last executing test programs: 10m52.886808145s ago: executing program 32 (id=514): openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143040, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) 10m50.230347067s ago: executing program 33 (id=532): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000010080)=[{0x50, 0x1, 0x3, 0x4}, {0x6, 0x0, 0x3, 0x5}]}) write$ppp(r0, &(0x7f0000000400)='k\'', 0x2) 10m0.63956585s ago: executing program 34 (id=914): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000001540)="$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") syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f0000000080)={[{@creator={'creator', 0x3d, "83f2824d"}}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}]}, 0x1, 0x331, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 8m16.943604401s ago: executing program 5 (id=1856): unshare(0x2040400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), 0x4) 8m16.807173174s ago: executing program 5 (id=1857): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x7f, 0x4) 8m16.57518045s ago: executing program 5 (id=1860): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) 8m15.563367383s ago: executing program 5 (id=1862): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 8m15.364139228s ago: executing program 5 (id=1864): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioprio_set$uid(0x3, 0x0, 0x0) 8m14.896165799s ago: executing program 5 (id=1869): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 8m14.309538083s ago: executing program 35 (id=1869): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 8m12.854462867s ago: executing program 2 (id=1886): socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x2) unshare(0x22020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800000000000800, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6a9}, &(0x7f0000000280), 0x0) 8m12.638134523s ago: executing program 2 (id=1888): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x1}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @empty}}, {{0xa, 0xfffc, 0x0, @remote, 0x7}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd001829fffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 8m12.265982611s ago: executing program 2 (id=1892): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 8m12.107618155s ago: executing program 2 (id=1894): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9reWxDXbuxef4AhvdZi4qMTsQkFo5tuFMQ/UfBP6ELQvQsRwY0uFHRRcaVI5Mycmd48MPeKj818EM53vjmPmbmZmSv6po4B/DjYbWMRBoQG3hBBAVgiq32rWftF7EjwQVk/Ef2x2PdidX/w8r6lg6utTifb1v1fkxgEzIkZJ9PSuScPjhXPnyAv7o0rhCJZpEr2GpWemCU4VHoVu7PTwQ/HlHhWjORiskVy4Tcn9u9JfWryjnxtAHnl4x/sXuXdrGJmDFGp//oMwgUMAfzQ98b0Z5okrx/ZzjNjKpJex/i2zCV8iv/3V2bCd5EhUYksBQ35Hvr83QifCaji1cFum9VLcovx8Ib9uSNhsth5los5roAhQBWMTFGuoyR2CcBKr3tjRfcHp7a6rc1sM7uWpmtnVp8flSM6ugNsdbJVMtOw6RETBQ8+p/XcOP/T3h6OD5ED5aYGXhe7VvYl3eW8fMKFmAaIcrm5GlL3qe8fi3ZLd3ERJ7EA4PaQh1PZoCa4msJlXto6CBVxEjeHyD4fiLBgBk63r3c29kAgl7YP5Wsk71D1TioON8rWzvrl74ltil0Xu+/2ReDeLvcmKVPhk3jLQ6CGnRYvkqWdVq+3nTCv+QpGSxd950i6utfQNWvGKIgjRQMDAgICAgICAv4SfgYAAP//SqQ9DQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 8m11.87011321s ago: executing program 2 (id=1897): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 8m11.4448133s ago: executing program 2 (id=1900): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) 8m10.907366913s ago: executing program 36 (id=1900): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) 7m29.19100813s ago: executing program 6 (id=2196): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x10012, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(r0, &(0x7f0000000000)=""/269, 0xfffffdef) 7m28.921351896s ago: executing program 6 (id=2197): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) fcntl$getflags(r0, 0x401) 7m28.825796758s ago: executing program 6 (id=2198): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="76657468305fc46f5f6261746164763275"], 0x12) 7m28.531703075s ago: executing program 6 (id=2199): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 7m28.206640553s ago: executing program 6 (id=2201): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r2, @ANYBLOB="08000a00c2"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m27.796924443s ago: executing program 6 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 7m27.504482009s ago: executing program 37 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 5m45.94458239s ago: executing program 8 (id=2914): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfe01}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x69) 5m45.641674057s ago: executing program 8 (id=2916): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m45.453069801s ago: executing program 8 (id=2917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) read$alg(r1, &(0x7f0000000080)=""/28, 0x1c) 5m45.341953684s ago: executing program 8 (id=2919): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 5m44.734642778s ago: executing program 8 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 5m43.786933001s ago: executing program 8 (id=2928): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xe}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e65, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 5m43.240654903s ago: executing program 38 (id=2928): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xe}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e65, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 3m24.771041342s ago: executing program 9 (id=3971): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0xd3) write(r1, &(0x7f00000002c0)='0', 0x1) 3m24.265394194s ago: executing program 9 (id=3972): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 3m24.081086168s ago: executing program 9 (id=3973): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92) 3m23.834955844s ago: executing program 9 (id=3974): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x40c, &(0x7f0000000300)=ANY=[], 0x1, 0x194, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 3m23.423726044s ago: executing program 9 (id=3977): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003540)=[{{&(0x7f0000000300)={0xa, 0xfffe, 0x0, @private2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x9, @private2, 0x8}, 0x1c, &(0x7f0000003180)=[{&(0x7f0000000180)='V[', 0x2}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 3m22.319713559s ago: executing program 9 (id=3985): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x5, 0x201, 0xd36, 0x3ff, 0x1ff, 0x1, 0x8}, 0x20) 3m21.86133899s ago: executing program 39 (id=3985): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x5, 0x201, 0xd36, 0x3ff, 0x1ff, 0x1, 0x8}, 0x20) 2m5.461362888s ago: executing program 3 (id=4474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x27}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}}, 0x20004000) 2m5.239701733s ago: executing program 3 (id=4475): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m4.96814938s ago: executing program 3 (id=4476): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) 2m4.759836945s ago: executing program 3 (id=4478): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) 2m4.600644318s ago: executing program 3 (id=4479): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x6}, 0x2) 2m4.251935676s ago: executing program 3 (id=4481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 2m3.863281166s ago: executing program 40 (id=4481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 13.298339907s ago: executing program 1 (id=5311): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 13.053176943s ago: executing program 1 (id=5314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff00000000fdffffff8500000011000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.679805252s ago: executing program 1 (id=5318): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x2e, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 12.461581767s ago: executing program 1 (id=5321): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 12.060218156s ago: executing program 1 (id=5323): socket$igmp(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) setuid(0xee00) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 11.015746981s ago: executing program 1 (id=5329): r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=""/17, 0x11) 8.404183563s ago: executing program 7 (id=5345): r0 = msgget(0x1, 0x64d) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgsnd(r0, &(0x7f00000001c0)={0x3}, 0x8, 0x800) 7.23764086s ago: executing program 7 (id=5353): r0 = semget$private(0x0, 0x5, 0x100) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0xfff1, 0x1000}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0xfff8}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0xc}], 0x1, 0x0) 6.341053861s ago: executing program 4 (id=5356): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ba57cb7fb6", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="e869b4c8de", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)="0f812ed6a7f2a3a76c196cbd8e7bdee0c3f61bc5a31e9483f6cad55ab536d2ffae7a72f5f0ca19394a5210b00560d560df167616e756286d14bef0e1b4e4835889d525f1756a62cedb7e3dcae43360b7434338ebdb859ea346faa83d564651a516849524932a5011162d3bd40a6c2279bda58ef479a98bbe14434384ea4e5227a1ffb86eba95f46fb279ace73a334e74f08830449f2382cb2c60", 0x9a}, {&(0x7f00000002c0)="540aa3d5e1a861b02ea392d351655e89091a33c5447ec796a214172785ffe0dfab", 0x21}, {&(0x7f0000000300)="8bb303bb5bf1f4943da21c402f544de0a5f772f0d8c06a5f60b8a18ecaf906571caefe89e7a332", 0x27}, {&(0x7f0000000580)="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", 0x4c1}], 0x4}}], 0x3, 0x2401c444) 6.102482197s ago: executing program 4 (id=5357): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x40, r0, 0x801, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x40}}, 0x0) 6.009796619s ago: executing program 7 (id=5359): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.643774718s ago: executing program 4 (id=5360): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 5.462448662s ago: executing program 4 (id=5361): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 5.411168023s ago: executing program 7 (id=5362): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], 0x0, 0x3c}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20) 4.951360474s ago: executing program 7 (id=5363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000180080001"], 0x24}}, 0x0) 4.71202686s ago: executing program 4 (id=5364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010424bd7000fbdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340001010101010100001800490008ac0f000bac0f0005ac0f0002ac0f"], 0x50}, 0x1, 0x0, 0x0, 0x20}, 0x0) 3.755149212s ago: executing program 0 (id=5365): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes128, 0xe6d25b5b2435067b, '\x00', @auto="c71d2396eef939c286450f1fa7afe8f2"}) 3.658121794s ago: executing program 0 (id=5366): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x40000036, r0, 0x0) fanotify_mark(r1, 0x441, 0x8000001, r0, 0x0) 3.523754538s ago: executing program 0 (id=5367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) 3.475115678s ago: executing program 0 (id=5368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 484.469799ms ago: executing program 0 (id=5369): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/del2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000240)="000102030405060708090a0b0c0d", 0xe) 431.81135ms ago: executing program 4 (id=5370): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0000:00:03.0', 0xc) 405.384901ms ago: executing program 7 (id=5371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) writev(r0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="06", 0x1}], 0x1) writev(r0, &(0x7f0000000040), 0x2) 0s ago: executing program 0 (id=5372): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/53, 0x35) getdents64(r0, 0xfffffffffffffffe, 0x29) kernel console output (not intermixed with test programs): netdevsim3: renamed from eth3 [ 608.633179][T17271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.017048][T17053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.040039][T14221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.083461][T17053] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.231382][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.238584][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.358340][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.365525][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.607907][T17053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.114244][T17053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.293912][T17311] usb3503 0-0008: unknown mode is requested [ 610.364346][T17053] veth0_vlan: entered promiscuous mode [ 610.414825][T17311] usb3503 0-0008: usb3503_probe: probed in standby mode [ 610.459046][T17053] veth1_vlan: entered promiscuous mode [ 610.565851][T17053] veth0_macvtap: entered promiscuous mode [ 610.573857][T17311] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 610.688344][T17053] veth1_macvtap: entered promiscuous mode [ 610.780930][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.875111][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.911915][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.946711][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.969624][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.017455][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.077878][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.116330][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.161653][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.231602][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.272611][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.305314][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.342568][T17053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.474591][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.551230][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.592565][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.633589][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.680178][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.736242][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.789809][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.822605][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.858930][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.891827][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.921754][T17053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.965282][T17053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.009119][T17053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.087537][T17053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.136584][T17053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.161047][T17053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.190611][T17053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.276899][T11521] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 612.523092][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.532019][T11521] usb 4-1: Using ep0 maxpacket: 16 [ 612.580492][T11521] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.602859][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.612878][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.643813][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.657503][T11521] usb 4-1: config 0 interface 0 has no altsetting 0 [ 612.711183][T11521] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 612.767551][T11521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.857743][T11521] usb 4-1: config 0 descriptor?? [ 613.333705][T11521] mcp2221 0003:04D8:00DD.001D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 613.634222][T17388] program syz.0.4093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.915386][T11521] usb 4-1: USB disconnect, device number 10 [ 615.375208][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4107'. [ 615.412514][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4107'. [ 615.516802][T11521] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 615.633796][T17444] loop4: detected capacity change from 0 to 256 [ 615.728081][T11521] usb 1-1: Using ep0 maxpacket: 32 [ 615.763417][T11521] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 615.820577][T11521] usb 1-1: config 0 has no interface number 0 [ 615.903686][T11521] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 615.960050][T11521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.003244][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4110'. [ 616.022607][T11521] usb 1-1: Product: syz [ 616.046999][T11521] usb 1-1: Manufacturer: syz [ 616.063942][T11521] usb 1-1: SerialNumber: syz [ 616.110520][T11521] usb 1-1: config 0 descriptor?? [ 616.165285][T11521] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 616.380131][T11521] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 616.455258][T11521] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 616.506898][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4113'. [ 616.744206][T17435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.829918][T17435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.127989][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 617.144049][T17362] usb 1-1: USB disconnect, device number 6 [ 617.196219][T17362] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 617.287023][T17362] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 617.375021][T17362] quatech2 1-1:0.51: device disconnected [ 618.935275][T17523] loop4: detected capacity change from 0 to 64 [ 619.626874][T17362] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 619.867393][T17362] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 619.906591][T17362] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 619.969087][T17362] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 620.021963][T17362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.076898][T17362] usb 4-1: Product: syz [ 620.081100][T17362] usb 4-1: Manufacturer: syz [ 620.131623][T17362] usb 4-1: SerialNumber: syz [ 620.146310][T17559] loop4: detected capacity change from 0 to 2048 [ 620.166357][T17362] usb 4-1: config 0 descriptor?? [ 620.211936][T17362] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 620.227395][T17559] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 620.345924][T17559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.535981][T17565] loop7: detected capacity change from 0 to 512 [ 620.706223][T17565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 620.837582][T17565] ext4 filesystem being mounted at /459/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.848639][T17572] pi3usb30532 0-0005: Error reading config register -5 [ 620.855574][T17572] pi3usb30532: probe of 0-0005 failed with error -5 [ 620.912483][T17572] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 621.067828][T17362] gspca_sunplus: reg_r err -71 [ 621.073614][T17362] sunplus: probe of 4-1:0.0 failed with error -71 [ 621.156894][T17362] usb 4-1: USB disconnect, device number 11 [ 621.425080][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 622.301701][T17607] loop4: detected capacity change from 0 to 4096 [ 623.005998][T17607] ntfs3: loop4: failed to convert "0080" to macinuit [ 623.177221][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 623.343612][T17637] ima: policy update failed [ 623.367773][ T28] audit: type=1802 audit(1787168454.650:121): pid=17637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4165" res=0 errno=0 [ 623.426683][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 623.468941][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 623.502969][ T8] usb 4-1: config 0 has no interface number 0 [ 623.541231][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.613897][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.647331][T17646] loop4: detected capacity change from 0 to 256 [ 623.679079][ T8] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 623.738925][T17646] FAT-fs (loop4): Directory bread(block 64) failed [ 623.754669][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.781638][T17646] FAT-fs (loop4): Directory bread(block 65) failed [ 623.809327][ T8] usb 4-1: config 0 descriptor?? [ 623.838353][T17646] FAT-fs (loop4): Directory bread(block 66) failed [ 623.877746][T17646] FAT-fs (loop4): Directory bread(block 67) failed [ 623.913212][T17646] FAT-fs (loop4): Directory bread(block 68) failed [ 623.938605][ T5776] Bluetooth: hci0: command tx timeout [ 623.957230][T17646] FAT-fs (loop4): Directory bread(block 69) failed [ 623.964129][T17646] FAT-fs (loop4): Directory bread(block 70) failed [ 624.049135][T17646] FAT-fs (loop4): Directory bread(block 71) failed [ 624.055798][T17646] FAT-fs (loop4): Directory bread(block 72) failed [ 624.101671][T17646] FAT-fs (loop4): Directory bread(block 73) failed [ 624.393383][T17646] CacheFiles: Failed to register: -95 [ 624.439891][ T8] uclogic 0003:28BD:0071.001E: pen parameters not found [ 624.496258][ T8] uclogic 0003:28BD:0071.001E: interface is invalid, ignoring [ 624.589694][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.596034][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.762163][ T8] usb 4-1: USB disconnect, device number 12 [ 624.966860][T17666] input: syz0 as /devices/virtual/input/input37 [ 625.091673][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4171'. [ 626.908313][T17713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4186'. [ 627.206757][T11521] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 627.333319][T17705] loop3: detected capacity change from 0 to 32768 [ 627.386647][T17362] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 627.426662][T11521] usb 5-1: Using ep0 maxpacket: 32 [ 627.438101][T11521] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 627.483875][T11521] usb 5-1: config 0 has no interface number 0 [ 627.497317][T17705] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 627.558444][T11521] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 627.590255][T11521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.598641][T17362] usb 1-1: Using ep0 maxpacket: 8 [ 627.628509][T17362] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.676665][T11521] usb 5-1: Product: syz [ 627.686976][T17362] usb 1-1: config 0 has no interface number 0 [ 627.706563][T11521] usb 5-1: Manufacturer: syz [ 627.711195][T11521] usb 5-1: SerialNumber: syz [ 627.726052][T17362] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.781521][T11521] usb 5-1: config 0 descriptor?? [ 627.788879][T17691] loop7: detected capacity change from 0 to 40427 [ 627.817712][T17362] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 627.843215][T11521] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 627.867432][T17362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.917527][T17691] F2FS-fs (loop7): invalid crc value [ 627.952693][T17362] usb 1-1: config 0 descriptor?? [ 628.003446][T17362] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 628.044970][T17691] F2FS-fs (loop7): Found nat_bits in checkpoint [ 628.087679][T11521] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 628.183100][T11521] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 628.243388][T14221] ocfs2: Unmounting device (7,3) on (node local) [ 628.537987][T17716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.594345][T17716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.633831][T17691] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 628.865884][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 628.878086][T11521] usb 5-1: USB disconnect, device number 35 [ 628.916342][T11521] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 628.942625][T17362] usb 1-1: USB disconnect, device number 7 [ 629.014599][T11521] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 629.101716][T11521] quatech2 5-1:0.51: device disconnected [ 631.036199][T17770] loop4: detected capacity change from 0 to 32768 [ 631.171679][T17770] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 631.378575][ T174] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 631.439494][T17770] XFS (loop4): Ending clean mount [ 631.466102][T17770] XFS (loop4): Quotacheck needed: Please wait. [ 631.611926][ T174] usb 4-1: Using ep0 maxpacket: 32 [ 631.661130][T17770] XFS (loop4): Quotacheck: Done. [ 631.678880][ T174] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 631.726769][ T174] usb 4-1: config 0 has no interface number 0 [ 631.788213][ T174] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 631.833656][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.900477][ T174] usb 4-1: Product: syz [ 631.935040][ T174] usb 4-1: Manufacturer: syz [ 631.970152][ T174] usb 4-1: SerialNumber: syz [ 632.015258][ T174] usb 4-1: config 0 descriptor?? [ 632.043623][ T7204] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 632.067886][ T174] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 632.214293][T17819] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 632.316867][ T174] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 632.412176][ T174] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 632.688546][T17792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.763084][T17792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.064236][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 633.074370][T11521] usb 4-1: USB disconnect, device number 13 [ 633.112693][T11521] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 633.212356][T11521] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 633.292804][T11521] quatech2 4-1:0.51: device disconnected [ 634.365459][T17863] loop4: detected capacity change from 0 to 128 [ 634.431700][T17863] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 635.032447][T17878] loop3: detected capacity change from 0 to 256 [ 635.139676][T17878] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 635.263025][T17884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.363040][T17884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.449499][T17884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.517159][T17884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.598058][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 635.809541][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 635.839401][ T8] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 635.871420][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 635.922887][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 635.991885][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 636.088129][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 636.148001][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.247108][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.336844][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.616661][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 636.622216][ T8] usbtmc 1-1:16.0: can't read capabilities [ 636.844045][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 636.861721][T17887] usbtmc 1-1:16.0: Unable to send data, error -71 [ 636.912940][ T8] usb 1-1: USB disconnect, device number 8 [ 636.926714][T17924] WARNING! power/level is deprecated; use power/control instead [ 636.985272][T17927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 637.313311][T17909] loop3: detected capacity change from 0 to 32768 [ 637.486802][T17909] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 637.711550][T17909] XFS (loop3): Ending clean mount [ 637.774090][T17909] XFS (loop3): Quotacheck needed: Please wait. [ 637.880714][T17960] loop4: detected capacity change from 0 to 512 [ 638.001959][T17909] XFS (loop3): Quotacheck: Done. [ 638.073702][T17960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.183838][T17960] ext4 filesystem being mounted at /1003/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 638.392455][T14221] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 638.423668][T17960] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 638.528121][T17974] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 638.649005][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.869682][T17989] loop4: detected capacity change from 0 to 32768 [ 639.902597][T17989] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.4253 (17989) [ 640.066709][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 640.105743][T17989] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 640.198476][T17989] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 640.295040][T17989] BTRFS info (device loop4): using free space tree [ 640.306770][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 640.356723][ T8] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 640.390460][T18018] loop7: detected capacity change from 0 to 256 [ 640.406638][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.455301][ T8] usb 1-1: Product: syz [ 640.482849][ T8] usb 1-1: Manufacturer: syz [ 640.556913][ T8] usb 1-1: SerialNumber: syz [ 640.600880][T18018] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 640.617193][ T8] usb 1-1: config 0 descriptor?? [ 640.654557][T17989] BTRFS info (device loop4): enabling ssd optimizations [ 640.683643][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 640.748573][T17989] BTRFS info (device loop4): auto enabling async discard [ 640.967849][T18018] exFAT-fs (loop7): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 641.093060][ T8] gspca_se401: ExtraFeatures: 255 [ 641.101304][T18018] exFAT-fs (loop7): Filesystem has been set read-only [ 641.311765][ T8] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 641.618060][ T9] usb 1-1: USB disconnect, device number 9 [ 641.750423][ T7204] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 641.894811][T18047] loop3: detected capacity change from 0 to 2048 [ 642.057360][T18052] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.231765][T18047] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 642.396656][T18047] Remounting filesystem read-only [ 643.223828][T18079] pimreg0: tun_chr_ioctl cmd 35111 [ 643.687367][T17362] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 643.908098][T17362] usb 8-1: config 0 has an invalid interface number: 6 but max is 0 [ 643.980426][T17362] usb 8-1: config 0 has no interface number 0 [ 644.019046][T18103] zero sized request [ 644.031381][T17362] usb 8-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 644.090574][T17362] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.171088][T17362] usb 8-1: config 0 descriptor?? [ 644.207614][T17362] ums-realtek 8-1:0.6: USB Mass Storage device detected [ 644.526685][T17362] usb 8-1: USB disconnect, device number 11 [ 644.652999][T18124] Invalid ELF header magic: != ELF [ 644.886010][T18135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.928601][T18135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.982181][T18135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.009045][T18135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.509484][T18147] loop7: detected capacity change from 0 to 512 [ 645.622172][T18147] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.4295: corrupted in-inode xattr: invalid ea_ino [ 645.743097][T18147] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.4295: couldn't read orphan inode 15 (err -117) [ 645.864056][T18147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.131651][T18141] loop3: detected capacity change from 0 to 32768 [ 646.190369][T18141] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.4293 (18141) [ 646.211966][T18165] loop4: detected capacity change from 0 to 512 [ 646.315107][T18165] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 646.386765][T18141] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 646.413929][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.460760][T18141] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 646.486931][T18165] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.4299: corrupted inode contents [ 646.533691][T18141] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 646.609557][T18141] BTRFS info (device loop3): use zstd compression, level 3 [ 646.626683][T18165] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #11: comm syz.4.4299: mark_inode_dirty error [ 646.648084][T18141] BTRFS info (device loop3): using free space tree [ 646.772622][T18165] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4299: invalid indirect mapped block 1 (level 1) [ 646.872467][T18165] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.4299: corrupted inode contents [ 647.003481][T18141] BTRFS info (device loop3): enabling ssd optimizations [ 647.035941][T18165] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 647.069357][T18141] BTRFS info (device loop3): auto enabling async discard [ 647.108779][T18165] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.4299: corrupted inode contents [ 647.194370][T18141] fs-verity: sha256 using implementation "sha256-avx2" [ 647.212015][T18165] EXT4-fs error (device loop4): ext4_truncate:4302: inode #11: comm syz.4.4299: mark_inode_dirty error [ 647.304171][T18165] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 647.392241][T18165] EXT4-fs (loop4): 1 truncate cleaned up [ 647.399845][T18141] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 647.450097][T18165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.677064][T14221] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 647.752619][T18165] CacheFiles: mkdir cache failed with error -105 [ 647.805343][T18165] CacheFiles: Failed to register: -105 [ 648.081560][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.396674][T18222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4308'. [ 648.483485][T18222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4308'. [ 648.746728][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 648.960510][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.008719][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.060823][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 649.097343][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.147062][ T9] usb 1-1: config 0 descriptor?? [ 649.589000][ T9] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 649.655148][ T9] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 649.693029][ T9] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 649.735058][ T9] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 649.784391][ T9] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 649.833783][ T9] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 649.882053][ T9] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 649.935467][ T9] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 650.104715][ T9] cp2112 0003:10C4:EA90.001F: Part Number: 0x00 Device Version: 0x00 [ 650.308549][ T9] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 650.364221][ T9] cp2112: probe of 0003:10C4:EA90.001F failed with error -71 [ 650.463388][ T9] usb 1-1: USB disconnect, device number 10 [ 650.574028][T18261] loop7: detected capacity change from 0 to 512 [ 650.779839][T18261] EXT4-fs error (device loop7): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 650.958247][T18261] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #11: comm syz.7.4317: corrupted inode contents [ 651.037639][T18277] program syz.4.4323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.084235][T18261] EXT4-fs error (device loop7): ext4_dirty_inode:6144: inode #11: comm syz.7.4317: mark_inode_dirty error [ 651.229070][T18261] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.4317: invalid indirect mapped block 1 (level 1) [ 651.358496][T18285] loop4: detected capacity change from 0 to 1024 [ 651.389669][T18261] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #11: comm syz.7.4317: corrupted inode contents [ 651.507239][ T9] kernel write not supported for file /tomoyo/domain_policy (pid: 9 comm: kworker/0:1) [ 651.545374][T18261] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 651.654288][T18261] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #11: comm syz.7.4317: corrupted inode contents [ 651.809640][T18261] EXT4-fs error (device loop7): ext4_truncate:4302: inode #11: comm syz.7.4317: mark_inode_dirty error [ 651.930854][T18261] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 652.052314][T18261] EXT4-fs (loop7): 1 truncate cleaned up [ 652.093848][T18311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4335'. [ 652.123687][T18261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.430109][T18261] CacheFiles: mkdir cache failed with error -105 [ 652.499569][T18261] CacheFiles: Failed to register: -105 [ 652.683865][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.574138][T18347] loop4: detected capacity change from 0 to 736 [ 654.077400][T18357] tipc: Started in network mode [ 654.106688][T18357] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 654.115640][T18357] tipc: Enabling of bearer rejected, failed to enable media [ 656.332075][T18423] CacheFiles: Failed to register: -95 [ 656.705757][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4378'. [ 657.655524][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 657.813821][ T5809] kworker/dying (5809) used greatest stack depth: 16200 bytes left [ 657.883921][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.943399][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.000883][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 658.061588][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.127472][ T9] usb 5-1: config 0 descriptor?? [ 658.569781][ T9] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 658.624332][ T9] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 658.666601][ T9] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 658.673592][ T9] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 658.763114][ T9] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 658.803465][ T9] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 658.852420][ T9] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 658.931320][ T9] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 659.078333][ T9] cp2112 0003:10C4:EA90.0020: Part Number: 0x00 Device Version: 0x00 [ 659.266803][T17363] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 659.280921][ T9] cp2112 0003:10C4:EA90.0020: error requesting SMBus config [ 659.329871][ T9] cp2112: probe of 0003:10C4:EA90.0020 failed with error -71 [ 659.394028][ T9] usb 5-1: USB disconnect, device number 36 [ 659.496772][T17363] usb 4-1: Using ep0 maxpacket: 8 [ 659.521495][T17363] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 659.548695][T17363] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 659.608554][T17363] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 659.667110][T17363] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 659.726199][T17363] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 659.755029][T17363] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.802583][T17363] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 659.834326][T17363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.086043][T17363] usb 4-1: GET_CAPABILITIES returned 0 [ 660.112302][T17363] usbtmc 4-1:16.0: can't read capabilities [ 660.375810][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 660.401420][T18472] usbtmc 4-1:16.0: Unable to send data, error -71 [ 660.419330][T17363] usb 4-1: USB disconnect, device number 14 [ 660.782445][T18508] loop4: detected capacity change from 0 to 512 [ 660.807734][T18508] EXT4-fs: Ignoring removed bh option [ 660.894189][T18508] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 660.973266][T18508] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 661.046135][T18508] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.4395: Corrupt directory, running e2fsck is recommended [ 661.133602][T18508] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 661.171694][T18508] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.4395: corrupted in-inode xattr: e_name out of bounds [ 661.232448][T18508] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.4395: couldn't read orphan inode 15 (err -117) [ 661.291141][T18508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.454058][T18508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4395'. [ 661.584017][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.833714][T18529] UHID_CREATE from different security context by process 195 (syz.0.4401), this is not allowed. [ 661.983599][T18516] loop3: detected capacity change from 0 to 32768 [ 662.128302][T18516] JBD2: Ignoring recovery information on journal [ 662.280981][T18516] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 662.946343][T18562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.978728][T14221] ocfs2: Unmounting device (7,3) on (node local) [ 663.677816][T18577] sctp: [Deprecated]: syz.3.4412 (pid 18577) Use of int in max_burst socket option. [ 663.677816][T18577] Use struct sctp_assoc_value instead [ 664.577814][T18610] loop4: detected capacity change from 0 to 512 [ 664.644680][T18610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.810006][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.074626][T18626] loop4: detected capacity change from 0 to 128 [ 665.164249][T18626] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 665.449416][T18626] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 665.823056][T18649] loop4: detected capacity change from 0 to 1024 [ 665.840837][T18648] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 666.188897][T18659] loop4: detected capacity change from 0 to 128 [ 666.487562][T18666] loop3: detected capacity change from 0 to 8 [ 667.961305][T18691] loop4: detected capacity change from 0 to 32768 [ 668.062861][T18691] XFS (loop4): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 668.292322][ T7204] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 668.347736][T17363] IPVS: starting estimator thread 0... [ 668.508224][T18712] IPVS: using max 35 ests per chain, 84000 per kthread [ 669.524405][ T5829] kernel write not supported for file /snd/midiC2D0 (pid: 5829 comm: kworker/0:5) [ 670.334522][T18747] kAFS: Invalid Command on /proc/fs/afs/cells file [ 670.556322][T18655] syz.7.4447 (18655): drop_caches: 1 [ 670.691155][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.968981][T18757] loop7: detected capacity change from 0 to 64 [ 671.032303][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.400338][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.592294][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.696633][ T5829] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 671.944689][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 671.988537][T13293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 672.003550][T13293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 672.012912][T13293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 672.028178][T13293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 672.036968][T13293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 672.045548][T13293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 672.087675][ T5829] usb 5-1: no configurations [ 672.118797][ T5829] usb 5-1: can't read configurations, error -22 [ 672.207229][ T42] tipc: Left network mode [ 672.436876][ T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 672.646647][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 672.724200][ T8] usb 8-1: config 0 interface 0 has no altsetting 0 [ 672.741885][ T8] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 672.809699][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.868913][ T8] usb 8-1: config 0 descriptor?? [ 673.276744][ T5829] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 673.322816][ T8] petalynx 0003:18B1:0037.0021: bogus close delimiter [ 673.361356][T18770] chnl_net:caif_netlink_parms(): no params data found [ 673.376934][ T8] petalynx 0003:18B1:0037.0021: item 0 0 2 10 parsing failed [ 673.412413][ T8] petalynx 0003:18B1:0037.0021: parse failed [ 673.471609][ T8] petalynx: probe of 0003:18B1:0037.0021 failed with error -22 [ 673.489401][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 673.511725][ T5829] usb 5-1: config 0 has no interface number 0 [ 673.576232][ T5829] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 673.609325][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.655074][ T9] usb 8-1: USB disconnect, device number 12 [ 673.686564][ T5829] usb 5-1: Product: syz [ 673.690786][ T5829] usb 5-1: Manufacturer: syz [ 673.695369][ T5829] usb 5-1: SerialNumber: syz [ 673.763341][ T5829] usb 5-1: config 0 descriptor?? [ 673.903096][T18812] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.4500'. [ 673.981566][T18812] netlink: zone id is out of range [ 673.994658][T18812] netlink: zone id is out of range [ 674.008605][ T5829] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 674.025692][T18812] netlink: zone id is out of range [ 674.039867][T18812] netlink: zone id is out of range [ 674.054975][ T5829] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 674.075849][T18812] netlink: zone id is out of range [ 674.096929][T13293] Bluetooth: hci3: command tx timeout [ 674.131284][T18812] netlink: zone id is out of range [ 674.141676][ T5829] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 674.159049][T18812] netlink: zone id is out of range [ 674.168871][T18812] netlink: zone id is out of range [ 674.174101][ T5829] usb 5-1: media controller created [ 674.192683][T18812] netlink: zone id is out of range [ 674.220377][T18770] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.230678][T18812] netlink: zone id is out of range [ 674.240965][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 674.250840][T18770] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.282667][T18770] bridge_slave_0: entered allmulticast mode [ 674.324839][T18770] bridge_slave_0: entered promiscuous mode [ 674.393910][ T5829] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 674.533796][ T5829] usb 5-1: USB disconnect, device number 38 [ 674.553660][T18817] loop7: detected capacity change from 0 to 256 [ 674.604814][T18770] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.649787][T18817] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 674.662983][T18770] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.694096][T18770] bridge_slave_1: entered allmulticast mode [ 674.725157][T18770] bridge_slave_1: entered promiscuous mode [ 675.056278][T18770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.158902][T18770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.311414][ T42] hsr_slave_0: left promiscuous mode [ 675.384721][ T42] hsr_slave_1: left promiscuous mode [ 675.428596][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.465835][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.512142][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.558238][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.603576][ T42] bridge_slave_1: left allmulticast mode [ 675.642675][ T42] bridge_slave_1: left promiscuous mode [ 675.691507][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.782750][ T42] bridge_slave_0: left allmulticast mode [ 675.815810][ T42] bridge_slave_0: left promiscuous mode [ 675.841439][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.054772][ T42] veth1_macvtap: left promiscuous mode [ 676.083421][ T42] veth0_macvtap: left promiscuous mode [ 676.110104][ T42] veth1_vlan: left promiscuous mode [ 676.133322][ T42] veth0_vlan: left promiscuous mode [ 676.178100][T13293] Bluetooth: hci3: command tx timeout [ 676.503547][ T42] bond1 (unregistering): Released all slaves [ 677.164701][T18864] loop4: detected capacity change from 0 to 64 [ 677.401802][T18857] loop7: detected capacity change from 0 to 32768 [ 677.523335][T18857] JBD2: Ignoring recovery information on journal [ 677.677358][T18857] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 678.132263][T11199] ocfs2: Unmounting device (7,7) on (node local) [ 678.260199][T13293] Bluetooth: hci3: command tx timeout [ 678.756026][ T42] team0 (unregistering): Port device team_slave_1 removed [ 678.902646][ T42] team0 (unregistering): Port device team_slave_0 removed [ 679.052546][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.129418][T18881] loop7: detected capacity change from 0 to 164 [ 679.193141][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.984364][ T42] bond0 (unregistering): Released all slaves [ 680.177467][T18837] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 680.207074][T18837] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 680.222135][T18837] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 680.290529][T18770] team0: Port device team_slave_0 added [ 680.340725][T13293] Bluetooth: hci3: command tx timeout [ 680.347316][T18770] team0: Port device team_slave_1 added [ 680.427410][T18770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.434405][T18770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.669704][T18770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.792478][T18770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.829970][T18770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.855868][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.004246][T18770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.086829][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 681.334645][ T8] usb 5-1: config 0 has no interfaces? [ 681.340408][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 681.359770][T18770] hsr_slave_0: entered promiscuous mode [ 681.410642][T18770] hsr_slave_1: entered promiscuous mode [ 681.416962][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.464020][ T8] usb 5-1: config 0 descriptor?? [ 681.482328][T18770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.540708][T18770] Cannot create hsr debugfs directory [ 681.790339][ T8] usb 5-1: USB disconnect, device number 39 [ 683.010274][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 683.236518][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 683.256298][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.294476][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.350612][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 683.406649][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 683.451258][ T9] usb 1-1: SerialNumber: syz [ 683.482802][ T9] usb 1-1: 0:2 : does not exist [ 683.727847][T18962] loop7: detected capacity change from 0 to 16 [ 683.774781][T13293] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 683.833116][T18962] erofs: (device loop7): mounted with root inode @ nid 36. [ 683.961865][T18962] erofs: (device loop7): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000 [ 684.325447][ T9] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 684.478886][ T9] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 684.511580][T18972] loop7: detected capacity change from 0 to 164 [ 684.551866][ T9] usb 1-1: USB disconnect, device number 11 [ 685.112365][T18770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 685.198776][T18770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 685.264591][T18770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 685.344283][T18770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 685.669503][T18770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.770158][T18770] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.827509][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.834731][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.917687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.924808][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.047252][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.053637][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.130111][T18770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.490011][T18770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.692938][T18770] veth0_vlan: entered promiscuous mode [ 686.723249][T19018] fuse: Invalid group_id [ 686.757750][T18770] veth1_vlan: entered promiscuous mode [ 686.854125][T18770] veth0_macvtap: entered promiscuous mode [ 686.922586][T18770] veth1_macvtap: entered promiscuous mode [ 686.963612][T19002] loop4: detected capacity change from 0 to 40427 [ 686.995698][T18770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.032018][T19002] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 687.096748][T19002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 687.116310][T18770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.187304][T18770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.203354][T19002] F2FS-fs (loop4): Found nat_bits in checkpoint [ 687.276646][T18770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.336943][T18770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.409467][T18770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.458494][T19002] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 687.465610][T19002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 687.490301][T18770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.546694][T18770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.641403][T18770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.703310][T18770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.792223][T18770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.835635][T18770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.883989][T18770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.933709][T18770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.982001][T18770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.004738][T18770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.029997][T18770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.102222][T18770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.195098][T18770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.251165][T18770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.305958][T18770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.324805][T18770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.671724][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.711325][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.833754][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.904363][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.027162][T19060] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 689.358073][T19070] binder: 19069:19070 ioctl c0306201 200000000300 returned -14 [ 689.704547][T19080] net_ratelimit: 9 callbacks suppressed [ 689.704634][T19080] dccp_invalid_packet: pskb_may_pull failed [ 690.169075][T19093] loop4: detected capacity change from 0 to 1024 [ 690.223989][T19093] EXT4-fs: inline encryption not supported [ 690.337459][T19093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.537180][T19093] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.4.4581: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 690.692810][T19093] EXT4-fs error (device loop4) in ext4_delete_inline_entry:1802: Corrupt filesystem [ 690.887097][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.959942][T19112] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4585'. [ 691.973050][ T28] audit: type=1326 audit(1787168523.250:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19133 comm="syz.4.4591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb9e0d9 code=0x7ffc0000 [ 691.997181][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.165321][ T28] audit: type=1326 audit(1787168523.290:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19133 comm="syz.4.4591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fdaadb9e0d9 code=0x7ffc0000 [ 692.280082][T19141] loop4: detected capacity change from 0 to 1024 [ 692.289547][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4592'. [ 692.366666][ T28] audit: type=1326 audit(1787168523.290:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19133 comm="syz.4.4591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb9e0d9 code=0x7ffc0000 [ 692.424431][T19141] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 692.525668][T19141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 692.552550][ T28] audit: type=1326 audit(1787168523.290:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19133 comm="syz.4.4591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb9e0d9 code=0x7ffc0000 [ 692.600302][T19141] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 692.635019][T19141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.760344][ T28] audit: type=1326 audit(1787168523.300:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19133 comm="syz.4.4591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fdaadb9e0d9 code=0x7ffc0000 [ 692.784617][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.928142][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.048669][ T28] audit: type=1326 audit(1787168523.300:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19133 comm="syz.4.4591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb9e0d9 code=0x7ffc0000 [ 693.228665][ T28] audit: type=1326 audit(1787168523.300:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19133 comm="syz.4.4591" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadb9e0d9 code=0x7ffc0000 [ 693.252762][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.535365][T19227] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 696.063707][T19237] loop4: detected capacity change from 0 to 512 [ 696.107137][T19237] EXT4-fs: Ignoring removed nobh option [ 696.271866][T19237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.376806][T19237] ext4 filesystem being mounted at /1103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.490813][T19248] program syz.1.4626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.501473][T19237] Quota error (device loop4): do_check_range: Getting block 1280 out of range 0-5 [ 696.680039][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.700367][ T28] audit: type=1326 audit(1787168528.980:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91d59e0d9 code=0x7ffc0000 [ 697.833743][ T28] audit: type=1326 audit(1787168528.980:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91d59e0d9 code=0x7ffc0000 [ 698.019017][ T28] audit: type=1326 audit(1787168529.020:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa91d59e0d9 code=0x7ffc0000 [ 698.195059][ T28] audit: type=1326 audit(1787168529.020:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa91d59de42 code=0x7ffc0000 [ 698.219048][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.343547][ T28] audit: type=1326 audit(1787168529.020:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa91d55e90e code=0x7ffc0000 [ 698.367516][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.456730][T11521] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 698.514209][ T28] audit: type=1326 audit(1787168529.030:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa91d59df07 code=0x7ffc0000 [ 698.677017][T11521] usb 1-1: Using ep0 maxpacket: 32 [ 698.692417][ T28] audit: type=1326 audit(1787168529.030:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91d55e90e code=0x7ffc0000 [ 698.716549][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.752308][T11521] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 698.803764][T11521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.895867][T11521] usb 1-1: config 0 descriptor?? [ 698.917418][ T28] audit: type=1326 audit(1787168529.030:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa91d55e90e code=0x7ffc0000 [ 699.081469][ T28] audit: type=1326 audit(1787168529.040:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91d59e0d9 code=0x7ffc0000 [ 699.204759][T11521] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 699.277256][T11521] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 699.295010][ T28] audit: type=1326 audit(1787168529.040:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.0.4640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91d59e0d9 code=0x7ffc0000 [ 699.319141][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.364271][T11521] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 699.453830][T11521] usb 1-1: media controller created [ 699.570307][T11521] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 699.684532][T11521] az6027: usb out operation failed. (-71) [ 699.756748][T11521] az6027: usb out operation failed. (-71) [ 699.783258][T11521] stb0899_attach: Driver disabled by Kconfig [ 699.829983][T11521] az6027: no front-end attached [ 699.829983][T11521] [ 699.879678][T11521] az6027: usb out operation failed. (-71) [ 699.885476][T11521] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 699.933888][T19338] loop4: detected capacity change from 0 to 256 [ 700.010567][T11521] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 700.085811][T19338] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 700.147423][T11521] dvb-usb: schedule remote query interval to 400 msecs. [ 700.216665][T11521] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 700.314879][T11521] usb 1-1: USB disconnect, device number 12 [ 700.547690][T11521] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 701.143693][T19376] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 701.215830][T19381] 9p: Unknown access argument 18446744073709551615: -34 [ 701.592422][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'. [ 702.654306][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4687'. [ 702.790915][T19424] netlink: 'syz.7.4687': attribute type 21 has an invalid length. [ 702.907994][T19428] loop4: detected capacity change from 0 to 2048 [ 702.965253][T19428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.926407][T19463] Bluetooth: MGMT ver 1.22 [ 704.199885][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 704.199978][ T28] audit: type=1326 audit(1787168535.480:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 704.230080][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.263167][T19478] loop4: detected capacity change from 0 to 512 [ 704.313220][T19478] EXT4-fs: Ignoring removed nobh option [ 704.371979][T19478] EXT4-fs: Ignoring removed mblk_io_submit option [ 704.447046][T19478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 704.510396][ T28] audit: type=1326 audit(1787168535.480:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 704.534659][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.556185][T19478] EXT4-fs (loop4): Test dummy encryption mode enabled [ 704.606973][T19478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 704.735091][T19478] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.4700: invalid indirect mapped block 32768 (level 2) [ 704.769214][ T28] audit: type=1326 audit(1787168535.540:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 704.856838][T19494] i2c i2c-0: new_device: Invalid device name [ 704.869610][T19478] EXT4-fs (loop4): Remounting filesystem read-only [ 704.876379][T19478] EXT4-fs (loop4): 1 orphan inode deleted [ 704.939809][ T28] audit: type=1326 audit(1787168535.540:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdcee99de42 code=0x7ffc0000 [ 704.963827][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.973594][T19478] EXT4-fs (loop4): 1 truncate cleaned up [ 705.005045][T19478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.152225][ T28] audit: type=1326 audit(1787168535.540:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcee95e90e code=0x7ffc0000 [ 705.206601][T17363] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 705.309579][ T28] audit: type=1326 audit(1787168535.540:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdcee99df07 code=0x7ffc0000 [ 705.333696][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.375534][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.447889][T17363] usb 1-1: Using ep0 maxpacket: 32 [ 705.496893][T17363] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 705.520491][ T28] audit: type=1326 audit(1787168535.540:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcee95e90e code=0x7ffc0000 [ 705.570278][T17363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.655786][T17363] usb 1-1: config 0 descriptor?? [ 705.702581][ T28] audit: type=1326 audit(1787168535.540:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcee99dd6b code=0x7ffc0000 [ 705.868194][ T28] audit: type=1326 audit(1787168535.540:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcee99dd6b code=0x7ffc0000 [ 705.895799][T19516] loop4: detected capacity change from 0 to 256 [ 705.917455][T19515] program syz.7.4712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.930830][T17363] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 705.980115][T17363] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 706.071603][T17363] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 706.090784][ T28] audit: type=1326 audit(1787168535.540:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19476 comm="syz.1.4708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdcee95e90e code=0x7ffc0000 [ 706.114915][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.144828][T17363] usb 1-1: media controller created [ 706.244656][T17363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.379047][T17363] az6027: usb out operation failed. (-71) [ 706.444604][T17363] az6027: usb out operation failed. (-71) [ 706.481871][T17363] stb0899_attach: Driver disabled by Kconfig [ 706.552316][T17363] az6027: no front-end attached [ 706.552316][T17363] [ 706.580653][T17363] az6027: usb out operation failed. (-71) [ 706.614500][T17363] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 706.684911][T17363] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input40 [ 706.838786][T17363] dvb-usb: schedule remote query interval to 400 msecs. [ 706.845788][T17363] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 706.967823][T17363] usb 1-1: USB disconnect, device number 13 [ 707.134272][T17363] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 708.977737][T19601] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 708.977737][T19601] The task syz.4.4740 (19601) triggered the difference, watch for misbehavior. [ 708.996370][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.929299][T19623] loop4: detected capacity change from 0 to 128 [ 709.936348][T19623] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 710.055591][T19626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4747'. [ 710.106113][T19623] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 710.317750][ T142] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 711.159362][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'. [ 711.380929][T19655] loop4: detected capacity change from 0 to 8192 [ 711.423202][T19655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 711.485390][T19655] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 711.533264][T19655] REISERFS (device loop4): using ordered data mode [ 711.573990][T19655] reiserfs: using flush barriers [ 711.625247][T19655] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 711.759968][T19655] REISERFS (device loop4): checking transaction log (loop4) [ 711.809520][T19655] REISERFS (device loop4): Using r5 hash to sort names [ 711.849547][T19655] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 712.636589][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 712.859780][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 712.871375][T19707] loop4: detected capacity change from 0 to 128 [ 712.893277][ T8] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 712.937029][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 712.968685][T19707] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 713.004297][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 713.064685][T19707] ext4 filesystem being mounted at /1140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 713.080663][ T8] usb 2-1: config 1 has no interface number 0 [ 713.110672][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.160591][T19707] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop4' because it doesn't have stable inode numbers [ 713.185299][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 713.246628][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 713.312518][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.335130][ T7204] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 713.384625][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 713.588793][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 713.749462][T19731] gretap0: entered promiscuous mode [ 713.819076][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4778'. [ 713.889983][T19735] gretap0: left promiscuous mode [ 714.013000][T17363] usb 2-1: USB disconnect, device number 11 [ 714.051251][T17363] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 714.311430][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4786'. [ 714.350145][T19749] loop7: detected capacity change from 0 to 2048 [ 714.383563][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4786'. [ 714.513140][T19749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 714.892035][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.899939][T19800] loop4: detected capacity change from 0 to 4096 [ 715.940896][T19800] __ntfs_warning: 33 callbacks suppressed [ 715.940910][T19800] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 716.090021][T19807] loop7: detected capacity change from 0 to 256 [ 716.146630][T19800] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 716.196978][T19807] FAT-fs (loop7): Directory bread(block 1285) failed [ 716.271905][T19800] ntfs: volume version 3.1. [ 716.297267][T19807] FAT-fs (loop7): Directory bread(block 1286) failed [ 716.304713][T19807] FAT-fs (loop7): Directory bread(block 1287) failed [ 716.397358][T19810] binder: 19809:19810 ioctl 80809440 0 returned -22 [ 716.454660][T19800] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macinuit. You might want to try to use the mount option nls=utf8. [ 716.512245][T19807] FAT-fs (loop7): Directory bread(block 1288) failed [ 716.578773][T19807] FAT-fs (loop7): Directory bread(block 1285) failed [ 716.586240][T19807] FAT-fs (loop7): Directory bread(block 1286) failed [ 716.605671][T19800] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 716.768411][T19807] FAT-fs (loop7): Directory bread(block 1287) failed [ 716.818361][T19807] FAT-fs (loop7): Directory bread(block 1288) failed [ 716.932641][T19817] FAT-fs (loop7): Directory bread(block 1285) failed [ 716.984633][T19817] FAT-fs (loop7): Directory bread(block 1286) failed [ 717.226350][T19827] kernel profiling enabled (shift: 0) [ 718.658361][T19842] loop4: detected capacity change from 0 to 32768 [ 718.703295][T19827] syz.0.4810: vmalloc error: size 654311424, failed to allocated page array size 1277952, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 718.726609][ T28] audit: type=1326 audit(1787168549.950:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19844 comm="syz.7.4816" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68b7b9e0d9 code=0x7fc00000 [ 718.750689][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.831968][T13293] Bluetooth: hci0: command 0x0406 tx timeout [ 718.866187][T19827] CPU: 0 PID: 19827 Comm: syz.0.4810 Not tainted syzkaller #0 [ 718.873675][T19827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.883714][T19827] Call Trace: [ 718.886981][T19827] [ 718.889899][T19827] dump_stack_lvl+0x18c/0x250 [ 718.894579][T19827] ? show_regs_print_info+0x20/0x20 [ 718.899797][T19827] ? load_image+0x420/0x420 [ 718.904295][T19827] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 718.910699][T19827] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 718.917214][T19827] warn_alloc+0x246/0x340 [ 718.921536][T19827] ? zone_watermark_ok_safe+0x230/0x230 [ 718.927345][T19827] ? _raw_spin_unlock+0x28/0x40 [ 718.932286][T19827] __vmalloc_node_range+0x661/0x1320 [ 718.937577][T19827] ? free_vm_area+0x50/0x50 [ 718.942090][T19827] ? alloc_pages+0x2ff/0x740 [ 718.946690][T19827] ? rcu_is_watching+0x15/0xb0 [ 718.951444][T19827] ? profile_init+0xee/0x130 [ 718.956016][T19827] vzalloc+0x79/0x90 [ 718.959919][T19827] ? profile_init+0xee/0x130 [ 718.964492][T19827] profile_init+0xee/0x130 [ 718.968894][T19827] profiling_store+0x5e/0xc0 [ 718.973494][T19827] ? sysfs_kf_read+0x360/0x360 [ 718.978239][T19827] kernfs_fop_write_iter+0x3a4/0x520 [ 718.983515][T19827] do_iter_write+0x747/0xc50 [ 718.988097][T19827] ? vfs_iter_write+0xa0/0xa0 [ 718.992761][T19827] ? __asan_memset+0x22/0x40 [ 718.997351][T19827] ? iov_iter_bvec+0xd4/0x1b0 [ 719.002040][T19827] ? vfs_iter_write+0x6e/0xa0 [ 719.006702][T19827] iter_file_splice_write+0x6b6/0xcf0 [ 719.012067][T19827] ? splice_from_pipe+0x180/0x180 [ 719.017087][T19827] ? splice_shrink_spd+0xc0/0xc0 [ 719.022008][T19827] ? common_file_perm+0x198/0x1f0 [ 719.027039][T19827] ? splice_from_pipe+0x180/0x180 [ 719.032054][T19827] direct_splice_actor+0xe8/0x130 [ 719.037081][T19827] splice_direct_to_actor+0x30b/0x8e0 [ 719.042439][T19827] ? direct_file_splice_eof+0xb0/0xb0 [ 719.047796][T19827] ? warn_unsupported+0xc0/0xc0 [ 719.052629][T19827] ? fsnotify_perm+0x5d/0x5e0 [ 719.057290][T19827] ? security_file_permission+0x79/0xa0 [ 719.062822][T19827] do_splice_direct+0x1d5/0x2f0 [ 719.067664][T19827] ? splice_direct_to_actor+0x8e0/0x8e0 [ 719.073194][T19827] ? rcu_read_lock_any_held+0xb4/0x140 [ 719.078637][T19827] ? do_splice_direct+0x2f0/0x2f0 [ 719.083678][T19827] vfs_copy_file_range+0xb7d/0x1590 [ 719.088895][T19827] ? generic_copy_file_range+0x1e0/0x1e0 [ 719.094531][T19827] ? __might_fault+0xaa/0x120 [ 719.099203][T19827] ? __might_fault+0xc6/0x120 [ 719.103865][T19827] ? __might_fault+0xaa/0x120 [ 719.108533][T19827] __se_sys_copy_file_range+0x324/0x470 [ 719.114068][T19827] ? __x64_sys_copy_file_range+0xf0/0xf0 [ 719.119741][T19827] ? __x64_sys_copy_file_range+0x21/0xf0 [ 719.125364][T19827] do_syscall_64+0x55/0xb0 [ 719.129764][T19827] ? clear_bhb_loop+0x40/0x90 [ 719.134423][T19827] ? clear_bhb_loop+0x40/0x90 [ 719.139084][T19827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.144967][T19827] RIP: 0033:0x7fa91d59e0d9 [ 719.149365][T19827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.168954][T19827] RSP: 002b:00007fa91e426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 719.177373][T19827] RAX: ffffffffffffffda RBX: 00007fa91d825fa0 RCX: 00007fa91d59e0d9 [ 719.185329][T19827] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 719.193284][T19827] RBP: 00007fa91d635024 R08: 0000000000000002 R09: 0000000000000000 [ 719.201258][T19827] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 719.209214][T19827] R13: 00007fa91d826038 R14: 00007fa91d825fa0 R15: 00007ffd3e6ed6c8 [ 719.217183][T19827] [ 719.220295][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.393945][T19842] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 720.003043][T19842] XFS (loop4): Ending clean mount [ 720.421427][ T7204] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 720.544625][T19827] Mem-Info: [ 720.564506][T19827] active_anon:12750 inactive_anon:4 isolated_anon:0 [ 720.564506][T19827] active_file:4814 inactive_file:1115 isolated_file:0 [ 720.564506][T19827] unevictable:768 dirty:264 writeback:0 [ 720.564506][T19827] slab_reclaimable:11789 slab_unreclaimable:108467 [ 720.564506][T19827] mapped:25272 shmem:5505 pagetables:971 [ 720.564506][T19827] sec_pagetables:0 bounce:0 [ 720.564506][T19827] kernel_misc_reclaimable:0 [ 720.564506][T19827] free:1060188 free_pcp:4778 free_cma:0 [ 720.609690][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.980179][T19827] Node 0 active_anon:35244kB inactive_anon:16kB active_file:19256kB inactive_file:4016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101088kB dirty:1108kB writeback:0kB shmem:5040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:3728kB sec_pagetables:0kB all_unreclaimable? no [ 721.012492][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.064032][T19913] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 721.259408][T19827] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 721.289604][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.477708][T19924] netlink: 'syz.7.4835': attribute type 12 has an invalid length. [ 721.485592][T19924] netlink: 'syz.7.4835': attribute type 29 has an invalid length. [ 721.542579][T19827] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.569653][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.595635][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4836'. [ 721.649842][T19924] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4835'. [ 721.695871][T19924] netlink: 'syz.7.4835': attribute type 2 has an invalid length. [ 721.766671][T19827] lowmem_reserve[]: 0 2398 2399 2399 2399 [ 721.814609][T19827] Node 0 DMA32 free:1353532kB boost:0kB min:33580kB low:41972kB high:50364kB reserved_highatomic:0KB active_anon:34052kB inactive_anon:16kB active_file:18708kB inactive_file:3860kB unevictable:1536kB writepending:1128kB present:2998260kB managed:2455752kB mlocked:0kB bounce:0kB free_pcp:36120kB local_pcp:36120kB free_cma:0kB [ 721.845214][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.853622][T19924] netlink: 'syz.7.4835': attribute type 3 has an invalid length. [ 721.917903][T19924] netlink: 19 bytes leftover after parsing attributes in process `syz.7.4835'. [ 722.106699][T19827] lowmem_reserve[]: 0 0 0 0 0 [ 722.122748][T19827] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:188kB inactive_anon:0kB active_file:548kB inactive_file:128kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 722.149775][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.369399][T19827] lowmem_reserve[]: 0 0 0 0 0 [ 722.403641][T19827] Node 1 Normal free:2871860kB boost:0kB min:56304kB low:70380kB high:84456kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.432518][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.630021][T19827] lowmem_reserve[]: 0 0 0 0 0 [ 722.667337][T19827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 722.689484][T19952] sd 0:0:1:0: PR command failed: 1026 [ 722.703110][T19952] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 722.740927][T19827] Node 0 DMA32: 41*4kB (ME) 9*8kB (ME) 809*16kB (ME) 838*32kB (UME) 428*64kB (M) 190*128kB (ME) 71*256kB (UM) 45*512kB (ME) 28*1024kB (UM) 14*2048kB (UM) 284*4096kB (UM) = 1353532kB [ 722.759917][T19952] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 722.856541][T19827] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 722.957247][T19827] Node 1 Normal: 299*4kB (UME) 73*8kB (UME) 44*16kB (UME) 250*32kB (UME) 105*64kB (UE) 38*128kB (UME) 12*256kB (UE) 8*512kB (UME) 2*1024kB (UE) 3*2048kB (UME) 692*4096kB (M) = 2871860kB [ 723.110369][T19827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 723.166207][T19827] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 723.240251][T19827] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 723.334568][T19827] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 723.373123][T19827] 7215 total pagecache pages [ 723.392112][T19827] 1 pages in swap cache [ 723.410336][T19827] Free swap = 124464kB [ 723.450903][T19827] Total swap = 124996kB [ 723.470298][T19827] 2064283 pages RAM [ 723.487179][ T8] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 723.506113][T19827] 0 pages HighMem/MovableOnly [ 723.524829][T19827] 416959 pages reserved [ 723.551436][T19827] 0 pages cma reserved [ 723.694651][ T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 723.724263][ T8] usb 8-1: config 0 has no interface number 0 [ 723.771107][ T8] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 723.863527][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.920054][ T8] usb 8-1: Product: syz [ 723.963747][ T8] usb 8-1: Manufacturer: syz [ 723.991648][ T8] usb 8-1: SerialNumber: syz [ 724.060715][ T8] usb 8-1: config 0 descriptor?? [ 724.391461][ T8] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 724.450711][ T8] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 724.521780][ T8] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 724.573769][ T8] usb 8-1: media controller created [ 724.664708][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 725.060076][ T8] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 725.200787][ T8] usb 8-1: USB disconnect, device number 13 [ 725.916271][T20022] loop7: detected capacity change from 0 to 2048 [ 726.146871][T20022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.801992][T20037] loop4: detected capacity change from 0 to 512 [ 726.897133][T20037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.999075][T20037] ext4 filesystem being mounted at /1169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 727.237706][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.218948][T20072] bond1 (unregistering): Released all slaves [ 728.378290][T20084] tap0: tun_chr_ioctl cmd 1074025680 [ 728.509644][T20087] jffs2: notice: (20087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 729.073441][T20105] loop4: detected capacity change from 0 to 8 [ 729.195936][T20105] SQUASHFS error: Failed to read block 0x6e6: -5 [ 729.255222][T20105] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 729.285562][T20105] SQUASHFS error: Unable to read directory block [6e4:0] [ 729.446856][T17362] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 729.647879][T17362] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.705934][T17362] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.745321][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4895'. [ 729.789896][T17362] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 729.819502][T17362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.863310][T17362] usb 1-1: Product: syz [ 729.903434][T17362] usb 1-1: Manufacturer: syz [ 729.938601][T17362] usb 1-1: SerialNumber: syz [ 729.983373][T17362] symbolserial 1-1:1.0: symbol converter detected [ 730.055276][T17362] usb 1-1: symbol converter now attached to ttyUSB0 [ 730.189257][T20128] overlay: filesystem on ./file0 not supported as upperdir [ 730.344481][T20107] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 730.508093][T17363] usb 1-1: USB disconnect, device number 14 [ 730.548330][T17363] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 730.574277][T17363] symbolserial 1-1:1.0: device disconnected [ 731.973226][T20189] program syz.0.4916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 732.125529][T20193] vcan0: tx address claim with dlc 0 [ 732.162425][T20195] loop4: detected capacity change from 0 to 1024 [ 732.960107][T20219] netlink: 'syz.4.4927': attribute type 2 has an invalid length. [ 733.024603][T20219] netlink: 'syz.4.4927': attribute type 1 has an invalid length. [ 733.075653][T20219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4927'. [ 733.135925][T20219] netlink: 'syz.4.4927': attribute type 2 has an invalid length. [ 733.200596][T20219] netlink: 'syz.4.4927': attribute type 1 has an invalid length. [ 733.266834][T20219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4927'. [ 733.328045][T20219] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 733.765895][T20246] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4938'. [ 734.167560][T17363] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 734.396606][T17363] usb 1-1: Using ep0 maxpacket: 16 [ 734.429424][T17363] usb 1-1: unable to get BOS descriptor or descriptor too short [ 734.471935][T17363] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.540634][T17363] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 734.610346][T17363] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.700412][T17363] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 734.740170][T17363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.801518][T17363] usb 1-1: Product: syz [ 734.805727][T17363] usb 1-1: Manufacturer: syz [ 734.853087][T17363] usb 1-1: SerialNumber: syz [ 735.092214][T17363] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 735.143625][T17363] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 735.576877][T17363] usb 1-1: USB disconnect, device number 15 [ 735.804465][T20295] loop7: detected capacity change from 0 to 512 [ 735.847377][T20290] block device autoloading is deprecated and will be removed. [ 735.939422][T20295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.085167][T20295] ext4 filesystem being mounted at /616/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.427201][T20295] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz.7.4951: Directory hole found for htree leaf block 0 [ 736.666365][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.887262][T17363] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 737.052295][T20330] program syz.7.4960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.099541][T17363] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 737.144655][T17363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 737.234671][T17363] usb 1-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice= 0.00 [ 737.296953][T17363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.304976][T17363] usb 1-1: Product: syz [ 737.387303][T17363] usb 1-1: Manufacturer: syz [ 737.419580][T17363] usb 1-1: SerialNumber: syz [ 737.479842][T17363] usb 1-1: config 0 descriptor?? [ 737.499910][T20340] loop7: detected capacity change from 0 to 7 [ 737.509857][T20319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 737.553579][T17363] keyspan_pda 1-1:0.0: Keyspan PDA converter detected [ 737.581160][ C0] blk_print_req_error: 25 callbacks suppressed [ 737.581171][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.596592][ C0] buffer_io_error: 25 callbacks suppressed [ 737.596602][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.619396][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.628656][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.638048][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.647305][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.656631][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.665782][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.676849][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.686030][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.698672][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.707973][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.721500][T17363] usb 1-1: Keyspan PDA converter now attached to ttyUSB0 [ 737.731687][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.740901][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.758175][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.767431][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.780914][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.790100][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.816513][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.825689][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 737.843804][T20340] ldm_validate_partition_table(): Disk read failed. [ 737.888861][T17363] usb 1-1: USB disconnect, device number 16 [ 737.921084][T20340] Dev loop7: unable to read RDB block 0 [ 737.929580][T17363] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 737.973164][T20347] loop4: detected capacity change from 0 to 164 [ 737.990720][T20340] loop7: unable to read partition table [ 738.009141][T17363] keyspan_pda 1-1:0.0: device disconnected [ 738.048243][T20340] loop7: partition table beyond EOD, truncated [ 738.116141][T20340] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 738.616027][T20356] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4965'. [ 738.886721][ T8] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 739.126797][ T8] usb 8-1: too many endpoints for config 1 interface 0 altsetting 25: 214, using maximum allowed: 30 [ 739.205931][ T8] usb 8-1: config 1 interface 0 altsetting 25 bulk endpoint 0x82 has invalid maxpacket 64 [ 739.270009][ T8] usb 8-1: config 1 interface 0 altsetting 25 bulk endpoint 0x3 has invalid maxpacket 1023 [ 739.290746][T20374] netlink: 'syz.1.4971': attribute type 8 has an invalid length. [ 739.341753][T20374] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4971'. [ 739.352025][ T8] usb 8-1: config 1 interface 0 altsetting 25 has 3 endpoint descriptors, different from the interface descriptor's value: 214 [ 739.416775][T20374] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4971'. [ 739.439105][ T8] usb 8-1: config 1 interface 0 has no altsetting 0 [ 739.489991][ T8] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.553369][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 739.626084][ T8] usb 8-1: SerialNumber: syz [ 739.670764][T20355] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 739.757121][T20355] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 740.161242][T20355] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 740.219317][T20396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4979'. [ 740.243652][T20355] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 740.283132][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'. [ 740.816823][ T8] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 741.186018][ T8] usb 8-1: USB disconnect, device number 14 [ 741.216126][ T8] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 741.510813][T17363] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0 [ 741.588375][T17363] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0 [ 741.635147][T17363] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0 [ 741.694439][T17363] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0 [ 741.750077][T17363] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0 [ 741.801599][T17363] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0 [ 741.853997][T17363] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0 [ 741.917982][T17363] hid-generic 0000:0000:0001.0022: unknown main item tag 0x0 [ 742.000327][T17363] hid-generic 0000:0000:0001.0022: hidraw0: HID v0.10 Device [syz0] on syz1 [ 742.344332][T20441] fido_id[20441]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 742.565523][T20455] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 742.586649][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 742.821367][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 742.847295][ T8] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 742.902230][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.942478][ T8] usb 1-1: config 0 descriptor?? [ 743.216072][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 743.278464][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 743.357432][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 743.419356][ T8] usb 1-1: media controller created [ 743.534322][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 743.700347][ T8] az6027: usb out operation failed. (-71) [ 743.761296][ T8] az6027: usb out operation failed. (-71) [ 743.827594][ T8] stb0899_attach: Driver disabled by Kconfig [ 743.877868][ T8] az6027: no front-end attached [ 743.877868][ T8] [ 743.929032][ T8] az6027: usb out operation failed. (-71) [ 743.952146][T20486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5007'. [ 743.978144][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 744.023402][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 744.095093][T20486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5007'. [ 744.146856][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 744.154534][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 744.295044][ T8] usb 1-1: USB disconnect, device number 17 [ 744.698730][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 744.758737][T20506] kAFS: bad VL server IP address [ 747.036664][T17363] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 747.141746][T20515] loop4: detected capacity change from 0 to 32768 [ 747.266910][T17363] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.352091][T17363] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.451642][T17363] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 747.468294][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.474621][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.556564][T20515] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 747.576547][T17363] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.627025][T17363] usb 8-1: Product: syz [ 747.656597][T17363] usb 8-1: Manufacturer: syz [ 747.661273][T17363] usb 8-1: SerialNumber: syz [ 747.738755][T17363] symbolserial 8-1:1.0: symbol converter detected [ 747.792242][T17363] usb 8-1: symbol converter now attached to ttyUSB0 [ 748.117679][T20552] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 748.178692][T17362] usb 8-1: USB disconnect, device number 15 [ 748.211806][T17362] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 748.255849][T17362] symbolserial 8-1:1.0: device disconnected [ 748.278888][T20515] XFS (loop4): Ending clean mount [ 748.354125][T20515] XFS (loop4): Quotacheck needed: Please wait. [ 748.519523][T20515] XFS (loop4): Quotacheck: Done. [ 748.640973][ T7204] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 749.467224][T11521] kernel read not supported for file /dsp (pid: 11521 comm: kworker/0:6) [ 749.845223][T20619] loop7: detected capacity change from 0 to 1024 [ 749.963332][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 750.205018][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.241452][ T12] hfsplus: bad catalog file entry [ 750.252858][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.301718][T20621] hfsplus: request for non-existent node 33554434 in B*Tree [ 750.312641][T20623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5032'. [ 750.348860][ T9] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 750.367197][T20621] hfsplus: request for non-existent node 33554434 in B*Tree [ 750.386604][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.394662][ T9] usb 2-1: Product: syz [ 750.480011][ T9] usb 2-1: Manufacturer: syz [ 750.484668][ T9] usb 2-1: SerialNumber: syz [ 750.521722][T20626] bridge0: entered promiscuous mode [ 750.537843][ T9] symbolserial 2-1:1.0: symbol converter detected [ 750.555586][T20626] vlan2: entered promiscuous mode [ 750.573653][ T9] usb 2-1: symbol converter now attached to ttyUSB0 [ 750.856591][T20615] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 750.929241][T17362] usb 2-1: USB disconnect, device number 12 [ 750.955975][T17362] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 751.010243][T17362] symbolserial 2-1:1.0: device disconnected [ 751.128772][T20641] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5054'. [ 751.782801][T20635] loop4: detected capacity change from 0 to 40427 [ 751.846332][T20635] F2FS-fs (loop4): invalid crc value [ 751.888968][T20635] F2FS-fs (loop4): Found nat_bits in checkpoint [ 752.171665][T20635] F2FS-fs (loop4): Start checkpoint disabled! [ 752.276674][T20668] netlink: 'syz.0.5065': attribute type 25 has an invalid length. [ 752.307294][T20669] netlink: 277 bytes leftover after parsing attributes in process `syz.7.5064'. [ 752.332358][T20668] netlink: 'syz.0.5065': attribute type 28 has an invalid length. [ 752.367004][T20635] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 752.695434][ T78] kworker/u4:5: attempt to access beyond end of device [ 752.695434][ T78] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 752.747255][ T78] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 752.774827][ T78] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 752.917095][T17362] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 752.935791][ T5776] Bluetooth: hci2: unexpected event for opcode 0x040d [ 753.106513][T17362] usb 1-1: Using ep0 maxpacket: 8 [ 753.144329][T17362] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 753.175412][T17362] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 753.221216][T17362] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 753.272460][T17362] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 753.337183][T17362] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.410755][T17362] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 753.449769][T17362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.742921][T17362] usb 1-1: GET_CAPABILITIES returned 0 [ 753.759485][T17362] usbtmc 1-1:16.0: can't read capabilities [ 753.816864][ T5829] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 753.866572][ T5776] Bluetooth: hci3: command tx timeout [ 754.037479][ T5829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.063602][T17362] usb 1-1: USB disconnect, device number 18 [ 754.100188][ T5829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.182731][ T5829] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 754.226363][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.268863][ T5829] usb 5-1: Product: syz [ 754.273176][ T5829] usb 5-1: Manufacturer: syz [ 754.306310][ T5829] usb 5-1: SerialNumber: syz [ 754.342238][ T5829] symbolserial 5-1:1.0: symbol converter detected [ 754.400992][ T5829] usb 5-1: symbol converter now attached to ttyUSB0 [ 754.656182][T20686] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 754.740074][ T9] usb 5-1: USB disconnect, device number 40 [ 754.782561][ T9] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 754.850701][ T9] symbolserial 5-1:1.0: device disconnected [ 755.893586][T20705] loop7: detected capacity change from 0 to 40427 [ 755.995792][T20705] F2FS-fs (loop7): invalid crc value [ 756.099097][T20705] F2FS-fs (loop7): Found nat_bits in checkpoint [ 756.466743][T20705] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 756.627639][T20752] pimreg: tun_chr_ioctl cmd 1074025677 [ 756.633331][T20752] pimreg: linktype set to 270 [ 756.774572][T11199] syz-executor: attempt to access beyond end of device [ 756.774572][T11199] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 757.000634][T11199] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 757.080377][T20762] bond0: invalid ARP target specified [ 759.525687][T20819] loop4: detected capacity change from 0 to 4096 [ 759.556645][T17362] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 759.612679][T20819] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 759.754307][T20819] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 759.827173][T17362] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.877673][T17362] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.982668][T17362] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 760.043436][T17362] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.116241][T17362] usb 8-1: Product: syz [ 760.153560][T17362] usb 8-1: Manufacturer: syz [ 760.183658][T20832] loop4: detected capacity change from 0 to 2048 [ 760.193245][T17362] usb 8-1: SerialNumber: syz [ 760.229819][T17362] symbolserial 8-1:1.0: symbol converter detected [ 760.271920][T20832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 760.321048][T17362] usb 8-1: symbol converter now attached to ttyUSB0 [ 760.723642][T20814] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 760.850381][ T5829] usb 8-1: USB disconnect, device number 16 [ 760.895564][ T5829] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 760.981296][ T5829] symbolserial 8-1:1.0: device disconnected [ 761.094615][T20856] loop4: detected capacity change from 0 to 256 [ 761.168197][T20856] exfat: Deprecated parameter 'utf8' [ 761.173639][T20856] exfat: Deprecated parameter 'utf8' [ 761.242233][T20856] exfat: Deprecated parameter 'utf8' [ 761.341900][T20856] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 761.392612][T20866] jffs2: notice: (20866) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 762.307103][ T5829] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 762.542549][T20898] netlink: 'syz.7.5144': attribute type 10 has an invalid length. [ 762.561511][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 762.592232][ T5829] usb 5-1: config 0 has no interface number 0 [ 762.624926][ T5829] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 762.635144][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 762.672993][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.713789][ T5829] usb 5-1: Product: syz [ 762.722178][T20898] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.740404][ T5829] usb 5-1: Manufacturer: syz [ 762.749378][ T5829] usb 5-1: SerialNumber: syz [ 762.767714][T20898] bond0: (slave team0): Enslaving as an active interface with an up link [ 762.777208][ T5829] usb 5-1: config 0 descriptor?? [ 762.813923][T20901] netlink: 'syz.7.5144': attribute type 10 has an invalid length. [ 762.862526][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 762.893868][T20901] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5144'. [ 762.914434][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 762.939116][ T8] usb 2-1: can't read configurations, error -71 [ 762.971299][T20901] team0: entered promiscuous mode [ 763.000013][ T5829] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 763.010132][T20901] team_slave_0: entered promiscuous mode [ 763.037197][ T5829] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 763.059536][T20901] team_slave_1: entered promiscuous mode [ 763.096807][T20901] team0: entered allmulticast mode [ 763.105922][ T5829] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 763.134659][T20901] team_slave_0: entered allmulticast mode [ 763.144595][ T5829] usb 5-1: media controller created [ 763.185060][T20901] team_slave_1: entered allmulticast mode [ 763.221584][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.293521][T20901] bond0: (slave team0): Releasing backup interface [ 763.444442][T20901] bridge0: port 3(team0) entered blocking state [ 763.532192][T20901] bridge0: port 3(team0) entered disabled state [ 764.066719][T20918] kAFS: Invalid Command on /proc/fs/afs/cells file [ 764.302725][ T5829] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 764.471979][ T5829] usb 5-1: USB disconnect, device number 41 [ 765.618377][T20655] Bluetooth: hci3: command tx timeout [ 766.648015][T20997] loop7: detected capacity change from 0 to 64 [ 766.768429][T21000] loop4: detected capacity change from 0 to 512 [ 766.862000][T21000] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 766.980517][T21000] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 767.072410][T21000] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 767.140620][T21000] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 767.182251][T21000] System zones: 0-2, 18-18, 34-35 [ 767.247481][T21000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.563287][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.587099][T21013] dvmrp8: entered allmulticast mode [ 767.875396][T21021] loop7: detected capacity change from 0 to 7 [ 767.961071][T21021] Dev loop7: unable to read RDB block 7 [ 768.011388][T21021] loop7: unable to read partition table [ 768.090879][T21021] loop7: partition table beyond EOD, truncated [ 768.140469][T21021] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 768.242078][ T5137] Dev loop7: unable to read RDB block 7 [ 768.277742][ T5137] loop7: unable to read partition table [ 768.326367][ T5137] loop7: partition table beyond EOD, truncated [ 768.669015][ T8] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 768.894524][ T8] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 768.935206][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.019829][ T8] usb 5-1: config 0 descriptor?? [ 769.061880][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 769.448201][ T8] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 769.850707][ T8] gspca_cpia1: usb_control_msg 02, error -71 [ 769.904978][ T8] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 769.962778][ T8] usb 5-1: USB disconnect, device number 42 [ 769.996602][ T174] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 770.215507][ T174] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.276601][ T174] usb 8-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 770.336433][ T174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.382220][T21098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5207'. [ 770.401101][ T174] usb 8-1: config 0 descriptor?? [ 770.932393][ T174] waltop 0003:172F:0032.0023: unknown main item tag 0x0 [ 770.996078][ T174] waltop 0003:172F:0032.0023: item fetching failed at offset 6/41 [ 771.084373][ T174] waltop: probe of 0003:172F:0032.0023 failed with error -22 [ 771.223747][ T174] usb 8-1: USB disconnect, device number 17 [ 771.709600][T21124] loop4: detected capacity change from 0 to 128 [ 771.803596][T21124] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 771.906785][T21124] FAT-fs (loop4): Filesystem has been set read-only [ 772.493912][T21137] input: syz1 as /devices/virtual/input/input43 [ 773.117428][T21152] program syz.0.5222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 774.610006][T21208] netlink: 'syz.1.5241': attribute type 1 has an invalid length. [ 774.720409][T21211] input: syz0 as /devices/virtual/input/input44 [ 774.953732][T21216] loop7: detected capacity change from 0 to 4096 [ 775.273859][T21224] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 775.439859][T21229] loop4: detected capacity change from 0 to 256 [ 775.611414][T21229] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 776.400026][T21247] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5256'. [ 776.996129][T21261] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 778.012866][T21285] loop4: detected capacity change from 0 to 4096 [ 778.392404][T21301] netlink: 'syz.1.5283': attribute type 10 has an invalid length. [ 778.601355][T21301] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.662109][T21301] bond0: (slave team0): Enslaving as an active interface with an up link [ 778.714983][T21305] netlink: 'syz.1.5283': attribute type 10 has an invalid length. [ 778.799343][T21305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5283'. [ 778.871799][T21305] team0: entered promiscuous mode [ 778.919774][T21305] team_slave_0: entered promiscuous mode [ 778.951064][T21305] team_slave_1: entered promiscuous mode [ 778.972237][T21305] team0: entered allmulticast mode [ 779.017038][T21305] team_slave_0: entered allmulticast mode [ 779.050342][T21305] team_slave_1: entered allmulticast mode [ 779.106276][T21305] bond0: (slave team0): Releasing backup interface [ 779.175656][T21305] bridge0: port 3(team0) entered blocking state [ 779.210544][T21305] bridge0: port 3(team0) entered disabled state [ 779.345295][T21318] loop4: detected capacity change from 0 to 4096 [ 779.464924][T21322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 781.159356][T21355] ima: Unable to open file: /e (-2) [ 781.160849][T21354] ima: policy update failed [ 781.228664][ T28] audit: type=1802 audit(1787168612.510:188): pid=21354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5306" res=0 errno=0 [ 781.472286][ T28] audit: type=1326 audit(1787168612.750:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 781.497705][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.676671][ T28] audit: type=1326 audit(1787168612.780:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 781.882890][ T28] audit: type=1326 audit(1787168612.800:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdcee99cf47 code=0x7ffc0000 [ 781.908045][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.090756][ T28] audit: type=1326 audit(1787168612.800:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 782.115128][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.345349][T21385] cgroup: fork rejected by pids controller in /syz1 [ 782.366666][ T28] audit: type=1326 audit(1787168612.800:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 782.394648][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.624714][ T28] audit: type=1326 audit(1787168612.800:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 782.914662][ T28] audit: type=1326 audit(1787168612.800:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 782.983997][T21396] loop4: detected capacity change from 0 to 1024 [ 783.036025][T21396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 783.082440][ T28] audit: type=1326 audit(1787168612.800:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 783.110572][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.201071][T21398] loop7: detected capacity change from 0 to 512 [ 783.261618][T21396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.351993][ T28] audit: type=1326 audit(1787168612.800:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.1.5311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcee99e0d9 code=0x7ffc0000 [ 783.386043][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.508677][T21398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.598144][T21408] overlay: ./file2 is not a directory [ 783.833739][ T7204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.970896][T11199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.033510][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.521700][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.814914][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.872482][T21424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5335'. [ 784.976835][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.033795][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 785.054603][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 785.068712][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 785.079132][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 785.087250][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 785.095167][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 785.149324][T21424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5335'. [ 786.226191][T21454] Need at least one configuration in g1. [ 786.283010][T21454] udc dummy_udc.0: failed to start g1: -22 [ 786.318689][T21454] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 786.459974][T21454] UDC core: g1: couldn't find an available UDC or it's busy [ 786.740129][T21428] chnl_net:caif_netlink_parms(): no params data found [ 787.217568][ T5776] Bluetooth: hci3: command tx timeout [ 787.870115][T21428] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.923317][T21428] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.965786][T21428] bridge_slave_0: entered allmulticast mode [ 787.991480][T21428] bridge_slave_0: entered promiscuous mode [ 788.091667][T21496] loop4: detected capacity change from 0 to 512 [ 788.116001][T21428] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.186197][T21428] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.231354][T21428] bridge_slave_1: entered allmulticast mode [ 788.283364][T21428] bridge_slave_1: entered promiscuous mode [ 788.840811][ T1144] dvmrp8 (unregistering): left allmulticast mode [ 788.857782][T21510] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5359'. [ 789.118069][T21428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.211337][T21428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.297997][ T5776] Bluetooth: hci3: command tx timeout [ 789.700798][T21428] team0: Port device team_slave_0 added [ 789.916381][ T1144] hsr_slave_0: left promiscuous mode [ 789.992551][ T1144] hsr_slave_1: left promiscuous mode [ 790.012388][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.043506][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.052813][T21529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5364'. [ 790.075440][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.103242][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.124133][ T1144] bridge0: port 3(team0) entered disabled state [ 790.148219][ T1144] bridge_slave_1: left allmulticast mode [ 790.165401][ T1144] bridge_slave_1: left promiscuous mode [ 790.184088][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.216202][ T1144] bridge_slave_0: left allmulticast mode [ 790.234468][ T1144] bridge_slave_0: left promiscuous mode [ 790.253564][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.359970][ T1144] veth1_macvtap: left promiscuous mode [ 790.374708][ T1144] veth0_macvtap: left promiscuous mode [ 790.391021][ T1144] veth1_vlan: left promiscuous mode [ 790.405408][ T1144] veth0_vlan: left promiscuous mode [ 790.815484][ T1144] bond1 (unregistering): Released all slaves [ 791.393471][ T5776] Bluetooth: hci3: command tx timeout [ 791.576788][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.691419][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.286165][ T1144] team_slave_1 (unregistering): left promiscuous mode [ 792.300078][ T1144] team_slave_1 (unregistering): left allmulticast mode [ 792.332731][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 792.393999][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.459781][ T1144] team_slave_0 (unregistering): left promiscuous mode [ 792.467830][ T1144] team_slave_0 (unregistering): left allmulticast mode [ 792.482892][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 792.590709][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.624507][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.636260][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.675779][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.775689][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.990849][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.458090][ T5776] Bluetooth: hci3: command tx timeout [ 793.490618][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.576536][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.820884][ T1144] bond0 (unregistering): Released all slaves [ 793.995342][T21428] team0: Port device team_slave_1 added [ 794.274213][T21428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.318687][T21428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.344885][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.371657][T21543] jffs2: notice: (21543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 794.499971][T21548] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.5371'. [ 794.549698][T21428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.625512][T21548] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.5371'. [ 794.640210][T21428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.722713][T21428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.753281][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.796386][T21545] [ 794.799009][T21545] ====================================================== [ 794.806113][T21545] WARNING: possible circular locking dependency detected [ 794.813151][T21545] syzkaller #0 Not tainted [ 794.817566][T21545] ------------------------------------------------------ [ 794.824595][T21545] syz.4.5370/21545 is trying to acquire lock: [ 794.830818][T21545] ffff88814de900e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_lock+0x189/0x390 [ 794.840243][T21545] [ 794.840243][T21545] but task is already holding lock: [ 794.848270][T21545] ffff888148c48cc8 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 794.858251][T21545] [ 794.858251][T21545] which lock already depends on the new lock. [ 794.858251][T21545] [ 794.869935][T21545] [ 794.869935][T21545] the existing dependency chain (in reverse order) is: [ 794.879121][T21545] [ 794.879121][T21545] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 794.887576][T21545] __mutex_lock+0x135/0xc80 [ 794.892625][T21545] bd_finish_claiming+0x229/0x3f0 [ 794.898174][T21545] blkdev_get_by_dev+0x469/0x610 [ 794.903677][T21545] bdev_open_by_dev+0x77/0x100 [ 794.908961][T21545] setup_bdev_super+0x59/0x660 [ 794.914332][T21545] mount_bdev+0x1ce/0x2c0 [ 794.919166][T21545] legacy_get_tree+0xea/0x180 [ 794.924438][T21545] vfs_get_tree+0x8c/0x280 [ 794.929459][T21545] do_new_mount+0x24a/0xa40 [ 794.934473][T21545] init_mount+0xde/0x130 [ 794.939687][T21545] do_mount_root+0x97/0x230 [ 794.944968][T21545] mount_root_generic+0x1a6/0x3e0 [ 794.950561][T21545] prepare_namespace+0xc2/0x100 [ 794.956480][T21545] kernel_init_freeable+0x41a/0x560 [ 794.963802][T21545] kernel_init+0x1d/0x1c0 [ 794.969292][T21545] ret_from_fork+0x48/0x80 [ 794.974758][T21545] ret_from_fork_asm+0x11/0x20 [ 794.980264][T21545] [ 794.980264][T21545] -> #3 (bdev_lock){+.+.}-{3:3}: [ 794.987554][T21545] __mutex_lock+0x135/0xc80 [ 794.993643][T21545] bd_prepare_to_claim+0x1d9/0x4a0 [ 794.999560][T21545] truncate_bdev_range+0x4e/0x260 [ 795.005559][T21545] blkdev_fallocate+0x50d/0x6a0 [ 795.010933][T21545] vfs_fallocate+0x585/0x6f0 [ 795.016390][T21545] __x64_sys_fallocate+0xc1/0x110 [ 795.022034][T21545] do_syscall_64+0x55/0xb0 [ 795.026983][T21545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.033410][T21545] [ 795.033410][T21545] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 795.042527][T21545] down_write+0x97/0x200 [ 795.047477][T21545] set_blocksize+0x247/0x4b0 [ 795.052863][T21545] sb_min_blocksize+0xbe/0x190 [ 795.059026][T21545] ext4_fill_super+0x6e7/0x6870 [ 795.065593][T21545] get_tree_bdev+0x3e5/0x520 [ 795.071111][T21545] vfs_get_tree+0x8c/0x280 [ 795.076465][T21545] do_new_mount+0x24a/0xa40 [ 795.081538][T21545] init_mount+0xde/0x130 [ 795.086299][T21545] do_mount_root+0x97/0x230 [ 795.091427][T21545] mount_root_generic+0x1a6/0x3e0 [ 795.097101][T21545] prepare_namespace+0xc2/0x100 [ 795.103388][T21545] kernel_init_freeable+0x41a/0x560 [ 795.109651][T21545] kernel_init+0x1d/0x1c0 [ 795.116279][T21545] ret_from_fork+0x48/0x80 [ 795.121337][T21545] ret_from_fork_asm+0x11/0x20 [ 795.126722][T21545] [ 795.126722][T21545] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 795.135878][T21545] down_write+0x97/0x200 [ 795.143454][T21545] set_blocksize+0x1ff/0x4b0 [ 795.151827][T21545] sb_min_blocksize+0xbe/0x190 [ 795.159303][T21545] ext4_fill_super+0x6e7/0x6870 [ 795.169330][T21545] get_tree_bdev+0x3e5/0x520 [ 795.176407][T21545] vfs_get_tree+0x8c/0x280 [ 795.182611][T21545] do_new_mount+0x24a/0xa40 [ 795.188334][T21545] init_mount+0xde/0x130 [ 795.195012][T21545] do_mount_root+0x97/0x230 [ 795.200620][T21545] mount_root_generic+0x1a6/0x3e0 [ 795.206356][T21545] prepare_namespace+0xc2/0x100 [ 795.212179][T21545] kernel_init_freeable+0x41a/0x560 [ 795.217934][T21545] kernel_init+0x1d/0x1c0 [ 795.222873][T21545] ret_from_fork+0x48/0x80 [ 795.228202][T21545] ret_from_fork_asm+0x11/0x20 [ 795.234123][T21545] [ 795.234123][T21545] -> #0 (&type->s_umount_key#31){++++}-{3:3}: [ 795.243090][T21545] __lock_acquire+0x37ef/0x7d80 [ 795.248464][T21545] lock_acquire+0x19e/0x420 [ 795.253607][T21545] down_read+0x46/0x2e0 [ 795.259477][T21545] super_lock+0x189/0x390 [ 795.265205][T21545] fs_bdev_mark_dead+0xad/0x1f0 [ 795.271381][T21545] bdev_mark_dead+0x83/0x1a0 [ 795.277126][T21545] blk_report_disk_dead+0x21c/0x3e0 [ 795.283764][T21545] del_gendisk+0x2cb/0x8f0 [ 795.289983][T21545] sd_remove+0x8d/0x100 [ 795.294701][T21545] device_release_driver_internal+0x458/0x6f0 [ 795.301287][T21545] bus_remove_device+0x43b/0x520 [ 795.306776][T21545] device_del+0x51f/0x910 [ 795.311635][T21545] __scsi_remove_device+0x1a2/0x390 [ 795.317572][T21545] scsi_forget_host+0xd0/0x110 [ 795.322964][T21545] scsi_remove_host+0x1b3/0x730 [ 795.328354][T21545] virtscsi_remove+0x130/0x1a0 [ 795.333639][T21545] virtio_dev_remove+0x96/0x1a0 [ 795.339046][T21545] device_release_driver_internal+0x408/0x6f0 [ 795.345752][T21545] bus_remove_device+0x43b/0x520 [ 795.351571][T21545] device_del+0x51f/0x910 [ 795.356493][T21545] device_unregister+0x20/0xc0 [ 795.362123][T21545] unregister_virtio_device+0x37/0x60 [ 795.368701][T21545] virtio_pci_remove+0x7f/0xf0 [ 795.374357][T21545] pci_device_remove+0x97/0x230 [ 795.380941][T21545] device_release_driver_internal+0x408/0x6f0 [ 795.388869][T21545] unbind_store+0x1a1/0x1d0 [ 795.396457][T21545] kernfs_fop_write_iter+0x3a4/0x520 [ 795.402400][T21545] vfs_write+0x474/0x9a0 [ 795.407282][T21545] ksys_write+0x151/0x260 [ 795.412144][T21545] do_syscall_64+0x55/0xb0 [ 795.417089][T21545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.423534][T21545] [ 795.423534][T21545] other info that might help us debug this: [ 795.423534][T21545] [ 795.434122][T21545] Chain exists of: [ 795.434122][T21545] &type->s_umount_key#31 --> bdev_lock --> &bdev->bd_holder_lock [ 795.434122][T21545] [ 795.447966][T21545] Possible unsafe locking scenario: [ 795.447966][T21545] [ 795.455429][T21545] CPU0 CPU1 [ 795.460881][T21545] ---- ---- [ 795.466267][T21545] lock(&bdev->bd_holder_lock); [ 795.471303][T21545] lock(bdev_lock); [ 795.478151][T21545] lock(&bdev->bd_holder_lock); [ 795.485702][T21545] rlock(&type->s_umount_key#31); [ 795.490942][T21545] [ 795.490942][T21545] *** DEADLOCK *** [ 795.490942][T21545] [ 795.499080][T21545] 8 locks held by syz.4.5370/21545: [ 795.504260][T21545] #0: ffff88802c10cac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 795.513490][T21545] #1: ffff888079dc2418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 795.522398][T21545] #2: ffff88806556b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 795.532675][T21545] #3: ffff888019af21f0 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 795.543295][T21545] #4: ffff888145ea91b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 795.555239][T21545] #5: ffff8880218ec0e0 (&shost->scan_mutex){+.+.}-{3:3}, at: scsi_remove_host+0x32/0x730 [ 795.565542][T21545] #6: ffff888022f523b8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 795.576343][T21545] #7: ffff888148c48cc8 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 795.588266][T21545] [ 795.588266][T21545] stack backtrace: [ 795.594238][T21545] CPU: 0 PID: 21545 Comm: syz.4.5370 Not tainted syzkaller #0 [ 795.602377][T21545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.615576][T21545] Call Trace: [ 795.619036][T21545] [ 795.622599][T21545] dump_stack_lvl+0x18c/0x250 [ 795.627552][T21545] ? load_image+0x420/0x420 [ 795.632059][T21545] ? show_regs_print_info+0x20/0x20 [ 795.637329][T21545] ? print_circular_bug+0x12b/0x1a0 [ 795.644263][T21545] check_noncircular+0x2fc/0x400 [ 795.650756][T21545] ? print_deadlock_bug+0x5d0/0x5d0 [ 795.657320][T21545] ? lockdep_lock+0xf5/0x230 [ 795.662188][T21545] ? _find_first_zero_bit+0xd6/0x100 [ 795.667762][T21545] __lock_acquire+0x37ef/0x7d80 [ 795.672634][T21545] ? __lock_acquire+0x1262/0x7d80 [ 795.677679][T21545] ? verify_lock_unused+0x140/0x140 [ 795.683230][T21545] ? verify_lock_unused+0x140/0x140 [ 795.689321][T21545] ? find_lock_entries+0x120/0x1020 [ 795.696201][T21545] lock_acquire+0x19e/0x420 [ 795.701992][T21545] ? super_lock+0x189/0x390 [ 795.706760][T21545] ? __might_sleep+0xe0/0xe0 [ 795.713405][T21545] ? read_lock_is_recursive+0x20/0x20 [ 795.718806][T21545] ? __mutex_trylock_common+0x160/0x270 [ 795.725412][T21545] ? trace_raw_output_contention_end+0xd0/0xd0 [ 795.731682][T21545] ? mapping_try_invalidate+0x4bf/0x570 [ 795.737504][T21545] down_read+0x46/0x2e0 [ 795.741781][T21545] ? super_lock+0x189/0x390 [ 795.746340][T21545] super_lock+0x189/0x390 [ 795.750676][T21545] ? xa_find_after+0xaf/0x430 [ 795.755355][T21545] ? user_get_super+0x180/0x180 [ 795.760490][T21545] ? mutex_lock_nested+0x20/0x20 [ 795.766593][T21545] fs_bdev_mark_dead+0xad/0x1f0 [ 795.771908][T21545] ? super_s_dev_set+0xa0/0xa0 [ 795.777449][T21545] bdev_mark_dead+0x83/0x1a0 [ 795.783361][T21545] ? blk_report_disk_dead+0x88/0x3e0 [ 795.789248][T21545] blk_report_disk_dead+0x21c/0x3e0 [ 795.794665][T21545] ? __blk_mark_disk_dead+0x120/0x120 [ 795.801096][T21545] ? xa_find_after+0xaf/0x430 [ 795.805808][T21545] del_gendisk+0x2cb/0x8f0 [ 795.810247][T21545] ? blk_report_disk_dead+0x3e0/0x3e0 [ 795.815749][T21545] ? __pm_runtime_resume+0x129/0x170 [ 795.821257][T21545] sd_remove+0x8d/0x100 [ 795.825620][T21545] ? sd_probe+0x11c0/0x11c0 [ 795.831000][T21545] device_release_driver_internal+0x458/0x6f0 [ 795.841222][T21545] bus_remove_device+0x43b/0x520 [ 795.846417][T21545] ? bus_probe_device+0x260/0x260 [ 795.853593][T21545] ? up_write+0x1be/0x410 [ 795.858868][T21545] ? kernfs_remove_by_name_ns+0x117/0x150 [ 795.865304][T21545] device_del+0x51f/0x910 [ 795.869860][T21545] ? kill_device+0x160/0x160 [ 795.875421][T21545] ? kobject_put+0x421/0x450 [ 795.881622][T21545] __scsi_remove_device+0x1a2/0x390 [ 795.887686][T21545] scsi_forget_host+0xd0/0x110 [ 795.892504][T21545] scsi_remove_host+0x1b3/0x730 [ 795.897563][T21545] virtscsi_remove+0x130/0x1a0 [ 795.902696][T21545] virtio_dev_remove+0x96/0x1a0 [ 795.907559][T21545] ? virtio_dev_probe+0xae0/0xae0 [ 795.913421][T21545] device_release_driver_internal+0x408/0x6f0 [ 795.919949][T21545] bus_remove_device+0x43b/0x520 [ 795.925000][T21545] ? bus_probe_device+0x260/0x260 [ 795.930105][T21545] ? up_write+0x1be/0x410 [ 795.934514][T21545] ? kernfs_remove_by_name_ns+0x117/0x150 [ 795.943902][T21545] device_del+0x51f/0x910 [ 795.948876][T21545] ? kill_device+0x160/0x160 [ 795.953482][T21545] ? pci_device_is_present+0x175/0x240 [ 795.958961][T21545] ? pci_real_dma_dev+0x20/0x20 [ 795.964429][T21545] ? _raw_spin_lock_irq+0xbb/0xf0 [ 795.969840][T21545] device_unregister+0x20/0xc0 [ 795.974957][T21545] unregister_virtio_device+0x37/0x60 [ 795.982896][T21545] virtio_pci_remove+0x7f/0xf0 [ 795.987895][T21545] pci_device_remove+0x97/0x230 [ 795.992908][T21545] ? pci_device_probe+0x8d0/0x8d0 [ 795.997999][T21545] device_release_driver_internal+0x408/0x6f0 [ 796.004283][T21545] unbind_store+0x1a1/0x1d0 [ 796.008836][T21545] ? sysfs_kf_read+0x360/0x360 [ 796.013746][T21545] kernfs_fop_write_iter+0x3a4/0x520 [ 796.019171][T21545] vfs_write+0x474/0x9a0 [ 796.023762][T21545] ? file_end_write+0x250/0x250 [ 796.028712][T21545] ? __fget_files+0x3fc/0x460 [ 796.033574][T21545] ? __fdget_pos+0x2a3/0x330 [ 796.038607][T21545] ? ksys_write+0x74/0x260 [ 796.044249][T21545] ksys_write+0x151/0x260 [ 796.049887][T21545] ? __ia32_sys_read+0x90/0x90 [ 796.054692][T21545] ? lockdep_hardirqs_on+0x98/0x150 [ 796.060000][T21545] do_syscall_64+0x55/0xb0 [ 796.064608][T21545] ? clear_bhb_loop+0x40/0x90 [ 796.070516][T21545] ? clear_bhb_loop+0x40/0x90 [ 796.077258][T21545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.084646][T21545] RIP: 0033:0x7fdaadb9e0d9 [ 796.091183][T21545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.115401][T21545] RSP: 002b:00007fdaaea69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.124276][T21545] RAX: ffffffffffffffda RBX: 00007fdaade25fa0 RCX: 00007fdaadb9e0d9 [ 796.132293][T21545] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000003 [ 796.140539][T21545] RBP: 00007fdaadc35024 R08: 0000000000000000 R09: 0000000000000000 [ 796.149866][T21545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.159038][T21545] R13: 00007fdaade26038 R14: 00007fdaade25fa0 R15: 00007ffd49024908 [ 796.167039][T21545] [ 796.170358][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.215094][T21428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.250302][ T5099] blk_print_req_error: 10 callbacks suppressed [ 796.250315][ T5099] device offline error, dev sda, sector 1055966 op 0x1:(WRITE) flags 0x9800 phys_seg 3 prio class 2 [ 796.291905][ T5099] Aborting journal on device sda1-8. [ 796.298618][T21555] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5940: Journal has aborted [ 796.367602][ T10] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 796.388654][ T10] device offline error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 796.402202][ T10] buffer_io_error: 10 callbacks suppressed [ 796.402212][ T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 796.418919][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.425947][ T5099] JBD2: I/O error when updating journal superblock for sda1-8. [ 796.464416][T21555] EXT4-fs error (device sda1): ext4_dirty_inode:6144: inode #2028: comm syz.7.5373: mark_inode_dirty error [ 796.481568][T21428] hsr_slave_0: entered promiscuous mode [ 796.498618][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 796.516947][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 796.530154][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 796.540115][T17363] EXT4-fs (sda1): I/O error while writing superblock [ 796.566366][T21428] hsr_slave_1: entered promiscuous mode [ 796.591444][T21555] EXT4-fs error (device sda1) in ext4_dirty_inode:6145: Journal has aborted [ 796.601933][T21428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.614911][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 796.625655][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 796.636468][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 796.646985][T17363] EXT4-fs (sda1): I/O error while writing superblock [ 796.666711][T21428] Cannot create hsr debugfs directory [ 796.709112][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.724869][T21555] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.7.5373: Detected aborted journal [ 796.749193][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 796.761705][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 796.773187][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 796.781949][T11521] EXT4-fs (sda1): I/O error while writing superblock [ 796.864361][ T10] device offline error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 796.878197][ T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 796.887753][T21555] EXT4-fs (sda1): I/O error while writing superblock [ 796.928442][T21555] EXT4-fs (sda1): Remounting filesystem read-only [ 797.099018][T21545] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 797.112159][T21545] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 797.145453][T21545] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 797.172353][T21545] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 797.187345][T21545] Buffer I/O error on dev sda1, logical block 273, lost async page write [ 797.409553][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.454408][T21428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 797.502375][T21545] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 797.528257][T21428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 797.566729][T21428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 797.614799][T21428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 797.740714][T21428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.774145][T21428] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.803205][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.811825][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.852002][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.859488][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.955754][T21428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.012748][T21428] veth0_vlan: entered promiscuous mode [ 798.049839][T21428] veth1_vlan: entered promiscuous mode [ 798.092043][T21428] veth0_macvtap: entered promiscuous mode [ 798.119322][T21428] veth1_macvtap: entered promiscuous mode [ 798.162186][T21428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.174594][T21428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.188930][T21428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.202668][T21428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.213794][T21428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.228947][T21428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.242785][T21428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.255905][T21428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.272566][T21428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.285914][T21428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.298388][T21428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.309483][T21428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.321620][T21428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.333136][T21428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.354317][T21428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.364718][T21428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.377540][T21428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.390744][T21428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.403972][T21428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.414590][T21428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.424718][T21428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.435615][T21428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.475377][T21428] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 798.504556][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.522798][T21428] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 798.533773][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.560889][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.582951][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.934607][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.210299][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.282613][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.350679][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.025609][ T1144] hsr_slave_0: left promiscuous mode [ 804.038929][ T1144] hsr_slave_1: left promiscuous mode [ 804.056795][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.088804][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.118605][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.146621][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.176954][ T1144] bridge_slave_1: left allmulticast mode [ 804.185614][ T1144] bridge_slave_1: left promiscuous mode [ 804.208530][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.238418][ T1144] bridge_slave_0: left allmulticast mode [ 804.246291][ T1144] bridge_slave_0: left promiscuous mode [ 804.277493][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.302955][ T1144] veth1_macvtap: left promiscuous mode [ 804.317868][ T1144] veth0_macvtap: left promiscuous mode [ 804.325858][ T1144] veth1_vlan: left promiscuous mode [ 804.356627][ T1144] veth0_vlan: left promiscuous mode [ 804.699102][ T1144] team0 (unregistering): Port device team_slave_1 removed