last executing test programs: 2m2.79667012s ago: executing program 2 (id=3): r0 = msgget$private(0x0, 0x19b) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) 2m2.619514282s ago: executing program 2 (id=17): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x8, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0xfc1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 2m1.91199257s ago: executing program 2 (id=26): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTeiUcT/wJPejHqycSr3g0JMVxAvTzzdt8ru8vuupStC+znkyydefOWme/Om+2bmd0GMLAmsn+SiK0R8VtEjNWyjSdM1H5cu3Ju/q8r5+aTSNM3/0yq5129cm6+OLV43pYiU2k8Xm/5zNkTc+Xy4uk8P71y8v3p5TNnnz1+cu7Y4rHFU7MHDx7YP/PC87PP9STOrE1Xd328tHvnq29feH3+yIV3fvomKeJviOPD7v/TjR1LJ1ocGyoST3Zfyx1hW106Ge5jQ7gp70ZE1l0j1fE/FkNxvfPG4pXP+to4YF2laZpuaF9cSYG7WBL9bgHQH/nv+SSikk395+vn84Pg8uHaBCiL+1r+qJUMR6mWGL/YNL/tpWy2daTy98XsEU3rKQAA6+G7w7Wf2X1H8agdKTWs4h/K94bGI+LeiNgeEfdFxI6IuD8iHoiIByPiobrntNr3ada8SXLj/U/p0poC61J2//divrfVeP9XKk4ZH8pz26rxjyRHj5cX90XEPRExGSMbsvxMhzq+f/nXL9qVTdTd/2WPrP7iXjBvx6XhpgW6hbmVuVuJud7lTyN2DbeKP1ndCcj6cWdE7NqztjqOP/317nZl/x1/Bz3YZ0q/iniq1v+VaIq/kHTen5zeGOXFfdPFVXGjn385/0a7+m8p/h7I+n9zy+t/Nf7xpH6/dvnm6zj/++dt5zRdXv+j9c/Jrv/R5K1quij4aG5l5fRMxGjyWn78UH68sb7qebPXz8/in9zbevxvj+uvxMMRkV3Ej0TEoxGxJ2/7YxHxeETs7RD/jy898d7a419fWfwLN9X/bRPF3vYNRUMnfvi2WlJ01niH+JNo0f8HqqnJ/Eg3738dW3r6Vq5mAAAAuPOUImJrJKWp1XSpNDVV+7z8jthcKi8trzxzdOmDUwu17wiMx0ipWOkaW10PjcpMPq0v1kdnm/L783XjL4c2VfNT80vlhX4HDwNuS5vxn/ljqN+tA9ZXh0//A3e/te6jp2n6SY+bAvzPfF8bBpfxD4Orxfjf1JS3SgB3qVa//03sYTC4/4fBZfzD4DL+YXAZ/zCQ8m/CD3fzBf91S2TvP/2rvZtENLQwTfvUjNHb49WoJqLUt9pjjU+f7NMr9k/+xzZvj47rMtHvdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+DcAAP//dZ3gaQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x100, 0x0) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 2m1.192220368s ago: executing program 2 (id=30): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x480, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x0, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x0, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x213b2c26, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x5, 0x6, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x45f, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x7, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) 1m59.880686562s ago: executing program 2 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001c00010026bd7ea1375a000007050000", @ANYRES32=r1, @ANYBLOB="8000b2000a0002000180c200000200000600050002"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1m59.702250134s ago: executing program 32 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001c00010026bd7ea1375a000007050000", @ANYRES32=r1, @ANYBLOB="8000b2000a0002000180c200000200000600050002"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1m1.069530794s ago: executing program 3 (id=575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 1m0.646255599s ago: executing program 3 (id=580): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.49266532s ago: executing program 3 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x40000081, 0x0, 0x2e}, {}, {0x8a, 0x0, 0x8000000000000000}]}) 1m0.272528603s ago: executing program 3 (id=586): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./mnt\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0], 0x1, 0xc58, &(0x7f00000000c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 59.874205347s ago: executing program 3 (id=591): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r1, 0x7}, 0x8) 59.392934013s ago: executing program 3 (id=593): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xc}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 58.955820767s ago: executing program 33 (id=593): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xc}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 58.75747244s ago: executing program 5 (id=598): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x9e2696008603fac1}) 58.581776252s ago: executing program 5 (id=600): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./mnt\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0], 0x1, 0xc58, &(0x7f00000000c0)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r1, r2) 58.082600417s ago: executing program 5 (id=605): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/16, &(0x7f0000000200)=0x10) 57.732560791s ago: executing program 5 (id=610): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f00000013c0)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,nointegrity,iocharset=cp1251,integrity,nodiscard,noquota,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c00c38b4986bd7086e58f5d7fd70ab0f8e8bb0e5f5b35be555a19034ea00aa5cc6053411b1c187a24d1f68a37ecec3d26f9ba8207f6ce22b0a47e28485c69c14dc952b0c5e5f1ffe29eb2ce10e7e2a59e32a5a7ea7d8a6fa0b5e90476f3fa2cb4fcba14a881906678b3f96174c0ea0e4edc3068e37fec09729df129bb3e5b9490df2879472cb2e2"], 0x24, 0x621a, &(0x7f0000001500)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000400)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) 56.286599517s ago: executing program 5 (id=627): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 52.198001052s ago: executing program 5 (id=647): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 51.927040015s ago: executing program 34 (id=647): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 42.791400986s ago: executing program 4 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1b, 0x0, 0xb}]}) 42.435907401s ago: executing program 4 (id=701): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-', @ANYRESDEC], 0x31) 42.221412983s ago: executing program 4 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$eventfd(r2, &(0x7f0000000180), 0x8) 42.022848095s ago: executing program 4 (id=705): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000c00)='./file0\x00', 0x8010, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d61736369692c00125c6f3ad370264551e3ffff7e80e44939e902bdf759e02dbdff45399cd965a877fb80b6f99d249537cb3ccf29a605586bcc81c95f7bdb69711ae6935ce36b"], 0x1, 0x566, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x1aa) getdents64(r0, &(0x7f0000000ac0)=""/71, 0x47) 41.336351643s ago: executing program 4 (id=715): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000200080002000700339d060001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x240400c4) 40.760214089s ago: executing program 4 (id=720): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r0, 0xc2f, 0x2, 0x4) 40.422527813s ago: executing program 35 (id=720): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r0, 0xc2f, 0x2, 0x4) 4.544067321s ago: executing program 7 (id=1020): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0xffffffff, 0x0, 'queue1\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17, @time={0xbf, 0x316575}}) 4.525217801s ago: executing program 0 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007480), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000075c0)={0x0, 0x0, &(0x7f0000007580)={&(0x7f00000074c0)={0x34, r2, 0xd, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 4.459691141s ago: executing program 1 (id=1023): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000007}) epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1, 0x4, 0x0, 0x0) 4.348316272s ago: executing program 0 (id=1025): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000100)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x1, "a5c7a9", 0x1, 0xe7}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.310309873s ago: executing program 1 (id=1026): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 4.239262754s ago: executing program 1 (id=1027): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x4040000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x16, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 4.123946255s ago: executing program 1 (id=1028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x541b, 0x0) 4.052756916s ago: executing program 7 (id=1029): openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 3.808291269s ago: executing program 1 (id=1031): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) lstat(&(0x7f0000000100)='./file2\x00', 0x0) 3.74046315s ago: executing program 7 (id=1032): socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000001240)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_win95}, {@utf8no}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}]}, 0x26, 0x350, &(0x7f00000001c0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.962559268s ago: executing program 7 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000104"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.624599012s ago: executing program 7 (id=1038): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000680)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,iocharset=macgreekAmap=acorn,iocharset=macgael0x0000000000000058,mode=0xffffffffffffffff,block=0x0000000000000a00,check=strict,uid>\x00'/223, @ANYRESDEC=0x0, @ANYBLOB=',context=user_u,\x00'], 0xfa, 0x6bb, &(0x7f00000015c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 2.338734645s ago: executing program 7 (id=1039): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.974176099s ago: executing program 1 (id=1043): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x40, 0x11, 0x6, "cd0aaa197eeb"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f00000002c0), 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f00000007c0)={0x14, 0x0, 0x0}, &(0x7f0000000d00)={0x1c, &(0x7f0000000800)={0x20, 0x7, 0x4, 'fd8q'}, 0x0, 0x0}) 1.775468411s ago: executing program 8 (id=1045): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x8, @desc1}) 1.724043421s ago: executing program 0 (id=1046): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.481454984s ago: executing program 0 (id=1049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x2, 0x0, 0x4}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 1.372869255s ago: executing program 0 (id=1051): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='ALTPCM \'Line Capture\' 00000000000000000000\nLINE2\nDIGITAL3\nSPEAKER \'Synth\' 0000000000C'], 0xf7) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.220551157s ago: executing program 0 (id=1052): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4433, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0xfb, 0x2d, 0x0, 0x3, "50494bee0a3f4a0bc12b6128717e8e4b", "3294611f1c7a53589734906e0ee974e9604632655d147098"}, 0x2d, 0x2) 1.220313967s ago: executing program 6 (id=1053): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) fallocate(r0, 0x0, 0x3fc00, 0x4000) 1.160899528s ago: executing program 8 (id=1054): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="8a17a531ed9d899162ea", 0xa}], 0x1, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}], 0x38}, 0x4) 866.739491ms ago: executing program 6 (id=1055): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x28, r0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48814) 796.614472ms ago: executing program 8 (id=1056): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 628.717504ms ago: executing program 8 (id=1057): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x44, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x5, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x3}]}}]}]}, 0x44}}, 0x0) 501.798745ms ago: executing program 6 (id=1058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 456.215016ms ago: executing program 8 (id=1059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000017"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 331.917197ms ago: executing program 6 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4008000) 271.754837ms ago: executing program 6 (id=1061): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 164.713749ms ago: executing program 8 (id=1062): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000180)='./file3\x00', 0x220) rename(&(0x7f0000000b40)='./file3\x00', &(0x7f0000000b00)='./file1\x00') 0s ago: executing program 6 (id=1063): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$eJzs3Au4TtXWOPAx5pxLm8Sb5D7HHIs3uUySJJeERJIkSZJbQpIkSUhscktCEnJPcg/JLST3+y33JDmSJAkJSeb/0anPOadzTuf8zzmf7zl7/J5nPXuOvd4x3rH22Hu/a6397Pfr9gMr161SsTYzw78E//ghFQBSAKAPAGQGgAgASmQpkQVwCKTXmPqvPYn493pgyuXuQFxOMv+0Teaftsn80zaZf9om80/bZP5pm8w/bZP5C5GWbZma82rZ0u72z9z/z/D3dv7u/X+Q+///58jr/3+RQ0VGfb6uyLUd/okUmX/aJvNP22T+aZvMP22T+adtMv//chFAhb+zW+aftsn8hUjLLvf9Z9ku73a5v/+EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQNZ8MlBgB+XV/uvoQQQgghhBBCCPHvE6740yjd5WtECCGEEEIIIYQQ/0EICjQYiCAdXAEpkB4ywJWQEa6CTJAZEnA1ZIFrICtcC9kgO+SAnJALckMesEDggCGGvJAPknAd5IfroQAUhEJQGDwUgaJwAxSDG6E43AQl4GYoCbdAKSgNZaAs3Arl4DYoDxWgItwOleAOqAxV4E6oCndBNbgbqsM9UAPuhZpwH9SC+6E2PAB14EGoCw9BPXgY6kMDaAiNoPH/V/7z0BlegC7QFVKhG3SHF6EH9IRe0Bv6wEvQF16GfvAK9IcBMBBehUHwGgyG12EIDIVh8AYMhxEwEkbBaBgDY+FNGAdvwXh4GybARJgEk2EKTIVp8A5MhxkwE96FWfAezIY5MBfmwXx4HxbAQlgEH8Bi+BCWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAR7AVtsF22AE7YRfsho9hD3wCe+FT2Aef/WV+5r+ff+Yv8jsgIKBChQYNpsN0mIIpmAEzYEbMiJkwEyYwgVkwC2bFrJgNs2EOzIG5MBfmwTxISMjImBfzYhKTmB/zYwEsgIWwEHr0WBSLYjG8EYtjcSyBJbAklsRSWBpLY1ksi+WwHJbH8lgRK2IlrISVsTLeiXfiXVgNq2F1rI41sAbWxJpYC2thbayNdbAO1sW6WA/rYX2sjw2xITbGxtgEm2BTbIrNsTm2wBbYEltiK2yFrbE1tkHEttgW22E7bI/tsQN2xI74PD6PL+AL2BUrqW7YHbtjD+yBvbA39saXsC++jC/jK9gfB+BAfBVfxddwMJ7GITgUh+EwLKdG4EgchazG4Fgci+NwHI7H8TgBJ+JEnIxTcCpOw2k4HWfgDHwXZ+F7+B7OwTk4D+fjfFyAC3ERLsLFeAaX4FJchstxBa7EFbga1+BqXIfrcR1uxI24GTfjR/gRbsNtuAN34C7chR/jx/gJfoL9cR/uw/24Hw/gATyIB/EQHsLDeBiP4BE8ikfxGB7D43gCT+IJPIWn8DSewbN4Fs/hOTyPz+b6ss6ugmv7g7rIKKPSqXQqRaWoDCqDyqgyqkwqk0qohMqisqisKqvKprKpHCqHyqVyqTwqjyJFilWs8qq8KqmSKr/KrwqoAqqQKqS88qqoKqqKqWKquCquSqibVUl1iyqlSqtmvqwqq8qp5r68qqAqqoqqkrpDVVZVVBVVVVVV1VQ1VV1VVzVUDVVT3adqqW7YCx9QFydTVw3Aemog1lcNVEPVSL2Gj6gmajA2Vc1Uc/WYGopDsKVq4lupJ1VrNRLbqKfVKHxGtVNjsL16TnVQHVUn9bzqrJr6Lr/e7lSTsYfqqXqp3mo63qEuTqyyekX1VwPUQPWqmoevqcHqdTVEDVXD1BtquBqhRqpRarQao8aqN9U49ZYar95WE9RENUlNVlPUVDVNvaOmqxlqpnpXzVLvqdlqjpqr5qn56n21QC1Ui9QHarH6UC1RS9UytVytUCvVKrVarVFr1Tq1Xm1QG9UmtVltUR+prWqb2q52qJ1ql9qtPlZ71Cdqr/pU7VOfqf3qD+qA+lwdVF+oQ+pLdVh9pY6or9VR9Y06pr5Vx9UJdVJ9p06p7xOn1Rl1Vv2gzqkf1Xn1k7qgggKNWmmtjY50On2FTtHpdQZ9pQZ9lc6kM+uEvlpn0dforPpanU1n1zl0Tp1L59Z5tNWknWYd67w6n07q63R+fb0uoAvqQrqw9rqILqpv0MX0jbq4vkmX0DfrkvoWXUqX1mV0WX2rLqdv0+V1BV1R364r6Tt0ZV1F36mr6rt0NX23rq7v0TX0vbqmvk/X0vfr2voBXUc/qOvqh3Q9/bCurxvohrqRbqwf0U30o7qpbqab68d0C/24bqmf0K30k7q1fkq30U/rtvoZ3U4/q9vr53QH3VF30j/pCzroLrqrTtXddHf9ou6he+peurfuo1/SffXLup9+RffXA/RA/aoepF/Tg/XreogeqofpN/RwPUKP1KP0aD1Gj9Vv6nH6LT1ev60n6Il6kp6sp+iputcvlWb+A/lv/ZX8fj8/+2a9RX+kt+pterveoXfqXXq33q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4PqF/0N/pU/p7fVqf0Wf0D/qcPqfP//I1AINGGW2MiUw6c4VJMelNBnOlyWiuMplMZpMwV5ss5hqT1VxrspnsJofJaXKZ3CaPsYaMM2xik9fkM0lznclvrjcFTEFTyBQ23hQxRc0N/3L+7/XX2DQ2TUwT09Q0Nc1Nc9PCtDAtTUvTyrQyrU1r08a0MW1NW9POtDPtTXvTwXQwnUwn09l0Nl1MF5NqUk1386LpYXqaXqa36WNeMn1NX9PP9DP9TX8z0Aw0g8wgM9gMNkPMEDPMDDPDzXAz0ow0o81oM9aMNePMODPejDcTzAQzyUwyU8wUM81MM9PNdDPTzDSzzCwz28w2c81cM9/MNwvMArPILDKLzWKzxCw1S81ys9ysNCvNarParDVrzXqz3mw0G80Ss8VsMVvNVrPdbDc7zU6z2+w2e8wes9fsNfvMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnzDlz3pw3F8yFi6d9kYpUZCITpYvSRSlRSpQhyhBljDJGmaJMUSJKRFmiLFHW6NooW5Q9yhHljHJFuaNUsBFFLuIojvJG+aJkdF2UP7o+KhAVjApFhSMfFYmKRjdExaIbo+LRTVGJ6OaoZHRLVCoqHZWJyka3RuWi26LyUYWoYnR7VCm6I6ocVYnujKpGd0XVoruj6tE9UY3o3qhmdF9UK7o/qh09ENWJHozqRg9F9aKHo/pRg6hh1Chq/G+tH8Lp7I/6LrarTbXdbHf7ou1he9petrftY1+yfe3Ltp99xfa3A+xA+6odZF+zg+3rdogdaofZN+xwO8KOtKPsaDvGjrVv2nH2LTvevm0n2Il2kp1sp9ipdpp9x063M+xM+66dZd+zs+0cO9fOs/Pt+3aBXWgX2Q/sYvuhXWKX2mV2uV1hV9pVdrVdY9fadXa93WA32k12s91iP7Jb7Ta73e6wO+0uu9t+bPfYT+xe+6ndZz+z++0f7AH7uT1ov7CH7Jf2sP3KHrFf26P2G3vMfmuP2xP2pP3OnrLf29P2jD1rf7Dn7I/2vP3JXrDh4sn9xZd3MmQoHaWjFEqhDJSBMlJGykSZKEEJykJZKCtlpWyUjXJQDspFuSgP5aGLmJjyUl5KUpLyU34qQAWoEBUiT56KUlEqRsWoOBWnElSCSlJJKkWlqAyVoVvpVrqNbqMKVIFup9vpDrqDqlAVqkpVqRpVo+pUnWpQDapJNakW1aLaVJvqUB2qS3WpHtWj+lSfGlJDakyNqQk1oabUlJpTc2pBLagltaRW1IpaU2tqQ22oLbWldtSO2lN76kAdqBN1os7UmbpQF0qlVOpO3akH9aBe1Iv6UB/qS32pH/Wj/tSfBtJAGkSDaDANpiE0lIbRGzScRtBIGkWjaQyNpbE0jsbReBpPE2gCTaJJNIWm0DSaRtNpOs2kmTSLZtFsmk1zaS7Np/m0gBbQIlpEi2kxLaEltIyW0QpaQatoFa2hNbSO1tEG2kCbaBNtoS20lbbSdtpOO2kn7abdtIf20F7aS/toH+2n/XSADtBBOkiH6BAdpsN0hI7QUTpKx+gYHafjdJJO0ik6RafpNJ2ls3SOfqTz9BNdoEApTkEGd6XL6K5ymVxml+LSu4txBAAX4xwup8vlcrs8zrpsLvufxeScK+AKukKusPOuiCvqbvhNXMqVdmVcWXerK+duc+V/E1d1d7lq7m5X3d3jqrg7/yyu4e51Nd1DrpZ72NV2DVwd18jVjR5y9dzDrr5r4Bq6Rq6Fe9y1dE+4Vu5J19o99Zt4gVvo1ri1bp1b7/a4T9xZ94M74r5259yProvr6vq4l1xf97Lr515x/d2A38TD3BtuuBvhRrpRbrQb85t4kpvspripbpp7x013M34Tz3fvu1lukZvt5ri5bt7P8cWeFrkP3GL3oVvilrplbrlb4Va6VW71//S63G10m9xmt9t97La6bW672+F2ul0/xxePY6/71O1zn7nD7it3wH3uDrqj7pD78uf44vEddd+4Y+5bd9ydcCfdd+6U+96ddmd+Pv6Lx/6d+8ldcMEBIyvWbDjidHwFp3B6zsBXcka+ijNxZk7w1ZyFr+GsfC1n4+ycg3NyLs7NedgysWPmmPNyPk7ydZyfr+cCXJALcWH2XISL8g1cjG/k4nwTl+CbuSTfwqW4NJfhsnwrl+PbuDxX4Ip8O1cKgStzFb6Tq/JdXI3v5up8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI8f5vrcgBtyI27Mj3ATfpSbcjNuzo9xC36cW/IT3Iqf5Nb8FLfhp7ktP8Pt+Fluz89xB+7Infh57swvcBfuyqncjbvzi9yDe3Iv7s19+CXuyy9zP36F+/MAHsiv8iB+jQfz6zyEh/IwfoOH8wgeyaN4NI/hsfwmj+O3eDy/zRN4Ik/iyTyFp/I0foen8wyeye/yLH6PZ/McnsvzeD6/zwt4IS/iD3gxf8hLeCkv4+W8glfyKl7Na3gtr+P1vIE38ibezFv4I97K23g77+CdvIt388e8hz/hvfwp7+PPeD//gQ/w53yQv+BD/CUf5q/4CH/NR/kbPsbf8nE+wSf5Oz7F3/NpPsNn+Qc+xz/yef6JL3BgiDFWsY5NHMXp4ivilDh9nCG+Ms4YXxVnijPHifjqOEt8TZw1vjbOFmePc8Q541xx7jhPbGOKXcxxHOeN88XJ+Lo4f3x9XCAuGBeKC8c+LhIXjW+Ii8U3xsXjm+IS8c1xyfiWGFJLxw/dUza+NS4X3xaXjyvEFePb40rxHXHluEp8Z1w1viuuFt8dV4/viYvH98Y14/viWvH9ce34gbhO/GBcN34orhc/HNePG8QN40Zx4/iRuEn8aNw0bhY3jx+LW8SPxy3jJ+JW8ZNx6/ip392fGneLu8cvxi/GIdytfrlOTC5ILkwuSn6QXJz8MLkkuTS5LLk8uSK5MrkquTq5Jrk2uS65PrkhuTG5Kbk5GUKVK8CjV1574yOfzl/hU3x6n8Ff6TP6q3wmn9kn/NU+i7/GZ/XX+mw+u8/hc/pcPrfP460n7zz72Of1+XzSX+fz++t9AV/QF/KFvfdFfFHfyDf2jX0T/6hv6pv55v4x/5h/3D/un/BP+Cd9a/+Ub+Of9m39M76df9Y/65/zHXxH38k/7zv7F3wX39Wn+lTf3Xf3PXwP38v38n18H9/X9/X9fD/f3/f3A/1AP8gP8oP9YD/ED/HD/DA/3A/3I/1IP9qP9mP9WD/Oj/Pj/Xg/wU/wk/wkP8VP8dP8ND/dT/cz/Uw/q8AsP9vP9nP9XD/fz/cL/AK/yC/yi/1iv8Qv8cv8Mr/Cr/Cr/Cq/xq/x6/w6v8Fv8Jv8Jr/Fb/Fb/Va/3W/3O/1Ov9vv9nv8Hr/X7/X7/D6/3+/3B/wBf9B/4Q/5L/1h/5U/4r/2R/03/pj/1h/3J/xJ/50/5b/3p/0Zf9b/4M/5H/15/5O/4IMfm3gzMS7xVmJ84u3EhMTExKTE5MSUxNTEtMQ7iemJGYmZiXcTsxLvJWYn5iTmJuYl5ifeTyxILEwsSnyQWJz4MLEksTSxLLE8sSKxMhFC7q1xyBvyhWS4LuQP14cCoWAoFAoHH4qEouGGUCzcGIqHm0KJcHMoGW4JpULpUCY8HOqHBqFhaBQah0dCk/BoaBqahebhsdAiPB5ahidCq/BkaB2eCm3C06FteCa0C8+G9uG50CF0DJ3C86FzeCF0CV1DaugWuocXQ4/QM/QKvUOf8FLoG14O/cIroX8YEAaGV8Og8FoYHF4PQ8LQMCy8EYaHEWFkGBVGhzFhbHgzjAtvhfHh7TAhTAyTwuQwJUwN08I7YXqYEWaGd8Os8F6YHeaEuWFemB/eDwvCwrAofBAWhw/DkrA0LAvLw4qwMqwKq8OasDasC+vDhrAxbAqbw5bwUdgatoXtYUfYGXaF3eHjsCd8EvaGT8O+8FnYH/4QDoTPw8HwRTgUvgyHw1fhSPg6HA3fhGPh23A8nAgnw3fhVPg+nA5nwtnwQzgXfgznw0/hgvzPmhBCCCHEP0T/zv5uf+Vz6QDg10ui7gBw1bach/6y5oZsf1z3VLlaJADgya7tH/h1q1QpNTX1l8cu0RDlmwMAiT+v/2u8FJrD49AKmkGxv9pfT9XxHP9O/eTNABn+JCcFLsWX6t/4N+o/8tiwBSXjs1n+Tv05AAXyXcpJD5fiS/WL/4362Zv8Tv/pPx8L0PRPcjLCpfhS/aLwKDwFrf7skUIIIYQQQgghxB/1VGXa/u3rT/0/1+e5zKWcK+BS/HvX50IIIYQQQgghhLj8nunY6YlHWrVq1vYfW+Avf5f+57JkIYv/nkX6X350/q/08x9aXM7fSkIIIYQQQoj/hEsn/Ze7EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIu3633g7sct9jEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcTl9v8CAAD//5aUMno=") connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): pping garbage [ 126.507577][ T5790] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 126.517500][ T5457] usb write operation failed. (-71) [ 126.534803][ T4229] cdc_wdm 4-1:1.0: skipping garbage [ 126.539805][ T5457] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.579266][ T4229] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 126.591993][ T5457] dvbdev: DVB: registering new adapter (Terratec H7) [ 126.603390][ T4229] cdc_wdm 4-1:1.0: Unknown control protocol [ 126.625572][ T5457] usb 2-1: media controller created [ 126.650924][ T5457] usb read operation failed. (-71) [ 126.686504][ T4268] usb 4-1: USB disconnect, device number 5 [ 126.696320][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 126.703262][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 126.706598][ T5457] usb write operation failed. (-71) [ 126.709384][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 126.760221][ T5457] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 126.773089][ T5457] usb 2-1: USB disconnect, device number 7 [ 127.074746][ T5811] set_capacity_and_notify: 2 callbacks suppressed [ 127.074762][ T5811] loop0: detected capacity change from 0 to 256 [ 127.140932][ T5811] exfat: Deprecated parameter 'utf8' [ 127.168840][ T5811] exfat: Deprecated parameter 'namecase' [ 127.179688][ T5812] loop5: detected capacity change from 0 to 4096 [ 127.394674][ T5811] exFAT-fs (loop0): Invalid exboot-signature(sector = 3): 0x01550000 [ 127.411030][ T5812] EXT4-fs (loop5): inline encryption not supported [ 127.429710][ T5811] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1921ab27) [ 127.460685][ T5822] loop3: detected capacity change from 0 to 256 [ 127.467713][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.509009][ T5811] exFAT-fs (loop0): invalid boot region [ 127.515315][ T5811] exFAT-fs (loop0): failed to recognize exfat type [ 127.541942][ T5822] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.605526][ T5822] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 127.698053][ T5822] 9pnet_virtio: no channels available for device syz [ 127.708359][ T5812] EXT4-fs (loop5): Test dummy encryption mode enabled [ 127.796222][ T5812] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 127.815041][ T5812] System zones: 0-5 [ 127.863372][ T5812] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 127.942478][ T5834] binder: 5833:5834 ioctl c0306201 0 returned -14 [ 128.024008][ T26] audit: type=1800 audit(1777885585.326:11): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.461" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 128.069519][ T5812] fs-verity: sha512 using implementation "sha512-avx2" [ 128.295715][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.443240][ T5849] loop1: detected capacity change from 0 to 764 [ 128.483643][ T5853] loop4: detected capacity change from 0 to 128 [ 128.516613][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.574097][ T5846] loop0: detected capacity change from 0 to 8192 [ 128.732213][ T5861] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 128.764181][ T5846] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff" or missing value [ 128.786889][ T5861] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.809447][ T5864] process 'syz.1.479' launched './file0' with NULL argv: empty string added [ 128.971419][ T5876] loop4: detected capacity change from 0 to 64 [ 129.082752][ T5876] MINIX-fs: mounting file system with errors, running fsck is recommended [ 129.263472][ T5878] loop5: detected capacity change from 0 to 4096 [ 129.308742][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.354510][ T5892] netlink: 148 bytes leftover after parsing attributes in process `syz.3.495'. [ 129.394207][ T5878] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 129.406203][ T4232] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.440724][ T5878] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 129.471618][ T5878] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 129.548855][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.566331][ T5878] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 129.640351][ T5878] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 129.684890][ T5878] ntfs: volume version 3.1. [ 129.722277][ T5878] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 129.802113][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.500'. [ 129.811467][ T5878] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 129.824799][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.872703][ T5878] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 129.926777][ T5907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.500'. [ 129.936156][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.956931][ T4232] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.156194][ T4232] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 130.165327][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.224305][ T4232] usb 2-1: Product: syz [ 130.248839][ T4232] usb 2-1: Manufacturer: syz [ 130.253543][ T4232] usb 2-1: SerialNumber: syz [ 130.352198][ T5922] loop0: detected capacity change from 0 to 1024 [ 130.453863][ T5922] gfs2: path_lookup on c::: returned error -2 [ 130.556529][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.569125][ T4232] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 130.605303][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.628061][ T154] hfsplus: b-tree write err: -5, ino 25 [ 130.634245][ T154] hfsplus: b-tree write err: -5, ino 4 [ 130.663973][ T4232] usb 2-1: USB disconnect, device number 8 [ 130.671844][ T154] hfsplus: b-tree write err: -5, ino 2 [ 130.927064][ T4934] udevd[4934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.971639][ T21] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.002693][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.234832][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.270150][ T21] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.310704][ T21] usb 4-1: Product: syz [ 131.314942][ T21] usb 4-1: Manufacturer: syz [ 131.362137][ T21] usb 4-1: SerialNumber: syz [ 131.395397][ T21] usb 4-1: config 0 descriptor?? [ 131.425483][ T5924] loop5: detected capacity change from 0 to 32768 [ 131.453603][ T21] usb 4-1: selecting invalid altsetting 0 [ 131.541901][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 131.541917][ T26] audit: type=1800 audit(1777885588.846:12): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.509" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 131.620365][ T5924] ERROR: (device loop5): dbAllocBits: leaf page corrupt [ 131.620365][ T5924] [ 131.683451][ T21] usb 4-1: USB disconnect, device number 6 [ 131.695705][ T5924] ERROR: (device loop5): remounting filesystem as read-only [ 131.720408][ T5924] attempt to access beyond end of device [ 131.720408][ T5924] loop5: rw=16812033, want=4681672, limit=32768 [ 131.805976][ T4232] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.851345][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 131.869772][ T278] blkno = 8ed80, nblocks = 79 [ 131.894319][ T278] ERROR: (device loop5): dbFree: block to be freed is outside the map [ 131.894319][ T278] [ 131.922338][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.055888][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 132.067947][ T5967] kvm [5966]: vcpu2, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0x7ff [ 132.184442][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.210153][ T5947] loop0: detected capacity change from 0 to 32768 [ 132.222576][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.243114][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.263400][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.321159][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.360909][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.490906][ T5978] vxcan0: tx address claim with dest, not broadcast [ 132.516105][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.696046][ T4232] usb 2-1: GET_CAPABILITIES returned 0 [ 132.702133][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 132.805379][ T21] hid-generic 0005:0C45:1010.0006: item fetching failed at offset 0/1 [ 132.862413][ T21] hid-generic: probe of 0005:0C45:1010.0006 failed with error -22 [ 132.916031][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922401][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986262][ T5959] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 132.987160][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.008626][ T5457] usb 2-1: USB disconnect, device number 9 [ 133.038585][ T6000] loop3: detected capacity change from 0 to 4096 [ 133.139320][ T6000] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 133.156085][ T4232] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.232929][ T6000] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 133.256233][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.505950][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 133.537796][ T4232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.588621][ T4232] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.625084][ T6013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.535'. [ 133.648884][ T21] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 133.663561][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.676695][ T21] usb 5-1: config 0 descriptor?? [ 133.682003][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 133.696124][ T4232] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.711664][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 133.756217][ T4232] usb 6-1: SerialNumber: syz [ 133.976184][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 133.992788][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.032160][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 134.044250][ T21] usb 5-1: media controller created [ 134.068731][ T4232] usb 6-1: 0:2 : does not exist [ 134.073414][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.105936][ T4268] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.124403][ T4232] usb 6-1: USB disconnect, device number 5 [ 134.153182][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.156440][ T5457] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.203001][ T21] az6027: usb out operation failed. (-71) [ 134.226262][ T21] az6027: usb out operation failed. (-71) [ 134.232685][ T21] stb0899_attach: Driver disabled by Kconfig [ 134.245507][ T21] az6027: no front-end attached [ 134.245507][ T21] [ 134.267068][ T21] az6027: usb out operation failed. (-71) [ 134.275961][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 134.285631][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 134.313886][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 134.321603][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 134.335743][ T21] usb 5-1: USB disconnect, device number 6 [ 134.376769][ T4268] usb 1-1: Using ep0 maxpacket: 16 [ 134.408968][ T4934] udevd[4934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.416942][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 134.446526][ T5457] usb 4-1: Using ep0 maxpacket: 16 [ 134.470595][ T6034] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 134.484224][ T6034] syzkaller1: linktype set to 260 [ 134.516227][ T4268] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.527686][ T4268] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.538414][ T4268] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.546276][ T4268] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 134.555560][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.573024][ T4268] usb 1-1: config 0 descriptor?? [ 134.669357][ T6036] loop1: detected capacity change from 0 to 2048 [ 134.692246][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.548'. [ 134.726164][ T5457] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 134.735268][ T5457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.751226][ T5457] usb 4-1: Product: syz [ 134.755456][ T5457] usb 4-1: Manufacturer: syz [ 134.768257][ T5457] usb 4-1: SerialNumber: syz [ 134.774917][ T5457] usb 4-1: config 0 descriptor?? [ 134.831575][ T6036] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.842399][ T5457] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 134.985607][ T6052] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.083094][ T4268] hid (null): invalid report_size 18421 [ 135.111568][ T4268] hid (null): unknown global tag 0xc [ 135.128144][ T4268] hid (null): nested delimiters [ 135.133298][ T4268] hid (null): unknown global tag 0xe [ 135.158224][ T4268] hid (null): usage index exceeded [ 135.180441][ T4268] hid (null): global environment stack underflow [ 135.193771][ T4268] hid (null): invalid report_count -1496587962 [ 135.218807][ T4268] hid (null): unknown global tag 0xe [ 135.265379][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.276137][ T5457] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 135.295304][ T5457] visor: probe of 4-1:0.0 failed with error -5 [ 135.334053][ T21] usb 1-1: USB disconnect, device number 8 [ 135.416075][ T4232] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.474985][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.492248][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.501561][ T6073] loop5: detected capacity change from 0 to 64 [ 135.510127][ T4229] usb 4-1: USB disconnect, device number 7 [ 135.557388][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.599043][ T6073] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 135.691990][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 135.851332][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.857275][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.862397][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.969376][ T4232] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 135.989503][ T4232] usb 5-1: config 117 has no interface number 0 [ 136.003402][ T4232] usb 5-1: config 117 interface 163 has no altsetting 0 [ 136.036520][ T6088] IPVS: sh: FWM 4 0x00000004 - no destination available [ 136.112944][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.176290][ T4232] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 136.202758][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.223072][ T4232] usb 5-1: Product: syz [ 136.234233][ T4232] usb 5-1: Manufacturer: syz [ 136.244381][ T4232] usb 5-1: SerialNumber: syz [ 136.279458][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.672725][ T6116] loop3: detected capacity change from 0 to 8192 [ 136.713528][ T6116] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 136.734771][ T6116] REISERFS (device loop3): using ordered data mode [ 136.743140][ T6116] reiserfs: using flush barriers [ 136.752286][ T6116] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.771027][ T6116] REISERFS (device loop3): checking transaction log (loop3) [ 137.097473][ T6116] REISERFS (device loop3): Using tea hash to sort names [ 137.108193][ T6116] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 137.193750][ T4232] usb 5-1: USB disconnect, device number 7 [ 137.202048][ T4232] f81534a_ctrl 5-1:117.163: failed to set register 0x116: -19 [ 137.226932][ T4232] f81534a_ctrl 5-1:117.163: failed to enable ports: -19 [ 137.264191][ T6130] loop0: detected capacity change from 0 to 1024 [ 137.333877][ T6130] EXT4-fs (loop0): inline encryption not supported [ 137.425747][ T6130] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 137.448804][ T6130] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.491264][ T6130] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.574: bg 0: block 112: padding at end of block bitmap is not set [ 137.516207][ T4362] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 137.589169][ T4289] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm kworker/u4:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 137.671727][ T4289] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 137.690890][ T4289] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.690890][ T4289] [ 137.704465][ T154] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 2) [ 137.746102][ T154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117 [ 137.776122][ T4362] usb 2-1: Using ep0 maxpacket: 16 [ 137.783262][ T154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.783262][ T154] [ 137.854946][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.582'. [ 137.916197][ T4362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.928278][ T4232] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 137.947173][ T4362] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.982270][ T6153] program syz.0.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.010791][ T4362] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.024674][ T4362] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.035799][ T4362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.074021][ T4362] usb 2-1: config 0 descriptor?? [ 138.164508][ T6159] loop3: detected capacity change from 0 to 2048 [ 138.169260][ T4232] usb 6-1: Using ep0 maxpacket: 8 [ 138.258014][ T6159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.277573][ T6165] capability: warning: `syz.0.589' uses deprecated v2 capabilities in a way that may be insecure [ 138.296133][ T4232] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 138.323762][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.336108][ T4229] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.344698][ T6159] overlayfs: upper fs needs to support d_type. [ 138.353865][ T21] net_ratelimit: 2 callbacks suppressed [ 138.353880][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.382150][ T6159] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.390353][ T6159] overlayfs: failed to set xattr on upper [ 138.392014][ T4232] pvrusb2: Hardware description: Terratec Grabster AV400 [ 138.397244][ T6159] overlayfs: ...falling back to index=off,metacopy=off. [ 138.421049][ T4232] pvrusb2: ********** [ 138.433369][ T4232] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 138.464525][ T4232] pvrusb2: Important functionality might not be entirely working. [ 138.480870][ T4232] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 138.494920][ T4232] pvrusb2: ********** [ 138.512631][ T4193] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 138.522243][ T4193] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 138.558820][ T4362] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 138.581246][ T6167] loop0: detected capacity change from 0 to 4096 [ 138.604038][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 138.609938][ T2425] pvrusb2: Invalid write control endpoint [ 138.673576][ T6168] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.726083][ T6167] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 138.766698][ T4362] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 138.774710][ T6167] Remounting filesystem read-only [ 138.781031][ T4362] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 138.793557][ T4362] microsoft 0003:045E:07DA.0008: no inputs found [ 138.796979][ T4229] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 138.823493][ T4362] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 138.826274][ T4229] usb 5-1: config 179 has no interface number 0 [ 138.847873][ T6142] pvrusb2: Invalid write control endpoint [ 138.872392][ T4229] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 138.873467][ T2425] pvrusb2: Invalid write control endpoint [ 138.896283][ T4229] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 138.915495][ T4362] usb 2-1: USB disconnect, device number 10 [ 138.925937][ T4229] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.949632][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 138.965882][ T4229] usb 5-1: config 179 interface 65 has no altsetting 0 [ 138.973499][ T4229] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 138.988301][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 138.996148][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 139.006272][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.016615][ T2425] pvrusb2: Device being rendered inoperable [ 139.030072][ T4227] usb 6-1: USB disconnect, device number 6 [ 139.040528][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 139.071165][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 139.084177][ T2425] pvrusb2: Attached sub-driver cx25840 [ 139.104742][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 139.131502][ T4229] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input12 [ 139.146127][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 139.149406][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.195837][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.350109][ T6170] fido_id[6170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 139.356797][ T6172] loop0: detected capacity change from 0 to 1024 [ 139.382008][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.396230][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.511250][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.566349][ T4227] usb 5-1: USB disconnect, device number 8 [ 139.606427][ T4227] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 139.641188][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.701937][ T4289] hfsplus: b-tree write err: -5, ino 25 [ 139.719490][ T4289] hfsplus: b-tree write err: -5, ino 4 [ 139.737531][ T4289] hfsplus: b-tree write err: -5, ino 2 [ 139.743130][ T4289] hfsplus: b-tree write err: -5, ino 26 [ 139.860212][ T6185] loop5: detected capacity change from 0 to 2048 [ 139.987234][ T6185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.011491][ T6187] loop0: detected capacity change from 0 to 256 [ 140.409016][ T6197] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.453952][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.676205][ T6212] netlink: 'syz.4.608': attribute type 2 has an invalid length. [ 140.711291][ T6182] chnl_net:caif_netlink_parms(): no params data found [ 141.054550][ T6237] overlayfs: upper fs does not support tmpfile. [ 141.278338][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.304498][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.349052][ T6182] device bridge_slave_0 entered promiscuous mode [ 141.424014][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.452785][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.486067][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.513177][ T6182] device bridge_slave_1 entered promiscuous mode [ 141.693825][ T6253] loop1: detected capacity change from 0 to 4096 [ 141.712165][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.733001][ T6219] loop5: detected capacity change from 0 to 32768 [ 141.753599][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.786217][ T6253] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 141.858999][ T6262] loop4: detected capacity change from 0 to 4096 [ 141.866915][ T4227] Bluetooth: hci1: command 0x0409 tx timeout [ 141.969984][ T6182] team0: Port device team_slave_0 added [ 142.110121][ T154] device hsr_slave_0 left promiscuous mode [ 142.113724][ T4419] read_mapping_page failed! [ 142.156007][ T6253] ntfs3: loop1: failed to convert "076c" to cp857 [ 142.176341][ T4419] ERROR: (device loop5): txCommit: [ 142.176341][ T4419] [ 142.198345][ T154] device hsr_slave_1 left promiscuous mode [ 142.251259][ T4419] ERROR: (device loop5): remounting filesystem as read-only [ 142.261827][ T6253] ntfs3: loop1: ino=5, "/" directory corrupted [ 142.262118][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.276466][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.283795][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.345254][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.366096][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.386729][ T26] audit: type=1800 audit(1777885605.694:13): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.625" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=33 res=0 errno=0 [ 142.507790][ T154] device bridge_slave_1 left promiscuous mode [ 142.514058][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.524685][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.596338][ T154] device bridge_slave_0 left promiscuous mode [ 142.602627][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.707854][ T154] device veth1_macvtap left promiscuous mode [ 142.741664][ T154] device veth0_macvtap left promiscuous mode [ 142.753578][ T154] device veth1_vlan left promiscuous mode [ 142.763083][ T154] device veth0_vlan left promiscuous mode [ 142.859791][ T6277] loop4: detected capacity change from 0 to 4096 [ 142.960247][ T6277] ntfs3: loop4: ino=3, Correct links count -> 2. [ 143.135640][ T6277] ntfs3: loop4: ino=5, "/" directory corrupted [ 143.204355][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.546590][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.654445][ T6274] loop0: detected capacity change from 0 to 32768 [ 143.868795][ T6274] XFS (loop0): Mounting V5 Filesystem [ 143.899218][ T154] team0 (unregistering): Port device team_slave_1 removed [ 143.945996][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 143.995472][ T154] team0 (unregistering): Port device team_slave_0 removed [ 144.027767][ T6274] XFS (loop0): Ending clean mount [ 144.048821][ T6274] XFS (loop0): Quotacheck needed: Please wait. [ 144.101531][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.155270][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.196029][ T6274] XFS (loop0): Quotacheck: Done. [ 144.384333][ T6303] loop4: detected capacity change from 0 to 32768 [ 144.412910][ T4188] XFS (loop0): Unmounting Filesystem [ 144.454296][ T6301] loop1: detected capacity change from 0 to 32768 [ 144.465128][ T154] bond0 (unregistering): Released all slaves [ 144.602613][ T6303] XFS (loop4): Mounting V5 Filesystem [ 144.623171][ T6182] team0: Port device team_slave_1 added [ 144.672563][ T4177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.752283][ T6303] XFS (loop4): Ending clean mount [ 144.777417][ T6301] XFS (loop1): Mounting V5 Filesystem [ 144.884629][ T6301] XFS (loop1): Ending clean mount [ 144.957213][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.964232][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.990264][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.001646][ T4192] XFS (loop4): Unmounting Filesystem [ 145.129294][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.147127][ T4197] XFS (loop1): Unmounting Filesystem [ 145.154289][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.175912][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.194475][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.269111][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.313685][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.411796][ T6182] device hsr_slave_0 entered promiscuous mode [ 145.448904][ T6182] device hsr_slave_1 entered promiscuous mode [ 145.504275][ T6182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.527535][ T6182] Cannot create hsr debugfs directory [ 145.587349][ T6336] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 145.613406][ T6336] syzkaller1: linktype set to 773 [ 145.771711][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.015107][ T6182] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.036235][ T1325] Bluetooth: hci1: command 0x040f tx timeout [ 146.089191][ T6182] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.160500][ T6182] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.205511][ T6182] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 146.352993][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.491999][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.568031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.604397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.653278][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.686436][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.735310][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.762221][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.769404][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.803320][ T6366] loop4: detected capacity change from 0 to 4096 [ 146.826876][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.837981][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.856879][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.876634][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.899971][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.907256][ T4537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.917929][ T6366] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 146.983728][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.081743][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.125934][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.139052][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.154483][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.174312][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.202978][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.218542][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.293508][ T6375] loop4: detected capacity change from 0 to 512 [ 147.310472][ T6182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.334734][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.376724][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.384892][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.416441][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.472879][ T6375] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 147.511715][ T6375] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.678485][ T6363] loop1: detected capacity change from 0 to 32768 [ 147.770727][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.849801][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.868913][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.894381][ T6363] XFS (loop1): Mounting V5 Filesystem [ 147.914149][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.037595][ T6363] XFS (loop1): Ending clean mount [ 148.116114][ T4177] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.124126][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 148.151770][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 148.391482][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.398949][ T4177] usb 5-1: Using ep0 maxpacket: 32 [ 148.404254][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.413731][ T6370] device bridge_slave_0 entered promiscuous mode [ 148.424590][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.432846][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.448954][ T6370] device bridge_slave_1 entered promiscuous mode [ 148.523043][ T4177] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 148.531804][ T4177] usb 5-1: config 2 has no interface number 0 [ 148.560499][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.579917][ T4177] usb 5-1: config 2 interface 88 has no altsetting 0 [ 148.599435][ T4197] XFS (loop1): Unmounting Filesystem [ 148.601025][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.640637][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.683123][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.704880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.720566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.723112][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.759553][ T6182] device veth0_vlan entered promiscuous mode [ 148.796503][ T4177] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 148.805655][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.816426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.823937][ T4177] usb 5-1: Product: syz [ 148.828418][ T4177] usb 5-1: Manufacturer: syz [ 148.833055][ T4177] usb 5-1: SerialNumber: syz [ 148.841889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.872673][ T6182] device veth1_vlan entered promiscuous mode [ 148.910174][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.937804][ T6370] team0: Port device team_slave_0 added [ 148.985078][ T6370] team0: Port device team_slave_1 added [ 149.020316][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.040769][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.071102][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.079345][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 149.103010][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.140559][ T6182] device veth0_macvtap entered promiscuous mode [ 149.159919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.195322][ T6182] device veth1_macvtap entered promiscuous mode [ 149.220198][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.229009][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.286062][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.327330][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.334333][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.360723][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.386311][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.415898][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.439530][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.497091][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.507637][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.518754][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.529163][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.542360][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.553392][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.564226][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.586624][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.601952][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.621065][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.687309][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.703670][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.719245][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.730637][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.740827][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.751663][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.765064][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.784607][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.804321][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.818882][ T4177] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 149.831495][ T6370] device hsr_slave_0 entered promiscuous mode [ 149.834788][ T4177] asix: probe of 5-1:2.88 failed with error -71 [ 149.848425][ T6370] device hsr_slave_1 entered promiscuous mode [ 149.864595][ T6370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.867380][ T4177] usb 5-1: USB disconnect, device number 9 [ 149.879088][ T6370] Cannot create hsr debugfs directory [ 149.926899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.947212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.957902][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.003000][ T6182] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.029334][ T6182] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.038680][ T6182] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.047694][ T6182] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.268845][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.288573][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.322024][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.357104][ T4537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.374730][ T4537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.423556][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.447615][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.457231][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.533870][ T6370] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.571779][ T6370] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.593957][ T6370] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.648607][ T6370] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.703231][ T6456] input: syz1 as /devices/virtual/input/input13 [ 150.974830][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.983031][ T6460] loop1: detected capacity change from 0 to 8192 [ 150.997133][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.018283][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 151.026227][ T4177] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 151.035577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.051286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.083053][ T6370] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.124217][ T6460] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 151.144803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.155564][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 151.177030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.206547][ T6460] REISERFS (device loop1): using ordered data mode [ 151.213232][ T6460] reiserfs: using flush barriers [ 151.215334][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.225569][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.238838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.270717][ T6460] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.276322][ T21] usb 7-1: Using ep0 maxpacket: 16 [ 151.292566][ T6460] REISERFS (device loop1): checking transaction log (loop1) [ 151.301983][ T6460] REISERFS (device loop1): Using r5 hash to sort names [ 151.310800][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'. [ 151.320794][ T6460] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 151.341419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.367053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.428644][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.435766][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.456165][ T4177] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.464139][ T21] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.482812][ T21] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.493656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.515617][ T21] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.529323][ T4177] usb 1-1: not running at top speed; connect to a high speed hub [ 151.549238][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.559974][ T21] usb 7-1: config 1 interface 0 has no altsetting 0 [ 151.607251][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.625712][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.636440][ T4177] usb 1-1: config 249 has an invalid interface number: 203 but max is 0 [ 151.647308][ T4177] usb 1-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 151.666230][ T4177] usb 1-1: config 249 has no interface number 0 [ 151.681646][ T4177] usb 1-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.702542][ T4177] usb 1-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.723895][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.744916][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.776052][ T21] usb 7-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 151.785164][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.793986][ T4177] usb 1-1: config 249 interface 203 has no altsetting 0 [ 151.801436][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.819908][ T21] usb 7-1: Product: syz [ 151.824181][ T21] usb 7-1: Manufacturer: syz [ 151.830457][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.859157][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.876639][ T21] usb 7-1: SerialNumber: syz [ 151.895296][ T6370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.913498][ T6370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.925038][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.934689][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.022282][ T4177] usb 1-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 152.046182][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.054246][ T4177] usb 1-1: Product: syz [ 152.089579][ T4177] usb 1-1: Manufacturer: syz [ 152.094246][ T4177] usb 1-1: SerialNumber: syz [ 152.112055][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.163101][ T6492] loop1: detected capacity change from 0 to 4096 [ 152.196315][ T21] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 152.216699][ T6492] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 152.312776][ T6492] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 152.443416][ T4362] usb 7-1: USB disconnect, device number 2 [ 152.456716][ T4177] rtl8150 1-1:249.203: couldn't find required endpoints [ 152.463937][ T4177] rtl8150: probe of 1-1:249.203 failed with error -5 [ 152.488152][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.498035][ T4362] usblp0: removed [ 152.512800][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.543055][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.553403][ T4177] usb 1-1: USB disconnect, device number 9 [ 152.565310][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.747050][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.770667][ T6486] loop4: detected capacity change from 0 to 32768 [ 152.914680][ T6486] XFS (loop4): Mounting V5 Filesystem [ 153.052098][ T6486] XFS (loop4): Ending clean mount [ 153.089562][ T6486] XFS (loop4): Quotacheck needed: Please wait. [ 153.158455][ T4177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.211570][ T6486] XFS (loop4): Quotacheck: Done. [ 153.236506][ T4177] Bluetooth: hci4: command 0x040f tx timeout [ 153.302638][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.317071][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.425046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.433943][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.443237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.471809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.507556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.528500][ T6536] loop0: detected capacity change from 0 to 8192 [ 153.528903][ T6370] device veth0_vlan entered promiscuous mode [ 153.568383][ T6536] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 153.590103][ T4192] XFS (loop4): Unmounting Filesystem [ 153.604353][ T6536] REISERFS (device loop0): using ordered data mode [ 153.613624][ T6536] reiserfs: using flush barriers [ 153.622479][ T6536] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.640991][ T6536] REISERFS (device loop0): checking transaction log (loop0) [ 153.660385][ T6536] REISERFS (device loop0): Using r5 hash to sort names [ 153.667841][ T6536] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 153.710214][ T6370] device veth1_vlan entered promiscuous mode [ 153.737915][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.682'. [ 153.768326][ T6545] loop1: detected capacity change from 0 to 64 [ 153.864675][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.966344][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.026652][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.069452][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.090079][ T6554] hfs: request for non-existent node 1317 in B*Tree [ 154.108872][ T6370] device veth0_macvtap entered promiscuous mode [ 154.115700][ T6554] hfs: request for non-existent node 1317 in B*Tree [ 154.161820][ T6370] device veth1_macvtap entered promiscuous mode [ 154.194649][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.263140][ T6554] hfs: request for non-existent node 1536 in B*Tree [ 154.268445][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.310565][ T6554] hfs: request for non-existent node 1536 in B*Tree [ 154.335763][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.374770][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.403179][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.422301][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.443538][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.464848][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.491880][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.512106][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.532271][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.555573][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.565994][ T4588] hfs: request for non-existent node 1317 in B*Tree [ 154.573126][ T4588] hfs: request for non-existent node 1317 in B*Tree [ 154.589196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.616727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.625130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.652205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.667250][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.690390][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.711700][ T6572] loop6: detected capacity change from 0 to 512 [ 154.759686][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.784465][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.800263][ T6572] EXT4-fs (loop6): Ignoring removed nobh option [ 154.842590][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.875867][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.904799][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.924496][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.936252][ T6370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.947091][ T6370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.960507][ T6370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.979584][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.994509][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.030408][ T6370] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.076361][ T6572] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.689: corrupted in-inode xattr [ 155.114786][ T6370] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.123799][ T6370] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.132776][ T6370] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.171858][ T6588] netlink: 'syz.4.692': attribute type 11 has an invalid length. [ 155.194023][ T6572] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.689: couldn't read orphan inode 15 (err -117) [ 155.225030][ T6586] loop1: detected capacity change from 0 to 2048 [ 155.240551][ T4268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.272670][ T6572] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,nombcache,debug_want_extra_isize=0x000000000000005a,usrjquota=,barrier,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 155.316132][ T4177] Bluetooth: hci4: command 0x0419 tx timeout [ 155.376632][ T6586] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 155.406340][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.414249][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.429548][ T6586] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 155.457651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.496222][ T6586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 155.511211][ T6586] UDF-fs: Scanning with blocksize 512 failed [ 155.546124][ T4356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.607381][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.615253][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.645489][ T6586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.701321][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.923052][ T6609] loop6: detected capacity change from 0 to 512 [ 155.993910][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.7.648'. [ 156.021761][ T26] audit: type=1800 audit(1777885619.324:14): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.699" name="file1" dev="loop6" ino=1048615 res=0 errno=0 [ 156.040721][ T4356] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.168423][ T6617] loop1: detected capacity change from 0 to 2048 [ 156.229647][ T6623] loop6: detected capacity change from 0 to 16 [ 156.253265][ T6617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.266088][ T4177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.347043][ T6623] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 156.436246][ T4356] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.459584][ T4356] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 156.470041][ T6628] loop4: detected capacity change from 0 to 736 [ 156.493899][ T4356] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.514999][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.546249][ T6606] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.695349][ T6636] sctp: [Deprecated]: syz.6.708 (pid 6636) Use of int in max_burst socket option deprecated. [ 156.695349][ T6636] Use struct sctp_assoc_value instead [ 157.028338][ T6645] loop6: detected capacity change from 0 to 512 [ 157.091699][ T6645] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.714: missing EA_INODE flag [ 157.118036][ T6649] loop7: detected capacity change from 0 to 512 [ 157.135306][ T6645] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.714: error while reading EA inode 12 err=-117 [ 157.172110][ T6645] EXT4-fs (loop6): 1 orphan inode deleted [ 157.206072][ T6645] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 157.243920][ T6649] EXT4-fs (loop7): orphan cleanup on readonly fs [ 157.262685][ T6649] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:984: inode #11: comm syz.7.713: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 157.321956][ T4177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.328842][ T6649] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.7.713: ea_inode dec ref err=-117 [ 157.343486][ T6649] EXT4-fs (loop7): 1 orphan inode deleted [ 157.349786][ T6649] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x0000000000000058,nouid32,max_batch_time=0x0000000000000007,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 157.551929][ T4192] syz-executor (4192) used greatest stack depth: 19320 bytes left [ 157.595213][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.711372][ T6663] loop1: detected capacity change from 0 to 128 [ 157.769565][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.811991][ T6663] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 157.844738][ T6663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.953756][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.058657][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.104462][ T6675] loop1: detected capacity change from 0 to 1024 [ 158.160275][ T6675] EXT4-fs (loop1): Ignoring removed bh option [ 158.182203][ T6675] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 158.252078][ T6675] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 158.263075][ T4227] usb 1-1: USB disconnect, device number 10 [ 158.503773][ T6682] loop7: detected capacity change from 0 to 4096 [ 158.533880][ T6680] loop6: detected capacity change from 0 to 4096 [ 158.542723][ T6675] EXT4-fs (loop1): failed to open journal device unknown-block(0,5) -6 [ 158.617298][ T6680] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 158.626538][ T6682] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 158.956665][ T6680] ntfs3: loop6: ntfs3_write_inode r=1e failed, -22. [ 159.110778][ T6703] loop0: detected capacity change from 0 to 128 [ 159.207826][ T6703] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 159.217935][ T5457] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.293529][ T6703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.324590][ T6182] ntfs3: loop6: ntfs_evict_inode r=1e failed, -22. [ 159.398860][ T6182] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 159.434401][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 159.616087][ T5457] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 159.659912][ T5457] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.715695][ T5457] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.771750][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.779440][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.788997][ T6686] device bridge_slave_0 entered promiscuous mode [ 159.834922][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.845019][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.854513][ T6686] device bridge_slave_1 entered promiscuous mode [ 159.862195][ T6727] device batadv_slave_1 entered promiscuous mode [ 159.871721][ T5457] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.885906][ T5457] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 159.911811][ T6725] device batadv_slave_1 left promiscuous mode [ 159.924952][ T5457] usb 2-1: Product: syz [ 159.929463][ T5457] usb 2-1: SerialNumber: syz [ 159.953549][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.979083][ T4268] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.982937][ T5457] cdc_ncm 2-1:1.0: skipping garbage [ 160.000923][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.002658][ T5457] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 160.048725][ T5457] cdc_ncm 2-1:1.0: bind() failure [ 160.121854][ T6686] team0: Port device team_slave_0 added [ 160.159375][ T6686] team0: Port device team_slave_1 added [ 160.236177][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.243344][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.326035][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.402194][ T144] device hsr_slave_0 left promiscuous mode [ 160.408482][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.426676][ T4268] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.446040][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.467574][ T4268] usb 1-1: config 0 descriptor?? [ 160.474430][ T144] device hsr_slave_1 left promiscuous mode [ 160.491594][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.506202][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.546933][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.555049][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.571929][ T6741] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 160.587803][ T144] device bridge_slave_1 left promiscuous mode [ 160.602979][ T6741] REISERFS (device loop6): using ordered data mode [ 160.605199][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.619961][ T144] device bridge_slave_0 left promiscuous mode [ 160.628667][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.636166][ T6741] reiserfs: using flush barriers [ 160.643685][ T6741] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.662080][ T6741] REISERFS (device loop6): checking transaction log (loop6) [ 160.669582][ T4230] Bluetooth: hci2: command 0x0409 tx timeout [ 160.682264][ T144] device veth1_macvtap left promiscuous mode [ 160.688764][ T144] device veth0_macvtap left promiscuous mode [ 160.695201][ T144] device veth1_vlan left promiscuous mode [ 160.702096][ T144] device veth0_vlan left promiscuous mode [ 160.702975][ T6741] REISERFS (device loop6): Using r5 hash to sort names [ 160.766358][ T6741] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 160.934567][ T1325] usb 2-1: USB disconnect, device number 11 [ 160.957562][ T4268] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 160.985334][ T4268] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input14 [ 161.164437][ T4268] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 161.326220][ T5457] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 161.472553][ T144] team0 (unregistering): Port device team_slave_1 removed [ 161.496132][ T144] team0 (unregistering): Port device team_slave_0 removed [ 161.510726][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.547252][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.689117][ T144] bond0 (unregistering): Released all slaves [ 161.731579][ T1325] usb 1-1: USB disconnect, device number 11 [ 161.763665][ T6762] set_capacity_and_notify: 1 callbacks suppressed [ 161.763682][ T6762] loop1: detected capacity change from 0 to 128 [ 161.791700][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.800284][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.826311][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.841738][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.862066][ T6762] FAT-fs (loop1): bogus number of reserved sectors [ 161.867489][ T5457] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 161.873917][ T6762] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 161.891038][ T5457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.930321][ T5457] usb 8-1: Product: syz [ 161.934663][ T5457] usb 8-1: Manufacturer: syz [ 161.939836][ T6762] FAT-fs (loop1): Can't find a valid FAT filesystem [ 161.954532][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.985936][ T5457] usb 8-1: SerialNumber: syz [ 162.022328][ T5457] usb 8-1: config 0 descriptor?? [ 162.108537][ T5457] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 162.127385][ T6686] device hsr_slave_0 entered promiscuous mode [ 162.200217][ T6686] device hsr_slave_1 entered promiscuous mode [ 162.373120][ T6776] loop6: detected capacity change from 0 to 4096 [ 162.458410][ T6776] EXT4-fs (loop6): inline encryption not supported [ 162.483209][ T6776] EXT4-fs (loop6): Test dummy encryption mode enabled [ 162.546001][ T5457] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 162.555036][ T6776] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 162.578642][ T5457] sq905c 8-1:0.0: Reading version command failed [ 162.585245][ T5457] sq905c: probe of 8-1:0.0 failed with error -71 [ 162.601528][ T6776] System zones: 0-5 [ 162.618193][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 162.668276][ T6791] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 162.689335][ T6791] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 162.692383][ T5457] usb 8-1: USB disconnect, device number 2 [ 162.707582][ T6789] loop1: detected capacity change from 0 to 8192 [ 162.727713][ T6776] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 162.755746][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.763411][ T6789] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff" or missing value [ 162.819875][ T4356] Bluetooth: hci2: command 0x041b tx timeout [ 162.857274][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.889788][ T26] audit: type=1800 audit(1777885626.194:15): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.748" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 162.896823][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.171480][ T6797] program syz.7.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.398075][ T6686] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 163.449821][ T6686] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 163.548778][ T6686] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 163.620619][ T6686] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 163.809705][ T6828] loop0: detected capacity change from 0 to 512 [ 163.823412][ T6829] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.928907][ T6828] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 163.974624][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.013410][ T6828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 164.048401][ T6828] System zones: 1-12 [ 164.053633][ T6828] EXT4-fs (loop0): orphan cleanup on readonly fs [ 164.089379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.108975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.128238][ T6832] loop1: detected capacity change from 0 to 4096 [ 164.140458][ T6828] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.763: bg 0: block 361: padding at end of block bitmap is not set [ 164.158818][ T6828] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 164.168351][ T6828] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.763: invalid indirect mapped block 12 (level 1) [ 164.191859][ T6828] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.763: invalid indirect mapped block 2 (level 2) [ 164.211382][ T6828] EXT4-fs (loop0): 1 truncate cleaned up [ 164.216661][ T4356] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 164.226895][ T6828] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,grpid,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000001000,errors=continue. Quota mode: none. [ 164.251590][ T6832] EXT4-fs (loop1): inline encryption not supported [ 164.258750][ T6832] EXT4-fs (loop1): Test dummy encryption mode enabled [ 164.301103][ T6832] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 164.311590][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.319963][ T6832] System zones: 0-5 [ 164.382416][ T6832] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 164.433763][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.470587][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.486953][ T4356] usb 8-1: Using ep0 maxpacket: 16 [ 164.503796][ T26] audit: type=1800 audit(1777885627.804:16): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.764" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 164.524101][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.543152][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.550350][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.580232][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.590032][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.598972][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.606213][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.626141][ T4356] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.636464][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.666025][ T4356] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.692677][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.747897][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.799987][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.836110][ T4356] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.845354][ T4356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.854924][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.881025][ T4356] usb 8-1: Product: syz [ 164.889813][ T4356] usb 8-1: Manufacturer: syz [ 164.899059][ T4356] usb 8-1: SerialNumber: syz [ 164.914579][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.931704][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 165.010255][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.030664][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.068620][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.132160][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.182651][ T6686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.214578][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.251035][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.270279][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.426133][ T4356] usb 8-1: 0:2 : does not exist [ 165.740100][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.756164][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.823900][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.874649][ T4230] usb 8-1: USB disconnect, device number 3 [ 166.255612][ T6858] loop0: detected capacity change from 0 to 32768 [ 166.424008][ T6858] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 166.504327][ T6870] loop1: detected capacity change from 0 to 32768 [ 166.761830][ T6870] XFS (loop1): Mounting V5 Filesystem [ 166.778091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.811624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.960354][ T6870] XFS (loop1): Ending clean mount [ 166.986030][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 167.028034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.045427][ T6870] XFS (loop1): Quotacheck needed: Please wait. [ 167.062996][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 167.117921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.172847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.228732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.262944][ T6870] XFS (loop1): Quotacheck: Done. [ 167.279224][ T6686] device veth0_vlan entered promiscuous mode [ 167.358287][ T6686] device veth1_vlan entered promiscuous mode [ 167.532986][ T6686] device veth0_macvtap entered promiscuous mode [ 167.574037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.600581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.647851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.693584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.736951][ T6686] device veth1_macvtap entered promiscuous mode [ 167.766453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.797572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.825758][ T4197] XFS (loop1): Unmounting Filesystem [ 167.928311][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.995912][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.005787][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.078713][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.115923][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.143676][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.149627][ T6962] loop7: detected capacity change from 0 to 64 [ 168.164880][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.184184][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.203137][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.214070][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.252125][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.262853][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.302097][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.333086][ T6962] BFS-fs: bfs_readdir(): Bad f_pos=00000101 for loop7:00000002 [ 168.344370][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.373024][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.388497][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.402153][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.415762][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.434493][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.445520][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.456191][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.495748][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.533976][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.557819][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.591682][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.600656][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.653185][ T6970] loop7: detected capacity change from 0 to 8 [ 168.665405][ T6686] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.706056][ T6686] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.735959][ T6686] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.745755][ T6970] SQUASHFS error: Failed to read block 0x26067d: -5 [ 168.763672][ T6686] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.790885][ T6970] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 168.815773][ T6970] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 169.046062][ T4177] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 169.181559][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.208176][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.304598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.316172][ T4177] usb 1-1: Using ep0 maxpacket: 16 [ 169.346939][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.355229][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.372957][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.470439][ T4177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.489350][ T4356] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 169.491972][ T4177] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.549431][ T4177] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 169.576418][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.637559][ T4177] usb 1-1: config 0 descriptor?? [ 169.712422][ T6997] loop1: detected capacity change from 0 to 64 [ 169.876112][ T4356] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 169.887768][ T4356] usb 7-1: config 4 has no interface number 0 [ 169.896701][ T7003] loop8: detected capacity change from 0 to 1024 [ 169.903221][ T4356] usb 7-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 169.951924][ T7003] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 170.126259][ T4356] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 170.139184][ T4177] uclogic 0003:28BD:0071.000A: interface is invalid, ignoring [ 170.165967][ T4356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.191744][ T4356] usb 7-1: Product: syz [ 170.200957][ T4356] usb 7-1: Manufacturer: syz [ 170.209126][ T4356] usb 7-1: SerialNumber: syz [ 170.409362][ T1325] usb 1-1: USB disconnect, device number 12 [ 170.716081][ T4356] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 170.729513][ T4356] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 170.772004][ T4356] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 170.782683][ T4356] usb 7-1: media controller created [ 170.803862][ T4356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.815886][ T5457] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 171.000443][ T4356] DVB: Unable to find symbol dib7000p_attach() [ 171.013626][ T4356] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 171.136141][ T4356] rc_core: IR keymap rc-dib0700-rc5 not found [ 171.142289][ T4356] Registered IR keymap rc-empty [ 171.166436][ T4356] dvb-usb: could not initialize remote control. [ 171.186128][ T5457] usb 8-1: config 0 has no interfaces? [ 171.215630][ T4356] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 171.266161][ T5457] usb 8-1: config 0 has no interfaces? [ 171.271941][ T4356] dib0700: There's no endpoint for remote controller [ 171.356265][ T5457] usb 8-1: config 0 has no interfaces? [ 171.510045][ T4356] usb 7-1: USB disconnect, device number 3 [ 171.543405][ T4356] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 171.596201][ T5457] usb 8-1: string descriptor 0 read error: -22 [ 171.602507][ T5457] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 171.652788][ T5457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.689841][ T5457] usb 8-1: config 0 descriptor?? [ 172.132879][ T1325] usb 8-1: USB disconnect, device number 4 [ 172.157045][ T7082] binder: 7079:7082 ioctl 400c620e 200000000340 returned -22 [ 172.471136][ T7098] program syz.0.832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.683898][ T7113] loop0: detected capacity change from 0 to 512 [ 172.872044][ T7112] loop1: detected capacity change from 0 to 4096 [ 172.916431][ T7113] EXT4-fs (loop0): 1 truncate cleaned up [ 172.922170][ T7113] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 173.048340][ T7112] ntfs: volume version 3.1. [ 173.508664][ T7142] loop7: detected capacity change from 0 to 256 [ 173.570918][ T7139] loop0: detected capacity change from 0 to 1024 [ 173.592147][ T7102] loop6: detected capacity change from 0 to 32768 [ 173.683057][ T7139] EXT4-fs (loop0): filesystem is read-only [ 173.705173][ T7139] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 173.749790][ T7102] XFS (loop6): Mounting V5 Filesystem [ 173.773605][ T7139] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 173.796097][ T7139] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: comm syz.0.844: inode #1: comm syz.0.844: iget: illegal inode # [ 173.824144][ T7145] loop1: detected capacity change from 0 to 8192 [ 173.855665][ T7139] EXT4-fs (loop0): no journal found [ 173.874743][ T7139] EXT4-fs (loop0): can't get journal size [ 173.931005][ T7145] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 173.990479][ T7139] EXT4-fs error (device loop0): ext4_fill_super:4872: inode #2: comm syz.0.844: iget: bad extra_isize 65535 (inode size 1024) [ 174.029783][ T7145] REISERFS (device loop1): using ordered data mode [ 174.038510][ T7139] EXT4-fs (loop0): get root inode failed [ 174.044465][ T7139] EXT4-fs (loop0): mount failed [ 174.094095][ T7145] reiserfs: using flush barriers [ 174.148746][ T7168] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.189942][ T7145] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.232907][ T7145] REISERFS (device loop1): checking transaction log (loop1) [ 174.247219][ T7102] XFS (loop6): Ending clean mount [ 174.261035][ T7102] XFS (loop6): Quotacheck needed: Please wait. [ 174.406018][ T4232] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 174.450510][ T7102] XFS (loop6): Quotacheck: Done. [ 174.646131][ T4232] usb 9-1: Using ep0 maxpacket: 32 [ 174.712150][ T7145] REISERFS (device loop1): Using tea hash to sort names [ 174.752464][ T7145] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 174.766118][ T4232] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 174.784500][ T4232] usb 9-1: config 0 has no interface number 0 [ 174.787771][ T6182] XFS (loop6): Unmounting Filesystem [ 174.881862][ T4232] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.932711][ T4232] usb 9-1: config 0 interface 85 has no altsetting 0 [ 175.136475][ T4232] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 175.153405][ T4232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.161912][ T4232] usb 9-1: Product: syz [ 175.205911][ T4232] usb 9-1: Manufacturer: syz [ 175.210582][ T4232] usb 9-1: SerialNumber: syz [ 175.236283][ T4232] usb 9-1: config 0 descriptor?? [ 175.623506][ T7207] loop1: detected capacity change from 0 to 256 [ 175.736017][ T4356] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 175.744417][ T7207] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 175.926081][ T4232] appletouch 9-1:0.85: Geyser mode initialized. [ 175.933604][ T4232] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input16 [ 176.106345][ T4356] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.120889][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.180067][ T4356] usb 1-1: config 0 descriptor?? [ 176.191332][ T4232] usb 9-1: USB disconnect, device number 2 [ 176.220472][ T4232] appletouch 9-1:0.85: input: appletouch disconnected [ 176.229257][ T4356] cp210x 1-1:0.0: cp210x converter detected [ 176.651410][ T4356] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 176.711454][ T4356] usb 1-1: cp210x converter now attached to ttyUSB0 [ 176.826846][ T4367] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 176.909032][ T4356] usb 1-1: USB disconnect, device number 13 [ 176.935266][ T4356] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 176.976098][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.7.875'. [ 177.007545][ T7255] loop8: detected capacity change from 0 to 764 [ 177.033751][ T4356] cp210x 1-1:0.0: device disconnected [ 177.078578][ T4367] usb 7-1: Using ep0 maxpacket: 16 [ 177.114920][ T7255] Symlink component flag not implemented [ 177.142955][ T7255] Symlink component flag not implemented [ 177.197513][ T4367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.225410][ T4367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.252356][ T4367] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 177.295009][ T4367] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 177.320088][ T4367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.359459][ T4367] usb 7-1: config 0 descriptor?? [ 177.510883][ T7271] loop0: detected capacity change from 0 to 512 [ 177.746035][ T7271] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 177.802039][ T7271] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 177.867727][ T7271] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.880: bad orphan inode 13 [ 177.887762][ T4367] appleir 0003:05AC:8241.000B: item fetching failed at offset 3/5 [ 177.916335][ T4367] appleir 0003:05AC:8241.000B: parse failed [ 177.922443][ T4367] appleir: probe of 0003:05AC:8241.000B failed with error -22 [ 177.946135][ T7271] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 178.067656][ T7271] EXT4-fs (loop0): shut down requested (2) [ 178.107198][ T4367] usb 7-1: USB disconnect, device number 4 [ 178.134195][ T7271] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 178.645931][ T4232] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 178.701768][ T7309] loop1: detected capacity change from 0 to 64 [ 178.807962][ T7309] MINIX-fs: mounting file system with errors, running fsck is recommended [ 178.821774][ T7308] option changes via remount are deprecated (pid=7307 comm=syz.6.892) [ 178.856068][ T7308] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 178.895985][ T4232] usb 9-1: Using ep0 maxpacket: 8 [ 178.947909][ T7309] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 179.016293][ T4232] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.028454][ T4232] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.075925][ T4232] usb 9-1: config 0 has no interface number 0 [ 179.104685][ T4232] usb 9-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.158689][ T4232] usb 9-1: config 0 interface 1 has no altsetting 0 [ 179.165413][ T4232] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 179.253861][ T4232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.319111][ T4232] usb 9-1: config 0 descriptor?? [ 179.378568][ T4232] hso 9-1:0.1: Failed to find BULK IN ep [ 179.391933][ T7323] loop6: detected capacity change from 0 to 512 [ 179.544075][ T7328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'. [ 179.568077][ T7323] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 179.575748][ T7323] UDF-fs: Scanning with blocksize 512 failed [ 179.632775][ T7323] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 179.686045][ T7323] UDF-fs: Scanning with blocksize 1024 failed [ 179.705220][ T7323] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 179.781431][ T7323] UDF-fs: Scanning with blocksize 2048 failed [ 179.796226][ T7323] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 179.875995][ T7323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.877050][ T7286] loop7: detected capacity change from 0 to 32768 [ 179.962230][ T7336] Falling back ldisc for ptm0. [ 180.388676][ T7349] loop6: detected capacity change from 0 to 512 [ 180.455700][ T7349] EXT4-fs (loop6): Ignoring removed nobh option [ 180.462877][ T4232] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 180.528645][ T7349] EXT4-fs error (device loop6): __ext4_iget:4919: inode #11: block 1: comm syz.6.904: invalid block [ 180.568542][ T7349] EXT4-fs (loop6): Remounting filesystem read-only [ 180.585471][ T7349] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.904: couldn't read orphan inode 11 (err -117) [ 180.669867][ T7349] EXT4-fs (loop6): Remounting filesystem read-only [ 180.706045][ T7349] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,errors=remount-ro,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,init_itable,. Quota mode: none. [ 180.826407][ T7349] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.904: Directory hole found for htree leaf block 0 [ 180.846330][ T4232] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.868931][ T4232] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.900304][ T7349] EXT4-fs (loop6): Remounting filesystem read-only [ 180.912359][ T4232] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.964011][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.046265][ T7344] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 181.362917][ T4232] usb 9-1: USB disconnect, device number 3 [ 181.541373][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.911'. [ 181.658301][ T7380] loop6: detected capacity change from 0 to 1024 [ 181.941361][ T6916] hfsplus: b-tree write err: -5, ino 25 [ 181.954080][ T6916] hfsplus: b-tree write err: -5, ino 4 [ 181.999089][ T6916] hfsplus: b-tree write err: -5, ino 2 [ 182.004711][ T6916] hfsplus: b-tree write err: -5, ino 20 [ 182.346057][ T21] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 182.475130][ T7414] loop6: detected capacity change from 0 to 1024 [ 182.631332][ T21] usb 9-1: Using ep0 maxpacket: 32 [ 182.685097][ T26] audit: type=1800 audit(1777885645.984:17): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.924" name="file1" dev="loop6" ino=2 res=0 errno=0 [ 182.705478][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.706943][ T5457] usb 2-1: USB disconnect, device number 12 [ 182.730511][ T7414] hfsplus: catalog searching failed [ 182.796317][ T21] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 182.812665][ T6916] hfsplus: bad catalog file entry [ 182.821261][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.831213][ T6916] hfsplus: b-tree write err: -5, ino 3 [ 182.856436][ T21] usb 9-1: config 0 descriptor?? [ 182.938233][ T21] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 182.970060][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.928'. [ 183.217257][ T7443] loop6: detected capacity change from 0 to 512 [ 183.380219][ T7443] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 183.386241][ T7446] loop_set_status: loop6 () has still dirty pages (nrpages=1) [ 183.406332][ T7443] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 183.414413][ T7443] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.931: bad orphan inode 13 [ 183.500691][ T7454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.553399][ T7443] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 183.657804][ T7443] EXT4-fs (loop6): shut down requested (2) [ 183.696118][ T7443] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 183.816147][ T21] gspca_vc032x: reg_w err -71 [ 183.821124][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.866558][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.880044][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.916585][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.921973][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.942035][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.975863][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.983927][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.004944][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.030691][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.046944][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.057081][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.066308][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.082069][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.095894][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.101340][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.135916][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.155923][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.171917][ T21] gspca_vc032x: Unknown sensor... [ 184.186018][ T21] vc032x: probe of 9-1:0.0 failed with error -22 [ 184.227571][ T21] usb 9-1: USB disconnect, device number 4 [ 184.630200][ T7421] loop7: detected capacity change from 0 to 32768 [ 184.715992][ T4177] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 184.724676][ T7483] loop0: detected capacity change from 0 to 2048 [ 184.751864][ T7485] loop6: detected capacity change from 0 to 2048 [ 184.758477][ T7421] [ 184.758477][ T7421] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 184.758477][ T7421] [ 184.843666][ T7485] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.850639][ T7483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.905695][ T7489] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.050610][ T7421] [ 185.050610][ T7421] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.050610][ T7421] [ 185.099291][ T7421] [ 185.099291][ T7421] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.099291][ T7421] [ 185.146068][ T4177] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 185.164644][ T4177] usb 2-1: config 0 has no interface number 0 [ 185.175946][ T7421] [ 185.175946][ T7421] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.175946][ T7421] [ 185.205984][ T4177] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 185.232525][ T7491] loop0: detected capacity change from 0 to 256 [ 185.247912][ T4177] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 185.291571][ T7491] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 185.307106][ T4177] usb 2-1: config 0 interface 255 has no altsetting 0 [ 185.337100][ T278] [ 185.337100][ T278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.337100][ T278] [ 185.359953][ T4177] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 185.387699][ T7480] loop8: detected capacity change from 0 to 32768 [ 185.396216][ T4177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.426878][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.942 (7480) [ 185.439148][ T6370] [ 185.439148][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.439148][ T6370] [ 185.440376][ T6370] [ 185.440376][ T6370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.440376][ T6370] [ 185.471903][ T4177] usb 2-1: config 0 descriptor?? [ 185.538849][ T4177] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 185.548359][ T7480] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 185.591754][ T7480] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 185.615967][ T7480] BTRFS info (device loop8): trying to use backup root at mount time [ 185.624121][ T7480] BTRFS info (device loop8): setting nodatasum [ 185.716633][ T7480] BTRFS info (device loop8): force zlib compression, level 3 [ 185.724163][ T7480] BTRFS info (device loop8): setting nodatacow [ 185.745732][ T7480] BTRFS info (device loop8): turning off barriers [ 185.787117][ T4232] usb 2-1: USB disconnect, device number 13 [ 185.794703][ T7480] BTRFS info (device loop8): using free space tree [ 185.801801][ T7480] BTRFS info (device loop8): has skinny extents [ 186.083270][ T7480] BTRFS info (device loop8): enabling ssd optimizations [ 186.155236][ T7525] loop0: detected capacity change from 0 to 4096 [ 186.212630][ T7525] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 186.293742][ T7480] BTRFS info (device loop8): balance: start -ssoft,profiles=NONE,usage=0..0,vrange=17558325788192146361..17996215844722483042,limit=0..0 [ 186.394947][ T7480] BTRFS info (device loop8): balance: ended with status: 0 [ 186.600649][ T7537] loop1: detected capacity change from 0 to 256 [ 186.788577][ T7498] loop6: detected capacity change from 0 to 32768 [ 186.960728][ T7498] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.947 (7498) [ 187.364187][ T7535] loop7: detected capacity change from 0 to 32768 [ 187.387026][ T7498] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 187.404134][ T7498] BTRFS info (device loop6): force clearing of disk cache [ 187.437870][ T7498] BTRFS info (device loop6): metadata ratio 0 [ 187.500491][ T7498] BTRFS info (device loop6): enabling ssd optimizations [ 187.530869][ T7498] BTRFS info (device loop6): using spread ssd allocation scheme [ 187.585981][ T7498] BTRFS info (device loop6): using free space tree [ 187.611650][ T7498] BTRFS info (device loop6): has skinny extents [ 187.995784][ T7576] loop8: detected capacity change from 0 to 256 [ 188.058416][ T7498] BTRFS info (device loop6): clearing free space tree [ 188.072197][ T7498] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.102132][ T7498] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.160299][ T7576] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 188.185529][ T7498] BTRFS info (device loop6): creating free space tree [ 188.201508][ T7543] XFS (loop0): Mounting V5 Filesystem [ 188.258871][ T7498] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.325994][ T7498] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.381525][ T7543] XFS (loop0): Ending clean mount [ 188.461939][ T7543] XFS (loop0): User initiated shutdown received. [ 188.497907][ T7543] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 188.580211][ T7543] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 189.125088][ T4188] XFS (loop0): Unmounting Filesystem [ 189.578520][ T7598] attempt to access beyond end of device [ 189.578520][ T7598] loop8: rw=1, want=4680040, limit=32768 [ 189.645332][ T7598] metapage_write_end_io: I/O error [ 189.664213][ T7598] ERROR: (device loop8): diWrite: ixpxd invalid [ 189.664213][ T7598] [ 189.694040][ T7598] ERROR: (device loop8): remounting filesystem as read-only [ 189.721701][ T7598] ERROR: (device loop8): txCommit: [ 189.721701][ T7598] [ 189.735906][ T1325] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 189.755091][ T7598] blkno = 8ed2c, nblocks = 1 [ 189.760577][ T7598] ERROR: (device loop8): dbUpdatePMap: blocks are outside the map [ 189.760577][ T7598] [ 189.836046][ T4177] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 189.925302][ T277] blkno = 8ed23, nblocks = 1 [ 189.931392][ T277] ERROR: (device loop8): dbUpdatePMap: blocks are outside the map [ 189.931392][ T277] [ 189.952131][ T7630] set_capacity_and_notify: 3 callbacks suppressed [ 189.952149][ T7630] loop0: detected capacity change from 0 to 512 [ 189.975937][ T277] blkno = 8ed2c, nblocks = 4 [ 189.985704][ T277] ERROR: (device loop8): dbUpdatePMap: blocks are outside the map [ 189.985704][ T277] [ 190.025165][ T6686] attempt to access beyond end of device [ 190.025165][ T6686] loop8: rw=1, want=4680040, limit=32768 [ 190.064704][ T7630] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.971: iget: bad i_size value: 38620345925642 [ 190.084489][ T6686] metapage_write_end_io: I/O error [ 190.091627][ T6686] JFS: metapage_get_blocks failed [ 190.098186][ T6686] JFS: metapage_get_blocks failed [ 190.103327][ T6686] JFS: metapage_get_blocks failed [ 190.109459][ T4177] usb 8-1: Using ep0 maxpacket: 8 [ 190.114852][ T6686] JFS: metapage_get_blocks failed [ 190.120068][ T6686] JFS: metapage_get_blocks failed [ 190.125447][ T7630] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.971: couldn't read orphan inode 15 (err -117) [ 190.138366][ T7630] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 190.186218][ T1325] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.198190][ T1325] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.206689][ T7618] loop1: detected capacity change from 0 to 32768 [ 190.210874][ T1325] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.223941][ T1325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.239945][ T7630] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.971: bg 0: block 5: invalid block bitmap [ 190.257910][ T7618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.973 (7618) [ 190.263741][ T7630] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 190.286157][ T7622] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.315228][ T7630] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.315228][ T7630] [ 190.354507][ T7618] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 190.383748][ T7618] BTRFS info (device loop1): turning off barriers [ 190.396590][ T7630] EXT4-fs (loop0): Total free blocks count 0 [ 190.402862][ T7630] EXT4-fs (loop0): Free/Dirty block details [ 190.424571][ T7618] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 190.437007][ T4177] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.456575][ T7630] EXT4-fs (loop0): free_blocks=0 [ 190.467147][ T7618] BTRFS info (device loop1): trying to use backup root at mount time [ 190.482850][ T4177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.486691][ T7630] EXT4-fs (loop0): dirty_blocks=1 [ 190.502561][ T7618] BTRFS info (device loop1): enabling auto defrag [ 190.507079][ T4177] usb 8-1: Product: syz [ 190.540133][ T7630] EXT4-fs (loop0): Block reservation details [ 190.560365][ T7630] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 190.564565][ T4177] usb 8-1: Manufacturer: syz [ 190.570752][ T7618] BTRFS info (device loop1): turning on sync discard [ 190.583293][ T4177] usb 8-1: SerialNumber: syz [ 190.611255][ T7618] BTRFS info (device loop1): using free space tree [ 190.632106][ T4177] usb 8-1: config 0 descriptor?? [ 190.639173][ T7618] BTRFS info (device loop1): has skinny extents [ 190.916378][ T4177] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 191.140969][ T7671] program syz.8.987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.224184][ T7618] BTRFS warning (device loop1): failed to trim 1 device(s), last error -512 [ 191.290782][ T7678] loop8: detected capacity change from 0 to 64 [ 191.307439][ T4362] Bluetooth: hci3: command 0x0406 tx timeout [ 191.316241][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 191.455375][ T4177] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 191.482358][ T4177] usb 8-1: USB disconnect, device number 5 [ 191.754240][ T7687] netlink: 140 bytes leftover after parsing attributes in process `syz.0.994'. [ 191.972734][ T7698] loop7: detected capacity change from 0 to 512 [ 192.076642][ T4228] usb 7-1: USB disconnect, device number 5 [ 192.083211][ T7698] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 192.142838][ T7698] EXT4-fs (loop7): orphan cleanup on readonly fs [ 192.186933][ T7698] Quota error (device loop7): v2_read_file_info: Free block number too big (0 >= 0). [ 192.228142][ T7708] loop8: detected capacity change from 0 to 256 [ 192.248018][ T7698] EXT4-fs warning (device loop7): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.266779][ T7708] exfat: Deprecated parameter 'namecase' [ 192.302403][ T7698] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 192.325249][ T7708] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 192.387035][ T7698] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.997: bg 0: block 40: padding at end of block bitmap is not set [ 192.513721][ T7698] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 192.560377][ T7698] EXT4-fs (loop7): 1 truncate cleaned up [ 192.571686][ T7698] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.799596][ T7720] loop0: detected capacity change from 0 to 4096 [ 192.811461][ T7698] loop7: detected capacity change from 0 to 256 [ 192.846018][ T7720] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 193.139425][ T155] ntfs3: loop0: ino=1e, Internal error [ 193.177070][ T155] ntfs3: loop0: ntfs3_write_inode r=1e failed, -22. [ 193.213956][ T7738] loop1: detected capacity change from 0 to 1024 [ 193.358632][ T7742] loop0: detected capacity change from 0 to 65 [ 193.400219][ T4537] hfsplus: b-tree write err: -5, ino 25 [ 193.406172][ T4537] hfsplus: b-tree write err: -5, ino 4 [ 193.412049][ T4537] hfsplus: b-tree write err: -5, ino 2 [ 193.443502][ T7742] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 194.018826][ T7728] loop6: detected capacity change from 0 to 32768 [ 194.131219][ T7728] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1008 (7728) [ 194.221185][ T7728] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 194.240599][ T7765] ntfs: volume version 3.1. [ 194.255587][ T7728] BTRFS info (device loop6): using free space tree [ 194.310604][ T7728] BTRFS info (device loop6): has skinny extents [ 194.350905][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359138][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.368743][ T7765] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 194.387417][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.407537][ T7765] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 194.673445][ T7728] BTRFS info (device loop6): enabling ssd optimizations [ 194.690835][ T7802] EXT4-fs (loop1): inline encryption not supported [ 194.779730][ T7796] FAT-fs (loop7): Directory bread(block 64) failed [ 194.829242][ T7802] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.865897][ T7796] FAT-fs (loop7): Directory bread(block 65) failed [ 194.872577][ T7796] FAT-fs (loop7): Directory bread(block 66) failed [ 194.967024][ T7796] FAT-fs (loop7): Directory bread(block 67) failed [ 194.973776][ T7796] FAT-fs (loop7): Directory bread(block 68) failed [ 195.006012][ T7796] FAT-fs (loop7): Directory bread(block 69) failed [ 195.026112][ T7796] FAT-fs (loop7): Directory bread(block 70) failed [ 195.095769][ T7796] FAT-fs (loop7): Directory bread(block 71) failed [ 195.120409][ T7802] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 195.150391][ T7796] FAT-fs (loop7): Directory bread(block 72) failed [ 195.158196][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.164880][ T7796] FAT-fs (loop7): Directory bread(block 73) failed [ 195.174545][ T7802] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.1031: corrupted inode contents [ 195.256453][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.263034][ T7802] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.1031: mark_inode_dirty error [ 195.368032][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.375370][ T7802] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.1031: corrupted inode contents [ 195.442104][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.467232][ T7802] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.1031: mark_inode_dirty error [ 195.521880][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.535513][ T7802] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.1031: corrupted inode contents [ 195.652714][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.693311][ T7802] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 195.748195][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.774887][ T7802] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.1031: corrupted inode contents [ 195.806892][ T7832] set_capacity_and_notify: 3 callbacks suppressed [ 195.806908][ T7832] loop7: detected capacity change from 0 to 164 [ 195.831303][ T7833] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1048'. [ 195.842053][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.872031][ T7802] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.1031: mark_inode_dirty error [ 195.938452][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 195.945044][ T7802] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 196.005139][ T7802] EXT4-fs (loop1): Remounting filesystem read-only [ 196.022491][ T7802] EXT4-fs (loop1): 1 truncate cleaned up [ 196.045610][ T7837] netem: change failed [ 196.052233][ T7802] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,noblock_validity,resgid=0x0000000000000000,inlinecrypt,errors=remount-ro,noblock_validity,usrjquota=,nodelalloc,resgid=0x00000000000000002. Quota mode: writeback. [ 196.106094][ T4369] Bluetooth: hci0: command 0x0401 tx timeout [ 196.272604][ T7802] EXT4-fs (loop1): shut down requested (2) [ 196.456051][ T7684] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 196.504089][ T7852] program syz.8.1044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.662031][ T7859] loop8: detected capacity change from 0 to 512 [ 196.695709][ T7862] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1046'. [ 196.742692][ T7859] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 196.775977][ T7684] usb 8-1: Using ep0 maxpacket: 32 [ 196.819486][ T7859] EXT4-fs (loop8): 1 truncate cleaned up [ 196.836210][ T4363] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 196.846529][ T7859] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000003,debug_want_extra_isize=0x0000000000000068,lazytime,discard,lazytime,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 196.872567][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.920541][ T7684] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 196.956047][ T7684] usb 8-1: config 0 has no interface number 0 [ 196.962219][ T7684] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.024441][ T7684] usb 8-1: config 0 interface 85 has no altsetting 0 [ 197.044762][ T7871] program syz.6.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.085330][ T4363] usb 2-1: Using ep0 maxpacket: 16 [ 197.106983][ T7859] fscrypt (loop8, inode 18): Unsupported encryption flags (0x08) [ 197.190751][ T7878] loop6: detected capacity change from 0 to 512 [ 197.206349][ T4363] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 197.226396][ T7684] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 197.234768][ T4363] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 197.235617][ T7684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.235641][ T7684] usb 8-1: Product: syz [ 197.235657][ T7684] usb 8-1: Manufacturer: syz [ 197.246761][ T4363] usb 2-1: config 0 has no interface number 0 [ 197.288957][ T7878] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 197.316601][ T7684] usb 8-1: SerialNumber: syz [ 197.326670][ T7684] usb 8-1: config 0 descriptor?? [ 197.336221][ T7878] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.347423][ T4363] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 197.445844][ T4363] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 197.597437][ T7889] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.676129][ T4363] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 197.685752][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.719125][ T4363] usb 2-1: Product: syz [ 197.723394][ T4363] usb 2-1: Manufacturer: syz [ 197.757153][ T4363] usb 2-1: SerialNumber: syz [ 197.797134][ T4363] usb 2-1: config 0 descriptor?? [ 197.816274][ T7855] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 197.835504][ T7855] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 197.967653][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1059'. [ 198.006142][ T7684] appletouch 8-1:0.85: Geyser mode initialized. [ 198.013594][ T7684] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input17 [ 198.023755][ T7879] loop0: detected capacity change from 0 to 32768 [ 198.113540][ T7855] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.126127][ T7855] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.185998][ T4362] Bluetooth: hci0: command 0x0401 tx timeout [ 198.244800][ T7879] JBD2: Ignoring recovery information on journal [ 198.266432][ T4362] usb 8-1: USB disconnect, device number 6 [ 198.292360][ T7908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.334091][ T7914] loop6: detected capacity change from 0 to 256 [ 198.358378][ T4362] appletouch 8-1:0.85: input: appletouch disconnected [ 198.393021][ T7915] loop8: detected capacity change from 0 to 1024 [ 198.439606][ T7879] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 198.471945][ T7914] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.523590][ T7914] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 198.550341][ T7879] [ 198.552820][ T7879] ====================================================== [ 198.559859][ T7879] WARNING: possible circular locking dependency detected [ 198.560384][ T7914] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 198.566905][ T7879] syzkaller #0 Not tainted [ 198.566916][ T7879] ------------------------------------------------------ [ 198.566924][ T7879] syz.0.1052/7879 is trying to acquire lock: [ 198.566936][ T7879] ffff888074396d88 ( [ 198.582315][ T7915] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 198.583352][ T7879] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 198.610831][ T7915] hfsplus: xattr search failed [ 198.618278][ T7879] [ 198.618278][ T7879] but task is already holding lock: [ 198.618288][ T7879] ffff88805d601538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 198.618347][ T7879] [ 198.618347][ T7879] which lock already depends on the new lock. [ 198.618347][ T7879] [ 198.618354][ T7879] [ 198.618354][ T7879] the existing dependency chain (in reverse order) is: [ 198.659409][ T7879] [ 198.659409][ T7879] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 198.667289][ T7879] down_read+0x44/0x2e0 [ 198.672008][ T7879] ocfs2_init_acl+0x307/0x770 [ 198.677252][ T7879] ocfs2_mknod+0x15cb/0x2510 [ 198.682403][ T7879] ocfs2_create+0x192/0x420 [ 198.687465][ T7879] path_openat+0x11db/0x2fa0 [ 198.692613][ T7879] do_filp_open+0x1e2/0x410 [ 198.697677][ T7879] do_sys_openat2+0x150/0x4b0 [ 198.702910][ T7879] __x64_sys_creat+0x8c/0xb0 [ 198.708060][ T7879] do_syscall_64+0x4c/0xa0 [ 198.713051][ T7879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.719515][ T7879] [ 198.719515][ T7879] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 198.728081][ T7879] down_read+0x44/0x2e0 [ 198.732799][ T7879] ocfs2_start_trans+0x3a6/0x6f0 [ 198.738334][ T7879] ocfs2_modify_bh+0xe0/0x4c0 [ 198.743567][ T7879] ocfs2_local_read_info+0x13c8/0x1750 [ 198.749584][ T7879] dquot_load_quota_sb+0x756/0xac0 [ 198.755259][ T7879] dquot_load_quota_inode+0x2d8/0x5d0 [ 198.761192][ T7879] ocfs2_enable_quotas+0x1c5/0x490 [ 198.766881][ T7879] ocfs2_fill_super+0x3cd2/0x50f0 [ 198.772467][ T7879] mount_bdev+0x287/0x3c0 [ 198.777361][ T7879] legacy_get_tree+0xe6/0x180 [ 198.782628][ T7879] vfs_get_tree+0x88/0x270 [ 198.787609][ T7879] do_new_mount+0x24a/0xa40 [ 198.792685][ T7879] __se_sys_mount+0x2e3/0x3d0 [ 198.797957][ T7879] do_syscall_64+0x4c/0xa0 [ 198.802944][ T7879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.809400][ T7879] [ 198.809400][ T7879] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 198.816919][ T7879] ocfs2_start_trans+0x2a7/0x6f0 [ 198.822429][ T7879] ocfs2_mknod+0xf5a/0x2510 [ 198.827494][ T7879] ocfs2_create+0x192/0x420 [ 198.832643][ T7879] path_openat+0x11db/0x2fa0 [ 198.837794][ T7879] do_filp_open+0x1e2/0x410 [ 198.842864][ T7879] do_sys_openat2+0x150/0x4b0 [ 198.848291][ T7879] __x64_sys_creat+0x8c/0xb0 [ 198.853442][ T7879] do_syscall_64+0x4c/0xa0 [ 198.858425][ T7879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.864886][ T7879] [ 198.864886][ T7879] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 198.875556][ T7879] down_write+0x38/0x60 [ 198.880278][ T7879] ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 198.887002][ T7879] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 198.893914][ T7879] ocfs2_mknod+0xef8/0x2510 [ 198.898990][ T7879] ocfs2_create+0x192/0x420 [ 198.904066][ T7879] path_openat+0x11db/0x2fa0 [ 198.909218][ T7879] do_filp_open+0x1e2/0x410 [ 198.914282][ T7879] do_sys_openat2+0x150/0x4b0 [ 198.919606][ T7879] __x64_sys_creat+0x8c/0xb0 [ 198.924758][ T7879] do_syscall_64+0x4c/0xa0 [ 198.929736][ T7879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.936195][ T7879] [ 198.936195][ T7879] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 198.946759][ T7879] __lock_acquire+0x2c42/0x7d10 [ 198.952186][ T7879] lock_acquire+0x19e/0x400 [ 198.957281][ T7879] down_write+0x38/0x60 [ 198.961999][ T7879] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 198.968551][ T7879] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 198.975453][ T7879] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 198.981654][ T7879] ocfs2_xattr_set+0xc38/0x13e0 [ 198.987072][ T7879] __vfs_setxattr+0x3e0/0x420 [ 198.992311][ T7879] __vfs_setxattr_noperm+0x129/0x5e0 [ 198.998198][ T7879] vfs_setxattr+0x167/0x2e0 [ 199.003259][ T7879] setxattr+0x36c/0x390 [ 199.007979][ T7879] path_setxattr+0x147/0x290 [ 199.013135][ T7879] __x64_sys_setxattr+0xb7/0xd0 [ 199.018557][ T7879] do_syscall_64+0x4c/0xa0 [ 199.023536][ T7879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.029998][ T7879] [ 199.029998][ T7879] other info that might help us debug this: [ 199.029998][ T7879] [ 199.040357][ T7879] Chain exists of: [ 199.040357][ T7879] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 199.040357][ T7879] [ 199.057438][ T7879] Possible unsafe locking scenario: [ 199.057438][ T7879] [ 199.064931][ T7879] CPU0 CPU1 [ 199.070346][ T7879] ---- ---- [ 199.075791][ T7879] lock(&oi->ip_xattr_sem); [ 199.080470][ T7879] lock(&journal->j_trans_barrier); [ 199.088320][ T7879] lock(&oi->ip_xattr_sem); [ 199.095474][ T7879] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 199.102815][ T7879] [ 199.102815][ T7879] *** DEADLOCK *** [ 199.102815][ T7879] [ 199.111026][ T7879] 3 locks held by syz.0.1052/7879: [ 199.116183][ T7879] #0: ffff8880789ac460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 199.125487][ T7879] #1: ffff88805d601808 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 199.136155][ T7879] #2: ffff88805d601538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 199.146285][ T7879] [ 199.146285][ T7879] stack backtrace: [ 199.152217][ T7879] CPU: 0 PID: 7879 Comm: syz.0.1052 Not tainted syzkaller #0 [ 199.159625][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.169729][ T7879] Call Trace: [ 199.173047][ T7879] [ 199.176012][ T7879] dump_stack_lvl+0x188/0x250 [ 199.180726][ T7879] ? load_image+0x400/0x400 [ 199.185385][ T7879] ? show_regs_print_info+0x20/0x20 [ 199.190627][ T7879] ? print_circular_bug+0x12b/0x1a0 [ 199.195871][ T7879] check_noncircular+0x296/0x330 [ 199.200864][ T7879] ? add_chain_block+0x940/0x940 [ 199.205840][ T7879] ? lockdep_lock+0xf1/0x1f0 [ 199.210489][ T7879] ? mark_lock+0x94/0x320 [ 199.214858][ T7879] __lock_acquire+0x2c42/0x7d10 [ 199.219774][ T7879] ? verify_lock_unused+0x140/0x140 [ 199.225112][ T7879] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 199.230874][ T7879] ? do_raw_spin_lock+0x128/0x2f0 [ 199.235939][ T7879] ? mutex_unlock+0x10/0x10 [ 199.240502][ T7879] ? __rwlock_init+0x140/0x140 [ 199.245343][ T7879] ? do_raw_spin_unlock+0x11d/0x230 [ 199.250588][ T7879] lock_acquire+0x19e/0x400 [ 199.255136][ T7879] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 199.261249][ T7879] ? __bfs+0x2a3/0x5c0 [ 199.265353][ T7879] ? __might_sleep+0xf0/0xf0 [ 199.269983][ T7879] ? read_lock_is_recursive+0x10/0x10 [ 199.275392][ T7879] ? verify_lock_unused+0x140/0x140 [ 199.280628][ T7879] down_write+0x38/0x60 [ 199.284830][ T7879] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 199.290933][ T7879] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 199.296908][ T7879] ? mark_lock+0x94/0x320 [ 199.301279][ T7879] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 199.307300][ T7879] ? lock_chain_count+0x20/0x20 [ 199.312194][ T7879] ? __rwlock_init+0x140/0x140 [ 199.317051][ T7879] ? ocfs2_block_group_search+0x470/0x470 [ 199.322818][ T7879] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 199.328754][ T7879] ? lockdep_hardirqs_on+0x94/0x140 [ 199.333994][ T7879] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 199.339941][ T7879] ? _raw_spin_unlock+0x40/0x40 [ 199.345187][ T7879] ? stack_trace_save+0xa6/0xf0 [ 199.350094][ T7879] ? stack_trace_snprint+0xf0/0xf0 [ 199.355261][ T7879] ? stack_depot_save+0x404/0x440 [ 199.360325][ T7879] ? __kasan_kmalloc+0xcc/0xf0 [ 199.365123][ T7879] ? __kasan_kmalloc+0xb5/0xf0 [ 199.369930][ T7879] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 199.376485][ T7879] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 199.382330][ T7879] ? ocfs2_xattr_set+0xc38/0x13e0 [ 199.387395][ T7879] ? __vfs_setxattr+0x3e0/0x420 [ 199.392283][ T7879] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 199.397866][ T7879] ? vfs_setxattr+0x167/0x2e0 [ 199.402572][ T7879] ? setxattr+0x36c/0x390 [ 199.406928][ T7879] ? path_setxattr+0x147/0x290 [ 199.411815][ T7879] ? __x64_sys_setxattr+0xb7/0xd0 [ 199.416871][ T7879] ? do_syscall_64+0x4c/0xa0 [ 199.421499][ T7879] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.427621][ T7879] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 199.433995][ T7879] ? ocfs2_init_steal_slots+0x150/0x150 [ 199.439605][ T7879] ? ocfs2_xattr_block_set+0x2e10/0x2e10 [ 199.445277][ T7879] ? do_raw_spin_lock+0x128/0x2f0 [ 199.450341][ T7879] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 199.456005][ T7879] ? _raw_spin_unlock+0x24/0x40 [ 199.460900][ T7879] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 199.467000][ T7879] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 199.473388][ T7879] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 199.479334][ T7879] ? up_write+0x1bb/0x420 [ 199.483714][ T7879] ocfs2_xattr_set+0xc38/0x13e0 [ 199.488617][ T7879] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 199.494391][ T7879] ? aa_get_newest_label+0xf5/0x5a0 [ 199.499627][ T7879] ? posix_xattr_acl+0x8f/0xb0 [ 199.504430][ T7879] ? evm_protect_xattr+0x33c/0x9b0 [ 199.509579][ T7879] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 199.515116][ T7879] __vfs_setxattr+0x3e0/0x420 [ 199.519836][ T7879] __vfs_setxattr_noperm+0x129/0x5e0 [ 199.525165][ T7879] vfs_setxattr+0x167/0x2e0 [ 199.529702][ T7879] ? xattr_permission+0x500/0x500 [ 199.534752][ T7879] ? _copy_from_user+0x111/0x170 [ 199.539723][ T7879] ? setxattr+0x2cc/0x390 [ 199.544188][ T7879] setxattr+0x36c/0x390 [ 199.548380][ T7879] ? path_setxattr+0x290/0x290 [ 199.553192][ T7879] ? __mnt_want_write+0x1e2/0x260 [ 199.558255][ T7879] path_setxattr+0x147/0x290 [ 199.562879][ T7879] ? simple_xattr_list_add+0xf0/0xf0 [ 199.568206][ T7879] ? lock_chain_count+0x20/0x20 [ 199.573091][ T7879] ? vtime_user_exit+0x2c8/0x3e0 [ 199.578107][ T7879] __x64_sys_setxattr+0xb7/0xd0 [ 199.582996][ T7879] do_syscall_64+0x4c/0xa0 [ 199.587446][ T7879] ? clear_bhb_loop+0x30/0x80 [ 199.592155][ T7879] ? clear_bhb_loop+0x30/0x80 [ 199.596862][ T7879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.602798][ T7879] RIP: 0033:0x7fc7bfb8cdd9 [ 199.607241][ T7879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.626885][ T7879] RSP: 002b:00007fc7bdde6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 199.635349][ T7879] RAX: ffffffffffffffda RBX: 00007fc7bfe05fa0 RCX: 00007fc7bfb8cdd9 [ 199.643362][ T7879] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 199.651371][ T7879] RBP: 00007fc7bfc22d69 R08: 0000000000000000 R09: 0000000000000000 [ 199.659378][ T7879] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 199.667378][ T7879] R13: 00007fc7bfe06038 R14: 00007fc7bfe05fa0 R15: 00007ffcfdbc8e58 [ 199.675410][ T7879] [ 199.685148][ T155] hfsplus: b-tree write err: -5, ino 25 [ 199.696522][ T4588] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.712340][ T155] hfsplus: b-tree write err: -5, ino 4 [ 199.745075][ T155] hfsplus: b-tree write err: -5, ino 2 [ 199.752821][ T4363] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 199.777227][ T155] hfsplus: b-tree write err: -5, ino 28 [ 199.789131][ T4363] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 199.801818][ T4363] asix: probe of 2-1:0.251 failed with error -71 [ 199.829689][ T4363] usb 2-1: USB disconnect, device number 14 [ 199.838073][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 199.926222][ T4588] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.012740][ T4588] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.101109][ T4588] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.795313][ T4588] device hsr_slave_0 left promiscuous mode [ 200.805145][ T4588] device hsr_slave_1 left promiscuous mode [ 200.812266][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.822443][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.833241][ T4588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.841340][ T4588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.851632][ T4588] device bridge_slave_1 left promiscuous mode [ 200.858199][ T4588] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.866691][ T4588] device bridge_slave_0 left promiscuous mode [ 200.872953][ T4588] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.884350][ T4588] device veth1_macvtap left promiscuous mode [ 200.890564][ T4588] device veth0_macvtap left promiscuous mode [ 200.897043][ T4588] device veth1_vlan left promiscuous mode [ 200.903336][ T4588] device veth0_vlan left promiscuous mode [ 201.045095][ T4588] team0 (unregistering): Port device team_slave_1 removed [ 201.056860][ T4588] team0 (unregistering): Port device team_slave_0 removed [ 201.069268][ T4588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.088316][ T4588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.144284][ T4588] bond0 (unregistering): Released all slaves [ 205.237007][ C1] Illegal XDP return value 16128, expect packet loss!