last executing test programs: 2m5.704023999s ago: executing program 32 (id=946): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@block_validity}, {@usrquota}, {@nobh}]}, 0x1, 0x526, &(0x7f00000027c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x4000000008, 0xf, 0xee67, 0xfffffffa}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x40013, 0x0, 0x1}) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m25.330785315s ago: executing program 2 (id=1157): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/sys/kernel/firmware_config/ignore_sysfs_fallback\x00', 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000001ec0)=@target={'target ', {'PCI:', '1e', ':', '19', ':', 'd', '.', '18'}}, 0x16) 1m25.185065169s ago: executing program 2 (id=1159): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000540)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000006c0), 0x40000000000008b, 0x40010042, 0x0) 1m24.940264244s ago: executing program 2 (id=1163): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/171, 0xab}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1m24.743901514s ago: executing program 2 (id=1165): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000008c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@redirect_dir_off}]}) removexattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@random={'trusted.', 'syz_tun\x00'}) 1m24.079337831s ago: executing program 2 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./mnt\x00', 0x1ff) mount(&(0x7f00000015c0)=@filename='127.0.0.1:/test\x00', &(0x7f0000001600)='./mnt\x00', &(0x7f0000001640)='nfs\x00', 0x0, &(0x7f0000001680)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 1m23.722001227s ago: executing program 3 (id=1180): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000007c0)={r1}, &(0x7f0000000800)=0x8) 1m23.522813867s ago: executing program 3 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:00.0/vendor\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/16, 0x10) 1m23.417306398s ago: executing program 3 (id=1183): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000380), 0x1, 0x47f, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 1m22.771181683s ago: executing program 3 (id=1187): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x4, 0x48e, &(0x7f0000000d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105) getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1) 1m22.490715931s ago: executing program 2 (id=1190): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r1, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000884700001144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1m22.340967347s ago: executing program 33 (id=1190): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r1, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000884700001144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1m21.926207839s ago: executing program 3 (id=1193): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x3c282dd4482019e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m20.090084575s ago: executing program 3 (id=1201): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001e40)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x81, 0x6, &(0x7f0000001f00)={0x20, "4231d69bb63049545e00dba90c3975ef02d7d9fe2200"}}) 1m19.729530771s ago: executing program 34 (id=1201): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001e40)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x81, 0x6, &(0x7f0000001f00)={0x20, "4231d69bb63049545e00dba90c3975ef02d7d9fe2200"}}) 1m9.377874598s ago: executing program 1 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042bbd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="14009d000500020006000000050002002f0000000a0006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m9.060307611s ago: executing program 1 (id=1281): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='vers\x00', &(0x7f0000000600)='2.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m8.915333796s ago: executing program 1 (id=1282): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) write$sndseq(r0, &(0x7f0000000600)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000640)={0x80, 0x1, 0x0, 0xfffffffd}) 1m8.626878065s ago: executing program 1 (id=1286): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5b6, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105) getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1) 1m7.973322711s ago: executing program 1 (id=1293): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x6, 0x2c57, 0xfffd, 0x8001}, 'syz1\x00', 0xb}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 1m7.375871731s ago: executing program 7 (id=1203): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x4, 0x48e, &(0x7f0000000d00)="$eJzs3M1vVFUbAPDnTj+AAm/7In6AKFU0NhpbWlBZuACjiQtNTHSBy9oWRAo1bTVCiFYXuDQk7o1LE/8CV7ox6srErbo2JMSwAXVzzZ25t50ZZsZp6TDA/H7J0HPuuZdznnvumZ5zb2cC6Fmj2T9JxI6I+DUihivZ2h1GKz+uX70w89fVCzNJpOnrfybl/a5dvTBT7Foct73IrNRur7Z07vzp6fn5ucU8P7F85t2JpXPnnz51Zvrk3Mm5s1NHjhw+NPncs1PPbEqcWZuu7f1wYd+el9+89OrM8Utv/fh1UsRfE8f77f+nW1uWjjbY1lckHm+/ljvCzqp00t/FhrAub0dE1l0D5fE/HH2x1nnD8dInXW0c0FFpmqZbmhevpMBdLIlutwDojvz3fBKxMpOtgavX883dPQu8K8cq4WRxX89flZL+KOX7DNStbzdTdiaPr/z9RfaKuvspAACd8O2xys9i7rc2/yjVTPKO5s+GRiLi/xGxKyLuiYjdEXFvRNwXEfdHxANVxzR67lOv/iHJjfOf0uUNBdambP73fP5sq3b+V8z+YqQvz+0sxz+QnDg1P3cwIv4XEWMxsCXLT7ao47sXf/msWdlo1fwve2X1F3PBvB2X++tu0M1OL0/fTMzVrnwcsbe/UfzJ6iw/68c9EbF3/8bqOPXkV/ualf13/C1swjIk/TLiiUr/r0Rd/IWk9fPJia0xP3dworgqbvTTzxdfa1b/TcW/CbL+H2p4/a/GP5JUP69dWn8dF3/7tOmaps3rf7D6mOz6H0zeKKeLgg+ml5cXJyMGk1fy7Ufz7bX1lfebWts/i3/sQOPxvyvWzsSDEZFdxA9FxMMRsT9v+yMR8WhEHGgR/w8vPPbOxuPvrCz+2XX1f9NE8Wx7bnEgaor6Tn//Tbmk6KyRFvEn0aD/D5dTY/mWdt7/WrZ08WauZgAAALjzlCJiRySl8dV0qTQ+Xvl7+d0xVJpfWFp+6sTCe2dnK58RGImBUnGna3j1fmisTObL+uL+6FRd/lB+3/jzvm3l/PjMwvxst4OHHre9yfjP/NHX7dYBHXf3/DkfsF4bHf9pmn60yU0BbrF1jf/BzrUDuOWGzP+hdzUY/9vq8i2+IwC4kzX6/W9hD73B/B96l/EPvcv4h961gfH/+1AnGgLcSvkn4fvb+YB/xxLZ+0/3am8nETUtTNMuNWPw9jgb5USUulZ7bPDwsS6dsX/yL9u8PTquzUS335kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2x78BAAD//xsC4og=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x105) getdents64(r0, &(0x7f0000000400)=""/4081, 0xff1) 1m6.574009492s ago: executing program 7 (id=1309): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd2b, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xffff}]}, @NL80211_ATTR_IE={0x9, 0x2a, [@tim={0x5, 0x3, {0x7, 0xcb, 0x9}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12ae10}, 0x0) 1m5.11716026s ago: executing program 1 (id=1316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="800000081400030002000000000000000000000000000000140001000000000000000000000024"], 0x44}, 0x1, 0x0, 0x0, 0x240008c1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c054}, 0x8000002) 1m4.739064488s ago: executing program 35 (id=1316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="800000081400030002000000000000000000000000000000140001000000000000000000000024"], 0x44}, 0x1, 0x0, 0x0, 0x240008c1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c054}, 0x8000002) 1m4.697960662s ago: executing program 7 (id=1318): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x80000001) 1m4.583182764s ago: executing program 36 (id=1318): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg") r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x80000001) 33.203571689s ago: executing program 5 (id=1532): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) close(r0) 31.1299633s ago: executing program 5 (id=1554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x78, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfffd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x4, 0x8, 0xb84, 0xef8}, 0x4, 0x0, 0x2, 0x4, 0x3, 0x1c, 0x8, 0x17, 0x8, 0x7, {0x0, 0x4, 0x80000000, 0x3, 0x8, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000) 30.870575446s ago: executing program 5 (id=1557): io_uring_setup(0x424b, &(0x7f0000000080)) pipe2$9p(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLERROR(r0, &(0x7f0000001080)=ANY=[], 0xfffffd30) close(0x3) 30.617021652s ago: executing program 5 (id=1560): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES8, @ANYBLOB="101500000000", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x6fa, &(0x7f00000016c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) 30.242209599s ago: executing program 5 (id=1564): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d40), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000001000), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001380)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c07, 0x0) 29.500681184s ago: executing program 5 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) 29.119945303s ago: executing program 37 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) 5.191337365s ago: executing program 4 (id=1746): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in=@empty, 0x4000, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000b332e5ba25bcd9110000d900000000000000000000000000000000000000000000000a"], 0xb8}}, 0x10) 4.967912197s ago: executing program 4 (id=1749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xf6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 4.73773147s ago: executing program 4 (id=1752): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000d80)=ANY=[@ANYRESOCT], 0x8) 4.532642031s ago: executing program 4 (id=1755): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000680)="02155e65", 0x4, 0x2) 4.238060511s ago: executing program 4 (id=1758): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000001300)=0x9, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') pread64(r0, &(0x7f0000000180)=""/4118, 0x1016, 0x0) 4.058000069s ago: executing program 4 (id=1763): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x9e, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb8286ea199ecd22221ad7dade9e2b670d2dce18dd851fe6b48b3188c3764958b51a9aafc271972b28397406e611e1c0d1a8ecafe2e82d1df01e507e1c0c7f8093da6e376297d1c18eecdde56d5eb156d7ddf449d9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3.402823635s ago: executing program 8 (id=1771): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000600)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 3.112755815s ago: executing program 8 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r0}, &(0x7f0000001140), &(0x7f0000001180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 2.901365816s ago: executing program 8 (id=1776): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2.798667936s ago: executing program 9 (id=1777): unshare(0x2a020400) r0 = socket$inet6(0x10, 0x2, 0x4) setresuid(0x0, 0xee00, 0x0) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 2.717933275s ago: executing program 6 (id=1778): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x6, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xa, 0xc}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0xc0956febbce12c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.66027381s ago: executing program 8 (id=1779): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0xe0881) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000300)=[{r0, 0x18}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000780)={0x80, 0x1, 0x0, 0xfffffffd}) 2.442039043s ago: executing program 6 (id=1781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @broadcast}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x1, 0x1, 0x0, 0xc0, 0x100, @void}, "1228fefb"}}}}}}, 0x0) 2.413714695s ago: executing program 9 (id=1783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0d00000009000000040000000100000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) 2.350377442s ago: executing program 6 (id=1784): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgsnd(r0, &(0x7f00000001c0)={0x1}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) 2.245887032s ago: executing program 8 (id=1786): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0x', 0x2) 2.149931872s ago: executing program 9 (id=1789): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@orlov}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}]}, 0x1, 0x507, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x5, 0x7, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf68}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.010097427s ago: executing program 8 (id=1790): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="000bac"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x4, "bde2d428"}, 0x0}) 1.400553778s ago: executing program 6 (id=1796): pselect6(0x40, &(0x7f0000000180)={0x5, 0x0, 0x401, 0xfffffffffffffffa, 0x100000001, 0x3, 0x4, 0x4}, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001500000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 1.198060078s ago: executing program 9 (id=1797): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x1, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5, 0xe02, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "595b6028a0e4931133f6d9919fd48557896811cd874f3c107bbfc1c8831026f40798a2b35d0600e02216198977dc3d41ed0880c64c39e5ff0f00000000000012"}}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) 1.197900208s ago: executing program 0 (id=1798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 859.776073ms ago: executing program 0 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x10) 760.180613ms ago: executing program 0 (id=1800): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000240)="84472b8b", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000340)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000dc0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 678.031901ms ago: executing program 9 (id=1801): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1008041, &(0x7f0000000000)=ANY=[], 0x0, 0x2cf, &(0x7f00000000c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 667.981272ms ago: executing program 0 (id=1802): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 484.198401ms ago: executing program 0 (id=1803): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000280)=@l2={0x1f, 0x0, @none}, 0x0, 0x0) 418.013268ms ago: executing program 6 (id=1804): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000808, &(0x7f0000000000)=ANY=[@ANYBLOB='nls=euc-jp,part=0x000000000000000000000000001,part=0x0000000000000105,\x00'/84], 0x21, 0x5f9, &(0x7f0000000680)="$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") openat(0xffffffffffffffff, &(0x7f0000000100)='127.0.0.1:/\x00', 0x60040, 0x1) rmdir(&(0x7f0000000100)) mkdir(&(0x7f0000000000)='127.0.0.1:/\x00', 0x1bf) 265.327053ms ago: executing program 0 (id=1805): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 236.835116ms ago: executing program 9 (id=1806): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./trace\x00', 0x1e000, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)='\t\x00', 0x2}], 0x1) 0s ago: executing program 6 (id=1807): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x400}}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30ad2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x3, 0x7}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4) kernel console output (not intermixed with test programs): on flush-on-commit [ 395.175594][ T7175] BTRFS info (device loop1): using free space tree [ 395.183495][ T6804] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.202684][ T7175] BTRFS info (device loop1): has skinny extents [ 395.492007][ T7175] BTRFS info (device loop1): enabling ssd optimizations [ 395.555507][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.600028][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.697592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 395.760918][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.838921][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.923808][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 396.670626][ T7269] loop5: detected capacity change from 0 to 4096 [ 396.874362][ T7278] loop0: detected capacity change from 0 to 256 [ 397.603659][ T7269] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 397.669367][ T7269] ntfs3: loop5: Failed to load $Extend. [ 397.825097][ T7312] sctp: [Deprecated]: syz.3.1093 (pid 7312) Use of int in max_burst socket option deprecated. [ 397.825097][ T7312] Use struct sctp_assoc_value instead [ 398.019295][ T7296] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 398.259453][ T7305] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 398.280387][ T7296] usb 1-1: Using ep0 maxpacket: 8 [ 398.326451][ T7334] device bond0 entered promiscuous mode [ 398.354340][ T7334] device bond_slave_0 entered promiscuous mode [ 398.373161][ T7334] device bond_slave_1 entered promiscuous mode [ 398.393784][ T7334] device batadv0 entered promiscuous mode [ 398.399945][ T7296] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 398.420769][ T7296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.466346][ T7334] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 398.497800][ T7334] device bond0 left promiscuous mode [ 398.506877][ T7296] pvrusb2: Hardware description: Terratec Grabster AV400 [ 398.524424][ T7334] device bond_slave_0 left promiscuous mode [ 398.535430][ T7296] pvrusb2: ********** [ 398.547878][ T7296] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 398.562969][ T7334] device bond_slave_1 left promiscuous mode [ 398.586449][ T7296] pvrusb2: Important functionality might not be entirely working. [ 398.607932][ T7296] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 398.623713][ T7305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.652282][ T7305] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 398.670671][ T7296] pvrusb2: ********** [ 398.695138][ T7334] device batadv0 left promiscuous mode [ 398.732401][ T2427] pvrusb2: Invalid write control endpoint [ 398.839588][ T7305] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 398.896996][ T7305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.951929][ T7283] pvrusb2: Invalid write control endpoint [ 398.973970][ T7305] usb 2-1: Product: syz [ 398.978339][ T7305] usb 2-1: Manufacturer: syz [ 399.019378][ T7352] loop5: detected capacity change from 0 to 16 [ 399.039030][ T2427] pvrusb2: Invalid write control endpoint [ 399.059427][ T7305] usb 2-1: SerialNumber: syz [ 399.079763][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 399.126400][ T13] usb 1-1: USB disconnect, device number 5 [ 399.140477][ T7305] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 399.153296][ T7352] erofs: (device loop5): mounted with root inode @ nid 36. [ 399.183315][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 399.204243][ T7305] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 399.204243][ T7305] Please send a copy of this message to and [ 399.229425][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.276695][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 399.327289][ T2427] pvrusb2: Device being rendered inoperable [ 399.355101][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 399.434203][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 399.472258][ T7365] loop5: detected capacity change from 0 to 512 [ 399.514712][ T2427] pvrusb2: Attached sub-driver cx25840 [ 399.574526][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 399.614737][ T7365] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 399.672379][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 399.695522][ T7365] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.099312][ T7305] scsi host1: usb-storage 2-1:1.0 [ 400.135896][ T7305] usb 2-1: USB disconnect, device number 3 [ 400.598510][ T7390] loop0: detected capacity change from 0 to 256 [ 400.684042][ T7390] /dev/loop0: Can't open blockdev [ 400.862282][ T7394] loop3: detected capacity change from 0 to 2048 [ 400.985618][ T7400] loop0: detected capacity change from 0 to 512 [ 401.012843][ T7402] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.121953][ T7407] loop1: detected capacity change from 0 to 128 [ 401.147996][ T7404] sctp: [Deprecated]: syz.2.1127 (pid 7404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.147996][ T7404] Use struct sctp_sack_info instead [ 401.165325][ T7394] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 401.259680][ T7407] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 401.294617][ T7394] Remounting filesystem read-only [ 401.357610][ T7407] hpfs: filesystem error: improperly stopped [ 401.415683][ T7407] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 401.456664][ T7407] hpfs: You really don't want any checks? You are crazy... [ 401.542629][ T7407] hpfs: hpfs_map_sector(): read error [ 401.579517][ T7407] hpfs: code page support is disabled [ 401.594154][ T7419] tipc: Started in network mode [ 401.619842][ T7407] hpfs: hpfs_map_4sectors(): unaligned read [ 401.629092][ T7419] tipc: Node identity ac14140f, cluster identity 4711 [ 401.651951][ T7423] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 401.674447][ T7407] hpfs: hpfs_map_4sectors(): unaligned read [ 401.692742][ T7419] tipc: New replicast peer: 255.255.255.255 [ 401.720849][ T7407] hpfs: filesystem error: unable to find root dir [ 401.738286][ T7419] tipc: Enabled bearer , priority 10 [ 401.750303][ T7423] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 401.772339][ T7415] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 401.826827][ T7407] hpfs: hpfs_map_4sectors(): unaligned read [ 401.876100][ T7407] hpfs: hpfs_map_sector(): read error [ 402.630787][ T7467] x86: Booting SMP configuration: [ 402.670186][ T7467] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 402.723138][ T0] kvm-clock: cpu 1, msr ff3b041, secondary cpu clock [ 402.747330][ T18] kvm-guest: stealtime: cpu 1, msr b8f27440 [ 402.947634][ T7307] tipc: Node number set to 2886997007 [ 403.264859][ T7495] loop2: detected capacity change from 0 to 1024 [ 403.374997][ T7499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.421534][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.487431][ T7495] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 403.801381][ T7518] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 403.801381][ T7518] [ 403.964780][ T7526] loop5: detected capacity change from 0 to 512 [ 403.997344][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.033090][ T7528] input: syz0 as /devices/virtual/input/input14 [ 404.064124][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.098776][ T7526] EXT4-fs (loop5): inline encryption not supported [ 404.131292][ T7526] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.1177: inode #1: comm syz.5.1177: iget: illegal inode # [ 404.160425][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.227518][ T7531] overlayfs: unrecognized mount option "addr=127.0.pF÷nŒ8 \" or missing value [ 404.238871][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.250565][ T7526] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1177: error while reading EA inode 1 err=-117 [ 404.293018][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.317757][ T7526] EXT4-fs (loop5): 1 orphan inode deleted [ 404.344823][ T7526] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,inlinecrypt,,errors=continue. Quota mode: none. [ 404.374017][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.393171][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.438036][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.490063][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.552204][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.577017][ T7541] loop3: detected capacity change from 0 to 512 [ 404.587627][ T7542] loop0: detected capacity change from 0 to 64 [ 404.615597][ T4198] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 404.638161][ T7543] EXT4-fs error (device loop5): ext4_lookup:1860: inode #15: comm syz.5.1177: unexpected EA_INODE flag [ 404.706536][ T7523] loop1: detected capacity change from 0 to 32768 [ 404.731157][ T7541] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.1183: invalid block [ 404.786335][ T7541] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1183: couldn't read orphan inode 11 (err -117) [ 404.849676][ T7523] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 404.908518][ T7541] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 404.926680][ T7523] JBD2: Ignoring recovery information on journal [ 404.997493][ T7541] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.1183: Directory hole found for htree leaf block 0 [ 405.099628][ T7523] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 405.357898][ T7555] loop3: detected capacity change from 0 to 512 [ 405.453671][ T7555] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 405.518586][ T7555] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1187: bg 0: block 104: invalid block bitmap [ 405.575449][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 405.601658][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 405.635558][ T7555] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 405.653170][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.697174][ T7555] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1187: invalid indirect mapped block 1 (level 1) [ 405.754188][ T7555] EXT4-fs (loop3): 1 truncate cleaned up [ 405.777935][ T7555] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.828550][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 405.850521][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.921108][ T7561] rxe_eth0 speed is unknown, defaulting to 1000 [ 405.956731][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 405.982729][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.022157][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.086269][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.108392][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 406.119015][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.156748][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.182315][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.269061][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.347910][ T7561] chnl_net:caif_netlink_parms(): no params data found [ 406.360963][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.422633][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.480275][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.532177][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.558287][ T7576] loop5: detected capacity change from 0 to 512 [ 406.573172][ T7552] loop0: detected capacity change from 0 to 32768 [ 406.608841][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 406.653170][ T7576] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 406.704745][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.740571][ T7576] EXT4-fs (loop5): orphan cleanup on readonly fs [ 406.747003][ T7576] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 406.769448][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.800717][ T7561] device bridge_slave_0 entered promiscuous mode [ 406.809958][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.817235][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.826776][ T7561] device bridge_slave_1 entered promiscuous mode [ 406.866582][ T7561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.881270][ T7561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.956215][ T7576] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1196: attempt to clear invalid blocks 2 len 1 [ 407.012238][ T7561] team0: Port device team_slave_0 added [ 407.034114][ T7561] team0: Port device team_slave_1 added [ 407.080389][ T7576] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 407.151903][ T7576] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1196: invalid indirect mapped block 1819239214 (level 0) [ 407.206878][ T7576] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1196: invalid indirect mapped block 1819239214 (level 1) [ 407.231833][ T7561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.259498][ T7561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.281014][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.346381][ T7561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.368218][ T7576] EXT4-fs (loop5): 1 truncate cleaned up [ 407.374405][ T7576] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=abort,init_itable=0x0000000000000008,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 407.518321][ T7561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.526174][ T7561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.558766][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.572660][ T7561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.794326][ T7589] loop0: detected capacity change from 0 to 32768 [ 407.817025][ T7561] device hsr_slave_0 entered promiscuous mode [ 407.870294][ T7561] device hsr_slave_1 entered promiscuous mode [ 407.884033][ T7561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.890080][ T4803] Bluetooth: hci4: command 0x0409 tx timeout [ 407.902973][ T7561] Cannot create hsr debugfs directory [ 408.132612][ T6799] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by udevd (6799) [ 408.346660][ T7621] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 408.346660][ T7621] [ 408.533851][ T7561] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 408.631467][ T7561] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 408.670323][ T7561] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 408.730825][ T7561] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 408.974321][ T7631] rxe_eth0 speed is unknown, defaulting to 1000 [ 409.089929][ T9] device hsr_slave_0 left promiscuous mode [ 409.111050][ T9] device hsr_slave_1 left promiscuous mode [ 409.136583][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.166329][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.211852][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.229349][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.289897][ T9] device bridge_slave_1 left promiscuous mode [ 409.298623][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.430725][ T7666] loop5: detected capacity change from 0 to 2048 [ 409.453250][ T9] device bridge_slave_0 left promiscuous mode [ 409.482724][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.499477][ T7666] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 409.534854][ T9] device veth1_macvtap left promiscuous mode [ 409.540944][ T7666] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.563421][ T9] device veth0_macvtap left promiscuous mode [ 409.586743][ T9] device veth1_vlan left promiscuous mode [ 409.606683][ T9] device veth0_vlan left promiscuous mode [ 409.935442][ T7682] loop5: detected capacity change from 0 to 4096 [ 409.959470][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 410.004895][ T7687] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.076307][ T7689] loop0: detected capacity change from 0 to 256 [ 410.083621][ T7682] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 410.312213][ T7693] loop5: detected capacity change from 0 to 128 [ 410.351061][ T7693] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 410.447398][ T9] team0 (unregistering): Port device team_slave_1 removed [ 410.839526][ T7670] Bluetooth: hci0: command 0x0409 tx timeout [ 411.161955][ T7697] loop0: detected capacity change from 0 to 131072 [ 411.186343][ T9] team0 (unregistering): Port device team_slave_0 removed [ 411.202194][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.221983][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.481604][ T9] bond0 (unregistering): Released all slaves [ 411.627458][ T7710] loop5: detected capacity change from 0 to 256 [ 411.655421][ T7561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.736249][ T7710] exfat: Deprecated parameter 'namecase' [ 411.772645][ T7710] exfat: Deprecated parameter 'namecase' [ 411.792122][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.801584][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.859972][ T7710] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 411.882916][ T7561] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.000533][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.030672][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.049531][ T7709] Bluetooth: hci4: command 0x040f tx timeout [ 412.059718][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.066969][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.153712][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.219997][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.259871][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.267002][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.282622][ T7720] loop1: detected capacity change from 0 to 4096 [ 412.300584][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.330708][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.398896][ T7701] loop0: detected capacity change from 0 to 32768 [ 412.511064][ T7727] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.532411][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.574546][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.605310][ T7701] /dev/loop0: Can't open blockdev [ 412.643093][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 412.651802][ T7733] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 412.703723][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.731066][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 412.764049][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 412.790193][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 412.809894][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.835167][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.893949][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.927002][ T7709] Bluetooth: hci0: command 0x041b tx timeout [ 412.946270][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 413.015516][ T7631] chnl_net:caif_netlink_parms(): no params data found [ 413.105334][ T7746] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1239'. [ 413.224026][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.231466][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.240143][ T7631] device bridge_slave_0 entered promiscuous mode [ 413.248889][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.257291][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.265836][ T7631] device bridge_slave_1 entered promiscuous mode [ 413.293031][ T7631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.305265][ T7631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.340528][ T7631] team0: Port device team_slave_0 added [ 413.367283][ T7631] team0: Port device team_slave_1 added [ 413.466219][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.519317][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.599513][ T7631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.645237][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 413.679484][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 413.690688][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.697689][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.781667][ T7760] loop1: detected capacity change from 0 to 8192 [ 413.789458][ T7631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.817247][ T7771] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 413.850464][ T7760] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 413.863055][ T7771] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 413.899792][ T7760] REISERFS (device loop1): using ordered data mode [ 413.915704][ T7561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.961853][ T7760] reiserfs: using flush barriers [ 414.013342][ T7631] device hsr_slave_0 entered promiscuous mode [ 414.046069][ T7760] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 414.086776][ T7631] device hsr_slave_1 entered promiscuous mode [ 414.111832][ T7631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.117044][ T7760] REISERFS (device loop1): checking transaction log (loop1) [ 414.131279][ T4803] Bluetooth: hci4: command 0x0419 tx timeout [ 414.139503][ T7631] Cannot create hsr debugfs directory [ 414.157874][ T7760] REISERFS (device loop1): Using r5 hash to sort names [ 414.165671][ T7760] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 414.187618][ T7760] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 414.620318][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.653332][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.667921][ T7631] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.702131][ T7631] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 414.724066][ T7631] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 414.766870][ T7561] device veth0_vlan entered promiscuous mode [ 414.775262][ T7631] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 414.786154][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.811531][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.827882][ T7561] device veth1_vlan entered promiscuous mode [ 414.840434][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.849056][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.870350][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 414.957208][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 414.970323][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.991271][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.999971][ T4803] Bluetooth: hci0: command 0x040f tx timeout [ 415.013931][ T7561] device veth0_macvtap entered promiscuous mode [ 415.031987][ T7561] device veth1_macvtap entered promiscuous mode [ 415.082560][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.095550][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.120771][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.138455][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.148620][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.160620][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.171292][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.182113][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.203755][ T7561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.218368][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 415.230946][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 415.248972][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 415.281886][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.296774][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.307937][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.323541][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.339512][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.359265][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.369143][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.410043][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.421902][ T7561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.438946][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 415.466914][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 415.512139][ T7561] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.530128][ T7561] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.549354][ T7561] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.558177][ T7561] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.602974][ T7631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.639788][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.659755][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.703305][ T7631] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.738725][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 415.763137][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.790548][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.797680][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.821435][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.838658][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.848789][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.855971][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.876393][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.932437][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.957430][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.997141][ T4955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.025871][ T4955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.036679][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 416.063079][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.072862][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.082785][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.110520][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.120429][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.130365][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.141162][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.180997][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.192257][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.224814][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.233049][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.256567][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.290376][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 416.518861][ T7837] loop1: detected capacity change from 0 to 512 [ 416.593936][ T7837] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 416.631635][ T7837] UDF-fs: Scanning with blocksize 512 failed [ 416.699789][ T7837] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 416.707326][ T7837] UDF-fs: Scanning with blocksize 1024 failed [ 416.768666][ T7837] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 416.806348][ T7837] UDF-fs: Scanning with blocksize 2048 failed [ 416.818247][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.830471][ T7837] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 416.865004][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.902837][ T7849] loop6: detected capacity change from 0 to 4096 [ 416.917305][ T7631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.930616][ T7837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.079722][ T4799] Bluetooth: hci0: command 0x0419 tx timeout [ 417.095708][ T7860] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.146079][ T7837] overlayfs: upper fs needs to support d_type. [ 417.208363][ T7849] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 417.246576][ T7837] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 417.269396][ T7837] overlayfs: failed to set xattr on upper [ 417.292003][ T7837] overlayfs: ...falling back to index=off,metacopy=off. [ 417.353000][ T7873] loop5: detected capacity change from 0 to 512 [ 417.356393][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.507748][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.541651][ T7873] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 417.648148][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.658909][ T7873] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.745879][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 417.763186][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.792030][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.861563][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 417.880533][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.921447][ T7631] device veth0_vlan entered promiscuous mode [ 417.942619][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.971798][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.037290][ T7631] device veth1_vlan entered promiscuous mode [ 418.114535][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 418.240747][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.258751][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.328522][ T7631] device veth0_macvtap entered promiscuous mode [ 418.403317][ T7631] device veth1_macvtap entered promiscuous mode [ 418.423075][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.460237][ T7922] loop5: detected capacity change from 0 to 256 [ 418.480182][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.538004][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.570504][ T7922] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 418.575632][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.631838][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.648468][ T7929] netlink: 'syz.1.1277': attribute type 11 has an invalid length. [ 418.669089][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.688758][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.704502][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.716782][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.727212][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.738173][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.751141][ T7631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.760325][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.793175][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 418.830229][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.882904][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.892129][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.921543][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.948516][ T7939] CIFS: Attempting to mount \\127.0.0.1\share [ 418.956107][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.969614][ T7939] CIFS: VFS: No username specified [ 418.978350][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.997719][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.022274][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.045538][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.068098][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.096429][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.121184][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.145121][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.178890][ T7631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.220840][ T7631] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.256599][ T7631] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.287217][ T7631] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.316781][ T7957] loop6: detected capacity change from 0 to 64 [ 419.325780][ T7631] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.378914][ T7960] loop1: detected capacity change from 0 to 1024 [ 419.423270][ T7962] loop5: detected capacity change from 0 to 164 [ 419.480234][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.509989][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.558764][ T7960] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 419.650432][ T7960] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.755293][ T7960] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 80: comm syz.1.1286: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 419.775638][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.946002][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /245/file0: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 419.968524][ T7977] netlink: 'syz.5.1291': attribute type 2 has an invalid length. [ 419.999737][ T7977] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1291'. [ 420.072553][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /245/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 420.093157][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.133158][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.157427][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.183532][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 420.194009][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 420.269416][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /245/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 420.289438][ T7900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.289910][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.297728][ T7900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.355821][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 420.374403][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.402546][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 420.470414][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /245/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 420.491122][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.567813][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 420.618014][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /245/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 420.639456][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.665277][ T8004] loop7: detected capacity change from 0 to 512 [ 420.674075][ T8005] loop6: detected capacity change from 0 to 64 [ 420.720690][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 420.810419][ T7307] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 420.811845][ T8004] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 420.962036][ T8004] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1203: bg 0: block 104: invalid block bitmap [ 420.984853][ T8004] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 421.008824][ T8004] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1203: invalid indirect mapped block 1 (level 1) [ 421.035804][ T8004] EXT4-fs (loop7): 1 truncate cleaned up [ 421.041739][ T8004] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 421.049737][ T7307] usb 1-1: Using ep0 maxpacket: 8 [ 421.189788][ T7307] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 421.202317][ T7307] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.231599][ T7307] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.243380][ T7307] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.255260][ T7307] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.279093][ T7307] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.297068][ T7307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.322012][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.344580][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.366541][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.396644][ T9] device hsr_slave_0 left promiscuous mode [ 421.406202][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.428304][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.437005][ T7307] usbtmc 1-1:16.0: Interface 0 is not authorized for usage [ 421.440298][ T9] device hsr_slave_1 left promiscuous mode [ 421.450856][ T8023] loop6: detected capacity change from 0 to 512 [ 421.466010][ T7307] usbtest 1-1:16.0: Interface 0 is not authorized for usage [ 421.473858][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.489577][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.506066][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.515658][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.537566][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.550589][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.572209][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.585682][ T9] device bridge_slave_1 left promiscuous mode [ 421.595714][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.610125][ T8023] FAT-fs (loop6): Unrecognized mount option "ÿòÖ›”6GJRšòþ餂 „Õ.¦zQ\wFMx»7D7U çd~õôÿzGcxàEóÓb4ð'ûˆòIGà(äæ;Õeî7+Êž:‰!Y/Qš‘žÅ:|Ö¿Œ'ÊW—øMfº·_³€Zݤ8{•­Vƒ@ Ay©”v7®Û¾ý†Ñ?3±/Rëç 5?þ: !lÀõ\zú{0»oóéÙ-ôþ†a18446744073709551615" or missing value [ 421.657632][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.668443][ T7631] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 421.737963][ T9] device bridge_slave_0 left promiscuous mode [ 421.792825][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.926732][ T9] device veth1_macvtap left promiscuous mode [ 421.940423][ T9] device veth0_macvtap left promiscuous mode [ 421.956004][ T9] device veth1_vlan left promiscuous mode [ 421.962388][ T9] device veth0_vlan left promiscuous mode [ 422.263103][ T9] team0 (unregistering): Port device team_slave_1 removed [ 422.285195][ T9] team0 (unregistering): Port device team_slave_0 removed [ 422.307183][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.325130][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.428567][ T9] bond0 (unregistering): Released all slaves [ 422.452509][ T8028] netlink: 'syz.5.1310': attribute type 1 has an invalid length. [ 422.475582][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1310'. [ 422.516165][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1311'. [ 422.534427][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1311'. [ 422.796890][ T8042] loop6: detected capacity change from 0 to 128 [ 422.915014][ T8042] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 422.951849][ T8042] hpfs: filesystem error: improperly stopped [ 422.957922][ T8042] hpfs: You really don't want any checks? You are crazy... [ 423.004215][ T8042] hpfs: hpfs_map_sector(): read error [ 423.027281][ T8042] hpfs: code page support is disabled [ 423.076619][ T8042] hpfs: filesystem error: map_dirent: not a directory [ 423.130245][ T8042] [ 423.132664][ T8042] hpfs: hpfs_map_4sectors(): unaligned read [ 423.138584][ T8042] hpfs: filesystem error: unable to find root dir [ 423.564702][ T7307] usb 1-1: USB disconnect, device number 6 [ 423.571687][ T8061] device-mapper: table: 248:4: striped: Invalid stripe count [ 423.625071][ T8061] device-mapper: ioctl: error adding target to table [ 423.722612][ T8065] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.913658][ T8077] loop0: detected capacity change from 0 to 8 [ 424.116221][ T8077] /dev/loop0: Can't open blockdev [ 424.196165][ T8078] rxe_eth0 speed is unknown, defaulting to 1000 [ 424.301543][ T8075] loop5: detected capacity change from 0 to 8192 [ 424.360949][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 424.632647][ T8100] program syz.6.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.760282][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.767553][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.819018][ T8065] device bridge_slave_0 entered promiscuous mode [ 424.831132][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1335'. [ 424.862368][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.889627][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.911660][ T8065] device bridge_slave_1 entered promiscuous mode [ 424.992175][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.070208][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.130674][ T8120] device-mapper: ioctl: Geometry exceeds range limits. [ 425.212145][ T8125] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 425.328974][ T8065] team0: Port device team_slave_0 added [ 425.400701][ T8078] chnl_net:caif_netlink_parms(): no params data found [ 425.442618][ T8065] team0: Port device team_slave_1 added [ 425.544892][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.572970][ T8136] loop0: detected capacity change from 0 to 4096 [ 425.580751][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.606711][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.634744][ T8136] /dev/loop0: Can't open blockdev [ 425.699332][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.727150][ T4803] Bluetooth: hci0: command 0x0409 tx timeout [ 425.816280][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.836669][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.862776][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.979346][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.044833][ T7296] Bluetooth: hci1: command 0x0409 tx timeout [ 426.155928][ T8065] device hsr_slave_0 entered promiscuous mode [ 426.166201][ T8065] device hsr_slave_1 entered promiscuous mode [ 426.192937][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.230500][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.264291][ T8078] device bridge_slave_0 entered promiscuous mode [ 426.299404][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.319343][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.327678][ T8078] device bridge_slave_1 entered promiscuous mode [ 426.444696][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.487989][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.555535][ T8129] loop5: detected capacity change from 0 to 40427 [ 426.626820][ T8078] team0: Port device team_slave_0 added [ 426.641718][ T8129] F2FS-fs (loop5): invalid crc value [ 426.673070][ T8078] team0: Port device team_slave_1 added [ 426.715496][ T8129] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 426.820163][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.836784][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.887874][ T8143] loop6: detected capacity change from 0 to 32768 [ 426.894861][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.942664][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.976335][ T8143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1345 (8143) [ 426.981642][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.059317][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.089102][ T8065] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 427.170603][ T8143] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 427.190126][ T8143] BTRFS info (device loop6): setting nodatasum [ 427.201344][ T8143] BTRFS info (device loop6): force zlib compression, level 3 [ 427.209333][ T8143] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 427.222977][ T8143] BTRFS info (device loop6): use lzo compression, level 0 [ 427.230483][ T8143] BTRFS info (device loop6): turning on flush-on-commit [ 427.237762][ T8143] BTRFS info (device loop6): enabling auto defrag [ 427.245194][ T8143] BTRFS info (device loop6): max_inline at 4096 [ 427.251972][ T8143] BTRFS info (device loop6): using free space tree [ 427.265839][ T8143] BTRFS info (device loop6): has skinny extents [ 427.274703][ T8065] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 427.296573][ T8129] F2FS-fs (loop5): Start checkpoint disabled! [ 427.313570][ T8065] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 427.338499][ T8078] device hsr_slave_0 entered promiscuous mode [ 427.362268][ T8151] loop0: detected capacity change from 0 to 32768 [ 427.399817][ T8129] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e7 [ 427.408652][ T8078] device hsr_slave_1 entered promiscuous mode [ 427.426982][ T8078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.441571][ T8151] /dev/loop0: Can't open blockdev [ 427.449209][ T8078] Cannot create hsr debugfs directory [ 427.467373][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.500026][ T8065] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 427.591170][ T8143] BTRFS info (device loop6): enabling ssd optimizations [ 427.629116][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.829757][ T7670] Bluetooth: hci0: command 0x041b tx timeout [ 427.876676][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.157392][ T6798] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop6 scanned by udevd (6798) [ 428.405170][ T8189] loop0: detected capacity change from 0 to 32768 [ 428.531363][ T7286] Bluetooth: hci1: command 0x041b tx timeout [ 428.555040][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.605828][ T8198] loop6: detected capacity change from 0 to 64 [ 428.647527][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.721470][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 428.744903][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 428.761787][ T8198] hfs: filesystem is marked locked, mounting read-only. [ 428.807748][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.826355][ T8198] hfs: filesystem is marked locked, leaving read-only. [ 428.891979][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 428.902602][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 428.917826][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.925186][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.949729][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 428.996797][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.023785][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.031045][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.045805][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.051894][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.093314][ T8210] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 429.130997][ T8210] iwpm_mapping_info_cb: Unable to parse nlmsg [ 429.138030][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.149673][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.174533][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.189823][ T8212] /dev/loop0: Can't open blockdev [ 429.224174][ T8216] loop0: detected capacity change from 0 to 128 [ 429.233178][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.285388][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.296246][ T8220] syz.6.1358 uses obsolete (PF_INET,SOCK_PACKET) [ 429.317254][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.329076][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.350449][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.364375][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.390046][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.408139][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.428512][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.455551][ T8065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.484379][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.513560][ T8224] netlink: 'syz.6.1358': attribute type 8 has an invalid length. [ 429.561110][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.672496][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.879575][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 430.105670][ T8078] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 430.220699][ T8078] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 430.278047][ T8078] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 430.355460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.383251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.415791][ T8078] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 430.579293][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.599766][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 430.844058][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.948008][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 430.977674][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.008695][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.064199][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.080822][ T8274] loop6: detected capacity change from 0 to 32768 [ 431.088120][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.126993][ T4955] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.134248][ T4955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.202996][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.243415][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.268387][ T8295] program syz.0.1373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.280483][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.327768][ T4955] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.335040][ T4955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.547134][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.589468][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.627192][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.711545][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.723742][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.739736][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.748590][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.765263][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.785202][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.805564][ T8287] loop5: detected capacity change from 0 to 32768 [ 431.816734][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.833442][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.855918][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.877210][ T8287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1372 (8287) [ 431.903014][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.937499][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.955144][ T8287] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 431.964142][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 431.972666][ T8307] loop6: detected capacity change from 0 to 1024 [ 431.995260][ T8287] BTRFS info (device loop5): using free space tree [ 432.019933][ T8287] BTRFS info (device loop5): has skinny extents [ 432.171330][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.185125][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.211797][ T8300] loop0: detected capacity change from 0 to 40427 [ 432.243704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.319044][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.432263][ T8287] BTRFS info (device loop5): enabling ssd optimizations [ 432.495989][ T8065] device veth0_vlan entered promiscuous mode [ 432.656624][ T8065] device veth1_vlan entered promiscuous mode [ 432.692532][ T8264] Bluetooth: hci1: command 0x0419 tx timeout [ 432.841964][ T8340] loop0: detected capacity change from 0 to 4096 [ 432.860388][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.889392][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.925231][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.961068][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.974221][ T8262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop5 scanned by udevd (8262) [ 432.993569][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.019912][ T8340] /dev/loop0: Can't open blockdev [ 433.028594][ T8065] device veth0_macvtap entered promiscuous mode [ 433.053495][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.077670][ T8065] device veth1_macvtap entered promiscuous mode [ 433.225432][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.275769][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.310305][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.323209][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.329279][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.370340][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.391468][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.423278][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.444310][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.462318][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.504833][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.538106][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.571990][ T8356] block device autoloading is deprecated and will be removed. [ 433.609430][ T8355] block device autoloading is deprecated and will be removed. [ 433.647881][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.678045][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.695990][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.729719][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.810191][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.831938][ T8369] sctp: [Deprecated]: syz.5.1384 (pid 8369) Use of int in maxseg socket option. [ 433.831938][ T8369] Use struct sctp_assoc_value instead [ 433.849378][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.879863][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.913950][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.940675][ T8372] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 433.967584][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.986637][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.996791][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.007593][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.017742][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.028530][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.039756][ T7287] Bluetooth: hci0: command 0x0c1a tx timeout [ 434.049016][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.070239][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 434.089908][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.107806][ T8374] netlink: 'syz.5.1386': attribute type 10 has an invalid length. [ 434.157644][ T8374] team0: Port device netdevsim0 added [ 434.178007][ T8065] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.190574][ T8065] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.206929][ T8065] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.237365][ T8065] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.338929][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 434.351484][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 434.517051][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 434.530726][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 434.617197][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.647867][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.677061][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.691642][ T8078] device veth0_vlan entered promiscuous mode [ 434.714997][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.763019][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.796032][ T8078] device veth1_vlan entered promiscuous mode [ 434.814149][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.840344][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.893633][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.911066][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.954388][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 435.024793][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.084408][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.121528][ T8078] device veth0_macvtap entered promiscuous mode [ 435.181467][ T8078] device veth1_macvtap entered promiscuous mode [ 435.308947][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.337574][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.407377][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.469218][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.499310][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.521486][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.549353][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.592853][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.603029][ T8405] loop0: detected capacity change from 0 to 8192 [ 435.621483][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.647389][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.667514][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.686353][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.708476][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.763120][ T9] device hsr_slave_0 left promiscuous mode [ 435.804021][ T9] device hsr_slave_1 left promiscuous mode [ 435.827037][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.850410][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.893324][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.912330][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.944116][ T9] device bridge_slave_1 left promiscuous mode [ 435.958335][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.984627][ T9] device bridge_slave_0 left promiscuous mode [ 436.029046][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.079501][ T9] device hsr_slave_0 left promiscuous mode [ 436.103003][ T9] device hsr_slave_1 left promiscuous mode [ 436.127435][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.151733][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.162864][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.177183][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.188208][ T9] device bridge_slave_1 left promiscuous mode [ 436.230501][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.252906][ T9] device bridge_slave_0 left promiscuous mode [ 436.266734][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.312436][ T9] device veth1_macvtap left promiscuous mode [ 436.318558][ T9] device veth0_macvtap left promiscuous mode [ 436.337162][ T9] device veth1_vlan left promiscuous mode [ 436.347042][ T9] device veth0_vlan left promiscuous mode [ 436.370126][ T9] device veth0_macvtap left promiscuous mode [ 436.376306][ T9] device veth1_vlan left promiscuous mode [ 436.391054][ T9] device veth0_vlan left promiscuous mode [ 436.458576][ T8432] loop5: detected capacity change from 0 to 32768 [ 436.525533][ T8432] JBD2: Ignoring recovery information on journal [ 436.739042][ T8432] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 436.789113][ T8451] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1411'. [ 436.935797][ T6804] ocfs2: Unmounting device (7,5) on (node local) [ 437.224323][ T9] team0 (unregistering): Port device team_slave_1 removed [ 437.266784][ T9] team0 (unregistering): Port device team_slave_0 removed [ 437.291495][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.331730][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.508744][ T9] bond0 (unregistering): Released all slaves [ 437.585204][ T8466] loop5: detected capacity change from 0 to 40427 [ 437.611323][ T8466] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 437.627673][ T8466] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 437.656767][ T8466] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x6 [ 437.698838][ T8466] F2FS-fs (loop5): invalid crc value [ 437.713266][ T8466] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 437.787341][ T8466] F2FS-fs (loop5): Start checkpoint disabled! [ 437.828515][ T9] team0 (unregistering): Port device team_slave_1 removed [ 437.840697][ T8466] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 437.848194][ T8466] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 437.871563][ T9] team0 (unregistering): Port device team_slave_0 removed [ 437.902529][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.923751][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.135492][ T9] bond0 (unregistering): Released all slaves [ 438.158518][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 438.171487][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.186379][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.207495][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.220479][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.238140][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.248384][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.259339][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.260019][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.270405][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.306267][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.332980][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.351344][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 438.365300][ T8428] device macvlan0 entered promiscuous mode [ 438.389271][ T8428] netlink: 'syz.0.1402': attribute type 2 has an invalid length. [ 438.441410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 438.499667][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.541987][ T8078] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.550759][ T8475] loop0: detected capacity change from 0 to 256 [ 438.589257][ T8078] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.598042][ T8078] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.628929][ T8477] loop6: detected capacity change from 0 to 1024 [ 438.630206][ T8078] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.817475][ T8477] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,. Quota mode: none. [ 438.848086][ T8477] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.087928][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.099765][ T8491] loop5: detected capacity change from 0 to 1024 [ 439.119411][ T7305] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 439.130100][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.156939][ T8491] EXT4-fs (loop5): Ignoring removed orlov option [ 439.218639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 439.238176][ T8496] loop6: detected capacity change from 0 to 2048 [ 439.250587][ T8491] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 439.272343][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.337776][ T4955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.359396][ T7305] usb 9-1: Using ep0 maxpacket: 16 [ 439.393736][ T8496] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.433756][ T4955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.451018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.640418][ T7305] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 439.684264][ T7305] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.723145][ T7305] usb 9-1: Product: syz [ 439.727406][ T7305] usb 9-1: Manufacturer: syz [ 439.739392][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 439.752398][ T7305] usb 9-1: SerialNumber: syz [ 439.892224][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.898564][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.032094][ T7305] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 440.084141][ T7305] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 440.107314][ T7305] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 440.119492][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.153619][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.164799][ T7305] usb 9-1: media controller created [ 440.184972][ T13] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 440.210494][ T7305] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.229324][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.256578][ T8540] loop9: detected capacity change from 0 to 64 [ 440.284461][ T13] usb 1-1: config 0 descriptor?? [ 440.309814][ T7305] zl10353_read_register: readreg error (reg=127, ret==-71) [ 440.331028][ T13] usbtest 1-1:0.0: Interface 0 is not authorized for usage [ 440.349960][ T13] usbhid 1-1:0.0: Interface 0 is not authorized for usage [ 440.382887][ T7305] dvb_usb_gl861: probe of 9-1:157.0 failed with error -5 [ 440.403478][ T8542] device macvlan1 entered promiscuous mode [ 440.418920][ T7305] usb 9-1: USB disconnect, device number 2 [ 440.699335][ T7287] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 440.716264][ T8552] loop5: detected capacity change from 0 to 2048 [ 440.777040][ T8552] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 440.848819][ T8552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.873006][ T8561] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.882039][ T8561] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.891315][ T8561] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.900237][ T8561] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.079512][ T7287] usb 7-1: config 1 has an invalid interface number: 65 but max is 1 [ 441.099671][ T7287] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.112698][ T8570] loop9: detected capacity change from 0 to 512 [ 441.143029][ T7287] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 441.174703][ T8570] EXT4-fs (loop9): Ignoring removed nobh option [ 441.195468][ T7287] usb 7-1: config 1 has no interface number 2 [ 441.208689][ T8570] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 441.233657][ T7287] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.248808][ T8570] EXT4-fs (loop9): 1 truncate cleaned up [ 441.265527][ T8570] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 441.299054][ T7287] usb 7-1: config 1 interface 65 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.333675][ T8579] loop8: detected capacity change from 0 to 1024 [ 441.381928][ T7287] usb 7-1: config 1 interface 65 has no altsetting 0 [ 441.415624][ T8579] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 441.509571][ T8579] EXT4-fs error (device loop8): ext4_nfs_get_inode:1433: inode #15: comm syz.8.1451: iget: bad extra_isize 288 (inode size 256) [ 441.579339][ T7287] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.595364][ T7287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.626566][ T7287] usb 7-1: Product: syz [ 441.649066][ T7287] usb 7-1: Manufacturer: syz [ 441.675505][ T7287] usb 7-1: SerialNumber: syz [ 441.760820][ T7287] cdc_mbim 7-1:1.0: skipping garbage [ 441.774399][ T7287] usb 7-1: selecting invalid altsetting 1 [ 441.895810][ T8596] smpboot: CPU 1 is now offline [ 442.199408][ T7287] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 442.222805][ T7287] cdc_mbim 7-1:1.0: bind() failure [ 442.298208][ T7287] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 442.348046][ T7287] cdc_ncm 7-1:1.1: bind() failure [ 442.359703][ T8605] loop8: detected capacity change from 0 to 64 [ 442.463472][ T8605] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 442.540469][ T7287] usb 1-1: USB disconnect, device number 7 [ 442.631834][ T8605] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 442.645766][ T13] usb 7-1: USB disconnect, device number 2 [ 442.678257][ T8588] loop5: detected capacity change from 0 to 32768 [ 442.689866][ T8610] sctp: [Deprecated]: syz.0.1460 (pid 8610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.689866][ T8610] Use struct sctp_sack_info instead [ 443.136297][ T8621] kvm [8618]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0x400006 [ 443.228322][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1464'. [ 443.489278][ T7305] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 443.774987][ T8645] loop0: detected capacity change from 0 to 1024 [ 443.889456][ T7305] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 443.924065][ T8652] loop5: detected capacity change from 0 to 64 [ 443.959732][ T7305] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 444.067139][ T7305] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.149287][ T7305] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 444.239411][ T7305] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 444.273908][ T8658] loop6: detected capacity change from 0 to 4096 [ 444.423236][ T8664] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.434711][ T7305] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.498247][ T7305] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.559409][ T7305] usb 9-1: Product: syz [ 444.564145][ T7305] usb 9-1: Manufacturer: syz [ 444.652092][ T7305] cdc_wdm 9-1:1.0: skipping garbage [ 444.668112][ T7305] cdc_wdm 9-1:1.0: skipping garbage [ 444.772905][ T7305] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 444.817552][ T7305] cdc_wdm 9-1:1.0: Unknown control protocol [ 444.845443][ T8674] loop6: detected capacity change from 0 to 256 [ 444.856877][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1477'. [ 444.976807][ T8674] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 445.209255][ T7287] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 445.469349][ T7287] usb 1-1: Using ep0 maxpacket: 8 [ 445.590826][ T7287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.657726][ T7287] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 445.724076][ T7287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.795649][ T7287] usb 1-1: config 0 descriptor?? [ 445.865315][ T1108] usb 9-1: USB disconnect, device number 3 [ 445.873501][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1484'. [ 445.890427][ T7287] iowarrior 1-1:0.0: Interface 0 is not authorized for usage [ 445.948689][ T7287] usbtest 1-1:0.0: Interface 0 is not authorized for usage [ 446.145677][ T8698] loop6: detected capacity change from 0 to 16 [ 446.235235][ T8698] erofs: (device loop6): mounted with root inode @ nid 36. [ 446.553261][ T8706] loop8: detected capacity change from 0 to 512 [ 446.651883][ T8706] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 446.803148][ T8706] EXT4-fs (loop8): 1 truncate cleaned up [ 446.890973][ T8706] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,minixdf,debug_want_extra_isize=0x0000000000000080,nogrpid,grpquota,errors=remount-ro,dioread_lock,. Quota mode: writeback. [ 447.128982][ T8720] loop6: detected capacity change from 0 to 128 [ 447.210948][ T8706] EXT4-fs error (device loop8): __ext4_expand_extra_isize:5893: inode #12: comm syz.8.1487: bad extra_isize 62 (inode size 256) [ 447.372307][ T8706] EXT4-fs (loop8): Remounting filesystem read-only [ 447.445467][ T8728] EXT4-fs error (device loop8): __ext4_expand_extra_isize:5893: inode #12: comm syz.8.1487: bad extra_isize 62 (inode size 256) [ 447.569696][ T8728] EXT4-fs (loop8): Remounting filesystem read-only [ 447.619025][ T7287] usb 1-1: USB disconnect, device number 8 [ 447.630634][ T8677] loop9: detected capacity change from 0 to 32768 [ 447.653343][ T8728] EXT4-fs error (device loop8): __ext4_expand_extra_isize:5893: inode #12: comm syz.8.1487: bad extra_isize 62 (inode size 256) [ 447.844595][ T8728] EXT4-fs (loop8): Remounting filesystem read-only [ 447.913903][ T8677] (syz.9.1478,8677,0):ocfs2_initialize_super:2311 ERROR: status = -12 [ 448.025331][ T8733] loop0: detected capacity change from 0 to 8192 [ 448.081033][ T8677] (syz.9.1478,8677,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 448.279029][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1496'. [ 448.462013][ T8745] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 448.770030][ T8727] loop5: detected capacity change from 0 to 32768 [ 448.941666][ T278] ERROR: (device loop5): diFree: numfree > numinos [ 448.941666][ T278] [ 449.061679][ T7287] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 449.321677][ T7287] usb 9-1: Using ep0 maxpacket: 16 [ 449.473595][ T26] audit: type=1400 audit(1793249752.199:49): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=8770 comm="syz.9.1500" name="//o" offset=35 [ 449.611108][ T7287] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 449.628320][ T8759] loop6: detected capacity change from 0 to 32768 [ 449.665566][ T7287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.717386][ T7287] usb 9-1: Product: syz [ 449.738148][ T7287] usb 9-1: Manufacturer: syz [ 449.794355][ T7287] usb 9-1: SerialNumber: syz [ 449.888267][ T8759] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 449.938157][ T8759] BTRFS info (device loop6): setting nodatacow, compression disabled [ 449.997161][ T8759] BTRFS info (device loop6): enabling auto defrag [ 450.033340][ T8759] BTRFS info (device loop6): max_inline at 0 [ 450.075922][ T8759] BTRFS info (device loop6): using free space tree [ 450.110840][ T7287] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 450.129316][ T8759] BTRFS info (device loop6): has skinny extents [ 450.161418][ T7287] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 450.234306][ T7287] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 450.307038][ T7287] usb 9-1: media controller created [ 450.397858][ T7287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 450.492775][ T7287] zl10353_read_register: readreg error (reg=127, ret==-71) [ 450.623155][ T7287] dvb_usb_gl861: probe of 9-1:157.0 failed with error -5 [ 450.680284][ T7287] usb 9-1: USB disconnect, device number 4 [ 450.908680][ T8778] loop5: detected capacity change from 0 to 32768 [ 450.988390][ T8778] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.1503 (8778) [ 451.961536][ T8778] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 452.024033][ T8778] BTRFS info (device loop5): enabling ssd optimizations [ 452.089325][ T8778] BTRFS info (device loop5): not using ssd optimizations [ 452.139351][ T8778] BTRFS info (device loop5): turning off barriers [ 452.145849][ T8778] BTRFS info (device loop5): use no compression [ 452.240149][ T8778] BTRFS info (device loop5): using free space tree [ 452.246819][ T8778] BTRFS info (device loop5): has skinny extents [ 452.811814][ T8820] loop8: detected capacity change from 0 to 32768 [ 453.029356][ T8810] loop9: detected capacity change from 0 to 32768 [ 453.259541][ T8810] JBD2: Ignoring recovery information on journal [ 453.539323][ T8810] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 453.933251][ T8078] ocfs2: Unmounting device (7,9) on (node local) [ 454.337064][ T8887] futex_wake_op: syz.0.1522 tries to shift op by 144; fix this program [ 454.616021][ T8887] futex_wake_op: syz.0.1522 tries to shift op by 144; fix this program [ 454.697803][ T8887] futex_wake_op: syz.0.1522 tries to shift op by 144; fix this program [ 454.755764][ T8923] ip_tables: iptables: counters copy to user failed while replacing table [ 455.089287][ T4294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 455.349297][ T4294] usb 6-1: Using ep0 maxpacket: 32 [ 455.458331][ T8912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.490270][ T4294] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 455.699679][ T4294] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 455.752005][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 455.793187][ T4294] usb 6-1: Product: syz [ 455.797416][ T4294] usb 6-1: Manufacturer: syz [ 455.825368][ T4294] usb 6-1: SerialNumber: syz [ 455.860033][ T4294] usb 6-1: config 0 descriptor?? [ 455.899524][ T8925] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 456.195527][ T7308] usb 6-1: USB disconnect, device number 2 [ 456.317216][ T8977] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.875925][ T8999] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1554'. [ 456.886503][ T9000] loop0: detected capacity change from 0 to 1024 [ 457.387228][ T9013] loop5: detected capacity change from 0 to 1024 [ 457.480254][ T9016] scsi_dev_info_list_add_str: bad dev info string 'e' '(null)' '(null)' [ 457.594793][ T9018] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1562'. [ 457.699591][ T6804] hfsplus: bad catalog entry type [ 457.704778][ T6804] hfsplus: bad catalog entry type [ 457.715028][ T9018] netlink: 'syz.6.1562': attribute type 2 has an invalid length. [ 457.815073][ T156] hfsplus: b-tree write err: -5, ino 25 [ 457.842821][ T156] hfsplus: b-tree write err: -5, ino 4 [ 457.877409][ T156] hfsplus: b-tree write err: -5, ino 2 [ 457.918767][ T156] hfsplus: b-tree write err: -5, ino 26 [ 458.460206][ T9002] loop8: detected capacity change from 0 to 32768 [ 458.620540][ T9002] XFS (loop8): Mounting V5 Filesystem [ 458.868033][ T9002] XFS (loop8): Ending clean mount [ 459.074410][ T9050] mmap: syz.0.1570 (9050) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 459.318249][ T8065] XFS (loop8): Unmounting Filesystem [ 459.474143][ T9057] loop6: detected capacity change from 0 to 1024 [ 459.710415][ T9057] hfsplus: walked past end of dir [ 459.726830][ T9059] rxe_eth0 speed is unknown, defaulting to 1000 [ 460.197365][ T26] audit: type=1400 audit(1793249762.919:50): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9067 comm="syz.6.1577" name="unknown" offset=28 [ 460.368851][ T9070] loop0: detected capacity change from 0 to 128 [ 460.979409][ T1108] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 461.030605][ T9059] chnl_net:caif_netlink_parms(): no params data found [ 461.347458][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.386383][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.399520][ T1108] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.410987][ T4201] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 461.448322][ T9059] device bridge_slave_0 entered promiscuous mode [ 461.456981][ T1108] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.507392][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.545623][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.559266][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 461.581905][ T1108] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 461.600054][ T9059] device bridge_slave_1 entered promiscuous mode [ 461.647122][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.707786][ T4429] Bluetooth: hci3: command 0x0409 tx timeout [ 461.754819][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.770397][ T1108] usb 1-1: config 0 descriptor?? [ 461.807895][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.824470][ T1108] usbtest 1-1:0.0: Interface 0 is not authorized for usage [ 461.852782][ T1108] usbhid 1-1:0.0: Interface 0 is not authorized for usage [ 461.969775][ T4201] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 462.019373][ T4201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.038604][ T9059] team0: Port device team_slave_0 added [ 462.059261][ T4429] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 462.068031][ T4201] usb 7-1: Product: syz [ 462.085023][ T9059] team0: Port device team_slave_1 added [ 462.107386][ T4201] usb 7-1: Manufacturer: syz [ 462.137267][ T4201] usb 7-1: SerialNumber: syz [ 462.180967][ T4201] usb 7-1: config 0 descriptor?? [ 462.216636][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.249328][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.275688][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.409376][ T9059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.465836][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.473399][ T4429] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.503432][ T9110] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 462.529283][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.555746][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.564793][ T4429] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 462.612866][ T4429] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.666159][ T4429] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.718974][ T9059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.731770][ T9098] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 462.788664][ T4201] usb 7-1: USB disconnect, device number 3 [ 462.841807][ T9115] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.072014][ T9059] device hsr_slave_0 entered promiscuous mode [ 463.111419][ T9059] device hsr_slave_1 entered promiscuous mode [ 463.160630][ T9059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.198128][ T9059] Cannot create hsr debugfs directory [ 463.426952][ T9121] loop8: detected capacity change from 0 to 128 [ 463.541861][ T9121] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 463.661742][ T9121] hpfs: filesystem error: improperly stopped [ 463.686013][ T9127] loop6: detected capacity change from 0 to 256 [ 463.734890][ T9121] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 463.803114][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 463.866110][ T9121] hpfs: You really don't want any checks? You are crazy... [ 463.888987][ T1108] usb 1-1: USB disconnect, device number 9 [ 463.958279][ T9121] hpfs: Code page index out of array [ 463.988977][ T4268] usb 10-1: USB disconnect, device number 2 [ 464.034259][ T9121] hpfs: code page support is disabled [ 464.116869][ T9121] hpfs: hpfs_map_4sectors(): unaligned read [ 464.184508][ T9121] hpfs: hpfs_map_4sectors(): unaligned read [ 464.228501][ T9121] hpfs: filesystem error: unable to find root dir [ 464.290723][ T9121] hpfs: hpfs_map_sector(): read error [ 464.372516][ T9121] hpfs: hpfs_map_sector(): read error [ 464.585187][ T9146] loop0: detected capacity change from 0 to 1024 [ 464.750164][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.836279][ T9151] ima: Unable to open file: / (-22) [ 464.836805][ T9150] ima: policy update failed [ 464.946105][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.962314][ T26] audit: type=1802 audit(1793249767.689:51): pid=9150 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.6.1606" res=0 errno=0 [ 465.125128][ T9162] loop6: detected capacity change from 0 to 1024 [ 465.221894][ T9162] EXT4-fs (loop6): inline encryption not supported [ 465.228652][ T9162] EXT4-fs (loop6): Ignoring removed oldalloc option [ 465.325511][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.352844][ T9168] Set syz1 is full, maxelem 0 reached [ 465.379673][ T9162] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodioread_nolock,noquota,inlinecrypt,journal_dev=0x0000000000000009,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 465.547833][ T9] team0: Port device netdevsim0 removed [ 465.559463][ T9162] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.623837][ T9179] loop8: detected capacity change from 0 to 1024 [ 465.635028][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.671651][ T9162] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 3: comm syz.6.1611: lblock 3 mapped to illegal pblock 3 (length 3) [ 465.717476][ T9179] EXT4-fs (loop8): Ignoring removed bh option [ 465.783826][ T9182] loop0: detected capacity change from 0 to 1024 [ 465.820067][ T9183] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.1611: lblock 0 mapped to illegal pblock 0 (length 1) [ 465.844061][ T9179] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,commit=0x0000000000000005,noquota,grpid,auto_da_alloc,grpid,bh,,errors=continue. Quota mode: none. [ 465.959695][ T7296] Bluetooth: hci3: command 0x040f tx timeout [ 465.983832][ T9162] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 466.035314][ T4201] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 466.086307][ T9179] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.179767][ T9162] EXT4-fs (loop6): This should not happen!! Data will be lost [ 466.179767][ T9162] [ 466.248002][ T9179] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1616: bg 0: block 112: padding at end of block bitmap is not set [ 466.317782][ T145] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 466.429544][ T4201] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 466.458577][ T145] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 466.493295][ T4201] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.547963][ T145] EXT4-fs (loop6): This should not happen!! Data will be lost [ 466.547963][ T145] [ 466.589066][ T4201] usb 10-1: config 0 interface 0 has no altsetting 0 [ 466.618254][ T4201] usb 10-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 466.699262][ T4201] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.751240][ T4201] usb 10-1: config 0 descriptor?? [ 466.803353][ T9205] loop0: detected capacity change from 0 to 512 [ 467.163352][ T9214] loop6: detected capacity change from 0 to 512 [ 467.304497][ T9214] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 467.324605][ T4201] input: HID 04b3:3100 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:04B3:3100.0006/input/input15 [ 467.368103][ T9214] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.465601][ T9224] db_root: cannot be changed: target drivers registered [ 467.524033][ T4201] lenovo 0003:04B3:3100.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.9-1/input0 [ 467.695476][ T4201] usb 10-1: USB disconnect, device number 3 [ 467.922949][ T9227] fido_id[9227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 468.041628][ T4431] Bluetooth: hci3: command 0x0419 tx timeout [ 468.054327][ T9235] program syz.6.1634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.485760][ T9246] bond0: option packets_per_slave: invalid value (65536) [ 468.597889][ T4201] hid-generic 0005:15C2:8001.0007: item fetching failed at offset 0/2 [ 468.645999][ T9246] bond0: option packets_per_slave: allowed values 0 - 65535 [ 468.699922][ T4201] hid-generic: probe of 0005:15C2:8001.0007 failed with error -22 [ 468.898683][ T9059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.474610][ T9262] loop6: detected capacity change from 0 to 131072 [ 469.508653][ T9262] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0) [ 469.518266][ T9262] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 469.560872][ T9262] F2FS-fs (loop6): invalid crc value [ 469.598157][ T9262] F2FS-fs (loop6): Found nat_bits in checkpoint [ 469.643171][ T9262] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 469.650394][ T9262] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 469.664050][ T9262] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 469.718189][ T9059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.829580][ T9059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.935191][ T9059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 470.385056][ T9290] loop0: detected capacity change from 0 to 512 [ 470.401919][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.524657][ T9059] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.637600][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.664885][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.685816][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 470.751575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.786254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.862101][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.869287][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.939661][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 471.008059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 471.064456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 471.130079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.178508][ T9304] loop0: detected capacity change from 0 to 1024 [ 471.199530][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.206702][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.319719][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.569629][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 471.578326][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 471.688477][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.805616][ T9059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.937791][ T9059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.031000][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.065007][ T9322] sctp: [Deprecated]: syz.0.1661 (pid 9322) Use of int in max_burst socket option deprecated. [ 472.065007][ T9322] Use struct sctp_assoc_value instead [ 472.081892][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.149689][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.236513][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.289836][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.354259][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.367352][ T9332] loop0: detected capacity change from 0 to 512 [ 472.420075][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.536742][ T9] device hsr_slave_0 left promiscuous mode [ 472.574843][ T9336] loop8: detected capacity change from 0 to 512 [ 472.613851][ T9] device hsr_slave_1 left promiscuous mode [ 472.738639][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.796764][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.812579][ T9336] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 472.840943][ T26] audit: type=1400 audit(1793249775.569:52): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9340 comm="syz.6.1650" [ 472.895133][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.956490][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.973891][ T9336] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.012286][ T9] device bridge_slave_1 left promiscuous mode [ 473.018751][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.073390][ T9] device bridge_slave_0 left promiscuous mode [ 473.119490][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.185145][ T9] device veth1_macvtap left promiscuous mode [ 473.229326][ T9] device veth0_macvtap left promiscuous mode [ 473.235518][ T9] device veth1_vlan left promiscuous mode [ 473.313900][ T9] device veth0_vlan left promiscuous mode [ 474.028148][ T9] team0 (unregistering): Port device team_slave_1 removed [ 474.094630][ T9330] loop9: detected capacity change from 0 to 32768 [ 474.115305][ T9] team0 (unregistering): Port device team_slave_0 removed [ 474.171349][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.258141][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.281429][ T9330] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 474.294427][ T9364] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1674'. [ 474.358796][ T9330] JBD2: Ignoring recovery information on journal [ 474.536191][ T9] bond0 (unregistering): Released all slaves [ 474.577027][ T9330] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 474.609327][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.907836][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.957213][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 475.003916][ T9059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.011173][ T7284] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 475.293298][ T7284] usb 9-1: Using ep0 maxpacket: 32 [ 475.419648][ T7284] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 475.457405][ T7284] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 475.518584][ T7284] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 475.568758][ T7284] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 475.635433][ T7284] usb 9-1: config 0 interface 0 has no altsetting 0 [ 475.829453][ T7284] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 475.856231][ T8078] ocfs2: Unmounting device (7,9) on (node local) [ 475.874185][ T7284] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 475.901243][ T7284] usb 9-1: Product: syz [ 475.916148][ T7284] usb 9-1: Manufacturer: syz [ 475.928899][ T7284] usb 9-1: SerialNumber: syz [ 475.956538][ T7284] usb 9-1: config 0 descriptor?? [ 476.022937][ T7284] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 476.078776][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.113504][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.127524][ T7284] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 476.173180][ T9059] device veth0_vlan entered promiscuous mode [ 476.271625][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.316576][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.353094][ T4294] usb 9-1: USB disconnect, device number 5 [ 476.359578][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 476.394884][ T9059] device veth1_vlan entered promiscuous mode [ 476.414288][ T4294] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 476.451987][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.491806][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.511532][ T9370] ldusb: No device or device unplugged -19 [ 476.559826][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 476.659682][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 476.698843][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.737679][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.817321][ T9059] device veth0_macvtap entered promiscuous mode [ 476.877359][ T9059] device veth1_macvtap entered promiscuous mode [ 476.967821][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.073694][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.134123][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.203298][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.260603][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.328779][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.393450][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.455129][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.528317][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.573597][ T9436] loop8: detected capacity change from 0 to 8192 [ 477.598487][ T9432] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 477.657906][ T9432] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 477.710045][ T9436] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 477.752797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.789879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.809636][ T9436] REISERFS (device loop8): using ordered data mode [ 477.816411][ T9436] reiserfs: using flush barriers [ 477.880276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.933691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.983842][ T9436] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 478.015873][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.065056][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.111663][ T9436] REISERFS (device loop8): checking transaction log (loop8) [ 478.122389][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.163174][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.179335][ T9436] REISERFS (device loop8): Using r5 hash to sort names [ 478.186557][ T9436] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 478.224570][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.255677][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.284448][ T9436] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 478.293924][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.328433][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.384424][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.437217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 478.484256][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 478.564003][ T9059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.639263][ T9059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.648160][ T9059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.757958][ T9059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.292424][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.359371][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.437339][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.458452][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 479.525168][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.611587][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.665108][ T9493] loop8: detected capacity change from 0 to 256 [ 479.837465][ T9493] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 479.967318][ T9503] netlink: 'syz.0.1712': attribute type 11 has an invalid length. [ 480.105823][ T9508] loop4: detected capacity change from 0 to 512 [ 480.226201][ T9511] loop0: detected capacity change from 0 to 256 [ 480.235380][ T9508] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 480.304611][ T9508] UDF-fs: Scanning with blocksize 512 failed [ 480.352748][ T9511] exfat: Deprecated parameter 'namecase' [ 480.423265][ T9508] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 480.443440][ T9511] exfat: Deprecated parameter 'namecase' [ 480.489806][ T9508] UDF-fs: Scanning with blocksize 1024 failed [ 480.539492][ T9508] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 480.573108][ T9511] /dev/loop0: Can't open blockdev [ 480.603411][ T9508] UDF-fs: Scanning with blocksize 2048 failed [ 480.657554][ T9508] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 480.777186][ T9508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.847393][ T9511] loop0: detected capacity change from 0 to 4096 [ 480.974211][ T9508] overlayfs: upper fs needs to support d_type. [ 481.061905][ T9508] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 481.172993][ T9508] overlayfs: failed to set xattr on upper [ 481.223738][ T9508] overlayfs: ...falling back to index=off,metacopy=off. [ 481.277409][ T9541] loop9: detected capacity change from 0 to 1024 [ 481.849863][ T9559] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1734'. [ 482.131787][ T9571] loop6: detected capacity change from 0 to 256 [ 482.222711][ T9571] exfat: Deprecated parameter 'namecase' [ 482.309423][ T9571] exfat: Deprecated parameter 'namecase' [ 482.371044][ T9580] loop0: detected capacity change from 0 to 128 [ 482.396408][ T9581] loop8: detected capacity change from 0 to 1024 [ 482.420491][ T9571] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 482.666943][ T9581] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 482.775568][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 482.893849][ T9581] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.037569][ T9602] Set syz1 is full, maxelem 246 reached [ 483.080440][ T9600] tap0: tun_chr_ioctl cmd 2147767511 [ 483.948168][ T9641] program syz.4.1763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.058598][ T9645] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 484.113064][ T9645] syzkaller1: group set to 776 [ 484.376042][ T9615] loop0: detected capacity change from 0 to 32768 [ 484.434018][ T9615] /dev/loop0: Can't open blockdev [ 484.821590][ T9670] loop0: detected capacity change from 0 to 4096 [ 484.919716][ T9670] /dev/loop0: Can't open blockdev [ 485.321106][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'. [ 485.538106][ T9700] tipc: Enabling of bearer rejected, already enabled [ 485.792704][ T9711] i2c i2c-0: delete_device: Extra parameters [ 485.924429][ T9717] loop9: detected capacity change from 0 to 512 [ 486.033457][ T9717] EXT4-fs (loop9): Ignoring removed orlov option [ 486.155810][ T9717] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue. Quota mode: writeback. [ 486.182063][ T9731] loop0: detected capacity change from 0 to 256 [ 486.239267][ T4431] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 486.394674][ T9717] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.519382][ T4431] usb 9-1: Using ep0 maxpacket: 32 [ 486.603712][ T9742] loop0: detected capacity change from 0 to 2048 [ 486.641624][ T4431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.695744][ T4431] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.746556][ T4431] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 486.807910][ T4431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.856450][ T4431] usb 9-1: config 0 descriptor?? [ 487.306122][ T9768] loop0: detected capacity change from 0 to 512 [ 487.316958][ T9767] loop9: detected capacity change from 0 to 256 [ 487.351213][ T4431] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 487.381697][ T4431] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 487.454395][ T4431] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 487.547864][ T4431] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 487.616579][ T4431] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 487.643952][ T9777] loop6: detected capacity change from 0 to 1024 [ 487.676016][ T4431] koneplus 0003:1E7D:2D51.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.8-1/input0 [ 488.080088][ T7308] usb 9-1: USB disconnect, device number 6 [ 488.172179][ T9794] fido_id[9794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 501.323041][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.329395][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 529.000874][ T7280] Bluetooth: hci4: command 0x0406 tx timeout [ 549.482796][ T7280] Bluetooth: hci1: command 0x0406 tx timeout [ 549.496044][ T7280] Bluetooth: hci0: command 0x0406 tx timeout [ 562.766123][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.772458][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.559372][ T4429] Bluetooth: hci3: command 0x0406 tx timeout [ 624.202313][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.208625][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.439546][ T27] INFO: task syz-executor:4173 blocked for more than 143 seconds. [ 634.447598][ T27] Not tainted syzkaller #0 [ 634.456879][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.466001][ T27] task:syz-executor state:D stack:22832 pid: 4173 ppid: 4171 flags:0x00004002 [ 634.481649][ T27] Call Trace: [ 634.484988][ T27] [ 634.487963][ T27] __schedule+0x11c3/0x4350 [ 634.494713][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 634.503345][ T27] ? lock_chain_count+0x20/0x20 [ 634.508243][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 634.515487][ T27] ? release_firmware_map_entry+0x190/0x190 [ 634.523894][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 634.531788][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 634.537025][ T27] schedule+0x11b/0x1e0 [ 634.547527][ T27] io_schedule+0x7c/0xd0 [ 634.554180][ T27] bit_wait_io+0xd/0xc0 [ 634.558470][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 634.566740][ T27] ? bit_wait+0xc0/0xc0 [ 634.574316][ T27] ? __wait_on_bit+0x170/0x170 [ 634.581847][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 634.586929][ T27] ? bit_waitqueue+0x30/0x30 [ 634.594391][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 634.602326][ T27] do_get_write_access+0x134/0xe40 [ 634.607482][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 634.615294][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 634.623870][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 634.631795][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 634.637115][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 634.645228][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 634.656128][ T27] ext4_dirty_inode+0xbf/0x100 [ 634.663992][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 634.671729][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 634.678376][ T27] generic_update_time+0x1cd/0x1f0 [ 634.692515][ T27] file_update_time+0x3c0/0x440 [ 634.697433][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 634.703805][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 634.708859][ T27] ? wp_page_shared+0x15b/0x6c0 [ 634.718234][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 634.724725][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 634.733719][ T27] do_page_mkwrite+0x168/0x3c0 [ 634.738509][ T27] wp_page_shared+0x163/0x6c0 [ 634.743573][ T27] handle_mm_fault+0x1fbd/0x4440 [ 634.748580][ T27] ? get_page+0xe0/0xe0 [ 634.756748][ T27] ? vmacache_find+0x238/0x590 [ 634.766141][ T27] ? find_vma+0xd2/0x230 [ 634.775145][ T27] do_user_addr_fault+0x494/0xc90 [ 634.781976][ T27] exc_page_fault+0x60/0x100 [ 634.786591][ T27] ? clear_bhb_loop+0x30/0x80 [ 634.795330][ T27] asm_exc_page_fault+0x22/0x30 [ 634.800427][ T27] RIP: 0033:0x7f765a407ad6 [ 634.804849][ T27] RSP: 002b:00007ffd2cb88d50 EFLAGS: 00010202 [ 634.815881][ T27] RAX: 00007f765838e000 RBX: 0000555586853240 RCX: 0000000000000004 [ 634.824576][ T27] RDX: 00000000000011ea RSI: 0000555586859050 RDI: 0000000000000010 [ 634.836791][ T27] RBP: 00007ffd2cb89250 R08: 0000555586859138 R09: 0000000000000086 [ 634.845380][ T27] R10: 000055558683fe90 R11: 00007f765a783e20 R12: 00007ffd2cb89090 [ 634.857557][ T27] R13: 00007ffd2cb88e80 R14: 585858582e7a7973 R15: 00007ffd2cb88dd0 [ 634.865949][ T27] [ 634.876805][ T27] INFO: task syz.0.1805:9781 blocked for more than 143 seconds. [ 634.886191][ T27] Not tainted syzkaller #0 [ 634.895572][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.904493][ T27] task:syz.0.1805 state:D stack:27504 pid: 9781 ppid: 4188 flags:0x00004004 [ 634.917812][ T27] Call Trace: [ 634.922401][ T27] [ 634.925344][ T27] __schedule+0x11c3/0x4350 [ 634.933831][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 634.940241][ T27] ? lock_chain_count+0x20/0x20 [ 634.945149][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 634.957292][ T27] ? release_firmware_map_entry+0x190/0x190 [ 634.966719][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 634.976555][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 634.987086][ T27] schedule+0x11b/0x1e0 [ 634.995836][ T27] io_schedule+0x7c/0xd0 [ 635.004465][ T27] bit_wait_io+0xd/0xc0 [ 635.008681][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 635.018362][ T27] ? bit_wait+0xc0/0xc0 [ 635.022805][ T27] ? __wait_on_bit+0x170/0x170 [ 635.027614][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 635.037394][ T27] ? bit_waitqueue+0x30/0x30 [ 635.042253][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 635.047478][ T27] do_get_write_access+0x134/0xe40 [ 635.056607][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 635.063265][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 635.073385][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 635.080915][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 635.087766][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 635.101143][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 635.106656][ T27] ext4_dirty_inode+0xbf/0x100 [ 635.115860][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 635.121943][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 635.127029][ T27] generic_update_time+0x1cd/0x1f0 [ 635.136129][ T27] file_update_time+0x3c0/0x440 [ 635.142134][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 635.147300][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 635.156325][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 635.163966][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 635.174093][ T27] ? count_memcg_event_mm+0x324/0x370 [ 635.179738][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 635.185907][ T27] ? verify_lock_unused+0x140/0x140 [ 635.196494][ T27] do_page_mkwrite+0x168/0x3c0 [ 635.202873][ T27] handle_mm_fault+0x1e47/0x4440 [ 635.207845][ T27] ? get_page+0xe0/0xe0 [ 635.219983][ T27] ? vmacache_find+0x4f0/0x590 [ 635.224798][ T27] ? vmacache_update+0xa0/0x100 [ 635.233655][ T27] ? find_vma+0x1df/0x230 [ 635.238033][ T27] do_user_addr_fault+0x494/0xc90 [ 635.244521][ T27] exc_page_fault+0x60/0x100 [ 635.254331][ T27] asm_exc_page_fault+0x22/0x30 [ 635.259488][ T27] RIP: 0033:0x7ff05b18aba9 [ 635.263915][ T27] RSP: 002b:00007fff53da0260 EFLAGS: 00010202 [ 635.274186][ T27] RAX: 0000001b32723000 RBX: ffffffff81afe51d RCX: 0000001b32722ff8 [ 635.282503][ T27] RDX: 0000001b3232421c RSI: 0000000000000008 RDI: 00007ff05c06c720 [ 635.295958][ T27] RBP: 00000000000001fd R08: 00007ff05b527000 R09: 00007ff05b529000 [ 635.304251][ T27] R10: 0000000081afe521 R11: 0000000000000002 R12: 00007ff05b53d128 [ 635.317561][ T27] R13: 0000000000002b83 R14: ffffffff81afe1bc R15: 00007ff05c06c720 [ 635.328688][ T27] ? validate_mm+0x5ec/0xa50 [ 635.339048][ T27] ? validate_mm+0x94d/0xa50 [ 635.344210][ T27] [ 635.354861][ T27] INFO: task syz.9.1806:9789 blocked for more than 144 seconds. [ 635.364008][ T27] Not tainted syzkaller #0 [ 635.368979][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.381873][ T27] task:syz.9.1806 state:D stack:27408 pid: 9789 ppid: 8078 flags:0x00004004 [ 635.393536][ T27] Call Trace: [ 635.396851][ T27] [ 635.403111][ T27] __schedule+0x11c3/0x4350 [ 635.407670][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 635.414779][ T27] ? lock_chain_count+0x20/0x20 [ 635.424318][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 635.432343][ T27] ? release_firmware_map_entry+0x190/0x190 [ 635.438275][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 635.448369][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 635.454587][ T27] schedule+0x11b/0x1e0 [ 635.458767][ T27] io_schedule+0x7c/0xd0 [ 635.466513][ T27] bit_wait_io+0xd/0xc0 [ 635.472636][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 635.478162][ T27] ? bit_wait+0xc0/0xc0 [ 635.486508][ T27] ? __wait_on_bit+0x170/0x170 [ 635.492332][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 635.498907][ T27] ? bit_waitqueue+0x30/0x30 [ 635.506937][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 635.513226][ T27] do_get_write_access+0x134/0xe40 [ 635.518425][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 635.527819][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 635.536295][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 635.547005][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 635.554462][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 635.563295][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 635.568866][ T27] ext4_dirty_inode+0xbf/0x100 [ 635.574657][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 635.584512][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 635.590501][ T27] generic_update_time+0x1cd/0x1f0 [ 635.595663][ T27] file_update_time+0x3c0/0x440 [ 635.605514][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 635.611675][ T27] ? mark_lock+0x94/0x320 [ 635.616061][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 635.624274][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 635.631023][ T27] ? pte_alloc_one+0x287/0x310 [ 635.635811][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 635.646928][ T27] ? count_memcg_event_mm+0x324/0x370 [ 635.654982][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 635.665220][ T27] ? verify_lock_unused+0x140/0x140 [ 635.671430][ T27] do_page_mkwrite+0x168/0x3c0 [ 635.676244][ T27] handle_mm_fault+0x1e47/0x4440 [ 635.684394][ T27] ? get_page+0xe0/0xe0 [ 635.688575][ T27] ? vmacache_find+0x4e3/0x590 [ 635.695327][ T27] ? vmacache_update+0xa0/0x100 [ 635.704791][ T27] ? find_vma+0x1df/0x230 [ 635.710391][ T27] do_user_addr_fault+0x494/0xc90 [ 635.715446][ T27] exc_page_fault+0x60/0x100 [ 635.732040][ T27] asm_exc_page_fault+0x22/0x30 [ 635.736942][ T27] RIP: 0033:0x7fbe36ab3c09 [ 635.747192][ T27] RSP: 002b:00007ffc37568cb0 EFLAGS: 00010202 [ 635.757448][ T27] RAX: 0000001b34324000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 635.771715][ T27] RDX: 0000001b34323ffc RSI: 00000000003ffde8 RDI: 00007fbe37995700 [ 635.782623][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fbe36e52000 [ 635.792355][ T27] R10: 00007fbe37995700 R11: 0000000000000000 R12: 0000000000000000 [ 635.805104][ T27] R13: 000000000000070a R14: ffffffff819d82f4 R15: 00007fbe37995720 [ 635.814970][ T27] ? trace_user_enter+0x74/0x190 [ 635.822947][ T27] [ 635.831589][ T27] INFO: task syz.6.1807:9802 blocked for more than 144 seconds. [ 635.841814][ T27] Not tainted syzkaller #0 [ 635.846796][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.857481][ T27] task:syz.6.1807 state:D stack:27664 pid: 9802 ppid: 7561 flags:0x00004004 [ 635.873238][ T27] Call Trace: [ 635.876724][ T27] [ 635.883738][ T27] __schedule+0x11c3/0x4350 [ 635.888338][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 635.896823][ T27] ? lock_chain_count+0x20/0x20 [ 635.904849][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 635.913504][ T27] ? release_firmware_map_entry+0x190/0x190 [ 635.921277][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 635.927229][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 635.934966][ T27] schedule+0x11b/0x1e0 [ 635.940873][ T27] io_schedule+0x7c/0xd0 [ 635.945157][ T27] bit_wait_io+0xd/0xc0 [ 635.951841][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 635.957363][ T27] ? bit_wait+0xc0/0xc0 [ 635.963911][ T27] ? __wait_on_bit+0x170/0x170 [ 635.968728][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 635.976620][ T27] ? bit_waitqueue+0x30/0x30 [ 635.985382][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 635.994941][ T27] do_get_write_access+0x134/0xe40 [ 636.002072][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 636.012648][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 636.018863][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 636.027878][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 636.035711][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 636.046733][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 636.054655][ T27] ext4_dirty_inode+0xbf/0x100 [ 636.061289][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 636.067122][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 636.074761][ T27] generic_update_time+0x1cd/0x1f0 [ 636.081658][ T27] file_update_time+0x3c0/0x440 [ 636.086539][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 636.096543][ T27] ? mark_lock+0x94/0x320 [ 636.104175][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 636.113263][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 636.119004][ T27] ? pte_alloc_one+0x287/0x310 [ 636.125611][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 636.135122][ T27] ? __rwlock_init+0x140/0x140 [ 636.141588][ T27] ? count_memcg_event_mm+0x324/0x370 [ 636.147010][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 636.154698][ T27] do_page_mkwrite+0x168/0x3c0 [ 636.161271][ T27] handle_mm_fault+0x1e47/0x4440 [ 636.166236][ T27] ? get_page+0xe0/0xe0 [ 636.172848][ T27] ? vmacache_find+0x4e3/0x590 [ 636.177659][ T27] ? vmacache_update+0xa0/0x100 [ 636.184314][ T27] ? find_vma+0x1df/0x230 [ 636.188658][ T27] do_user_addr_fault+0x494/0xc90 [ 636.196162][ T27] exc_page_fault+0x60/0x100 [ 636.208162][ T27] ? clear_bhb_loop+0x30/0x80 [ 636.218667][ T27] asm_exc_page_fault+0x22/0x30 [ 636.225357][ T27] RIP: 0033:0x7f2c8583cea3 [ 636.232182][ T27] RSP: 002b:00007ffd5fa6c9b0 EFLAGS: 00010246 [ 636.238273][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d464000 [ 636.249022][ T27] RDX: 0000001b2d424000 RSI: 0000000000400000 RDI: 00007f2c85bb7708 [ 636.261393][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.270374][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 636.278561][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd5fa6cc40 [ 636.291643][ T27] [ 636.294856][ T27] [ 636.294856][ T27] Showing all locks held in the system: [ 636.304219][ T27] 6 locks held by kworker/u4:0/9: [ 636.316349][ T27] #0: ffff888141580138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 636.332291][ T27] #1: ffffc90000ce7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 636.345937][ T27] #2: ffff88814d2560e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 636.364087][ T27] #3: ffff88814d258c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 636.377884][ T27] #4: ffff88814d25a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 636.388662][ T27] #5: ffff8880741c8c70 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 636.402397][ T27] 1 lock held by khungtaskd/27: [ 636.407266][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 636.418413][ T27] 2 locks held by getty/3942: [ 636.430354][ T27] #0: ffff88802cd6f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 636.445115][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 636.456068][ T27] 3 locks held by syz-executor/4173: [ 636.465357][ T27] #0: ffff88807a907828 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 636.476388][ T27] #1: ffff88814d256558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 636.490665][ T27] #2: ffff88814d25a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 636.502357][ T27] 3 locks held by syz.0.1805/9781: [ 636.507501][ T27] #0: ffff88807a901628 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 636.523087][ T27] #1: ffff88814d256558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 636.534901][ T27] #2: ffff88814d25a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 636.550411][ T27] 3 locks held by syz.9.1806/9789: [ 636.555564][ T27] #0: ffff888024cfe328 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 636.569934][ T27] #1: ffff88814d256558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 636.583149][ T27] #2: ffff88814d25a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 636.594586][ T27] 3 locks held by syz.6.1807/9802: [ 636.602130][ T27] #0: ffff88807b718128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 636.613787][ T27] #1: ffff88814d256558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 636.627648][ T27] #2: ffff88814d25a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 636.643195][ T27] [ 636.645536][ T27] ============================================= [ 636.645536][ T27] [ 636.656507][ T27] NMI backtrace for cpu 0 [ 636.660860][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 636.668065][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 636.678119][ T27] Call Trace: [ 636.681402][ T27] [ 636.684333][ T27] dump_stack_lvl+0x188/0x250 [ 636.689025][ T27] ? show_regs_print_info+0x20/0x20 [ 636.694226][ T27] ? load_image+0x410/0x410 [ 636.698730][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 636.704105][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 636.709218][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 636.714158][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 636.720319][ T27] ? _printk+0xda/0x130 [ 636.724474][ T27] ? load_image+0x410/0x410 [ 636.728980][ T27] ? load_image+0x410/0x410 [ 636.733499][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 636.739673][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 636.745657][ T27] watchdog+0xe1b/0xe60 [ 636.749817][ T27] kthread+0x42e/0x520 [ 636.753882][ T27] ? hungtask_pm_notify+0x40/0x40 [ 636.758901][ T27] ? kthread_blkcg+0xd0/0xd0 [ 636.763491][ T27] ret_from_fork+0x1f/0x30 [ 636.767915][ T27] [ 636.770946][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.790652][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 636.797525][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 636.804732][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 636.814783][ T27] Call Trace: [ 636.818074][ T27] [ 636.821005][ T27] dump_stack_lvl+0x188/0x250 [ 636.825689][ T27] ? show_regs_print_info+0x20/0x20 [ 636.830898][ T27] ? load_image+0x410/0x410 [ 636.835425][ T27] panic+0x2f8/0x850 [ 636.839365][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 636.845021][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 636.849535][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 636.855102][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 636.861263][ T27] watchdog+0xe5a/0xe60 [ 636.865425][ T27] kthread+0x42e/0x520 [ 636.869507][ T27] ? hungtask_pm_notify+0x40/0x40 [ 636.874530][ T27] ? kthread_blkcg+0xd0/0xd0 [ 636.879210][ T27] ret_from_fork+0x1f/0x30 [ 636.883644][ T27] [ 636.886774][ T27] Kernel Offset: disabled [ 636.891111][ T27] Rebooting in 86400 seconds..