last executing test programs: 5m54.385064483s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 5m53.759184276s ago: executing program 1 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x23}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) close(r0) 5m52.871703826s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.3/config\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x10000) 5m52.386822363s ago: executing program 32 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.3/config\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x10000) 4m11.747725952s ago: executing program 0 (id=961): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000001040)={[{@shortname_winnt}, {@numtail}, {@shortname_win95}, {@uni_xlate}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}, {@utf8}, {@shortname_winnt}, {@shortname_winnt}]}, 0x3, 0x28c, &(0x7f0000000280)="$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") mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) 4m11.331321417s ago: executing program 0 (id=965): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) 4m10.762252129s ago: executing program 0 (id=971): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xd, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 4m10.47776422s ago: executing program 0 (id=974): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@resgid}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) llistxattr(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) 4m9.847597674s ago: executing program 0 (id=979): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) 4m8.26388162s ago: executing program 0 (id=1004): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) 4m7.873618089s ago: executing program 33 (id=1004): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) 3m32.89912118s ago: executing program 4 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 3m32.659803113s ago: executing program 4 (id=1279): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x285, 0x4) 3m32.245436147s ago: executing program 4 (id=1282): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x201, 0x0) write(r0, 0x0, 0x0) 3m31.965989178s ago: executing program 4 (id=1285): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m29.691395257s ago: executing program 4 (id=1302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) 3m27.685967138s ago: executing program 4 (id=1317): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)='\f5', 0x2}], 0x2) 3m27.268802044s ago: executing program 34 (id=1317): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)='\f5', 0x2}], 0x2) 1m16.175507028s ago: executing program 3 (id=2571): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 1m16.019637926s ago: executing program 3 (id=2572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x1, 0x10000}, {0x10, 0x117, 0x2}], 0x20}}], 0x2, 0x0) 1m15.804302105s ago: executing program 3 (id=2575): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 1m15.547680441s ago: executing program 3 (id=2578): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x5548, &(0x7f000000c240)="$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") creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='./file2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 1m14.435431932s ago: executing program 3 (id=2593): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x800c08, &(0x7f0000000880)=ANY=[@ANYBLOB="2c000000000000000000000000000000000000368e18987f65074da9aa02d5c22f380a5a9b1bf6df5fe94fecc077ff0f0000000000003e3c4841007b05e32677f3cc1a5f8cf7b0aa7c663fc50a97352d138da8c4552aa3a94e4c45dcc46730a6d39de66a636bc4", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=0x0, @ANYBLOB="03caf6e0fd24605de6f19fad4f8ec8c4213dcbadeb3e8eedbe12aaa343c65846e508c625eb08a1983c308640b04479bb130159cc65ff515ada8d79f60fac037ba523970744b2e2c679363e3b1737e2bb", @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6f5608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba653b5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244000000000000000000"], 0x21, 0x62c8, &(0x7f0000007880)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 1m12.936808742s ago: executing program 3 (id=2604): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2042, 0x5d) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000480)="c2", 0x1}], 0x1, 0x8, 0x1000) 57.779748652s ago: executing program 35 (id=2604): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2042, 0x5d) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000480)="c2", 0x1}], 0x1, 0x8, 0x1000) 4.442707759s ago: executing program 7 (id=3088): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000600), 0x3, 0x55a3, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005140)='./file0\x00', 0x80000, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001000)={{0xffffffff}, '/dev/nullb0\x00'}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 3.068994797s ago: executing program 2 (id=3100): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25110000000800150001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) 2.632913155s ago: executing program 2 (id=3104): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r0, 0x0, 0x0) 2.244320376s ago: executing program 2 (id=3109): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000200)="16", 0x1}], 0x1}, 0x43) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x1000000) 2.189379666s ago: executing program 7 (id=3111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/ieee80211/phy0/netdev:wlan0/state\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 1.743349346s ago: executing program 8 (id=3115): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1f8) 1.644858844s ago: executing program 5 (id=3116): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) 1.562568769s ago: executing program 6 (id=3117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.485130872s ago: executing program 8 (id=3118): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.452452208s ago: executing program 5 (id=3119): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000900)="01020304", 0x4, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.304446085s ago: executing program 8 (id=3120): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x8, @mcast2, 0x8001}, {0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x5, {[0x4, 0x2, 0x7, 0x1, 0xa, 0xf, 0x7, 0x2]}}, 0x5c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 1.272988811s ago: executing program 6 (id=3121): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0', 0x1) 1.175566788s ago: executing program 7 (id=3122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 1.148073183s ago: executing program 2 (id=3123): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) 1.113799439s ago: executing program 5 (id=3124): r0 = openat$ocfs2_control(0xffffff9c, &(0x7f00000001c0), 0x80, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) close_range(r0, 0xffffffffffffffff, 0x0) 958.595147ms ago: executing program 8 (id=3125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000080) 927.550963ms ago: executing program 6 (id=3126): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x4010) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="00300000000000003c001a803800048034"], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 915.376045ms ago: executing program 2 (id=3127): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x82, 0x57b3, 0x3, 0x9}, 0x10) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x40000000000007f, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x3467028987bc7b9, 0x9200000000000000) 837.518559ms ago: executing program 7 (id=3128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x90) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="651a2d5f67726f75702f5f796576656e7420731b6489a82e", 0x18) 636.455275ms ago: executing program 5 (id=3129): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006a00)={0x2020}, 0xbd) 612.89623ms ago: executing program 8 (id=3130): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = eventfd(0x8001) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x2, r2, 0x0, 0x0, 0x1000080001, 0x0, 0x0, r2}]) 594.646063ms ago: executing program 6 (id=3131): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='mountproto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 497.10314ms ago: executing program 7 (id=3132): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) write(r0, &(0x7f00000001c0)="64ecf9eaf0400ea33689d9ebcb3c37b33924a19c", 0x14) 408.316366ms ago: executing program 6 (id=3133): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 332.97088ms ago: executing program 5 (id=3134): unshare(0x26020480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d) 240.809846ms ago: executing program 7 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac05, 0xfac0c, 0xfac04, 0xfac01, 0xfac0d]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 185.871427ms ago: executing program 8 (id=3136): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 169.241819ms ago: executing program 6 (id=3137): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x1c1}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000440), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 128.376527ms ago: executing program 5 (id=3138): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x800, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xc, 0x9, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0xb, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x7ffe, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0xff, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x4, 0x9, 0x5, 0x6252, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d5b, 0x0, 0x401, 0xfff, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x0, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x900, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0xfffffa93, 0xfa, 0x7, 0x9f9, 0x1, 0x1f, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x3, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x4, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x102, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x7, 0x2, 0xa0000, 0x6a, 0x9, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10001, 0x1c0000, 0x8, 0xaa3, 0x38e4, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x4]}, 0x45c) 0s ago: executing program 2 (id=3139): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) kernel console output (not intermixed with test programs): ng removed oldalloc option [ 327.702071][T10607] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.741043][T10498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.788603][T10498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.836671][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.866484][T10607] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 327.887258][T10607] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.965579][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 327.987582][T10498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.163253][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 328.192568][T10498] device hsr_slave_0 entered promiscuous mode [ 328.255003][T10498] device hsr_slave_1 entered promiscuous mode [ 328.286943][T10498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.294574][T10498] Cannot create hsr debugfs directory [ 328.632624][T10626] loop5: detected capacity change from 0 to 2048 [ 328.692507][T10626] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.757987][T10632] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.936471][T10594] block2mtd: error: cannot open device /dev/loop0 [ 328.943016][T10601] block2mtd: device name too long [ 329.671182][T10498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.712878][T10498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 329.737499][T10498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.749284][T10653] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 329.779114][T10498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 330.045459][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 330.052955][T10498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.091345][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.100563][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.112399][T10498] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.136378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.156365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.176775][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.183935][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.243157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.253629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.289710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.329399][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.336661][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.366278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.409496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.426328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.457778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.496634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.551019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.621810][T10498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.710355][T10498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.777178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.798948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.860981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.912715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.970242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.042798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.140936][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.157909][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.213191][T10498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.379942][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.409829][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.451524][T10668] loop6: detected capacity change from 0 to 131072 [ 331.472244][T10668] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945) [ 331.481357][T10668] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 331.491403][T10668] F2FS-fs (loop6): invalid crc value [ 331.566499][T10668] F2FS-fs (loop6): Found nat_bits in checkpoint [ 331.581617][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.609102][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.625934][T10668] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 331.633077][T10668] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 331.669232][T10498] device veth0_vlan entered promiscuous mode [ 331.701966][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.723235][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.765396][T10668] F2FS-fs (loop6): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix. [ 331.798726][T10498] device veth1_vlan entered promiscuous mode [ 331.934333][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.960470][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.000474][T10498] device veth0_macvtap entered promiscuous mode [ 332.033991][T10498] device veth1_macvtap entered promiscuous mode [ 332.142801][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.211547][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.242428][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.284268][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.330310][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.372847][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.395602][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.417830][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.448752][T10498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.484356][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.507904][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.541474][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.572013][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.614587][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.665074][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.666083][ T7621] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 332.686357][T10716] loop7: detected capacity change from 0 to 512 [ 332.722647][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.746679][T10716] EXT4-fs: Ignoring removed nobh option [ 332.752300][T10716] EXT4-fs: Ignoring removed oldalloc option [ 332.790161][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.825179][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.875744][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.886501][T10716] EXT4-fs: old and new quota format mixing [ 332.897222][ T7621] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 332.916166][T10498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.935050][T10498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.939302][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.976013][T10498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.008335][T10498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.018338][ T7621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.058435][ T7621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 333.071332][T10498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.099512][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.112988][T10498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.139716][ T7621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.150944][T10498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.160694][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.195915][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.227822][ T7621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 333.244374][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.295604][ T7621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.335407][ T7621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 333.363401][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.414476][ T7621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.443171][T10728] loop7: detected capacity change from 0 to 512 [ 333.460134][ T7621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 333.518614][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.565485][T10670] block2mtd: error: cannot open device /dev/loop0 [ 333.578053][ T7621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.599208][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 333.599222][ T26] audit: type=1800 audit(1790753044.784:249): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2234" name="bus" dev="loop7" ino=1048654 res=0 errno=0 [ 333.665154][ T7621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 333.690066][ T1214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.708602][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.729492][ T1214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.765111][ T7621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.777741][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.826257][ T7621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 333.848714][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.908668][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.926510][ T7621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.945195][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.971598][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.979223][ T7621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 334.012382][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 334.066134][ T7621] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 334.098053][ T7621] usb 7-1: config 0 interface 0 has no altsetting 0 [ 334.129984][ T7621] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 334.168541][ T7621] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 334.188828][ T7621] usb 7-1: Product: syz [ 334.211869][ T7621] usb 7-1: Manufacturer: syz [ 334.235926][ T7621] usb 7-1: SerialNumber: syz [ 334.263142][ T7621] usb 7-1: config 0 descriptor?? [ 334.331257][ T7621] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 334.649552][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 334.657969][ T6247] usb 7-1: USB disconnect, device number 9 [ 334.688240][ T6247] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 335.340564][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2244'. [ 335.753564][T10768] loop5: detected capacity change from 0 to 512 [ 335.920978][T10753] loop2: detected capacity change from 0 to 131072 [ 335.946539][T10753] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 335.955962][T10753] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 335.967742][T10753] F2FS-fs (loop2): invalid crc value [ 336.013296][T10753] F2FS-fs (loop2): Found nat_bits in checkpoint [ 336.067888][ T26] audit: type=1800 audit(1790753047.254:250): pid=10768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2247" name="bus" dev="loop5" ino=1048658 res=0 errno=0 [ 336.090187][T10753] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 336.097737][T10753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 336.195335][T10753] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix. [ 336.764782][ T4274] Bluetooth: hci0: command 0x0433 tx timeout [ 337.077267][T10810] loop5: detected capacity change from 0 to 64 [ 337.262701][ T26] audit: type=1800 audit(1790753048.444:251): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2262" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 338.347557][ T26] audit: type=1326 audit(1790753049.534:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffce1983a88 code=0x7ffc0000 [ 338.481960][ T26] audit: type=1326 audit(1790753049.534:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3759e159 code=0x7ffc0000 [ 338.596928][ T26] audit: type=1326 audit(1790753049.534:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3759e159 code=0x7ffc0000 [ 338.641406][ T26] audit: type=1326 audit(1790753049.534:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3759e159 code=0x7ffc0000 [ 338.703644][ T26] audit: type=1326 audit(1790753049.534:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffce1983a88 code=0x7ffc0000 [ 338.859139][ T26] audit: type=1326 audit(1790753049.534:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5b3759e159 code=0x7ffc0000 [ 338.974721][ T26] audit: type=1326 audit(1790753049.534:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffce1983a88 code=0x7ffc0000 [ 339.084332][ T26] audit: type=1326 audit(1790753049.534:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3759e159 code=0x7ffc0000 [ 339.138515][T10877] loop6: detected capacity change from 0 to 512 [ 339.211185][ T26] audit: type=1326 audit(1790753049.534:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3759e159 code=0x7ffc0000 [ 339.331329][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'. [ 339.370155][ T26] audit: type=1326 audit(1790753049.564:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffce1983a88 code=0x7ffc0000 [ 339.489799][ T26] audit: type=1326 audit(1790753049.564:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3759e159 code=0x7ffc0000 [ 339.620557][ T26] audit: type=1326 audit(1790753049.564:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3759e159 code=0x7ffc0000 [ 339.645054][T10885] ALSA: mixer_oss: invalid OSS volume '' [ 339.653650][T10886] loop5: detected capacity change from 0 to 512 [ 339.738747][ T26] audit: type=1326 audit(1790753049.574:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.5.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffce1983a88 code=0x7ffc0000 [ 339.749231][T10888] loop7: detected capacity change from 0 to 256 [ 341.021975][T10932] ip_tables: iptables: counters copy to user failed while replacing table [ 341.390851][T10946] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2313'. [ 341.732400][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2324'. [ 341.954533][ T7621] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 342.144617][ T7621] usb 3-1: Using ep0 maxpacket: 32 [ 342.152162][ T7621] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 342.167459][ T7621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.186577][ T7621] usb 3-1: config 0 descriptor?? [ 342.196898][T10980] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2332'. [ 342.246930][ T7621] as10x_usb: device has been detected [ 342.263132][ T7621] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 342.301431][ T7621] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 342.336937][ T7621] as10x_usb: error during firmware upload part1 [ 342.343611][ T7621] Registered device nBox DVB-T Dongle [ 342.422140][ T4320] usb 3-1: USB disconnect, device number 15 [ 342.472324][ T4320] Unregistered device nBox DVB-T Dongle [ 342.479368][ T4320] as10x_usb: device has been disconnected [ 343.541070][T11011] loop7: detected capacity change from 0 to 4096 [ 343.690059][T11024] IPv6: NLM_F_REPLACE set, but no existing node found! [ 343.880068][ T8145] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 343.927891][ T8145] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 344.204536][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 344.381542][T11030] loop2: detected capacity change from 0 to 8192 [ 344.438532][T11030] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 344.469031][T11030] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 344.484369][T11030] REISERFS (device loop2): using ordered data mode [ 344.516680][T11030] reiserfs: using flush barriers [ 344.602066][T11030] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 344.644716][T11030] REISERFS (device loop2): checking transaction log (loop2) [ 344.718538][T11030] REISERFS (device loop2): Using r5 hash to sort names [ 344.733774][T11030] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 345.631517][T11052] loop2: detected capacity change from 0 to 8192 [ 345.716854][T11052] loop2: p1 < > p2 < > p3 p4 < > [ 345.737664][T11052] loop2: partition table partially beyond EOD, truncated [ 345.775557][T11052] loop2: p1 start 67108864 is beyond EOD, truncated [ 345.819179][T11052] loop2: p3 start 100859904 is beyond EOD, truncated [ 345.964496][ T6247] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 345.991673][T11073] loop5: detected capacity change from 0 to 16 [ 346.022344][T11073] erofs: (device loop5): mounted with root inode @ nid 36. [ 346.100173][T11073] overlayfs: failed to get redirect (-117) [ 346.166249][ T6247] usb 3-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config [ 346.187023][ T6247] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 194, using maximum allowed: 30 [ 346.232251][ T6247] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 346.268434][ T6247] usb 3-1: config 1 interface 1 has no altsetting 0 [ 346.284200][ T6247] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 346.307983][ T6247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.572767][ T6247] usb 3-1: selecting invalid altsetting 0 [ 346.778892][ T6247] usb 3-1: string descriptor 0 read error: -71 [ 346.795332][ T6247] usb 3-1: USB disconnect, device number 16 [ 347.126120][ T5233] udevd[5233]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.743625][T11107] loop7: detected capacity change from 0 to 1024 [ 347.892566][T11107] hfsplus: xattr exists yet [ 348.024570][ T47] hfsplus: bad catalog file entry [ 348.251298][T11115] batman_adv: Routing algorithm 'B' is not supported [ 348.519565][T11124] loop6: detected capacity change from 0 to 512 [ 348.683855][ T4320] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 348.840689][T11135] loop5: detected capacity change from 0 to 512 [ 348.879253][ T4320] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 348.919218][T11135] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 348.922538][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.972224][T11135] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2394: bg 0: block 104: invalid block bitmap [ 349.019354][ T4320] usb 8-1: Product: syz [ 349.028367][ T4320] usb 8-1: Manufacturer: syz [ 349.033025][ T4320] usb 8-1: SerialNumber: syz [ 349.072711][T11135] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 349.098392][ T4320] usb 8-1: config 0 descriptor?? [ 349.139986][T11135] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2394: invalid indirect mapped block 1 (level 1) [ 349.191366][T11135] EXT4-fs (loop5): 1 truncate cleaned up [ 349.200857][T11135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 349.257552][T11135] EXT4-fs (loop5): shut down requested (2) [ 349.298469][T11147] batman_adv: Routing algorithm 'B' is not supported [ 349.456696][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 349.519405][ T4320] usb 8-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 349.548902][ T4320] usb 8-1: Firmware version (0.0) predates our first public release. [ 349.578440][ T4320] usb 8-1: Please update to version 0.2 or newer [ 349.903448][T11166] netlink: 'syz.5.2410': attribute type 1 has an invalid length. [ 349.911786][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2410'. [ 349.923193][T11166] netlink: 'syz.5.2410': attribute type 1 has an invalid length. [ 349.931161][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2410'. [ 349.934269][ T4320] usb 8-1: USB disconnect, device number 10 [ 349.952564][T11166] iwpm_send_hello: Unable to send a nlmsg [ 350.556555][T11187] program syz.7.2420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.571401][T11184] loop5: detected capacity change from 0 to 1024 [ 350.602000][T11184] EXT4-fs: Ignoring removed orlov option [ 350.669402][T11184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 350.955753][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 351.152949][T11200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2424'. [ 351.293033][T11206] loop6: detected capacity change from 0 to 512 [ 351.382045][T11206] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 351.438430][T11206] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.510954][T11214] loop5: detected capacity change from 0 to 512 [ 351.586618][T11214] EXT4-fs: Ignoring removed nobh option [ 351.620371][T11214] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 351.682990][T11223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2433'. [ 351.748232][T11214] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2429: attempt to clear invalid blocks 1 len 1 [ 351.802823][T11214] EXT4-fs (loop5): Remounting filesystem read-only [ 351.810223][T11214] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 351.816986][ T7189] EXT4-fs (loop6): unmounting filesystem. [ 351.854777][T11214] EXT4-fs (loop5): Remounting filesystem read-only [ 351.869076][T11214] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2429: invalid indirect mapped block 1819239214 (level 0) [ 351.951522][T11214] EXT4-fs (loop5): Remounting filesystem read-only [ 351.973683][T11214] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2429: invalid indirect mapped block 1819239214 (level 1) [ 352.020205][T11214] EXT4-fs (loop5): Remounting filesystem read-only [ 352.033224][T11214] EXT4-fs (loop5): 1 truncate cleaned up [ 352.040562][T11214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 352.538811][T11235] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 352.892621][T11241] fuse: Bad value for 'fd' [ 353.052343][T11229] loop2: detected capacity change from 0 to 40427 [ 353.094848][T11229] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 353.102633][T11229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 353.162533][T11229] F2FS-fs (loop2): invalid crc value [ 353.208648][T11229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 353.391693][T11229] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 353.418050][T11229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 353.585129][T11261] loop7: detected capacity change from 0 to 128 [ 354.095599][T11272] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2455'. [ 354.735839][T11276] loop7: detected capacity change from 0 to 512 [ 354.742262][ T7621] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 354.803400][T11276] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 354.852954][T11276] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.2457: bg 0: block 104: invalid block bitmap [ 354.878036][T11276] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 354.899760][T11276] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2457: invalid indirect mapped block 1 (level 1) [ 354.915936][T11276] EXT4-fs (loop7): 1 truncate cleaned up [ 354.921633][T11276] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 354.963902][T11276] EXT4-fs (loop7): shut down requested (2) [ 354.996697][ T7621] usb 7-1: config 0 has an invalid interface number: 4 but max is 3 [ 355.005194][T11282] zero sized request [ 355.023484][ T7621] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 355.032456][ T7621] usb 7-1: config 0 has no interface number 0 [ 355.063858][ T7621] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 355.078500][ T8145] EXT4-fs (loop7): unmounting filesystem. [ 355.092625][ T7621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.132306][ T7621] usb 7-1: config 0 descriptor?? [ 355.181634][ T7621] ums-realtek 7-1:0.4: USB Mass Storage device detected [ 355.397676][ T7621] usb 7-1: USB disconnect, device number 10 [ 355.663652][T11304] loop7: detected capacity change from 0 to 256 [ 355.689888][T11306] loop2: detected capacity change from 0 to 128 [ 355.753546][T11304] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 356.293670][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 356.310972][T11322] netlink: 'syz.3.2473': attribute type 1 has an invalid length. [ 356.511224][T11332] loop7: detected capacity change from 0 to 128 [ 356.525857][T11329] loop2: detected capacity change from 0 to 512 [ 356.539479][T11332] EXT4-fs: Ignoring removed i_version option [ 356.576038][T11329] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 356.602781][T11334] kAFS: bad VL server IP address [ 356.620217][T11329] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 356.629966][T11332] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 356.665222][T11332] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 356.670894][T11329] EXT4-fs (loop2): orphan cleanup on readonly fs [ 356.697822][ T32] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 356.739045][T11329] __quota_error: 17 callbacks suppressed [ 356.739065][T11329] Quota error (device loop2): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 356.760652][T11329] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 356.776889][T11329] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 356.805561][T11329] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2476: bg 0: block 15: invalid block bitmap [ 356.853141][T11329] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 356.884709][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 356.894930][ T32] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 356.904328][T11329] EXT4-fs (loop2): 1 truncate cleaned up [ 356.910042][T11329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 356.913192][ T32] usb 6-1: config 179 has no interface number 0 [ 356.937760][ T32] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 356.968027][ T8145] EXT4-fs (loop7): unmounting filesystem. [ 356.978657][ T32] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 357.011161][ T32] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 357.066415][ T32] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 357.099164][ T32] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.147550][ T32] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 357.178272][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.200510][T10498] EXT4-fs (loop2): unmounting filesystem. [ 357.218275][T11326] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 357.390756][T11344] loop6: detected capacity change from 0 to 8192 [ 357.501102][T11344] loop6: p1 < > p2 < > p3 p4 < > [ 357.506808][T11344] loop6: partition table partially beyond EOD, truncated [ 357.517023][T11344] loop6: p1 start 67108864 is beyond EOD, truncated [ 357.529790][T11344] loop6: p3 start 100859904 is beyond EOD, truncated [ 357.591657][ T32] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input20 [ 357.683155][ T7621] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 357.806539][ T6242] usb 6-1: USB disconnect, device number 13 [ 357.812566][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 357.812618][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 357.844702][ T6242] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 357.905063][ T7621] usb 7-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config [ 357.915810][ T7621] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 194, using maximum allowed: 30 [ 357.927710][ T7621] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 357.942729][ T7621] usb 7-1: config 1 interface 1 has no altsetting 0 [ 357.949823][ T7621] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 357.959491][ T7621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.201496][ T7621] usb 7-1: selecting invalid altsetting 0 [ 358.427429][ T7621] usb 7-1: string descriptor 0 read error: -71 [ 358.470222][T11349] zero sized request [ 358.483829][ T7621] usb 7-1: USB disconnect, device number 11 [ 359.084096][T11364] netlink: 'syz.5.2489': attribute type 1 has an invalid length. [ 359.179151][T11368] loop2: detected capacity change from 0 to 16 [ 359.232298][T11368] erofs: (device loop2): mounted with root inode @ nid 36. [ 359.320209][T11372] loop5: detected capacity change from 0 to 128 [ 359.356332][T11372] EXT4-fs: Ignoring removed i_version option [ 359.396065][T11372] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 359.438939][T11372] ext4 filesystem being mounted at /482/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.660163][T11379] bonding: no command found in bonding_masters - use +ifname or -ifname [ 359.675319][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 360.090068][T11367] loop7: detected capacity change from 0 to 32768 [ 360.145547][T11367] JBD2: Ignoring recovery information on journal [ 360.202885][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 360.221651][T11367] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 360.299289][ T8145] ocfs2: Unmounting device (7,7) on (node local) [ 360.574497][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2507'. [ 360.652483][T11399] loop6: detected capacity change from 0 to 8192 [ 360.696277][T11399] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 360.722920][T11399] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 360.764525][T11409] loop7: detected capacity change from 0 to 512 [ 360.779600][T11399] REISERFS (device loop6): using ordered data mode [ 360.816956][T11399] reiserfs: using flush barriers [ 360.826848][T11411] bonding: no command found in bonding_masters - use +ifname or -ifname [ 360.850034][T11399] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 360.853512][ T5722] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 360.897823][T11409] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 360.921105][T11409] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.953165][T11399] REISERFS (device loop6): checking transaction log (loop6) [ 361.005107][T11409] EXT4-fs error (device loop7): ext4_get_first_dir_block:3585: inode #12: comm syz.7.2509: Attempting to read directory block (0) that is past i_size (3) [ 361.082817][ T5722] usb 6-1: Using ep0 maxpacket: 16 [ 361.094816][ T5722] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.136593][ T5722] usb 6-1: config 0 has no interface number 0 [ 361.177414][ T5722] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 361.229736][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.267556][ T8145] EXT4-fs (loop7): unmounting filesystem. [ 361.273806][ T5722] usb 6-1: config 0 descriptor?? [ 361.330515][T11399] REISERFS (device loop6): Using tea hash to sort names [ 361.369757][T11399] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 361.636945][T11399] REISERFS warning (device loop6): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=3171692, len=3 - odd [ 361.886936][ T5722] uclogic 0003:28BD:0071.000C: failed retrieving string descriptor #100: -71 [ 361.899767][ T5722] uclogic 0003:28BD:0071.000C: failed retrieving pen parameters: -71 [ 361.918925][ T5722] uclogic 0003:28BD:0071.000C: pen probing failed: -71 [ 361.934368][ T5722] uclogic 0003:28BD:0071.000C: failed probing parameters: -71 [ 361.951505][ T5722] uclogic: probe of 0003:28BD:0071.000C failed with error -71 [ 361.991171][ T5722] usb 6-1: USB disconnect, device number 14 [ 362.730174][T11425] loop6: detected capacity change from 0 to 32768 [ 362.800592][T11425] JBD2: Ignoring recovery information on journal [ 362.917601][T11425] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 363.201929][ T7189] ocfs2: Unmounting device (7,6) on (node local) [ 363.534529][ T26] audit: type=1807 audit(1790753074.723:282): action=measure uid>1 res=1 [ 363.535061][T11466] ima: policy update completed [ 363.572786][ T26] audit: type=1802 audit(1790753074.763:283): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.7.2534" res=1 errno=0 [ 363.665981][T11444] loop2: detected capacity change from 0 to 32768 [ 363.931620][T11475] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.482734][ T26] audit: type=1326 audit(1790753075.673:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11491 comm="syz.2.2547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffea85eca88 code=0x0 [ 364.506946][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2546'. [ 364.520286][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2546'. [ 364.664179][ T26] audit: type=1807 audit(1790753075.853:285): action=measure uid>1 res=1 [ 364.674597][T11499] ima: policy update completed [ 364.685467][ T26] audit: type=1802 audit(1790753075.873:286): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.6.2549" res=1 errno=0 [ 364.707398][T11471] loop5: detected capacity change from 0 to 32768 [ 364.761309][T11471] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 364.874428][T11498] loop7: detected capacity change from 0 to 8192 [ 364.943467][T11498] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 364.992577][T11498] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 365.022024][T11498] REISERFS (device loop7): using ordered data mode [ 365.062614][T11498] reiserfs: using flush barriers [ 365.117307][T11498] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 365.203083][T11498] REISERFS (device loop7): checking transaction log (loop7) [ 365.237814][ T26] audit: type=1326 audit(1790753076.423:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11512 comm="syz.3.2556" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffdcf7c8a88 code=0x0 [ 365.273114][ T5233] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 365.587098][T11498] REISERFS (device loop7): Using tea hash to sort names [ 365.612141][T11498] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 365.744165][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 365.761523][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 365.883502][T11498] REISERFS warning (device loop7): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=3171692, len=3 - odd [ 366.588293][T11547] loop6: detected capacity change from 0 to 512 [ 366.704463][T11547] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 366.727808][T11547] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.869012][T11547] EXT4-fs error (device loop6): ext4_get_first_dir_block:3585: inode #12: comm syz.6.2566: Attempting to read directory block (0) that is past i_size (3) [ 366.931242][T11559] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.043208][ T7189] EXT4-fs (loop6): unmounting filesystem. [ 367.123259][ T26] audit: type=1326 audit(1790753078.313:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.7.2579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffc4790ca88 code=0x0 [ 367.360751][T11576] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.522349][ T5725] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 367.714558][ T5725] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 367.740916][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.777564][ T5725] usb 7-1: config 0 descriptor?? [ 367.800809][ T5725] cp210x 7-1:0.0: cp210x converter detected [ 368.215981][ T5725] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 368.257300][ T5725] usb 7-1: cp210x converter now attached to ttyUSB0 [ 368.446182][ T5725] usb 7-1: USB disconnect, device number 12 [ 368.487316][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 368.521443][ T5725] cp210x 7-1:0.0: device disconnected [ 368.712924][T11612] xt_hashlimit: size too large, truncated to 1048576 [ 369.151085][T11619] loop5: detected capacity change from 0 to 512 [ 369.203517][T11619] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 369.283786][T11619] EXT4-fs (loop5): 1 truncate cleaned up [ 369.289645][T11619] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 369.389205][T11610] loop7: detected capacity change from 0 to 32768 [ 369.430013][T11610] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 369.633491][ T32] kernel write not supported for file bpf-prog (pid: 32 comm: kworker/1:1) [ 369.715032][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 369.776528][ T4468] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 369.864763][T11628] program syz.5.2605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.139091][T11634] loop5: detected capacity change from 0 to 512 [ 370.168966][T11634] EXT4-fs: Ignoring removed nobh option [ 370.188781][ T32] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 370.221229][T11634] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 370.290074][T11634] EXT4-fs (loop5): 1 truncate cleaned up [ 370.317052][T11634] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 370.394274][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 370.411964][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.432309][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 370.443784][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 370.458434][ T32] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 370.468772][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.477138][ T32] usb 7-1: Product: syz [ 370.481618][ T32] usb 7-1: Manufacturer: syz [ 370.496930][ T32] usb 7-1: SerialNumber: syz [ 370.524932][ T32] usb 7-1: config 0 descriptor?? [ 370.597256][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 370.746251][ T32] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 370.991581][T11630] usb 7-1: Couldn't submit interrupt_out_urb -90 [ 371.023911][ T5725] usb 7-1: USB disconnect, device number 13 [ 371.301988][ T32] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 371.507331][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 371.517475][ T32] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 371.551889][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.577549][ T32] usb 6-1: Product: syz [ 371.598087][ T32] usb 6-1: Manufacturer: syz [ 371.612344][ T32] usb 6-1: SerialNumber: syz [ 371.619365][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2619'. [ 371.634169][ T32] usb 6-1: config 0 descriptor?? [ 371.852362][ T32] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 371.939663][T11658] netlink: 'syz.7.2621': attribute type 5 has an invalid length. [ 372.270560][ T32] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 372.318018][ T32] usb 6-1: USB disconnect, device number 15 [ 373.311985][ T4320] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 373.379331][T11698] loop5: detected capacity change from 0 to 1024 [ 373.505089][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.531724][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.562194][ T4320] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 373.571299][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.619624][ T4320] usb 3-1: config 0 descriptor?? [ 373.844378][ T4320] usbhid 3-1:0.0: can't add hid device: -71 [ 373.853635][ T4320] usbhid: probe of 3-1:0.0 failed with error -71 [ 373.868869][ T4320] usb 3-1: USB disconnect, device number 17 [ 374.434801][ T4320] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 374.621582][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 374.631892][ T127] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 374.640987][ T4320] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 374.661544][ T4320] usb 3-1: config 0 has no interface number 0 [ 374.667716][ T4320] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.692127][ T4320] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.721537][ T4320] usb 3-1: config 0 interface 52 has no altsetting 0 [ 374.728309][ T4320] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 374.748678][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.771806][ T5722] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 374.782969][ T4320] usb 3-1: config 0 descriptor?? [ 374.817131][ T127] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 374.838975][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.864590][ T127] usb 6-1: config 0 descriptor?? [ 374.895446][ T127] cp210x 6-1:0.0: cp210x converter detected [ 374.970126][ T5722] usb 8-1: Using ep0 maxpacket: 32 [ 374.991204][ T5722] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.003739][ T4320] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input21 [ 375.020369][ T5722] usb 8-1: config 0 has no interface number 0 [ 375.028947][ T5722] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.034959][ T3624] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 375.074040][ T5722] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.084521][ T5722] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 375.094602][ T5722] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.117590][ T5722] usb 8-1: config 0 descriptor?? [ 375.146998][ T3624] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 375.191292][ T3624] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 375.238341][ T3624] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 375.241752][ T32] usb 3-1: USB disconnect, device number 18 [ 375.306647][ T127] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 375.373010][ T127] usb 6-1: cp210x converter now attached to ttyUSB0 [ 375.572963][ T7621] usb 6-1: USB disconnect, device number 16 [ 375.627941][ T7621] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 375.688508][ T7621] cp210x 6-1:0.0: device disconnected [ 375.756789][ T5722] uclogic 0003:28BD:0094.000D: pen parameters not found [ 375.777689][ T5722] uclogic 0003:28BD:0094.000D: interface is invalid, ignoring [ 375.972732][ T5722] usb 8-1: USB disconnect, device number 11 [ 376.217256][T11728] loop6: detected capacity change from 0 to 40427 [ 376.261916][T11728] F2FS-fs (loop6): Invalid log blocks per segment (1) [ 376.268758][T11728] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 376.306613][T11728] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 376.317254][T11728] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 376.327700][T11728] F2FS-fs (loop6): invalid crc value [ 376.351788][T11728] F2FS-fs (loop6): Found nat_bits in checkpoint [ 376.453441][T11728] F2FS-fs (loop6): Start checkpoint disabled! [ 376.527513][T11728] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 376.559138][T11728] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 376.713587][ T76] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 376.840792][ T76] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 377.019829][ T4331] kworker/u4:6: attempt to access beyond end of device [ 377.019829][ T4331] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 377.099061][ T47] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 377.234630][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.256396][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.983487][T11790] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2678'. [ 378.011495][T11790] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2678'. [ 378.130431][ T26] audit: type=1326 audit(1790753089.313:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11793 comm="syz.5.2680" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffce1983a88 code=0x0 [ 378.495140][T11804] loop7: detected capacity change from 0 to 4096 [ 378.615206][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.626586][T11809] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.033896][T11815] loop6: detected capacity change from 0 to 2048 [ 379.137582][T11815] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.389184][T11817] loop5: detected capacity change from 0 to 4096 [ 379.447382][T11817] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 379.577341][T11825] EXT4-fs error (device loop5): ext4_get_first_dir_block:3605: inode #12: block 80: comm syz.5.2690: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 379.702820][T11825] EXT4-fs (loop5): Remounting filesystem read-only [ 379.709404][T11825] EXT4-fs error (device loop5): ext4_get_first_dir_block:3607: inode #12: comm syz.5.2690: directory missing '..' [ 379.778937][T11825] EXT4-fs (loop5): Remounting filesystem read-only [ 379.926897][T11831] loop7: detected capacity change from 0 to 1024 [ 379.954890][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 380.571764][T11847] loop6: detected capacity change from 0 to 512 [ 380.669174][T11847] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #3: comm syz.6.2702: corrupted inode contents [ 380.744667][T11847] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #3: comm syz.6.2702: mark_inode_dirty error [ 380.776771][T11854] loop7: detected capacity change from 0 to 512 [ 380.824859][T11847] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #3: comm syz.6.2702: corrupted inode contents [ 380.858988][T11854] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 380.902736][T11847] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.2702: mark_inode_dirty error [ 380.991809][T11847] Quota error (device loop6): write_blk: dquota write failed [ 381.000002][T11847] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 381.046249][T11847] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2702: Failed to acquire dquot type 0 [ 381.132776][T11847] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.2702: corrupted inode contents [ 381.175085][T11847] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #16: comm syz.6.2702: mark_inode_dirty error [ 381.197810][T11862] loop2: detected capacity change from 0 to 256 [ 381.238432][T11847] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.2702: corrupted inode contents [ 381.264307][T11862] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 381.312332][T11847] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.2702: mark_inode_dirty error [ 381.336821][T11847] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.2702: corrupted inode contents [ 381.387677][T11847] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 381.423181][T11847] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.2702: corrupted inode contents [ 381.443837][T11847] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.2702: mark_inode_dirty error [ 381.460451][T11847] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 381.482964][T11847] EXT4-fs (loop6): 1 truncate cleaned up [ 381.488831][T11847] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 381.501152][T11847] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.543402][T11866] No such timeout policy "syz1" [ 381.639476][T11847] Quota error (device loop6): do_check_range: Getting dqdh_entries 241 out of range 0-14 [ 381.664056][T11847] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 381.679633][T11847] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2702: Failed to acquire dquot type 1 [ 381.887929][ T7189] EXT4-fs (loop6): unmounting filesystem. [ 382.479381][T11899] No such timeout policy "syz1" [ 383.027658][T11917] loop6: detected capacity change from 0 to 1024 [ 383.108843][T11917] syz.6.2744: attempt to access beyond end of device [ 383.108843][T11917] loop6: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 383.163483][T11917] syz.6.2744: attempt to access beyond end of device [ 383.163483][T11917] loop6: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 383.249099][T11917] syz.6.2744: attempt to access beyond end of device [ 383.249099][T11917] loop6: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 383.306553][T11917] syz.6.2744: attempt to access beyond end of device [ 383.306553][T11917] loop6: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 383.360907][T11917] syz.6.2744: attempt to access beyond end of device [ 383.360907][T11917] loop6: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 383.414053][T11917] syz.6.2744: attempt to access beyond end of device [ 383.414053][T11917] loop6: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 383.456759][T11917] syz.6.2744: attempt to access beyond end of device [ 383.456759][T11917] loop6: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 383.501723][T11917] syz.6.2744: attempt to access beyond end of device [ 383.501723][T11917] loop6: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 383.528812][T11917] syz.6.2744: attempt to access beyond end of device [ 383.528812][T11917] loop6: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 383.571456][T11917] syz.6.2744: attempt to access beyond end of device [ 383.571456][T11917] loop6: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 383.591170][T11931] loop5: detected capacity change from 0 to 512 [ 383.626771][T11931] EXT4-fs: inline encryption not supported [ 383.672354][T11931] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 383.764963][T11931] EXT4-fs (loop5): 1 truncate cleaned up [ 383.780891][T11931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 383.805066][T11933] loop7: detected capacity change from 0 to 4096 [ 383.842640][ T26] audit: type=1326 audit(1790753095.033:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11939 comm="syz.2.2741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffea85eca88 code=0x0 [ 383.936314][T11933] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 383.987552][T11931] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 203 vs 220 free clusters [ 384.154907][T11943] EXT4-fs error (device loop7): ext4_get_first_dir_block:3605: inode #12: block 80: comm syz.7.2739: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 384.224869][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 384.231999][T11943] EXT4-fs (loop7): Remounting filesystem read-only [ 384.238700][T11943] EXT4-fs error (device loop7): ext4_get_first_dir_block:3607: inode #12: comm syz.7.2739: directory missing '..' [ 384.317434][T11943] EXT4-fs (loop7): Remounting filesystem read-only [ 384.468682][ T8145] EXT4-fs (loop7): unmounting filesystem. [ 385.274310][T11945] loop6: detected capacity change from 0 to 32768 [ 385.374418][T11945] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 385.390955][ T32] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 385.517215][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.530340][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.539568][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.549057][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.559188][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 385.567590][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.603235][ T7189] ocfs2: Unmounting device (7,6) on (node local) [ 385.626579][ T32] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 385.636047][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.644471][ T32] usb 6-1: Product: syz [ 385.648671][ T32] usb 6-1: Manufacturer: syz [ 385.653375][ T32] usb 6-1: SerialNumber: syz [ 385.734827][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.746465][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.874485][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.897871][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.036759][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.049342][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.143801][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.154919][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.182714][T11967] chnl_net:caif_netlink_parms(): no params data found [ 386.283900][T11967] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.292296][T11967] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.301450][T11967] device bridge_slave_0 entered promiscuous mode [ 386.312051][T11967] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.322037][T11967] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.332270][T11967] device bridge_slave_1 entered promiscuous mode [ 386.358015][ T32] rtl8150 6-1:1.0: eth13: rtl8150 is detected [ 386.379463][T11967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.431141][T11967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.512564][T11967] team0: Port device team_slave_0 added [ 386.532310][T11967] team0: Port device team_slave_1 added [ 386.541400][ T32] usb 6-1: USB disconnect, device number 17 [ 386.611950][T11967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.618955][T11967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.665810][T11967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.694882][T11967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.706799][T11967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.740088][T11967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.840049][T11967] device hsr_slave_0 entered promiscuous mode [ 386.853006][T11967] device hsr_slave_1 entered promiscuous mode [ 386.860278][T11967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.869828][T11967] Cannot create hsr debugfs directory [ 387.351631][T11967] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 387.361908][T11967] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 387.376801][T11967] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 387.409941][T11967] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 387.593822][T11967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.640735][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 387.674836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.686317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.727391][T11967] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.742441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.753419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.765960][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.773196][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.921152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.941277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.952625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.971882][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.978998][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.991780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.009569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.042914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.056110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.159658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.177496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.199390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.228130][T11967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.238943][T11967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.269548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.280230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.303744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.318971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.334946][ T76] device hsr_slave_0 left promiscuous mode [ 388.346927][ T76] device hsr_slave_1 left promiscuous mode [ 388.354304][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.362273][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.378181][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.386266][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.401345][ T76] device bridge_slave_1 left promiscuous mode [ 388.409566][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.428741][ T76] device bridge_slave_0 left promiscuous mode [ 388.437312][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.486885][ T76] device veth1_macvtap left promiscuous mode [ 388.493263][ T76] device veth0_macvtap left promiscuous mode [ 388.499565][ T76] device veth1_vlan left promiscuous mode [ 388.506058][ T76] device veth0_vlan left promiscuous mode [ 389.423301][ T76] team0 (unregistering): Port device team_slave_1 removed [ 389.490559][ T76] team0 (unregistering): Port device team_slave_0 removed [ 389.558343][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.609929][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.730453][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 390.108107][ T76] bond0 (unregistering): Released all slaves [ 390.247814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 390.309115][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.321341][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.343942][T11967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.492524][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.511822][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.552758][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 390.568118][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.577330][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.595158][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.612930][T11967] device veth0_vlan entered promiscuous mode [ 390.689020][T11967] device veth1_vlan entered promiscuous mode [ 390.747761][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 390.766300][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 390.779079][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.794419][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.808946][T11967] device veth0_macvtap entered promiscuous mode [ 390.827706][T11967] device veth1_macvtap entered promiscuous mode [ 390.902021][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.918797][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.934525][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.945392][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.956405][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.967394][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.977721][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.988601][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.001952][T11967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.010294][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 391.019522][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 391.028093][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 391.038261][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.054340][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.066661][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.079047][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.098246][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.108495][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.124964][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.135219][T11967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.146534][T11967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.158370][T11967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.170597][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 391.179342][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 391.215959][T11967] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.228016][T11967] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.242143][T11967] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.270282][T11967] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.404486][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.426655][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.436048][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 391.473819][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.487928][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.498424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 391.691549][T12033] program syz.6.2764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.709718][T12036] loop8: detected capacity change from 0 to 256 [ 391.800241][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 392.013961][T12042] loop2: detected capacity change from 0 to 512 [ 392.061185][T12042] EXT4-fs: inline encryption not supported [ 392.107728][T12042] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 392.213548][T12042] EXT4-fs (loop2): 1 truncate cleaned up [ 392.219282][T12042] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 392.374851][T12042] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 203 vs 220 free clusters [ 392.562954][T10498] EXT4-fs (loop2): unmounting filesystem. [ 392.684988][T12070] loop5: detected capacity change from 0 to 128 [ 392.752339][T12076] tap0: tun_chr_ioctl cmd 1074025681 [ 392.761177][T12070] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 392.774600][T12070] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.830877][T12070] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks [ 392.889579][T12070] EXT4-fs warning (device loop5): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 393.045714][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 393.526224][T12110] program syz.5.2785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.886568][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 394.012137][T12129] loop8: detected capacity change from 0 to 128 [ 394.058609][T12129] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 394.146745][T12129] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 394.288460][T12142] loop7: detected capacity change from 0 to 8 [ 394.380928][ T9] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 394.553236][T12146] program syz.8.2802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.852439][T12155] tap0: tun_chr_ioctl cmd 1074025681 [ 395.116831][T12165] jffs2: notice: (12165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 395.552392][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2815'. [ 395.610087][ T6247] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 395.644756][ T5722] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 395.802704][T12197] loop8: detected capacity change from 0 to 2048 [ 395.828810][ T6247] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 395.839951][ T6247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.848010][ T6247] usb 3-1: Product: syz [ 395.853349][ T6247] usb 3-1: Manufacturer: syz [ 395.857998][ T6247] usb 3-1: SerialNumber: syz [ 395.865097][T12197] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 395.867181][ T5722] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 395.877267][T12197] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 395.904672][ T5722] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 395.928712][ T5722] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 395.948407][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.962835][T12197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.015153][T12176] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 396.467514][ T32] usb 6-1: USB disconnect, device number 18 [ 396.585644][ T6247] rtl8150 3-1:1.0: eth13: rtl8150 is detected [ 396.805159][ T7621] usb 3-1: USB disconnect, device number 19 [ 397.232983][T12201] loop7: detected capacity change from 0 to 32768 [ 398.109678][ T5593] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 398.329948][ T5593] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 398.351149][ T5593] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.362200][ T4320] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 398.378508][ T5593] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 398.400789][ T5593] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.422126][ T5593] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 398.437718][ T5593] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 398.466778][ T5593] usb 9-1: Product: syz [ 398.477551][ T5593] usb 9-1: Manufacturer: syz [ 398.483454][ T7621] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 398.517865][ T5593] cdc_wdm 9-1:1.0: skipping garbage [ 398.524427][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2840'. [ 398.539392][ T5593] cdc_wdm 9-1:1.0: skipping garbage [ 398.561524][ T5593] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 398.576097][ T5593] cdc_wdm 9-1:1.0: Unknown control protocol [ 398.589600][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 398.605251][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 398.618709][ T4320] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 398.636161][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.655884][ T4320] usb 3-1: config 0 descriptor?? [ 398.702381][ T7621] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.741100][ T7621] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.770537][ T7621] usb 8-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 398.819827][ T32] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 398.823315][ T5593] usb 9-1: USB disconnect, device number 2 [ 398.842193][ T7621] usb 8-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 398.900516][ T7621] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.908640][ T7621] usb 8-1: Product: syz [ 398.929933][ T7621] usb 8-1: Manufacturer: syz [ 398.936403][T12263] loop5: detected capacity change from 0 to 512 [ 398.945109][ T7621] usb 8-1: SerialNumber: syz [ 399.032833][T12263] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 399.047324][ T32] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 399.061357][T12263] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.2841: corrupted in-inode xattr [ 399.062832][ T32] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 399.086401][ T32] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 399.102644][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.121303][ T4320] input: HID 258a:6a88 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:258A:6A88.000E/input/input22 [ 399.129828][T12258] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 399.149843][T12263] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.2841: couldn't read orphan inode 15 (err -117) [ 399.170288][T12263] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 399.416808][ T4320] itetech 0003:258A:6A88.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 399.529086][ T4320] usb 3-1: USB disconnect, device number 20 [ 399.571810][ T5593] usb 7-1: USB disconnect, device number 14 [ 399.601082][ C1] usb 8-1: received EP1 urb->status = -71 [ 399.618382][ T7621] input: as /devices/platform/dummy_hcd.7/usb8/8-1/input/input23 [ 399.720900][ T127] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 399.800896][T12272] IPv6: addrconf: prefix option has invalid lifetime [ 399.929700][ T127] usb 6-1: Using ep0 maxpacket: 32 [ 399.941754][ T127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 400.003593][ T7621] usb 8-1: USB disconnect, device number 12 [ 400.015864][T12271] fido_id[12271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 400.029811][ T127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 10 [ 400.089895][ T127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 400.135338][ T127] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 400.165514][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.177505][T12277] loop2: detected capacity change from 0 to 1024 [ 400.199117][ T127] usb 6-1: Product: syz [ 400.211138][ T127] usb 6-1: Manufacturer: syz [ 400.256727][ T127] usb 6-1: SerialNumber: syz [ 400.297198][T12277] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 400.368109][ T127] usb 6-1: config 0 descriptor?? [ 400.380671][T12277] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 400.393326][ T127] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24 [ 400.424082][T12277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 400.441531][ T26] audit: type=1400 audit(1790753111.633:291): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=12280 comm="syz.8.2845" name="p" offset=43 [ 400.617337][T12284] loop6: detected capacity change from 0 to 16 [ 400.702421][T12284] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 400.798809][ T127] usb 6-1: USB disconnect, device number 19 [ 400.805203][ C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 400.936254][T12289] loop8: detected capacity change from 0 to 16 [ 400.946561][T10498] EXT4-fs (loop2): unmounting filesystem. [ 401.013141][T12289] erofs: (device loop8): mounted with root inode @ nid 36. [ 401.066890][T12289] overlayfs: failed to set xattr on upper [ 401.136606][T12289] overlayfs: ...falling back to index=off,metacopy=off. [ 401.197391][T12296] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.429336][ T5722] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 401.720490][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 401.772545][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.809372][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.830793][ T5722] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 401.854281][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.169982][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2858'. [ 402.315087][ T5722] wacom 0003:056A:033B.000F: unknown main item tag 0x0 [ 402.334934][ T5722] wacom 0003:056A:033B.000F: unknown main item tag 0x0 [ 402.352815][ T5722] wacom 0003:056A:033B.000F: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 402.368628][ T5722] wacom 0003:056A:033B.000F: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 402.383469][ T5722] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.000F/input/input25 [ 402.569306][ T32] usb 3-1: USB disconnect, device number 21 [ 402.764579][T12311] loop6: detected capacity change from 0 to 32768 [ 402.860906][T12329] fido_id[12329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 405.012412][T12369] loop6: detected capacity change from 0 to 32768 [ 405.106174][T12369] read_mapping_page failed! [ 405.127419][T12369] ERROR: (device loop6): txCommit: [ 405.127419][T12369] [ 405.156572][T12376] loop7: detected capacity change from 0 to 32768 [ 405.161078][T12369] ERROR: (device loop6): remounting filesystem as read-only [ 405.225153][T12376] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 scanned by syz.7.2879 (12376) [ 405.272862][T12376] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 405.290949][T12376] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 405.316666][T12376] BTRFS info (device loop7): using free space tree [ 405.413193][T12380] loop2: detected capacity change from 0 to 32768 [ 405.552277][T12400] overlayfs: failed to set xattr on upper [ 405.579199][T12400] overlayfs: ...falling back to index=off,metacopy=off. [ 405.616696][T12400] overlayfs: failed to resolve './file0': -2 [ 405.716089][T12376] BTRFS info (device loop7): enabling ssd optimizations [ 405.986016][ T8145] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 406.059388][ T5722] kernel read not supported for file /dsp1 (pid: 5722 comm: kworker/0:12) [ 406.435245][T12423] loop6: detected capacity change from 0 to 512 [ 407.030188][T12437] loop7: detected capacity change from 0 to 512 [ 407.083337][T12430] loop5: detected capacity change from 0 to 8192 [ 407.095825][T12437] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 407.139106][ T7] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 407.170950][T12430] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 407.225845][T12430] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 407.276683][T12430] REISERFS (device loop5): using ordered data mode [ 407.284838][ T8145] EXT4-fs (loop7): unmounting filesystem. [ 407.289954][T12430] reiserfs: using flush barriers [ 407.330867][T12430] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 407.351157][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.386240][ T7] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.408895][T12443] rnbd_client L211: map_device: Parameters missing [ 407.434501][T12430] REISERFS (device loop5): checking transaction log (loop5) [ 407.453561][ T7] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 407.515741][ T7] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 407.546290][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.588610][ T7] usb 3-1: Product: syz [ 407.612858][ T7] usb 3-1: Manufacturer: syz [ 407.617572][ T7] usb 3-1: SerialNumber: syz [ 407.823905][T12430] REISERFS (device loop5): Using tea hash to sort names [ 407.867949][T12430] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 407.938986][T12430] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 408.318569][ C0] usb 3-1: received EP1 urb->status = -71 [ 408.356850][ T7] input: as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 408.560773][ T7] usb 3-1: USB disconnect, device number 22 [ 408.916403][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.048792][ T7] kernel read not supported for file /dsp1 (pid: 7 comm: kworker/0:0) [ 409.114242][T12486] loop6: detected capacity change from 0 to 64 [ 409.769136][T12496] loop7: detected capacity change from 0 to 8192 [ 409.801388][T12496] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 409.819646][T12496] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 409.861793][T12496] REISERFS (device loop7): using ordered data mode [ 409.920262][T12496] reiserfs: using flush barriers [ 409.926800][T12496] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 409.943456][T12496] REISERFS (device loop7): checking transaction log (loop7) [ 410.225418][T12496] REISERFS (device loop7): Using tea hash to sort names [ 410.233169][T12496] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 410.268679][T12496] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 410.923002][T12501] loop2: detected capacity change from 0 to 32768 [ 410.978809][T12501] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.2916 (12501) [ 411.088901][T12501] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 411.127481][T12501] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 411.167683][T12501] BTRFS info (device loop2): using free space tree [ 411.183776][T12531] loop5: detected capacity change from 0 to 1024 [ 411.439084][T12501] BTRFS info (device loop2): enabling ssd optimizations [ 411.495489][T12538] loop7: detected capacity change from 0 to 4096 [ 411.587173][T12538] EXT4-fs: inline encryption not supported [ 411.653477][T12538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 411.698602][T12538] EXT4-fs (loop7): Test dummy encryption mode enabled [ 411.744812][T10498] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 411.761639][ T47] hfsplus: bad catalog file entry [ 411.816202][T12538] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 411.833499][T12538] System zones: 0-5 [ 411.900036][T12538] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 412.475371][ T8145] EXT4-fs (loop7): unmounting filesystem. [ 413.204651][T12564] loop8: detected capacity change from 0 to 40427 [ 413.605707][T12604] loop5: detected capacity change from 0 to 512 [ 414.237481][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.428948][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.683253][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.944945][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.010866][T12639] loop8: detected capacity change from 0 to 512 [ 415.277881][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.298381][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.317983][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.328905][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.336693][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.344250][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.076718][T12640] chnl_net:caif_netlink_parms(): no params data found [ 416.758777][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.766622][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.791488][T12640] device bridge_slave_0 entered promiscuous mode [ 416.936273][T12640] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.963414][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.987651][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.001323][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.021381][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.044552][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.052923][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 417.070592][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 417.089241][T12640] device bridge_slave_1 entered promiscuous mode [ 417.338249][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.401556][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 417.430562][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.787564][T12640] team0: Port device team_slave_0 added [ 417.793575][T12690] loop8: detected capacity change from 0 to 64 [ 417.896932][T12640] team0: Port device team_slave_1 added [ 417.938506][ T7621] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 418.127627][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.138025][ T7621] usb 8-1: Using ep0 maxpacket: 8 [ 418.145399][ T7621] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 418.153609][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.175447][ T7621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.212090][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.237675][ T7621] pvrusb2: Hardware description: Terratec Grabster AV400 [ 418.254467][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.265569][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.288245][ T7621] pvrusb2: ********** [ 418.295967][ T7621] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 418.318018][ T7621] pvrusb2: Important functionality might not be entirely working. [ 418.327429][ T7621] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 418.354324][ T7621] pvrusb2: ********** [ 418.401417][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.440587][ T2313] pvrusb2: Invalid write control endpoint [ 418.526035][ T9] device hsr_slave_0 left promiscuous mode [ 418.563176][ T9] device hsr_slave_1 left promiscuous mode [ 418.578703][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.605755][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.617294][ T2313] pvrusb2: Invalid write control endpoint [ 418.629830][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.637390][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.641524][ T2313] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 418.672550][ T2313] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 418.685376][ T9] device bridge_slave_1 left promiscuous mode [ 418.704970][ T2313] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 418.708666][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.732080][ T2313] pvrusb2: Device being rendered inoperable [ 418.753742][ T9] device bridge_slave_0 left promiscuous mode [ 418.766481][ T7621] usb 8-1: USB disconnect, device number 13 [ 418.785326][ T2313] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 418.785686][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.801928][ T2313] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 418.848575][ T2313] pvrusb2: Attached sub-driver cx25840 [ 418.863510][ T2313] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 418.891404][ T2313] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 418.997635][ T9] device veth1_macvtap left promiscuous mode [ 419.012007][ T9] device veth0_macvtap left promiscuous mode [ 419.038181][ T9] device veth1_vlan left promiscuous mode [ 419.044064][ T9] device veth0_vlan left promiscuous mode [ 419.157916][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 419.478073][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 420.345056][T12730] block nbd0: server does not support multiple connections per device. [ 420.362873][T12730] block nbd0: shutting down sockets [ 420.552890][T12734] loop8: detected capacity change from 0 to 512 [ 420.654661][T12734] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 420.693549][T12734] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.938658][T11967] EXT4-fs (loop8): unmounting filesystem. [ 421.087643][T12746] loop8: detected capacity change from 0 to 8 [ 421.129121][ T9] team0 (unregistering): Port device team_slave_1 removed [ 421.226709][ T9] team0 (unregistering): Port device team_slave_0 removed [ 421.258061][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 421.324588][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.349442][ T6241] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 421.410899][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.578486][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 421.584756][ T6241] usb 6-1: Using ep0 maxpacket: 8 [ 421.592820][ T6241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.611044][ T6241] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.621462][ T6241] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.635462][ T6241] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 421.645072][ T6241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.664710][ T6241] usb 6-1: config 0 descriptor?? [ 422.299501][ T6241] sony 0003:054C:042F.0010: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 422.311861][ T6241] sony 0003:054C:042F.0010: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.5-1/input0 [ 422.323676][ T6241] sony 0003:054C:042F.0010: failed to claim input [ 422.351109][ T9] bond0 (unregistering): Released all slaves [ 422.369325][ T6241] usb 6-1: USB disconnect, device number 20 [ 422.461347][T12749] fido_id[12749]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 422.546160][T12748] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2990'. [ 422.590859][T12640] device hsr_slave_0 entered promiscuous mode [ 422.608206][T12640] device hsr_slave_1 entered promiscuous mode [ 422.647802][T12640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.665763][T12640] Cannot create hsr debugfs directory [ 422.761630][T12754] loop8: detected capacity change from 0 to 256 [ 422.824169][T12683] chnl_net:caif_netlink_parms(): no params data found [ 423.317703][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 423.354191][T12683] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.387874][T12683] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.439113][T12683] device bridge_slave_0 entered promiscuous mode [ 423.603254][T12683] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.627687][T12683] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.637764][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 423.660041][T12683] device bridge_slave_1 entered promiscuous mode [ 423.678894][T12787] loop5: detected capacity change from 0 to 2048 [ 423.739641][T12787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.791629][T12683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.847241][T12683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.878026][ T6241] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 424.063052][T12792] overlayfs: conflicting lowerdir path [ 424.087991][T12683] team0: Port device team_slave_0 added [ 424.099910][ T6241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.125702][T12683] team0: Port device team_slave_1 added [ 424.129695][ T6241] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.164869][ T6241] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.186650][ T6241] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 424.198950][ T6241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.235562][ T6241] usb 8-1: config 0 descriptor?? [ 424.275308][T12683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.297397][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.396240][T12683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.449649][T12683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.456665][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.544505][T12683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.674724][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.716772][ T6241] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 424.732249][ T6241] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 424.751044][ T6241] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 424.761630][ T6241] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 424.768888][ T6241] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 424.775967][ T6241] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 424.783963][ T6241] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 424.791716][ T6241] wacom 0003:056A:0331.0011: unknown main item tag 0x0 [ 424.822007][ T6241] wacom 0003:056A:0331.0011: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.7-1/input0 [ 424.863388][T12803] vivid-001: disconnect [ 424.879025][T12800] vivid-001: reconnect [ 424.928542][ T6241] usb 8-1: USB disconnect, device number 14 [ 425.031443][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.155419][T12683] device hsr_slave_0 entered promiscuous mode [ 425.193033][T12683] device hsr_slave_1 entered promiscuous mode [ 425.210848][T12683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.223409][T12807] fido_id[12807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 425.248710][T12683] Cannot create hsr debugfs directory [ 425.305707][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.397469][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 425.416160][T12640] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 425.566550][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.630650][T12640] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.694895][T12640] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.721545][T12640] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.747991][T12806] loop5: detected capacity change from 0 to 32768 [ 426.316791][T12809] loop8: detected capacity change from 0 to 32768 [ 426.378189][T12640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.585652][T12830] loop7: detected capacity change from 0 to 256 [ 426.653531][T12830] FAT-fs (loop7): Unrecognized mount option "short’amontinue" or missing value [ 426.817308][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.833131][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.035808][T12640] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.183350][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.219049][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.237459][ T7] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 427.257531][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.264681][ T8220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.285651][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.294969][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.304472][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.311733][ T8220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.350306][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.366218][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.446781][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.461397][ T7] usb 9-1: Using ep0 maxpacket: 8 [ 427.473661][ T7] usb 9-1: unable to get BOS descriptor or descriptor too short [ 427.488004][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 427.500141][ T7] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.512729][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 427.525667][ T7] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.544024][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.556600][ T7] usb 9-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 427.575491][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.600895][ T7] usb 9-1: Product: syz [ 427.605139][ T7] usb 9-1: Manufacturer: syz [ 427.616136][ T7] usb 9-1: SerialNumber: syz [ 427.797226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.818398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.843859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.870414][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 427.880619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.893625][ T7] usb 9-1: 0:1 : does not exist [ 427.900248][ T7] usb 9-1: unit 8 not found! [ 427.957403][ T7] usb 9-1: USB disconnect, device number 3 [ 428.033034][T12640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.101219][T12640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.126766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.143398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.364186][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.375802][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.403714][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.444209][T12849] loop5: detected capacity change from 0 to 32768 [ 428.548325][T12849] XFS (loop5): Mounting V5 Filesystem [ 428.641078][T12849] XFS (loop5): Ending clean mount [ 428.861768][ T4408] XFS (loop5): Unmounting Filesystem [ 428.911344][T12888] mkiss: ax0: crc mode is auto. [ 429.058518][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 429.072254][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.336688][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.362006][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.492698][ T9] device hsr_slave_0 left promiscuous mode [ 429.531867][ T9] device hsr_slave_1 left promiscuous mode [ 429.539652][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.567505][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.598071][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.605543][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.627620][ T9] device bridge_slave_1 left promiscuous mode [ 429.633947][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.668897][ T9] device bridge_slave_0 left promiscuous mode [ 429.681217][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.746633][ T9] device veth1_macvtap left promiscuous mode [ 429.753443][ T9] device veth0_macvtap left promiscuous mode [ 429.770738][ T9] device veth1_vlan left promiscuous mode [ 429.776676][ T9] device veth0_vlan left promiscuous mode [ 429.804787][T12906] loop5: detected capacity change from 0 to 256 [ 430.005578][T12910] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 430.159359][T12912] Bluetooth: MGMT ver 1.22 [ 430.380425][T12918] loop5: detected capacity change from 0 to 512 [ 430.415382][T12918] EXT4-fs: Ignoring removed nobh option [ 430.445456][T12918] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 430.476370][T12918] EXT4-fs (loop5): 1 truncate cleaned up [ 430.496999][T12918] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 430.534495][T12918] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.3037: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 430.694115][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 430.807588][T12925] loop5: detected capacity change from 0 to 8 [ 431.410660][ T9] team0 (unregistering): Port device team_slave_1 removed [ 431.483304][ T9] team0 (unregistering): Port device team_slave_0 removed [ 431.551682][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.623953][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.179818][ T9] bond0 (unregistering): Released all slaves [ 432.311840][T12640] device veth0_vlan entered promiscuous mode [ 432.319029][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.328470][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.342423][T12683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.374347][T12683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.396463][T12640] device veth1_vlan entered promiscuous mode [ 432.457567][T12683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.487293][T12683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.616441][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.637251][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.658877][T12939] input: syz0 as /devices/virtual/input/input33 [ 432.698277][T12640] device veth0_macvtap entered promiscuous mode [ 432.740498][T12640] device veth1_macvtap entered promiscuous mode [ 432.836012][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.889281][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.903810][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.922353][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.938501][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.955930][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.974950][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.014790][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.028859][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.044617][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.058368][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.077955][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.099715][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.115414][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.134765][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.144815][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.164543][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.198208][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.228342][T12683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.236411][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.248382][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.262350][T12640] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.268251][ T26] audit: type=1400 audit(1790753144.463:292): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=12950 comm="syz.8.3048" name="//o" offset=76 [ 433.315443][T12640] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.325029][T12640] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.336155][T12640] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.382810][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.403828][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.425226][T12683] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.538113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.547899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.572411][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.579659][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.594792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.606303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.621268][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.628528][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.683637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.693367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.709149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.765618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.781988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.792472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.828966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.876826][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.892746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.901462][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.937306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.977231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.000225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.017339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.036357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.084583][T12683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.130356][T12968] loop5: detected capacity change from 0 to 16 [ 434.163652][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.192785][T12968] erofs: (device loop5): mounted with root inode @ nid 36. [ 434.198441][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.251196][T12968] erofs: (device loop5): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 434.270290][T12683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.289310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 434.303167][T12968] erofs: (device loop5): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 434.314374][T12968] bio_check_eod: 23 callbacks suppressed [ 434.314474][T12968] syz.5.3053: attempt to access beyond end of device [ 434.314474][T12968] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 434.319036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.343246][T12968] syz.5.3053: attempt to access beyond end of device [ 434.343246][T12968] loop5: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 434.397092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.471945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 434.497738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 434.554371][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 434.573805][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 434.606148][T12683] device veth0_vlan entered promiscuous mode [ 434.629184][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.640696][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.675018][T12683] device veth1_vlan entered promiscuous mode [ 434.815367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.824453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.877439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 434.922646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.958347][T12683] device veth0_macvtap entered promiscuous mode [ 435.011203][T12683] device veth1_macvtap entered promiscuous mode [ 435.087721][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.117442][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.154533][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.175072][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.200513][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.219469][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.241557][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.265385][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.303675][T12683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.335842][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 435.372437][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 435.400064][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.443734][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.494150][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.529688][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.570976][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.606167][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.647464][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.682805][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.686752][T13012] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3063'. [ 435.702504][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.712900][T12683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.738638][T12683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.778372][T12683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.818032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.834849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 435.865176][T12683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.891319][T12683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.918405][T12683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.949347][T12683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.212866][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.243437][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.303328][T12923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 436.332107][T12923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.357710][T12923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.384536][T12923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 436.491635][T13037] loop5: detected capacity change from 0 to 1024 [ 436.558752][T13037] hfsplus: invalid length 32517 has been corrected to 255 [ 436.800291][T13043] hfsplus: cannot replace xattr [ 436.825268][T13037] hfsplus: b-tree write err: -5, ino 20 [ 436.843461][T13046] loop2: detected capacity change from 0 to 128 [ 437.098314][ T41] hfsplus: b-tree write err: -5, ino 20 [ 437.558550][T13069] loop5: detected capacity change from 0 to 512 [ 437.566054][T13069] EXT4-fs: Ignoring removed orlov option [ 437.646417][T13069] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 1: comm syz.5.3083: invalid block [ 437.688205][T13069] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.3083: couldn't read orphan inode 11 (err -117) [ 437.755952][T13069] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 437.815384][T13078] netlink: 'syz.8.3085': attribute type 34 has an invalid length. [ 437.840060][T13069] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.3083: Directory hole found for htree leaf block 0 [ 438.068441][ T4408] EXT4-fs (loop5): unmounting filesystem. [ 438.482013][ T4274] Bluetooth: unknown link type 85 [ 438.512374][T13102] loop6: detected capacity change from 0 to 512 [ 438.580791][T13102] EXT4-fs (loop6): bad s_min_extra_isize: 65535 [ 439.101351][T13087] loop7: detected capacity change from 0 to 32768 [ 439.146971][T13087] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.3088 (13087) [ 439.228772][T13087] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 439.239221][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.299737][T13087] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 439.326478][T13087] BTRFS info (device loop7): using free space tree [ 439.736261][T13087] BTRFS info (device loop7): enabling ssd optimizations [ 440.041731][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.061661][T13157] netlink: 'syz.8.3106': attribute type 1 has an invalid length. [ 440.094816][T13157] device gretap0 entered promiscuous mode [ 440.155410][T13161] netlink: 'syz.8.3106': attribute type 1 has an invalid length. [ 440.208622][T13087] BTRFS info (device loop7): disk added /dev/nullb0 [ 440.306673][ T8145] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 440.516189][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 440.765792][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3114'. [ 441.154729][T13190] ip_tables: iptables: counters copy to user failed while replacing table [ 441.355293][T13197] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3120'. [ 441.604176][ T5593] wacom 0003:056A:003F.0012: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 441.878502][T13208] fido_id[13208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 446.445676][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.514479][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.752281][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.474116][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.670838][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 539.397820][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 539.404576][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 542.427688][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.908230][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.863977][ T27] INFO: task syz-executor:4259 blocked for more than 143 seconds. [ 587.871864][ T27] Not tainted syzkaller #0 [ 587.884335][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 587.893040][ T27] task:syz-executor state:D stack:21904 pid:4259 ppid:4258 flags:0x00004002 [ 587.904858][ T27] Call Trace: [ 587.908257][ T27] [ 587.911317][ T27] __schedule+0x107f/0x4030 [ 587.916181][ T27] ? mark_lock+0x94/0x320 [ 587.920827][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 587.926112][ T27] ? release_firmware_map_entry+0x187/0x187 [ 587.932078][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 587.938675][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 587.944589][ T27] schedule+0xb9/0x180 [ 587.948748][ T27] io_schedule+0x7c/0xd0 [ 587.953041][ T27] bit_wait_io+0xd/0xc0 [ 587.957761][ T27] __wait_on_bit+0x9b/0x2c0 [ 587.962317][ T27] ? bit_wait+0xc0/0xc0 [ 587.968288][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 587.974126][ T27] ? bit_wait+0xc0/0xc0 [ 587.978330][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 587.983136][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 587.988405][ T27] ? bit_waitqueue+0x30/0x30 [ 587.993176][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 587.998703][ T27] do_get_write_access+0x605/0xf20 [ 588.004055][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 588.010087][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 588.016803][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 588.023007][ T27] ? rcu_is_watching+0x11/0xa0 [ 588.028059][ T27] ext4_reserve_inode_write+0x201/0x290 [ 588.033883][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 588.040845][ T27] ext4_dirty_inode+0xbf/0x100 [ 588.046135][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 588.051995][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 588.057453][ T27] __file_update_time+0x21d/0x240 [ 588.062557][ T27] file_update_time+0x2f3/0x370 [ 588.068546][ T27] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 588.074733][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 588.080095][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 588.085301][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 588.091574][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 588.097104][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 588.102174][ T27] do_page_mkwrite+0x16b/0x5c0 [ 588.107220][ T27] wp_page_shared+0x167/0x370 [ 588.111953][ T27] handle_mm_fault+0x1b1b/0x3d40 [ 588.117282][ T27] ? mt_find+0x157/0x830 [ 588.121630][ T27] ? numa_migrate_prep+0x250/0x250 [ 588.127174][ T27] ? lock_chain_count+0x20/0x20 [ 588.132074][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 588.137771][ T27] do_user_addr_fault+0x58e/0xb20 [ 588.143831][ T27] exc_page_fault+0x60/0x100 [ 588.148473][ T27] ? clear_bhb_loop+0x60/0xb0 [ 588.153189][ T27] asm_exc_page_fault+0x22/0x30 [ 588.158222][ T27] RIP: 0033:0x7fbb5676d155 [ 588.162739][ T27] RSP: 002b:00007ffe718fff08 EFLAGS: 00010207 [ 588.169318][ T27] RAX: 00007fbb51200000 RBX: 0000555573840880 RCX: 00007fbb51200000 [ 588.177696][ T27] RDX: 00007fbb51200fff RSI: 00005555738b4830 RDI: 00007fbb51200fa0 [ 588.186026][ T27] RBP: 00007ffe718fff20 R08: 0000000000000000 R09: 0000000000000000 [ 588.195072][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00005555738424d0 [ 588.203180][ T27] R13: 0000000000000008 R14: 0000000000000001 R15: 0000000000000000 [ 588.211320][ T27] [ 588.214547][ T27] INFO: task syz.6.3137:13240 blocked for more than 143 seconds. [ 588.222283][ T27] Not tainted syzkaller #0 [ 588.227626][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.236633][ T27] task:syz.6.3137 state:D stack:26288 pid:13240 ppid:12640 flags:0x00004004 [ 588.246611][ T27] Call Trace: [ 588.249939][ T27] [ 588.252884][ T27] __schedule+0x107f/0x4030 [ 588.257931][ T27] ? mark_lock+0x94/0x320 [ 588.262310][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 588.268553][ T27] ? release_firmware_map_entry+0x187/0x187 [ 588.275087][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 588.281025][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 588.286433][ T27] schedule+0xb9/0x180 [ 588.290532][ T27] io_schedule+0x7c/0xd0 [ 588.294928][ T27] bit_wait_io+0xd/0xc0 [ 588.299139][ T27] __wait_on_bit+0x9b/0x2c0 [ 588.303775][ T27] ? bit_wait+0xc0/0xc0 [ 588.307990][ T27] out_of_line_wait_on_bit+0x138/0x190 [ 588.314034][ T27] ? bit_wait+0xc0/0xc0 [ 588.318223][ T27] ? __wait_on_bit+0x2c0/0x2c0 [ 588.322985][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 588.328418][ T27] ? bit_waitqueue+0x30/0x30 [ 588.333029][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 588.338589][ T27] do_get_write_access+0x605/0xf20 [ 588.344729][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 588.350769][ T27] __ext4_journal_get_write_access+0x24b/0x6e0 [ 588.357430][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 588.363899][ T27] ? rcu_is_watching+0x11/0xa0 [ 588.368724][ T27] ext4_reserve_inode_write+0x201/0x290 [ 588.375681][ T27] __ext4_mark_inode_dirty+0x161/0x7b0 [ 588.381186][ T27] ext4_dirty_inode+0xbf/0x100 [ 588.386474][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 588.392318][ T27] __mark_inode_dirty+0x2e7/0xe80 [ 588.397499][ T27] __file_update_time+0x21d/0x240 [ 588.402572][ T27] file_update_time+0x2f3/0x370 [ 588.407630][ T27] ? __file_remove_privs+0x5f0/0x5f0 [ 588.412968][ T27] ext4_page_mkwrite+0x1a9/0x10d0 [ 588.418210][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 588.425714][ T27] ? count_memcg_event_mm+0x8a/0x3c0 [ 588.431047][ T27] ? put_page+0x270/0x270 [ 588.435548][ T27] do_page_mkwrite+0x16b/0x5c0 [ 588.440372][ T27] handle_mm_fault+0x199c/0x3d40 [ 588.445453][ T27] ? mt_find+0x157/0x830 [ 588.450320][ T27] ? numa_migrate_prep+0x250/0x250 [ 588.455629][ T27] ? lock_chain_count+0x20/0x20 [ 588.460537][ T27] ? lock_mm_and_find_vma+0xae/0x2f0 [ 588.466160][ T27] do_user_addr_fault+0x58e/0xb20 [ 588.471246][ T27] exc_page_fault+0x60/0x100 [ 588.477086][ T27] asm_exc_page_fault+0x22/0x30 [ 588.481980][ T27] RIP: 0033:0x7f5200672f32 [ 588.486701][ T27] RSP: 002b:00007ffef6249f90 EFLAGS: 00010202 [ 588.492819][ T27] RAX: 0000000000001008 RBX: 00007f5201555720 RCX: 0000000000000000 [ 588.501300][ T27] RDX: 0000001b31a23000 RSI: 0000000000000008 RDI: 00007f5201555720 [ 588.509753][ T27] RBP: 000000000000049c R08: 0000000000000000 R09: 00007f5200a26038 [ 588.522581][ T27] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff8413534f [ 588.530811][ T27] R13: 00007f5200a26038 R14: 0000000000000200 R15: fffffffffffff000 [ 588.539187][ T27] ? __bitmap_weight+0x1f/0xf0 [ 588.544197][ T27] [ 588.547319][ T27] [ 588.547319][ T27] Showing all locks held in the system: [ 588.556272][ T27] 4 locks held by kworker/u4:0/9: [ 588.561335][ T27] #0: ffff8880b8f3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 588.571541][ T27] #1: ffff8880b8f27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x400/0x740 [ 588.583114][ T27] #2: ffff8880b8f28458 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 588.592738][ T27] #3: ffffffff96e99238 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4f0 [ 588.603314][ T27] 1 lock held by rcu_tasks_kthre/12: [ 588.608703][ T27] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 588.619326][ T27] 1 lock held by rcu_tasks_trace/13: [ 588.624724][ T27] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 588.635878][ T27] 1 lock held by khungtaskd/27: [ 588.640763][ T27] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 588.651019][ T27] 1 lock held by syslogd/3621: [ 588.656869][ T27] #0: ffff8880b8f3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 588.667250][ T27] 2 locks held by getty/4025: [ 588.671966][ T27] #0: ffff888030104098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 588.682013][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 588.692280][ T27] 3 locks held by syz-executor/4259: [ 588.697696][ T27] #0: ffff88802a3708d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 588.707788][ T27] #1: ffff88814dc46558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 588.717718][ T27] #2: ffff88814dc52990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 588.727603][ T27] 2 locks held by kworker/u4:7/4337: [ 588.732947][ T27] 4 locks held by kworker/u4:9/12923: [ 588.738476][ T27] #0: ffff888019257938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 588.749355][ T27] #1: ffffc90003e0fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 588.762382][ T27] #2: ffff88814dc460e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 588.772605][ T27] #3: ffff88814dc50c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 588.787044][ T27] 3 locks held by syz.6.3137/13240: [ 588.792279][ T27] #0: ffff888018b1ea58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 588.802338][ T27] #1: ffff88814dc46558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 588.813076][ T27] #2: ffff88814dc52990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 588.822945][ T27] [ 588.826929][ T27] ============================================= [ 588.826929][ T27] [ 588.835479][ T27] NMI backtrace for cpu 0 [ 588.839835][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 588.847077][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 588.857186][ T27] Call Trace: [ 588.860501][ T27] [ 588.863476][ T27] dump_stack_lvl+0x188/0x24e [ 588.868212][ T27] ? show_regs_print_info+0x12/0x12 [ 588.873454][ T27] ? load_image+0x410/0x410 [ 588.878010][ T27] ? vprintk_emit+0x59f/0x6a0 [ 588.882753][ T27] ? printk_sprint+0x460/0x460 [ 588.887555][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 588.892530][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 588.898703][ T27] ? _printk+0xda/0x130 [ 588.902895][ T27] ? load_image+0x410/0x410 [ 588.907429][ T27] ? load_image+0x410/0x410 [ 588.911981][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 588.918083][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 588.924292][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 588.930335][ T27] watchdog+0xf0e/0xf50 [ 588.934574][ T27] ? watchdog+0x1ed/0xf50 [ 588.938935][ T27] kthread+0x29d/0x330 [ 588.943095][ T27] ? hungtask_pm_notify+0x40/0x40 [ 588.948152][ T27] ? kthread_blkcg+0xd0/0xd0 [ 588.952765][ T27] ret_from_fork+0x1f/0x30 [ 588.957275][ T27] [ 588.961260][ T27] Sending NMI from CPU 0 to CPUs 1: [ 588.966707][ C1] NMI backtrace for cpu 1 [ 588.966717][ C1] CPU: 1 PID: 4337 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 588.966733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 588.966744][ C1] Workqueue: bat_events batadv_nc_worker [ 588.966857][ C1] RIP: 0010:check_preemption_disabled+0x59/0x110 [ 588.966886][ C1] Code: 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 cc 65 4c 8b 3d c6 d1 cf 75 41 f6 47 2f 04 [ 588.966929][ C1] RSP: 0018:ffffc90004527a88 EFLAGS: 00000046 [ 588.966943][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000000 [ 588.966953][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2580 RDI: ffffffff8adf68a0 [ 588.966966][ C1] RBP: ffffc90004527bc8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 588.966978][ C1] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: 0000000000000001 [ 588.966989][ C1] R13: 1ffff920008a4f64 R14: 0000000000000246 R15: dffffc0000000000 [ 588.967001][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 588.967015][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.967026][ C1] CR2: 000055e60323c168 CR3: 0000000030bf4000 CR4: 00000000003506e0 [ 588.967040][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.967050][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 588.967060][ C1] Call Trace: [ 588.967065][ C1] [ 588.967073][ C1] lock_acquire+0x181/0x4a0 [ 588.967103][ C1] ? read_lock_is_recursive+0x10/0x10 [ 588.967127][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 588.967151][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 588.967176][ C1] ? batadv_nc_worker+0xce/0x600 [ 588.967199][ C1] batadv_nc_worker+0xeb/0x600 [ 588.967222][ C1] ? batadv_nc_worker+0xce/0x600 [ 588.967247][ C1] ? process_one_work+0x7b4/0x1160 [ 588.967267][ C1] process_one_work+0x8ab/0x1160 [ 588.967294][ C1] ? worker_detach_from_pool+0x240/0x240 [ 588.967316][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 588.967340][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 588.967365][ C1] ? wq_worker_running+0x97/0x190 [ 588.967382][ C1] worker_thread+0xaf5/0x12a0 [ 588.967415][ C1] kthread+0x29d/0x330 [ 588.967429][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 588.967447][ C1] ? kthread_blkcg+0xd0/0xd0 [ 588.967469][ C1] ret_from_fork+0x1f/0x30 [ 588.967498][ C1] [ 588.971334][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 589.216394][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 589.223613][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 589.233686][ T27] Call Trace: [ 589.236984][ T27] [ 589.239940][ T27] dump_stack_lvl+0x188/0x24e [ 589.244642][ T27] ? memcpy+0x3c/0x60 [ 589.248714][ T27] ? show_regs_print_info+0x12/0x12 [ 589.253935][ T27] ? load_image+0x410/0x410 [ 589.258472][ T27] panic+0x2d3/0x710 [ 589.262384][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 589.268043][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 589.272566][ T27] ? load_image+0x410/0x410 [ 589.277094][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 589.283270][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 589.289449][ T27] watchdog+0xf4d/0xf50 [ 589.293625][ T27] ? watchdog+0x1ed/0xf50 [ 589.297973][ T27] kthread+0x29d/0x330 [ 589.302062][ T27] ? hungtask_pm_notify+0x40/0x40 [ 589.307111][ T27] ? kthread_blkcg+0xd0/0xd0 [ 589.311720][ T27] ret_from_fork+0x1f/0x30 [ 589.316164][ T27] [ 589.319781][ T27] Kernel Offset: disabled [ 589.324117][ T27] Rebooting in 86400 seconds..