscuous mode [ 1242.591583][ T5025] usb 2-1: Using ep0 maxpacket: 8 [ 1242.601623][ T5025] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1242.629665][ T5025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1242.669026][ T5025] usb 2-1: Product: syz [ 1242.679187][ T5025] usb 2-1: Manufacturer: syz [ 1242.699554][ T5025] usb 2-1: SerialNumber: syz [ 1242.723516][ T5025] usb 2-1: config 0 descriptor?? [ 1242.761927][ T5025] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1243.337384][ T5025] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1243.371872][ T5025] sq905: probe of 2-1:0.0 failed with error -71 [ 1243.394126][ T6299] loop5: detected capacity change from 0 to 32768 [ 1243.402460][ T5025] usb 2-1: USB disconnect, device number 63 [ 1243.433182][ T6299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.15033 (6299) [ 1243.474949][ T6299] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1243.506630][ T6299] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1243.604524][ T6299] BTRFS info (device loop5): using free space tree [ 1243.981616][ T6299] BTRFS info (device loop5): enabling ssd optimizations [ 1244.300464][ T3807] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1244.534738][ T6354] loop2: detected capacity change from 0 to 4096 [ 1244.590382][ T6354] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1245.200864][ T4259] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4259) [ 1245.974027][ T6392] netlink: 47 bytes leftover after parsing attributes in process `syz.0.15058'. [ 1246.813909][ T6420] loop2: detected capacity change from 0 to 16 [ 1246.831104][ T6380] loop5: detected capacity change from 0 to 40427 [ 1246.843401][ T6420] erofs: (device loop2): mounted with root inode @ nid 36. [ 1246.870943][ T6382] loop1: detected capacity change from 0 to 32768 [ 1246.933407][ T6380] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 1246.940645][ T6380] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1246.950202][ T6380] F2FS-fs (loop5): build fault injection attr: rate: 2, type: 0x3ffff [ 1246.959300][ T6380] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 1246.969081][ T27] audit: type=1800 audit(1777034195.630:714): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15066" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1246.998677][ T6380] F2FS-fs (loop5): invalid crc value [ 1247.019214][ T6382] XFS (loop1): Mounting V5 Filesystem [ 1247.083733][ T6438] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1247.090271][ T6438] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1247.121940][ T6380] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1247.151780][ T6438] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1247.178645][ T6438] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1247.239741][ T6438] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1247.261876][ T6382] XFS (loop1): Ending clean mount [ 1247.307074][ T6438] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1247.351744][ T6438] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1247.400574][ T6438] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1247.430384][ T6380] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1247.437682][ T6438] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1247.444603][ T6380] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1247.475616][ T6438] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1247.499970][ T4269] XFS (loop1): Unmounting Filesystem [ 1247.545097][ T6438] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1247.591826][ T6438] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1247.896637][ T6452] loop0: detected capacity change from 0 to 256 [ 1248.030522][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15076'. [ 1248.077721][ T6452] FAT-fs (loop0): Directory bread(block 64) failed [ 1248.141408][ T6452] FAT-fs (loop0): Directory bread(block 65) failed [ 1248.178668][ T6452] FAT-fs (loop0): Directory bread(block 66) failed [ 1248.208073][ T6452] FAT-fs (loop0): Directory bread(block 67) failed [ 1248.234119][ T6452] FAT-fs (loop0): Directory bread(block 68) failed [ 1248.256378][ T6452] FAT-fs (loop0): Directory bread(block 69) failed [ 1248.308162][ T6452] FAT-fs (loop0): Directory bread(block 70) failed [ 1248.355341][ T6452] FAT-fs (loop0): Directory bread(block 71) failed [ 1248.392717][ T6452] FAT-fs (loop0): Directory bread(block 72) failed [ 1248.453600][ T6452] FAT-fs (loop0): Directory bread(block 73) failed [ 1248.835940][ T6473] loop1: detected capacity change from 0 to 1024 [ 1249.021817][ T6479] [U] k [ 1249.042172][ T6477] loop7: detected capacity change from 0 to 2048 [ 1249.204655][ T6477] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1249.513489][ T4241] EXT4-fs (loop7): unmounting filesystem. [ 1249.715560][ T6503] netlink: 56 bytes leftover after parsing attributes in process `syz.7.15090'. [ 1249.727025][ T6504] netlink: 236 bytes leftover after parsing attributes in process `syz.5.15092'. [ 1249.762817][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15090'. [ 1250.373933][ T6498] loop0: detected capacity change from 0 to 32768 [ 1250.412690][ T6498] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.15089 (6498) [ 1250.482507][ T6498] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1250.524838][ T6498] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1250.538128][ T6498] BTRFS info (device loop0): using free space tree [ 1250.720125][ T6493] loop2: detected capacity change from 0 to 40427 [ 1250.767832][ T6493] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1250.861572][ T6493] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1250.871854][ T6498] BTRFS info (device loop0): enabling ssd optimizations [ 1250.884589][ T6544] vcan0: MTU too low for tipc bearer [ 1250.907100][ T6544] tipc: Enabling of bearer rejected, failed to enable media [ 1250.936553][ T6493] F2FS-fs (loop2): invalid crc value [ 1250.987568][ T6548] loop1: detected capacity change from 0 to 512 [ 1251.002859][ T6493] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 1251.019541][ T6493] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1251.090379][ T4278] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1251.150175][ T6555] loop5: detected capacity change from 0 to 256 [ 1251.158701][ T6548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1251.180001][ T6493] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1251.188556][ T6548] ext4 filesystem being mounted at /3067/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.201409][ T6493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1251.262129][ T6548] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1251.294354][ T6493] F2FS-fs (loop2): Found FS corruption, run fsck to fix. [ 1251.321200][ T6555] FAT-fs (loop5): Directory bread(block 64) failed [ 1251.352780][ T6555] FAT-fs (loop5): Directory bread(block 65) failed [ 1251.368503][ T6555] FAT-fs (loop5): Directory bread(block 66) failed [ 1251.392123][ T6555] FAT-fs (loop5): Directory bread(block 67) failed [ 1251.398957][ T6555] FAT-fs (loop5): Directory bread(block 68) failed [ 1251.436825][ T6555] FAT-fs (loop5): Directory bread(block 69) failed [ 1251.459856][ T6555] FAT-fs (loop5): Directory bread(block 70) failed [ 1251.479172][ T6555] FAT-fs (loop5): Directory bread(block 71) failed [ 1251.519121][ T6555] FAT-fs (loop5): Directory bread(block 72) failed [ 1251.571317][ T6555] FAT-fs (loop5): Directory bread(block 73) failed [ 1251.713166][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 1252.306845][ T6567] loop5: detected capacity change from 0 to 512 [ 1252.350228][ T6567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1252.388129][ T6567] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1252.411594][ T6567] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.554510][ T6580] loop0: detected capacity change from 0 to 256 [ 1252.563601][ T6580] FAT-fs (loop0): bogus logical sector size 58182 [ 1252.570114][ T6580] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1252.629668][ T3807] EXT4-fs (loop5): unmounting filesystem. [ 1252.920936][ T27] audit: type=1326 audit(1777034201.580:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.2.15120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93e759cdd9 code=0x0 [ 1253.072539][ T6596] netlink: 5196 bytes leftover after parsing attributes in process `syz.1.15124'. [ 1253.131580][T23465] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1253.321535][T23465] usb 6-1: Using ep0 maxpacket: 32 [ 1253.339817][T23465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.391923][T23465] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.414506][ T6602] loop7: detected capacity change from 0 to 4096 [ 1253.422375][T23465] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.459155][T23465] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.501397][T23465] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1253.527483][T23465] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1253.542871][T23465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.570144][T23465] usb 6-1: config 0 descriptor?? [ 1253.624899][ T6602] ntfs3: loop7: ino=5, "/" directory corrupted [ 1253.706936][ T6610] device ip6gretap0 entered promiscuous mode [ 1253.743393][ T6610] device macvtap0 entered promiscuous mode [ 1253.768821][ T6610] device ip6gretap0 left promiscuous mode [ 1254.009048][T23465] corsair-cpro 0003:1B1C:0C10.0009: unknown main item tag 0x4 [ 1254.032747][T23465] corsair-cpro 0003:1B1C:0C10.0009: item fetching failed at offset 3/5 [ 1254.043112][T23465] corsair-cpro: probe of 0003:1B1C:0C10.0009 failed with error -22 [ 1254.210972][T23465] usb 6-1: USB disconnect, device number 41 [ 1254.382476][ T6621] loop0: detected capacity change from 0 to 4096 [ 1254.434029][ T6621] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1254.461644][ T6621] ntfs3: loop0: Failed to load $Extend. [ 1254.543279][ T6625] loop1: detected capacity change from 0 to 256 [ 1254.591154][ T6625] exfat: Deprecated parameter 'namecase' [ 1254.667685][ T6625] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1254.924635][ T6627] loop2: detected capacity change from 0 to 2048 [ 1255.067148][ T6627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1255.162924][ T6627] ext4 filesystem being mounted at /3006/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.203446][ T6613] loop7: detected capacity change from 0 to 32768 [ 1255.312293][ T6638] loop0: detected capacity change from 0 to 2048 [ 1255.329678][ T6613] ialloc: diAlloc returned -5! [ 1255.421802][ T6638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1255.480301][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1255.560994][ T107] ERROR: (device loop7): diUpdatePMap: the iag is outside the map [ 1255.560994][ T107] [ 1255.614924][ T107] ERROR: (device loop7): remounting filesystem as read-only [ 1256.124418][ T6659] devtmpfs: Too few inodes for current use [ 1256.235696][ T6657] loop1: detected capacity change from 0 to 4096 [ 1256.292839][ T6657] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1256.341568][ T6664] loop0: detected capacity change from 0 to 256 [ 1256.428118][ T6664] FAT-fs (loop0): Directory bread(block 64) failed [ 1256.445175][ T6666] tipc: Started in network mode [ 1256.450149][ T6666] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 1256.462306][ T6664] FAT-fs (loop0): Directory bread(block 65) failed [ 1256.469406][ T6657] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1256.479438][ T6664] FAT-fs (loop0): Directory bread(block 66) failed [ 1256.488438][ T6664] FAT-fs (loop0): Directory bread(block 67) failed [ 1256.504348][ T6664] FAT-fs (loop0): Directory bread(block 68) failed [ 1256.514426][ T6666] tipc: Enabling of bearer rejected, failed to enable media [ 1256.529800][ T6664] FAT-fs (loop0): Directory bread(block 69) failed [ 1256.540750][ T6664] FAT-fs (loop0): Directory bread(block 70) failed [ 1256.585136][ T6664] FAT-fs (loop0): Directory bread(block 71) failed [ 1256.614541][ T6664] FAT-fs (loop0): Directory bread(block 72) failed [ 1256.621191][ T6664] FAT-fs (loop0): Directory bread(block 73) failed [ 1256.703659][ T6670] loop7: detected capacity change from 0 to 16 [ 1256.710915][ T6670] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1257.095944][ T6681] loop2: detected capacity change from 0 to 16 [ 1257.135230][ T6681] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1257.163851][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15161'. [ 1258.254609][ T6711] loop5: detected capacity change from 0 to 1024 [ 1258.404989][ T6693] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1258.419104][T11553] hfsplus: b-tree write err: -5, ino 25 [ 1258.428344][T11553] hfsplus: b-tree write err: -5, ino 4 [ 1258.461087][T11553] hfsplus: b-tree write err: -5, ino 2 [ 1258.640742][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 1258.712363][ T6719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15179'. [ 1258.751527][ T6719] netlink: 'syz.0.15179': attribute type 6 has an invalid length. [ 1258.778832][ T6719] netlink: 'syz.0.15179': attribute type 5 has an invalid length. [ 1258.811360][ T6719] netlink: 'syz.0.15179': attribute type 4 has an invalid length. [ 1259.061745][T23471] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1259.159864][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15184'. [ 1259.244378][T23471] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.264826][T23471] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1259.304047][T23471] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1259.321391][T23471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1259.339417][T23471] usb 3-1: SerialNumber: syz [ 1259.573402][T23471] usb 3-1: 0:2 : does not exist [ 1259.624393][T23471] usb 3-1: USB disconnect, device number 51 [ 1259.638187][ T6741] program syz.0.15189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1259.726983][ T6725] set_capacity_and_notify: 1 callbacks suppressed [ 1259.727000][ T6725] loop5: detected capacity change from 0 to 32768 [ 1259.778632][ T6725] XFS: ikeep mount option is deprecated. [ 1259.868320][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1259.910451][ T6725] XFS (loop5): Mounting V5 Filesystem [ 1260.079898][ T6725] XFS (loop5): Ending clean mount [ 1260.112372][ T6725] XFS (loop5): Quotacheck needed: Please wait. [ 1260.286627][ T6725] XFS (loop5): Quotacheck: Done. [ 1260.404648][ T6757] loop2: detected capacity change from 0 to 4096 [ 1260.456215][ T6757] EXT4-fs: Ignoring removed mblk_io_submit option [ 1260.520124][ T3807] XFS (loop5): Unmounting Filesystem [ 1260.538951][ T6757] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1260.638046][ T6757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1260.710391][ T6745] loop1: detected capacity change from 0 to 40427 [ 1260.737757][ T6745] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1260.750979][ T6745] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1260.790771][ T6745] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1260.903113][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1260.910671][ T6745] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1260.928003][ T6745] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1260.947024][ T6744] loop7: detected capacity change from 0 to 32768 [ 1261.207770][ T6751] loop0: detected capacity change from 0 to 40427 [ 1261.226087][ T4241] read_mapping_page failed! [ 1261.253225][ T4241] ERROR: (device loop7): txCommit: [ 1261.253225][ T4241] [ 1261.291371][ T6751] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 1261.298073][ T6751] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1261.307878][ T4241] read_mapping_page failed! [ 1261.325808][ T4241] ERROR: (device loop7): txCommit: [ 1261.325808][ T4241] [ 1261.373652][ T6751] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1261.596367][ T6751] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1261.638537][ T6751] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1261.878594][ T4278] syz-executor: attempt to access beyond end of device [ 1261.878594][ T4278] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1262.484756][ T56] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.702923][ T56] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.949707][ T56] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.959081][ T6794] loop0: detected capacity change from 0 to 256 [ 1263.050844][ T6794] FAT-fs (loop0): Directory bread(block 64) failed [ 1263.118965][ T6794] FAT-fs (loop0): Directory bread(block 65) failed [ 1263.191542][ T6794] FAT-fs (loop0): Directory bread(block 66) failed [ 1263.198333][ T6794] FAT-fs (loop0): Directory bread(block 67) failed [ 1263.212927][ T6794] FAT-fs (loop0): Directory bread(block 68) failed [ 1263.222591][ T6794] FAT-fs (loop0): Directory bread(block 69) failed [ 1263.229332][ T6794] FAT-fs (loop0): Directory bread(block 70) failed [ 1263.288732][ T6794] FAT-fs (loop0): Directory bread(block 71) failed [ 1263.300016][ T56] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.323125][ T6794] FAT-fs (loop0): Directory bread(block 72) failed [ 1263.329803][ T6794] FAT-fs (loop0): Directory bread(block 73) failed [ 1263.369203][ T6805] loop1: detected capacity change from 0 to 256 [ 1263.454892][ T6805] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1263.755768][T30123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1263.797550][T30123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1263.810645][T30123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1263.823731][T30123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1263.832345][T30123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1263.848561][T30123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1264.071733][ T6817] netlink: 'syz.1.15218': attribute type 11 has an invalid length. [ 1264.141943][ T6817] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15218'. [ 1264.423001][ T6824] loop1: detected capacity change from 0 to 64 [ 1264.544301][ T6826] loop2: detected capacity change from 0 to 1024 [ 1264.616685][ T6826] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1264.644099][ T6826] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1264.698333][ T6826] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 1264.723938][ T6828] loop0: detected capacity change from 0 to 2048 [ 1264.781753][ T6826] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1264.833450][ T6828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1264.854059][ T6826] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 1264.927684][ T6826] EXT4-fs (loop2): 1 truncate cleaned up [ 1264.949817][ T27] audit: type=1800 audit(1777034213.610:716): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15222" name="file2" dev="loop0" ino=1347 res=0 errno=0 [ 1264.984958][ T6826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1265.082543][ T6826] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.15221: bg 0: block 10: padding at end of block bitmap is not set [ 1265.311641][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1265.611166][ T6838] loop1: detected capacity change from 0 to 32768 [ 1265.776807][ T6838] XFS (loop1): Mounting V5 Filesystem [ 1265.871555][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 1265.931837][ T6868] loop2: detected capacity change from 0 to 512 [ 1265.982207][ T6868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1266.016150][ T6838] XFS (loop1): Starting recovery (logdev: internal) [ 1266.048670][ T6811] chnl_net:caif_netlink_parms(): no params data found [ 1266.071425][ T6868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1266.091397][ T6868] System zones: 1-12 [ 1266.155557][ T6868] EXT4-fs (loop2): 1 truncate cleaned up [ 1266.171778][ T6838] XFS (loop1): Ending recovery (logdev: internal) [ 1266.181377][ T6868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1266.445771][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 1266.456155][ T4269] XFS (loop1): Unmounting Filesystem [ 1267.116349][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.152789][ T6874] loop0: detected capacity change from 0 to 32768 [ 1267.161854][ T5023] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1267.171432][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.192437][ T6811] device bridge_slave_0 entered promiscuous mode [ 1267.300793][ T6874] ialloc: diAlloc returned -5! [ 1267.323970][ T6896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15240'. [ 1267.379357][ T5023] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1267.397960][ T5023] usb 6-1: config 0 has no interface number 0 [ 1267.399381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1267.426665][ T5023] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1267.463252][ T5023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.535329][ T5023] usb 6-1: Product: syz [ 1267.539601][ T5023] usb 6-1: Manufacturer: syz [ 1267.554836][ T5023] usb 6-1: SerialNumber: syz [ 1267.582831][ T5023] usb 6-1: config 0 descriptor?? [ 1267.792976][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.800170][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.817634][ T5023] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 1267.847184][ T5023] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 1267.859799][ T6811] device bridge_slave_1 entered promiscuous mode [ 1267.891949][ T5023] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 1267.930336][ T5023] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 1267.961549][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 1268.011851][ T6907] CUSE: info not properly terminated [ 1268.018915][ T5023] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1268.131517][ T6811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.176105][ T6811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.262829][ T1170] usb 6-1: USB disconnect, device number 42 [ 1268.282339][ T1170] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1268.331886][ T1170] keyspan 6-1:0.133: device disconnected [ 1268.491048][ T6811] team0: Port device team_slave_0 added [ 1268.536235][ T56] device hsr_slave_0 left promiscuous mode [ 1268.561721][ T56] device hsr_slave_1 left promiscuous mode [ 1268.578011][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.601808][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.643768][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.688422][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.729084][ T56] device bridge_slave_1 left promiscuous mode [ 1268.759498][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.831913][ T56] device bridge_slave_0 left promiscuous mode [ 1268.838289][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.966632][ T56] device veth1_macvtap left promiscuous mode [ 1268.990425][ T56] device veth0_macvtap left promiscuous mode [ 1268.997483][ T56] device veth1_vlan left promiscuous mode [ 1269.011403][ T56] device veth0_vlan left promiscuous mode [ 1269.061619][ T5023] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1269.271353][ T5023] usb 3-1: Using ep0 maxpacket: 16 [ 1269.278635][ T5023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.292656][ T6922] loop1: detected capacity change from 0 to 32768 [ 1269.323987][ T5023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.378203][ T6922] JBD2: Ignoring recovery information on journal [ 1269.396541][ T5023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.463657][ T5023] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1269.537947][ T5023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.578464][ T6922] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1269.597237][ T5023] usb 3-1: config 0 descriptor?? [ 1269.870360][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 1270.031394][T30123] Bluetooth: hci3: command 0x040f tx timeout [ 1270.059101][ T5023] hid-picolcd 0003:04D8:F002.000A: item fetching failed at offset 1/5 [ 1270.116033][ T5023] hid-picolcd 0003:04D8:F002.000A: device report parse failed [ 1270.131471][ T5023] hid-picolcd: probe of 0003:04D8:F002.000A failed with error -22 [ 1270.267080][ T5023] usb 3-1: USB disconnect, device number 52 [ 1270.500962][ C1] vkms_vblank_simulate: vblank timer overrun [ 1271.405545][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1271.517995][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1271.628837][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.722236][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 1271.730238][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.111606][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 1272.233325][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.498463][ T56] bond0 (unregistering): Released all slaves [ 1272.594753][ T6983] loop2: detected capacity change from 0 to 256 [ 1272.633248][ T6983] exfat: Deprecated parameter 'utf8' [ 1272.638732][ T6983] exfat: Deprecated parameter 'namecase' [ 1272.690391][ T6983] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 1272.764440][ T6811] team0: Port device team_slave_1 added [ 1272.840543][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.881427][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.907389][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.026420][ T6811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.063048][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.100651][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.148057][ T6991] loop1: detected capacity change from 0 to 1024 [ 1273.151492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.230861][ T6991] hfsplus: bad catalog entry type [ 1273.248566][ T6811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.266059][ T6993] loop2: detected capacity change from 0 to 512 [ 1273.301167][ T6993] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1273.400264][ T4347] hfsplus: b-tree write err: -5, ino 25 [ 1273.409894][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 1273.420613][ T4347] hfsplus: b-tree write err: -5, ino 2 [ 1273.478001][ T6993] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1273.490735][ T6811] device hsr_slave_0 entered promiscuous mode [ 1273.536721][ T6811] device hsr_slave_1 entered promiscuous mode [ 1273.581605][ T6811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1273.601352][ T6811] Cannot create hsr debugfs directory [ 1273.655310][ T7001] loop1: detected capacity change from 0 to 128 [ 1274.481135][ T6811] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1274.519783][ T7020] loop1: detected capacity change from 0 to 256 [ 1274.539913][ T6811] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1274.585286][ T6811] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1274.618497][ T6811] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1274.870917][ T6811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.915557][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1274.929665][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1274.990673][ T6811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.034013][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1275.055682][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1275.084339][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.091599][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.143091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1275.179905][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1275.200502][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1275.219396][ T7039] loop2: detected capacity change from 0 to 128 [ 1275.242235][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.249488][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.320622][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1275.386292][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1275.424392][ T7043] loop1: detected capacity change from 0 to 64 [ 1275.442629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1275.484438][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1275.564002][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1275.603783][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1275.655843][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1275.687117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1275.728625][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1275.763000][ T6811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1275.808970][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1275.871035][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1275.884170][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1276.005087][ T7057] loop5: detected capacity change from 0 to 128 [ 1276.085051][ T7057] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1276.102898][ T7057] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1276.388287][ T7069] loop2: detected capacity change from 0 to 1024 [ 1276.454389][ T3807] EXT4-fs (loop5): unmounting filesystem. [ 1276.730386][ T7077] loop5: detected capacity change from 0 to 2048 [ 1276.820710][ T7077] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1276.895786][ T7077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1277.074369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1277.102861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1277.168692][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.302725][ T7097] Unsupported ieee802154 address type: 0 [ 1277.328446][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15317'. [ 1277.378489][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15317'. [ 1277.621659][ T7104] erofs: (device loop5): mounted with root inode @ nid 36. [ 1277.738584][ T7107] set_capacity_and_notify: 1 callbacks suppressed [ 1277.738603][ T7107] loop0: detected capacity change from 0 to 2048 [ 1277.838994][ T7107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1277.920751][ T7107] netlink: 'syz.0.15319': attribute type 1 has an invalid length. [ 1277.985480][ T7117] [ 1277.987899][ T7117] ====================================================== [ 1277.991968][ T7107] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15319'. [ 1277.994941][ T7117] WARNING: possible circular locking dependency detected [ 1277.994979][ T7117] syzkaller #0 Not tainted [ 1278.015606][ T7117] ------------------------------------------------------ [ 1278.022705][ T7117] syz.1.15324/7117 is trying to acquire lock: [ 1278.028819][ T7117] ffffffff97023038 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 1278.038929][ T7117] [ 1278.038929][ T7117] but task is already holding lock: [ 1278.046343][ T7117] ffff88802796f2b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1278.056793][ T7117] [ 1278.056793][ T7117] which lock already depends on the new lock. [ 1278.056793][ T7117] [ 1278.067233][ T7117] [ 1278.067233][ T7117] the existing dependency chain (in reverse order) is: [ 1278.076295][ T7117] [ 1278.076295][ T7117] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1278.084594][ T7117] __mutex_lock+0x12d/0xaf0 [ 1278.089665][ T7117] nf_tables_dumpreset_obj+0x6e/0x90 [ 1278.095521][ T7117] netlink_dump+0x6a3/0xd00 [ 1278.100583][ T7117] __netlink_dump_start+0x537/0x6f0 [ 1278.106347][ T7117] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1278.112542][ T7117] nf_tables_getobj_reset+0x1cb/0x610 [ 1278.118469][ T7117] nfnetlink_rcv_msg+0x8a0/0x12b0 [ 1278.124053][ T7117] netlink_rcv_skb+0x1fb/0x450 [ 1278.129372][ T7117] nfnetlink_rcv+0x2b0/0x2480 [ 1278.134605][ T7117] netlink_unicast+0x74d/0x8d0 [ 1278.139933][ T7117] netlink_sendmsg+0x8ad/0xbd0 [ 1278.145252][ T7117] ____sys_sendmsg+0x5be/0x970 [ 1278.150576][ T7117] ___sys_sendmsg+0x2a2/0x360 [ 1278.155811][ T7117] __se_sys_sendmsg+0x1bb/0x2a0 [ 1278.161218][ T7117] do_syscall_64+0x4c/0xa0 [ 1278.166192][ T7117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1278.172639][ T7117] [ 1278.172639][ T7117] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1278.180955][ T7117] __mutex_lock+0x12d/0xaf0 [ 1278.186037][ T7117] __netlink_dump_start+0x11f/0x6f0 [ 1278.191805][ T7117] ip_set_dump+0x152/0x1e0 [ 1278.196786][ T7117] nfnetlink_rcv_msg+0xbec/0x12b0 [ 1278.202370][ T7117] netlink_rcv_skb+0x1fb/0x450 [ 1278.207741][ T7117] nfnetlink_rcv+0x2b0/0x2480 [ 1278.212979][ T7117] netlink_unicast+0x74d/0x8d0 [ 1278.218294][ T7117] netlink_sendmsg+0x8ad/0xbd0 [ 1278.223616][ T7117] ____sys_sendmsg+0x5be/0x970 [ 1278.228930][ T7117] ___sys_sendmsg+0x2a2/0x360 [ 1278.234166][ T7117] __se_sys_sendmsg+0x1bb/0x2a0 [ 1278.239578][ T7117] do_syscall_64+0x4c/0xa0 [ 1278.244555][ T7117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1278.250998][ T7117] [ 1278.250998][ T7117] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1278.258849][ T7117] __lock_acquire+0x2d07/0x7d10 [ 1278.264261][ T7117] lock_acquire+0x1bb/0x4a0 [ 1278.269321][ T7117] __mutex_lock+0x12d/0xaf0 [ 1278.274388][ T7117] ip_set_nfnl_get_byindex+0x63/0x230 [ 1278.280316][ T7117] set_match_v1_checkentry+0x6d/0x220 [ 1278.286256][ T7117] xt_check_match+0x4e6/0xc50 [ 1278.291502][ T7117] __nft_match_init+0x663/0x890 [ 1278.296915][ T7117] nf_tables_newrule+0x1731/0x2810 [ 1278.302582][ T7117] nfnetlink_rcv+0x1124/0x2480 [ 1278.307898][ T7117] netlink_unicast+0x74d/0x8d0 [ 1278.313222][ T7117] netlink_sendmsg+0x8ad/0xbd0 [ 1278.318548][ T7117] ____sys_sendmsg+0x5be/0x970 [ 1278.323896][ T7117] ___sys_sendmsg+0x2a2/0x360 [ 1278.329138][ T7117] __se_sys_sendmsg+0x1bb/0x2a0 [ 1278.334547][ T7117] do_syscall_64+0x4c/0xa0 [ 1278.339522][ T7117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1278.345985][ T7117] [ 1278.345985][ T7117] other info that might help us debug this: [ 1278.345985][ T7117] [ 1278.356264][ T7117] Chain exists of: [ 1278.356264][ T7117] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1278.356264][ T7117] [ 1278.370737][ T7117] Possible unsafe locking scenario: [ 1278.370737][ T7117] [ 1278.378239][ T7117] CPU0 CPU1 [ 1278.383629][ T7117] ---- ---- [ 1278.389020][ T7117] lock(&nft_net->commit_mutex); [ 1278.394075][ T7117] lock(nlk_cb_mutex-NETFILTER); [ 1278.401648][ T7117] lock(&nft_net->commit_mutex); [ 1278.409220][ T7117] lock(nfnl_subsys_ipset); [ 1278.413834][ T7117] [ 1278.413834][ T7117] *** DEADLOCK *** [ 1278.413834][ T7117] [ 1278.422008][ T7117] 1 lock held by syz.1.15324/7117: [ 1278.427137][ T7117] #0: ffff88802796f2b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1278.437888][ T7117] [ 1278.437888][ T7117] stack backtrace: [ 1278.443796][ T7117] CPU: 0 PID: 7117 Comm: syz.1.15324 Not tainted syzkaller #0 [ 1278.451279][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1278.461358][ T7117] Call Trace: [ 1278.464663][ T7117] [ 1278.467626][ T7117] dump_stack_lvl+0x188/0x24e [ 1278.472348][ T7117] ? load_image+0x400/0x400 [ 1278.476879][ T7117] ? show_regs_print_info+0x12/0x12 [ 1278.482123][ T7117] ? print_circular_bug+0x12b/0x1a0 [ 1278.487360][ T7117] check_noncircular+0x296/0x330 [ 1278.492348][ T7117] ? add_chain_block+0x940/0x940 [ 1278.497330][ T7117] ? lockdep_lock+0xf1/0x1f0 [ 1278.501961][ T7117] ? _find_first_zero_bit+0xcf/0x100 [ 1278.507271][ T7117] __lock_acquire+0x2d07/0x7d10 [ 1278.512168][ T7117] ? mark_lock+0x94/0x320 [ 1278.516529][ T7117] ? verify_lock_unused+0x140/0x140 [ 1278.521759][ T7117] ? __lock_acquire+0x12f4/0x7d10 [ 1278.526833][ T7117] lock_acquire+0x1bb/0x4a0 [ 1278.531372][ T7117] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1278.536952][ T7117] ? __might_sleep+0xd0/0xd0 [ 1278.541568][ T7117] ? mark_lock+0x94/0x320 [ 1278.545928][ T7117] ? read_lock_is_recursive+0x10/0x10 [ 1278.551332][ T7117] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1278.557367][ T7117] __mutex_lock+0x12d/0xaf0 [ 1278.561935][ T7117] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1278.567521][ T7117] ? ip_set_pernet+0x23/0x230 [ 1278.572231][ T7117] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1278.577813][ T7117] ? mutex_lock_nested+0x10/0x10 [ 1278.582796][ T7117] ? __flush_work+0x10d/0xae0 [ 1278.587515][ T7117] ? ip_set_pernet+0x23/0x230 [ 1278.592232][ T7117] ? ip_set_pernet+0x23/0x230 [ 1278.596951][ T7117] ip_set_nfnl_get_byindex+0x63/0x230 [ 1278.602389][ T7117] set_match_v1_checkentry+0x6d/0x220 [ 1278.607815][ T7117] xt_check_match+0x4e6/0xc50 [ 1278.612520][ T7117] ? xt_check_proc_name+0x270/0x270 [ 1278.617746][ T7117] ? __stack_depot_save+0x35/0x460 [ 1278.622895][ T7117] __nft_match_init+0x663/0x890 [ 1278.627773][ T7117] ? ___sys_sendmsg+0x2a2/0x360 [ 1278.632686][ T7117] ? nft_match_large_dump+0x40/0x40 [ 1278.637932][ T7117] ? __kmem_cache_alloc_node+0x140/0x260 [ 1278.643607][ T7117] ? nf_tables_newrule+0x1503/0x2810 [ 1278.648932][ T7117] ? rcu_is_watching+0x11/0xa0 [ 1278.653730][ T7117] ? nf_tables_newrule+0x1503/0x2810 [ 1278.659048][ T7117] ? __kmalloc+0xe1/0x240 [ 1278.663413][ T7117] nf_tables_newrule+0x1731/0x2810 [ 1278.668667][ T7117] ? nf_tables_delchain+0xf00/0xf00 [ 1278.673901][ T7117] ? __lock_acquire+0x7d10/0x7d10 [ 1278.678962][ T7117] ? mutex_unlock+0x10/0x10 [ 1278.683526][ T7117] ? __nla_parse+0x3c/0x50 [ 1278.687972][ T7117] nfnetlink_rcv+0x1124/0x2480 [ 1278.692787][ T7117] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1278.698367][ T7117] ? rcu_preempt_deferred_qs_irqrestore+0x885/0xc30 [ 1278.704998][ T7117] ? netlink_deliver_tap+0x2e/0x1b0 [ 1278.710231][ T7117] ? __rcu_read_unlock+0x78/0xd0 [ 1278.715193][ T7117] ? netlink_deliver_tap+0x2e/0x1b0 [ 1278.720463][ T7117] netlink_unicast+0x74d/0x8d0 [ 1278.725271][ T7117] netlink_sendmsg+0x8ad/0xbd0 [ 1278.730070][ T7117] ? netlink_getsockopt+0x550/0x550 [ 1278.735399][ T7117] ? aa_sock_msg_perm+0x94/0x150 [ 1278.740368][ T7117] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1278.745691][ T7117] ? security_socket_sendmsg+0x7c/0xa0 [ 1278.751192][ T7117] ? netlink_getsockopt+0x550/0x550 [ 1278.756428][ T7117] ____sys_sendmsg+0x5be/0x970 [ 1278.761258][ T7117] ? __sys_sendmsg_sock+0x30/0x30 [ 1278.766321][ T7117] ? __import_iovec+0x315/0x500 [ 1278.771198][ T7117] ? import_iovec+0x6f/0xa0 [ 1278.775736][ T7117] ___sys_sendmsg+0x2a2/0x360 [ 1278.780464][ T7117] ? try_to_wake_up+0x67c/0x1080 [ 1278.785440][ T7117] ? __sys_sendmsg+0x290/0x290 [ 1278.790279][ T7117] __se_sys_sendmsg+0x1bb/0x2a0 [ 1278.795165][ T7117] ? __x64_sys_sendmsg+0x80/0x80 [ 1278.800143][ T7117] ? lockdep_hardirqs_on+0x94/0x140 [ 1278.805398][ T7117] do_syscall_64+0x4c/0xa0 [ 1278.809854][ T7117] ? clear_bhb_loop+0x60/0xb0 [ 1278.814562][ T7117] ? clear_bhb_loop+0x60/0xb0 [ 1278.819279][ T7117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1278.825205][ T7117] RIP: 0033:0x7f4487d9cdd9 [ 1278.829676][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.849312][ T7117] RSP: 002b:00007f4488d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1278.857754][ T7117] RAX: ffffffffffffffda RBX: 00007f4488015fa0 RCX: 00007f4487d9cdd9 [ 1278.865758][ T7117] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1278.873765][ T7117] RBP: 00007f4487e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1278.881766][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.889768][ T7117] R13: 00007f4488016038 R14: 00007f4488015fa0 R15: 00007ffec0433068 [ 1278.897776][ T7117] [ 1279.054124][ T1170] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1279.211107][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1279.223068][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1279.252687][ T1170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1279.262955][ T1170] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1279.274850][ T1170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1279.284945][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1279.292304][ T1170] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1279.302621][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1279.302706][ T1170] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1279.314556][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1279.327161][ T1170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.336329][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1279.347037][ T1170] usb 6-1: config 0 descriptor?? [ 1279.357046][ T6811] device veth0_vlan entered promiscuous mode [ 1279.370792][ T6811] device veth1_vlan entered promiscuous mode [ 1279.397694][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1279.406545][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1279.415190][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1279.424228][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1279.436832][ T6811] device veth0_macvtap entered promiscuous mode [ 1279.450907][ T6811] device veth1_macvtap entered promiscuous mode [ 1279.478536][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.492640][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.504691][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.516359][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.528325][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.540034][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.555074][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.566116][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1279.575580][ T1170] hdpvr 6-1:0.0: firmware version 0x0 dated [ 1279.580346][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1279.584833][ T1170] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1279.594195][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1279.609018][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1279.620355][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.634797][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.645714][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.659551][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.669651][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.687363][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.697571][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.711200][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.725484][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.734533][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1279.746919][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1279.758537][ T6811] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.771843][ T6811] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.780620][ T6811] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.797237][ T6811] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.836484][ T6811] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 1279.868929][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.885798][ T6811] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 1279.896888][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.918224][T28604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1279.938713][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.947803][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.956781][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1280.003730][ T1170] hdpvr 6-1:0.0: Could not setup controls [ 1280.011696][ T1170] hdpvr 6-1:0.0: registering videodev failed [ 1280.043308][ T1170] hdpvr: probe of 6-1:0.0 failed with error -71 [ 1280.056866][ T1170] usb 6-1: USB disconnect, device number 43