last executing test programs: 3m16.534845143s ago: executing program 3 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01020304 \\', 0xc) 3m16.379016009s ago: executing program 3 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001acffef0000000000000300000a600000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000340003800c00008008000340000000022400008008000340000000020c00054000000000000000050c0004400000000000000f"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m16.173330809s ago: executing program 3 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 3m16.092498908s ago: executing program 3 (id=151): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 3m15.46602789s ago: executing program 3 (id=157): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff8}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m14.646111073s ago: executing program 3 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) 3m14.203433207s ago: executing program 32 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) 1m57.638189914s ago: executing program 4 (id=605): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f00000002c0)=""/222, 0xde) 1m57.476231371s ago: executing program 4 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xffeff034}, {0x6, 0x1, 0x86, 0x17}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) 1m57.341905874s ago: executing program 4 (id=610): r0 = syz_ublk_setup_io_uring(0x7cd1, &(0x7f0000000140)={0x0, 0x4f0f, 0x0, 0x3, 0x85}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x9, r4, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x7, 0x800}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x100068ba, 0x0, 0x0, 0x10}}}, 0x0) 1m57.125835456s ago: executing program 4 (id=613): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 1m56.042097485s ago: executing program 4 (id=617): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="cc"], 0x3, 0x29c, &(0x7f0000000680)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x3eb51000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m55.231226426s ago: executing program 4 (id=620): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000100)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000180)=[0x7], 0x1, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.633708416s ago: executing program 33 (id=620): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000100)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000180)=[0x7], 0x1, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 48.293952105s ago: executing program 0 (id=1148): io_setup(0x2, &(0x7f0000000640)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) 48.001551405s ago: executing program 0 (id=1151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 47.875174818s ago: executing program 0 (id=1153): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800094, &(0x7f0000000240)={[{@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {}]}, 0x41, 0x31f, &(0x7f0000000280)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000e80), &(0x7f0000000ec0)='./bus\x00', 0x27841e, 0x0, 0x4, 0x0, &(0x7f0000000f00)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f80)='.\x00', 0x1a5a438, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="7e38586ccb5053", @ANYRESHEX, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000001040)) rmdir(&(0x7f0000001080)='./bus\x00') 47.620230153s ago: executing program 0 (id=1157): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) 47.319721533s ago: executing program 0 (id=1168): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$kcm(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x80) 47.065332699s ago: executing program 0 (id=1165): syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd60f53a0400403a"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 46.626090783s ago: executing program 34 (id=1165): syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb86dd60f53a0400403a"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 7.76540491s ago: executing program 1 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x1, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150102000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r2, 0x0, 0xe, 0x0, &(0x7f0000000cc0)='\x00\x00\b[\x00'/14, 0x0, 0xd6f6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.210510096s ago: executing program 1 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004088}, 0x4040000) 6.996713337s ago: executing program 1 (id=1397): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000001540)={0xa, 0x4e21, 0x0, @private2, 0x800}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="b3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0xd09, 0x4) 6.734180683s ago: executing program 1 (id=1390): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 5.825952675s ago: executing program 1 (id=1403): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 5.589993758s ago: executing program 1 (id=1395): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) 4.853070553s ago: executing program 35 (id=1395): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$msr(r0, 0x0, 0x0) 3.78169563s ago: executing program 2 (id=1412): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x30}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000780)="c274380555a8356d178550cb864b", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.430436226s ago: executing program 6 (id=1409): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x804818, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000000540)="$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") mount$nfs(&(0x7f0000003100)='...', &(0x7f0000003140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000003180)='...', &(0x7f0000000d80)='./file0\x00', 0x0, 0x2000, 0x0) 2.29307358s ago: executing program 5 (id=1410): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x0, 0x4, 0x2, "0000000000000005"}, 0x210}}, 0x0) 2.2897726s ago: executing program 2 (id=1418): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000002, 0x2402) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101381) 2.024502037s ago: executing program 6 (id=1411): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) 2.001559439s ago: executing program 5 (id=1413): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x1200080, &(0x7f00000010c0)=ANY=[], 0x5, 0x144, &(0x7f0000000180)="$eJzs2z9rE2EcB/Bf/qhRl8zicODiFNRXoEgE8UBRbtBJIbokEmiWa6e8lL7BQsmU7SntlaQ9mqFDctD7fJZ84csDzzPkfjwH9/vl/+lkvvg3/7aKQacT/feRxboTw+hGLyrLAAAeknVKcZ5SSk+W8fQ0UkpN7wgA2DfzHwDax/wHgPYx/wGgfX78/PXlQ56Pv2fZIOJsWRZlUf1W/afP+fhNdmW4XbUqy6K36d9WfXa7fxTPrvt39b4bZVk8jtevqv6y+/g1r61/HpMDnB8AAADaYJRt3Hm/H4129VW68X6gdn/vx4v+wY4BANzD4vhk+mc2+3skCIKwCU0/mYB92/7pm94JAAAAAAAAAAAAAACwyyE+J2r6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFB3EQAA//8ju1E5") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cd042, 0x224) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000200)='p', 0x1, 0x600}]) 1.928787356s ago: executing program 2 (id=1414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresuid(0xee01, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 1.79570945s ago: executing program 6 (id=1415): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x840, 0xd2) r1 = socket$kcm(0x1e, 0x1, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x204002, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.774757572s ago: executing program 2 (id=1416): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x17, 0x97052, r0, 0x0) mlockall(0x7) 1.562766213s ago: executing program 5 (id=1417): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x48}}, 0x0) 1.342612335s ago: executing program 2 (id=1419): syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8c0, &(0x7f0000000240)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4467, &(0x7f0000002a40)="$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") r0 = open(&(0x7f0000013e00)='.\x00', 0x8000, 0x50) fstat(r0, &(0x7f0000013e40)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xffffffffffffffff) 1.132675527s ago: executing program 5 (id=1420): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x88a8', 0x6) 772.559833ms ago: executing program 6 (id=1421): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x23, 0x5, 0x0) write$cgroup_devices(r0, 0x0, 0x2) 675.192992ms ago: executing program 5 (id=1422): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x155) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='force', 0x5) 464.637754ms ago: executing program 6 (id=1423): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000) 424.570627ms ago: executing program 5 (id=1424): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0xfffffe01, 0x6, 0xfffffe01, 0x7fff, 0xb2, "202b9809007d0000cd681ec267a000", 0x6, 0x1d}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 105.46659ms ago: executing program 6 (id=1425): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000c00)={0x8, 0x120, 0xfa00, {0x0, {0x7, 0x9966, "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", 0x8, 0x7f, 0x0, 0x5, 0xc0, 0xf8, 0x1, 0x8}}}, 0x128) 0s ago: executing program 2 (id=1426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x47d, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @private=0xa010100}}) kernel console output (not intermixed with test programs): T7246] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.338: Invalid inode bitmap blk 4 in block_group 0 [ 170.073158][ T7246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.133287][ T7256] loop4: detected capacity change from 0 to 1024 [ 170.223085][ T7256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 170.248180][ T7246] EXT4-fs (loop1): shut down requested (2) [ 170.259696][ T7256] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.383170][ T6369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.506711][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.912011][ T7279] loop1: detected capacity change from 0 to 164 [ 171.208554][ T7289] program syz.4.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.580143][ T7300] loop1: detected capacity change from 0 to 1024 [ 171.674223][ T7300] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 171.811707][ T7300] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 171.886928][ T7300] EXT4-fs (loop1): invalid journal inode [ 171.903148][ T7300] EXT4-fs (loop1): can't get journal size [ 171.936817][ T7300] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12c, mo2=0002] [ 171.960311][ T7300] System zones: 0-1, 4-36, 102-102 [ 171.975237][ T7300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.063521][ T7286] loop0: detected capacity change from 0 to 32768 [ 172.178550][ T7286] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.382106][ T7286] XFS (loop0): Ending clean mount [ 172.397380][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.429111][ T7286] XFS (loop0): Quotacheck needed: Please wait. [ 172.709964][ T7286] XFS (loop0): Quotacheck: Done. [ 172.836091][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.849230][ T7338] loop1: detected capacity change from 0 to 128 [ 173.386153][ T7355] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 173.481105][ T7357] loop2: detected capacity change from 0 to 128 [ 173.594630][ T7357] syz.2.370: attempt to access beyond end of device [ 173.594630][ T7357] loop2: rw=3, sector=137, nr_sectors = 7 limit=128 [ 173.630273][ T7357] syz.2.370: attempt to access beyond end of device [ 173.630273][ T7357] loop2: rw=2051, sector=144, nr_sectors = 57 limit=128 [ 174.716917][ T7388] loop1: detected capacity change from 0 to 1024 [ 174.915437][ T1085] hfsplus: b-tree write err: -5, ino 25 [ 174.927532][ T1085] hfsplus: b-tree write err: -5, ino 4 [ 174.956594][ T1085] hfsplus: b-tree write err: -5, ino 2 [ 175.049027][ T7399] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 175.317855][ T7372] loop2: detected capacity change from 0 to 40427 [ 175.358730][ T7372] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 175.394938][ T7372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 175.442652][ T7372] F2FS-fs (loop2): invalid crc value [ 175.696092][ T7412] loop1: detected capacity change from 0 to 512 [ 175.748456][ T7390] loop4: detected capacity change from 0 to 32768 [ 175.878042][ T7372] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 175.903032][ T7372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 175.979118][ T7390] syz.4.379: attempt to access beyond end of device [ 175.979118][ T7390] loop4: rw=2049, sector=4680032, nr_sectors = 8 limit=32768 [ 176.058463][ T7406] f2fs_ckpt-7:2: attempt to access beyond end of device [ 176.058463][ T7406] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.113882][ T7406] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 176.324144][ T115] blkno = 8ed2c, nblocks = 1 [ 176.357524][ T115] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 176.357524][ T115] [ 176.402804][ T115] ERROR: (device loop4): remounting filesystem as read-only [ 177.179058][ T7444] input: syz0 as /devices/virtual/input/input10 [ 177.420651][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.395'. [ 177.869846][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 177.926002][ T7467] loop4: detected capacity change from 0 to 2048 [ 177.995872][ T7467] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 178.011485][ T7467] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 178.051541][ T7467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.065352][ T5853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 178.212803][ T7475] loop1: detected capacity change from 0 to 128 [ 178.255001][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 178.271698][ T5853] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 178.311982][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 178.365166][ T5853] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 178.384684][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.409919][ T5853] usb 3-1: config 0 descriptor?? [ 178.716803][ T7486] netlink: 'syz.4.406': attribute type 14 has an invalid length. [ 178.848899][ T5853] apple 0003:05AC:027C.0002: unknown main item tag 0x4 [ 178.866871][ T5853] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 178.884111][ T5853] apple 0003:05AC:027C.0002: unknown main item tag 0x0 [ 178.913422][ T5853] apple 0003:05AC:027C.0002: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 179.059216][ T5854] usb 3-1: USB disconnect, device number 5 [ 179.162134][ T7492] fido_id[7492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 180.148282][ T7526] loop1: detected capacity change from 0 to 4096 [ 180.456751][ T7535] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.542261][ T7511] loop0: detected capacity change from 0 to 32768 [ 180.666222][ T7511] [ 180.666222][ T7511] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.666222][ T7511] [ 180.773298][ T7511] ERROR: (device loop0): diWrite: ixpxd invalid [ 180.773298][ T7511] [ 180.847505][ T7511] ERROR: (device loop0): txCommit: [ 180.847505][ T7511] [ 181.028697][ T5788] [ 181.028697][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.028697][ T5788] [ 181.072248][ T5788] [ 181.072248][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.072248][ T5788] [ 181.386612][ T7533] loop4: detected capacity change from 0 to 32768 [ 181.420453][ T7533] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 181.505565][ T7533] JBD2: Ignoring recovery information on journal [ 181.681883][ T7533] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 181.961119][ T6369] ocfs2: Unmounting device (7,4) on (node local) [ 182.287055][ T7576] loop1: detected capacity change from 0 to 256 [ 182.289111][ T7575] loop4: detected capacity change from 0 to 1024 [ 182.333939][ T7576] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.365084][ T5853] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 182.424494][ T7576] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2048) [ 182.436964][ T7576] FAT-fs (loop1): Filesystem has been set read-only [ 182.448047][ T7576] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8) [ 182.557452][ T5853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.568478][ T5853] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.590675][ T5853] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.610618][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.630945][ T5853] usb 3-1: Product: syz [ 182.635640][ T5853] usb 3-1: Manufacturer: syz [ 182.640327][ T5853] usb 3-1: SerialNumber: syz [ 182.731248][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 183.470019][ T5853] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 183.505728][ T5853] cdc_ncm 3-1:1.0: bind() failure [ 183.527402][ T5853] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 183.534347][ T5853] cdc_ncm 3-1:1.1: bind() failure [ 183.561212][ T5853] usb 3-1: USB disconnect, device number 6 [ 183.834480][ T7614] program syz.4.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.947357][ T5802] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 183.954267][ T5798] Bluetooth: hci4: command 0x1003 tx timeout [ 185.047420][ T7631] loop2: detected capacity change from 0 to 32768 [ 185.142627][ T7631] JBD2: Ignoring recovery information on journal [ 185.183694][ T7631] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 185.356725][ T7668] (syz.2.453,7668,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 185.514994][ T7672] loop0: detected capacity change from 0 to 128 [ 185.831446][ T6801] ocfs2: Unmounting device (7,2) on (node local) [ 186.136819][ T7680] loop0: detected capacity change from 0 to 512 [ 186.162090][ T7680] EXT4-fs: Ignoring removed nobh option [ 186.202345][ T7680] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.232674][ T7680] EXT4-fs (loop0): 1 truncate cleaned up [ 186.249700][ T7680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.365526][ T7686] loop6: detected capacity change from 0 to 8 [ 186.392078][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.405397][ T7686] loop6: detected capacity change from 8 to 7 [ 186.450067][ T7686] Dev loop6: unable to read RDB block 7 [ 186.479197][ T7686] loop6: unable to read partition table [ 186.493411][ T7686] loop6: partition table beyond EOD, truncated [ 186.507919][ T7686] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·¶žMܾ`*ÎîZ´Ç5¡]z(¿Ťî4+hGËpX„Ïgm [ 186.507919][ T7686] ü òæôØ.BÊL_seÔ) failed (rc=-5) [ 186.989414][ T7682] loop4: detected capacity change from 0 to 32768 [ 187.580916][ T7716] loop0: detected capacity change from 0 to 164 [ 187.696313][ T7716] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 187.710922][ T7718] loop2: detected capacity change from 0 to 4096 [ 187.804916][ T7722] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.881171][ T7718] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 187.944350][ T7718] Remounting filesystem read-only [ 188.069070][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 188.098104][ T7726] netlink: 'syz.0.493': attribute type 20 has an invalid length. [ 188.129405][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 188.171917][ T7726] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.181940][ T7726] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.191018][ T7726] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.199964][ T7726] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.535945][ T7738] bond0: option mode: unable to set because the bond device has slaves [ 188.711157][ T7747] loop2: detected capacity change from 0 to 128 [ 188.766378][ T7747] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 188.849835][ T7747] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5a != 0x5e [ 188.894897][ T7747] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 188.903878][ T7747] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5a != 0x5e [ 188.951308][ T7747] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 189.188212][ T7763] loop4: detected capacity change from 0 to 128 [ 189.204924][ T5854] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 189.236864][ T7765] loop2: detected capacity change from 0 to 512 [ 189.265648][ T7765] EXT4-fs: Ignoring removed nobh option [ 189.349879][ T7765] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.512: invalid indirect mapped block 256 (level 2) [ 189.372342][ T7765] EXT4-fs (loop2): 2 truncates cleaned up [ 189.380430][ T7765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.400179][ T5854] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.429161][ T5854] usb 2-1: config 0 has no interface number 0 [ 189.457156][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.466419][ T5854] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.466505][ T5854] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 189.466618][ T5854] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.504221][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.556654][ T5854] usb 2-1: config 0 descriptor?? [ 189.589382][ T7753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.624340][ T5854] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 189.703482][ T7773] loop9: detected capacity change from 0 to 8 [ 189.731269][ T7773] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 189.740807][ T7773] loop9: partition table partially beyond EOD, truncated [ 189.755703][ T7773] loop9: p1 size 81768186 extends beyond EOD, truncated [ 189.906638][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 189.925955][ T5853] usb 2-1: USB disconnect, device number 4 [ 189.959420][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 190.213189][ T7788] phram: illegal device length [ 190.521673][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.570755][ T7797] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.591082][ T7801] netlink: 76 bytes leftover after parsing attributes in process `syz.2.527'. [ 190.618013][ T7797] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: block 32: comm syz.4.526: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 190.646938][ T7797] EXT4-fs (loop4): Remounting filesystem read-only [ 190.704328][ T6369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.255444][ T7820] set_capacity_and_notify: 2 callbacks suppressed [ 191.255479][ T7820] loop4: detected capacity change from 0 to 1024 [ 191.510794][ T5853] kernel write not supported for file /input/event2 (pid: 5853 comm: kworker/0:3) [ 191.771031][ T7832] warning: `syz.1.541' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 191.874904][ T1192] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.974569][ T7822] loop0: detected capacity change from 0 to 40427 [ 191.993339][ T7822] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 192.011294][ T7822] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 192.073238][ T7822] F2FS-fs (loop0): Found nat_bits in checkpoint [ 192.080019][ T1192] usb 5-1: Using ep0 maxpacket: 32 [ 192.091269][ T1192] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 192.116483][ T1192] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 192.148463][ T1192] usb 5-1: config 0 has no interface number 0 [ 192.174503][ T1192] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 192.194965][ T1192] usb 5-1: config 0 has no interface number 0 [ 192.225369][ T1192] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 192.233611][ T1192] usb 5-1: config 0 has no interface number 0 [ 192.260687][ T1192] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 192.279832][ T1192] usb 5-1: config 0 has no interface number 0 [ 192.296757][ T1192] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 192.314849][ T1192] usb 5-1: config 0 has no interface number 0 [ 192.323180][ T1192] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 192.331607][ T7822] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 192.338934][ T7822] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 192.346678][ T1192] usb 5-1: config 0 has no interface number 0 [ 192.355990][ T1192] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 192.364391][ T1192] usb 5-1: config 0 has no interface number 0 [ 192.374224][ T1192] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 192.382547][ T1192] usb 5-1: config 0 has no interface number 0 [ 192.392177][ T1192] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 192.402569][ T1192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.412576][ T1192] usb 5-1: Product: syz [ 192.417337][ T1192] usb 5-1: Manufacturer: syz [ 192.422005][ T1192] usb 5-1: SerialNumber: syz [ 192.430816][ T1192] usb 5-1: config 0 descriptor?? [ 192.461484][ T1192] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 192.697112][ T1192] etas_es58x 5-1:0.2: could not retrieve the product info string [ 192.978144][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.002388][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.101626][ C0] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 194.113392][ C0] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 194.121507][ C0] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 194.132117][ C0] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 194.143177][ C0] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 194.151242][ C0] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 194.160373][ C0] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 194.171435][ C0] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 194.179551][ C0] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 194.187785][ C0] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 194.199022][ C0] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 194.207085][ C0] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 194.215151][ C0] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 194.226360][ C0] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 194.234390][ C0] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 194.242690][ C0] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0001. [ 194.253047][ T5448] etas_es58x 5-1:0.2 can1: bit-timing not yet defined [ 194.253712][ C0] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 194.268529][ C0] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 194.277652][ C0] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 194.288682][ C0] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 194.296780][ C0] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 194.304601][ C0] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 194.315720][ C0] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 194.323728][ C0] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 194.542444][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 194.551915][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 194.561280][ C0] etas_es58x 5-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 194.572392][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 194.581757][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 194.591101][ C0] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 194.600367][ T5448] etas_es58x 5-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 194.604947][ T8] usb 5-1: USB disconnect, device number 3 [ 194.617319][ T8] etas_es58x 5-1:0.2: Disconnecting syz syz [ 194.684446][ T7880] loop1: detected capacity change from 0 to 4096 [ 194.694840][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.712543][ T7871] loop2: detected capacity change from 0 to 32768 [ 194.728703][ T7871] XFS: ikeep mount option is deprecated. [ 194.737726][ T7871] XFS: attr2 mount option is deprecated. [ 194.819486][ T7880] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 194.889664][ T7871] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.898711][ T7880] ntfs3: loop1: Failed to load $Bitmap (-2). [ 195.308756][ T7871] XFS (loop2): Ending clean mount [ 195.346346][ T7871] XFS (loop2): Quotacheck needed: Please wait. [ 195.536662][ T7871] XFS (loop2): Quotacheck: Done. [ 195.839522][ T6801] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.401614][ T7934] netlink: 280 bytes leftover after parsing attributes in process `syz.0.568'. [ 196.422851][ T7936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.569'. [ 196.431729][ T7934] netlink: 'syz.0.568': attribute type 3 has an invalid length. [ 196.584316][ T7938] overlayfs: upper fs does not support file handles, falling back to index=off. [ 196.623487][ T7938] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 196.645780][ T7938] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 196.880998][ T7946] syz.4.574 (7946) used greatest stack depth: 20568 bytes left [ 197.024093][ T7930] loop2: detected capacity change from 0 to 32768 [ 197.083589][ T7930] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.181985][ T7930] XFS (loop2): Ending clean mount [ 197.252985][ T7970] sctp: [Deprecated]: syz.4.581 (pid 7970) Use of int in max_burst socket option deprecated. [ 197.252985][ T7970] Use struct sctp_assoc_value instead [ 197.431326][ T6801] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.929752][ T7976] loop4: detected capacity change from 0 to 32768 [ 197.999918][ T7988] loop0: detected capacity change from 0 to 1024 [ 198.017139][ T7976] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 198.169738][ T7976] XFS (loop4): Ending clean mount [ 198.269808][ T6369] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 199.347619][ T7998] loop1: detected capacity change from 0 to 32768 [ 199.426495][ T7998] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 199.532766][ T8032] (null): rxe_set_mtu: Set mtu to 1024 [ 199.551242][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 199.600034][ T8033] (null): rxe_set_mtu: Set mtu to 1024 [ 199.610078][ T7998] XFS (loop1): Ending clean mount [ 199.619709][ T8033] rdma_rxe: rxe_newlink: failed to add syz_tun [ 199.825845][ T8035] loop0: detected capacity change from 0 to 1024 [ 199.845853][ T5787] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 199.936392][ T8035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.985092][ T8035] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.052973][ T8035] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.601: lblock 0 mapped to illegal pblock 0 (length 4) [ 200.117871][ T8035] EXT4-fs error (device loop0): ext4_ext_remove_space:2957: inode #15: comm syz.0.601: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 200.219942][ T8032] infiniband syz1: set active [ 200.225571][ T8032] infiniband syz1: added ipvlan0 [ 200.336086][ T8032] RDS/IB: syz1: added [ 200.340279][ T8032] smc: adding ib device syz1 with port count 1 [ 200.376094][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 200.395623][ T8032] smc: ib device syz1 port 1 has pnetid [ 200.830714][ T8053] syz.4.607 uses obsolete (PF_INET,SOCK_PACKET) [ 201.304063][ T8065] loop4: detected capacity change from 0 to 2048 [ 201.383535][ T8065] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 201.468560][ T8065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.243760][ T6369] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 202.282890][ T6369] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 202.295199][ T8061] loop1: detected capacity change from 0 to 131072 [ 202.307178][ T8061] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 202.315239][ T8061] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 202.323712][ T8061] F2FS-fs (loop1): Test dummy encryption mode enabled [ 202.364928][ T8061] F2FS-fs (loop1): invalid crc value [ 202.393845][ T8061] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.432683][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.440305][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.455334][ T8061] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 202.486733][ T8061] F2FS-fs (loop1): Start checkpoint disabled! [ 202.519432][ T8061] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 202.526692][ T8061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 203.083541][ T3435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.328114][ T3435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.503749][ T3435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.718119][ T3435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.266370][ T5853] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 204.459135][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 204.502932][ T5853] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.526697][ T5853] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.570557][ T5853] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 204.604334][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.681444][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.733911][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.750593][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.764418][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.782569][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.790770][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.865391][ T5853] rtsx_usb: probe of 1-1:1.0 failed with error -22 [ 204.879348][ T5853] usb 1-1: USB disconnect, device number 2 [ 204.982696][ T8097] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.597939][ T8145] device-mapper: raid: Choosing default region size of 4MiB [ 206.640389][ T8145] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 206.901657][ T8145] md/raid10:mdX: unsupported raid10 layout: 0x 0 [ 206.907644][ T5798] Bluetooth: hci2: command tx timeout [ 206.939291][ T8097] chnl_net:caif_netlink_parms(): no params data found [ 206.989763][ T8145] md: pers->run() failed ... [ 207.073004][ T3435] hsr_slave_0: left promiscuous mode [ 207.091909][ T3435] hsr_slave_1: left promiscuous mode [ 207.105987][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.123825][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.153114][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.173861][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.199959][ T3435] bridge_slave_1: left allmulticast mode [ 207.219237][ T3435] bridge_slave_1: left promiscuous mode [ 207.245281][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.270873][ T3435] bridge_slave_0: left allmulticast mode [ 207.290311][ T3435] bridge_slave_0: left promiscuous mode [ 207.305944][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.316846][ T8145] device-mapper: table: 248:0: raid: Failed to run raid array (-EINVAL) [ 207.346314][ T8145] device-mapper: ioctl: error adding target to table [ 207.481768][ T3435] veth1_macvtap: left promiscuous mode [ 207.487648][ T3435] veth0_macvtap: left promiscuous mode [ 207.493495][ T3435] veth1_vlan: left promiscuous mode [ 207.535225][ T3435] veth0_vlan: left promiscuous mode [ 207.686338][ T8163] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 208.165194][ T28] audit: type=1400 audit(1794328988.149:8): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8174 comm="syz.1.643" name="unknown" offset=16 [ 208.354888][ T789] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 208.555012][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 208.594018][ T789] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 208.623483][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.654214][ T789] usb 3-1: Product: syz [ 208.664365][ T789] usb 3-1: Manufacturer: syz [ 208.674522][ T789] usb 3-1: SerialNumber: syz [ 208.711394][ T789] usb 3-1: config 0 descriptor?? [ 208.741007][ T8183] program syz.1.647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.860249][ T8185] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 208.985541][ T5798] Bluetooth: hci2: command tx timeout [ 210.331417][ T5854] input: syz0 as /devices/virtual/misc/uhid/0005:4000B05:0002.0003/input/input11 [ 210.455674][ T5775] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 210.500300][ T5854] hid-generic 0005:4000B05:0002.0003: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz1 [ 210.694223][ T8194] hid-generic 0005:4000B05:0002.0003: Event data for report 3 was too short (8 vs 3) [ 210.725781][ T5775] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 210.739309][ T5775] usb 2-1: can't read configurations, error -71 [ 210.778505][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 210.861541][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 210.931469][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.004446][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.074421][ T5798] Bluetooth: hci2: command tx timeout [ 211.804603][ T3435] bond0 (unregistering): Released all slaves [ 212.002451][ T8210] dvmrp8: entered allmulticast mode [ 212.019542][ T789] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 212.046857][ T789] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 212.196835][ T789] peak_usb: probe of 3-1:0.0 failed with error -71 [ 212.231412][ T789] usb 3-1: USB disconnect, device number 7 [ 212.321644][ T28] audit: type=1326 audit(1794328992.299:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7316da8f19 code=0x0 [ 212.439895][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.456010][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.463473][ T8097] bridge_slave_0: entered allmulticast mode [ 212.481657][ T8097] bridge_slave_0: entered promiscuous mode [ 212.509417][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.521871][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.569841][ T8097] bridge_slave_1: entered allmulticast mode [ 212.580707][ T8097] bridge_slave_1: entered promiscuous mode [ 212.756771][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.813413][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.967658][ T8097] team0: Port device team_slave_0 added [ 212.968134][ T8234] loop1: detected capacity change from 0 to 2048 [ 213.009526][ T8097] team0: Port device team_slave_1 added [ 213.106141][ T8234] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 213.144851][ T5798] Bluetooth: hci2: command tx timeout [ 213.166136][ T8238] Line length is too long: Should be less than 4094 [ 213.183921][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.213430][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.287944][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.342710][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.369215][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.460152][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.558238][ T8244] loop1: detected capacity change from 0 to 512 [ 213.666434][ T8244] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.667: inode has both inline data and extents flags [ 213.750454][ T8097] hsr_slave_0: entered promiscuous mode [ 213.777306][ T8244] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.667: couldn't read orphan inode 15 (err -117) [ 213.806007][ T8097] hsr_slave_1: entered promiscuous mode [ 213.826279][ T8244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.924558][ T8247] bond0: option arp_validate: invalid value ( I) [ 214.072404][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.486106][ T8260] loop2: detected capacity change from 0 to 8192 [ 214.503783][ T8260] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.600800][ T8264] bridge0: port 2(bridge_slave_1) entered listening state [ 214.646894][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.733914][ T8269] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 214.761509][ T8269] FAT-fs (loop2): Filesystem has been set read-only [ 214.791526][ T8269] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 214.809408][ T8269] FAT-fs (loop2): error, clusters badly computed (3 != 2) [ 214.851502][ T8269] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 214.899581][ T8269] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 214.913861][ T8097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.929533][ T8269] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 214.942908][ T8269] FAT-fs (loop2): error, clusters badly computed (7 != 6) [ 214.951516][ T8097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.976784][ T8269] FAT-fs (loop2): error, clusters badly computed (8 != 7) [ 214.998391][ T8269] FAT-fs (loop2): error, clusters badly computed (9 != 8) [ 215.036285][ T8097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.064360][ T8097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.074459][ T8269] FAT-fs (loop2): error, clusters badly computed (10 != 9) [ 215.117054][ T8269] FAT-fs (loop2): error, clusters badly computed (11 != 10) [ 215.159152][ T8269] FAT-fs (loop2): error, clusters badly computed (12 != 11) [ 215.223963][ T8269] FAT-fs (loop2): error, clusters badly computed (13 != 12) [ 215.274456][ T8269] FAT-fs (loop2): error, clusters badly computed (14 != 13) [ 215.325226][ T8269] FAT-fs (loop2): error, clusters badly computed (15 != 14) [ 215.378796][ T8282] loop1: detected capacity change from 0 to 128 [ 215.392043][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.416115][ T8269] FAT-fs (loop2): error, clusters badly computed (16 != 15) [ 215.519251][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.557953][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.565377][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.612830][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.620348][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.069366][ T8302] loop1: detected capacity change from 0 to 1024 [ 216.297472][ T995] hfsplus: b-tree write err: -5, ino 3 [ 216.402989][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.498228][ T8315] program syz.1.686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.755146][ T5853] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 216.945241][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 216.963624][ T5853] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 216.994892][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.028820][ T5853] usb 1-1: config 0 descriptor?? [ 217.077607][ T8327] block device autoloading is deprecated and will be removed. [ 217.101636][ T5853] gspca_main: sunplus-2.14.0 probing 041e:400b [ 217.406726][ T8097] veth0_vlan: entered promiscuous mode [ 217.451569][ T8097] veth1_vlan: entered promiscuous mode [ 217.649199][ T5853] gspca_sunplus: reg_r err -71 [ 217.654215][ T5853] sunplus: probe of 1-1:0.0 failed with error -71 [ 217.668846][ T8097] veth0_macvtap: entered promiscuous mode [ 217.695911][ T5853] usb 1-1: USB disconnect, device number 3 [ 217.704532][ T8097] veth1_macvtap: entered promiscuous mode [ 217.711865][ T8321] loop2: detected capacity change from 0 to 40427 [ 217.738554][ T8321] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 217.775222][ T8321] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 217.783705][ T8321] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 217.807406][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.831165][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.841457][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.852093][ T8321] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 217.860877][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.872827][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.884101][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.896643][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.910664][ T8321] F2FS-fs (loop2): invalid crc value [ 217.912952][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.927210][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.942022][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.963112][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.974020][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.986181][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.998043][ T8321] F2FS-fs (loop2): Found nat_bits in checkpoint [ 218.008230][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.090749][ T8097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.117513][ T8097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.127574][ T8321] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 218.134705][ T8321] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 218.144402][ T8097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.153914][ T8097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.407470][ T6801] syz-executor: attempt to access beyond end of device [ 218.407470][ T6801] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 218.473867][ T6801] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 218.604442][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.645403][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.750890][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.799247][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.186923][ T8362] loop1: detected capacity change from 0 to 512 [ 219.299529][ T8362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.372576][ T8362] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.632353][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.822078][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.702'. [ 219.867102][ T5099] Bluetooth: hci1: command 0x0406 tx timeout [ 219.872542][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 220.371537][ T8404] loop5: detected capacity change from 0 to 256 [ 220.602188][ T8404] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 220.716512][ T8410] loop1: detected capacity change from 0 to 4096 [ 220.751050][ T8410] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 220.976736][ T8410] ntfs3: loop1: ino=19, mi_enum_attr [ 220.982228][ T8410] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 220.996269][ T8416] loop2: detected capacity change from 0 to 1024 [ 221.014001][ T8418] Bluetooth: MGMT ver 1.22 [ 221.053375][ T8410] ntfs3: loop1: ino=1a, mi_enum_attr [ 221.059109][ T8416] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 221.075052][ T8410] ntfs3: loop1: ino=1a, mi_enum_attr [ 221.081246][ T8410] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 221.125504][ T8416] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 221.171155][ T8416] System zones: 0-1, 3-36 [ 221.176169][ T8416] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.405608][ T8416] EXT4-fs (loop2): 1 orphan inode deleted [ 221.467909][ T8416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.589382][ T8416] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 221.605621][ T8416] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 221.634042][ T8416] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.713: Block bitmap for bg 0 marked uninitialized [ 221.772390][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.925818][ T8438] bonding: mM% is being created... [ 221.950729][ T8438] bonding: mM% creation failed [ 222.120477][ T8442] loop1: detected capacity change from 0 to 4096 [ 222.247970][ T8452] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.413853][ T8455] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 222.561706][ T8458] loop2: detected capacity change from 0 to 256 [ 222.632755][ T8458] FAT-fs (loop2): Directory bread(block 1285) failed [ 222.659106][ T8458] FAT-fs (loop2): Directory bread(block 1286) failed [ 222.706157][ T8458] FAT-fs (loop2): Directory bread(block 1287) failed [ 222.713332][ T8458] FAT-fs (loop2): Directory bread(block 1288) failed [ 222.790417][ T8458] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 223.112629][ T28] audit: type=1400 audit(1794329003.089:10): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=8469 comm="syz.2.733" name="p" offset=92 [ 223.167817][ T8472] netlink: 'syz.5.732': attribute type 5 has an invalid length. [ 223.491470][ T8478] loop2: detected capacity change from 0 to 512 [ 223.854609][ T8478] EXT4-fs (loop2): Test dummy encryption mode enabled [ 223.872624][ T8488] device-mapper: table: 248:1: crypt: Gap in table (-EINVAL) [ 223.887522][ T8478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002] [ 223.903092][ T8488] device-mapper: ioctl: error adding target to table [ 223.917364][ T8478] System zones: 1-12 [ 223.966835][ T8478] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.282758][ T8478] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 224.341771][ T8478] EXT4-fs error (device loop2): ext4_add_entry:2488: inode #2: comm syz.2.734: Directory hole found for htree leaf block 0 [ 224.384891][ T8478] EXT4-fs (loop2): Remounting filesystem read-only [ 224.537696][ T6801] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 224.736181][ T8] IPVS: starting estimator thread 0... [ 224.855220][ T8527] IPVS: using max 17 ests per chain, 40800 per kthread [ 225.121729][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 225.155510][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 225.177507][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.753'. [ 225.416765][ T8549] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.484156][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 225.665687][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 225.715103][ T8] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 225.743918][ T8] usb 6-1: config 0 has no interface number 0 [ 225.782301][ T8] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 225.825310][ T8] usb 6-1: config 0 interface 196 has no altsetting 0 [ 225.861760][ T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 225.884863][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.924484][ T8] usb 6-1: Product: syz [ 225.932771][ T8] usb 6-1: Manufacturer: syz [ 225.942938][ T8564] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 225.956050][ T8] usb 6-1: SerialNumber: syz [ 225.986552][ T8] usb 6-1: config 0 descriptor?? [ 225.995856][ T8545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 226.488058][ T8] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 226.525007][ T8] ipheth: probe of 6-1:0.196 failed with error -22 [ 226.694244][ T8] usb 6-1: USB disconnect, device number 2 [ 226.976070][ T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 227.198193][ T23] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 227.225009][ T23] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 227.247321][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 227.254141][ T23] usb 3-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 227.294380][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.327955][ T23] usb 3-1: config 0 descriptor?? [ 227.336240][ T8580] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 227.778418][ T8601] loop1: detected capacity change from 0 to 164 [ 227.832620][ T23] input: HID 04b3:3108 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04B3:3108.0004/input/input12 [ 228.055290][ T8586] loop0: detected capacity change from 0 to 40427 [ 228.100979][ T8586] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 228.132031][ T8586] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 228.154956][ T8586] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x7ffff [ 228.164282][ T8586] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 228.197623][ T8586] F2FS-fs (loop0): invalid crc value [ 228.203861][ T8604] loop1: detected capacity change from 0 to 2048 [ 228.247102][ T8586] F2FS-fs (loop0): Found nat_bits in checkpoint [ 228.372978][ T8604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.403690][ T23] lenovo 0003:04B3:3108.0004: input,hidraw0: USB HID v0.04 Joystick [HID 04b3:3108] on usb-dummy_hcd.2-1/input0 [ 228.557417][ T23] usb 3-1: USB disconnect, device number 8 [ 228.574123][ T8586] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 228.615451][ T8586] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 228.779365][ T8586] syz.0.766: attempt to access beyond end of device [ 228.779365][ T8586] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 228.826343][ T8612] fido_id[8612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 228.850104][ T8586] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 228.868535][ T8586] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 229.254692][ T8621] kAFS: Invalid Command on /proc/fs/afs/cells file [ 230.053045][ T8629] mmap: syz.2.780 (8629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.162586][ T8624] loop1: detected capacity change from 0 to 32768 [ 230.979498][ T8647] loop5: detected capacity change from 0 to 1024 [ 231.937928][ T8670] loop1: detected capacity change from 0 to 4096 [ 232.643289][ T8702] loop0: detected capacity change from 0 to 256 [ 233.069249][ T8716] netlink: 280 bytes leftover after parsing attributes in process `syz.2.816'. [ 233.112481][ T8721] loop0: detected capacity change from 0 to 128 [ 233.213954][ T8723] netlink: 'syz.1.819': attribute type 12 has an invalid length. [ 233.249862][ T8723] netlink: 'syz.1.819': attribute type 29 has an invalid length. [ 233.287523][ T8723] netlink: 148 bytes leftover after parsing attributes in process `syz.1.819'. [ 233.330350][ T8723] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 233.377884][ T8723] netlink: 'syz.1.819': attribute type 2 has an invalid length. [ 234.401212][ T23] IPVS: starting estimator thread 0... [ 234.498896][ T8771] IPVS: using max 20 ests per chain, 48000 per kthread [ 234.622940][ T8756] loop0: detected capacity change from 0 to 32768 [ 234.688377][ T8756] JBD2: Ignoring recovery information on journal [ 234.743489][ T8756] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 235.042251][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 235.689134][ T8803] loop2: detected capacity change from 0 to 2048 [ 235.743204][ T8803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.779874][ T8803] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.905838][ T8803] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.852: path /124/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 236.162790][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.182932][ T8790] loop0: detected capacity change from 0 to 32768 [ 236.278003][ T8790] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 236.458360][ T8790] XFS (loop0): Ending clean mount [ 236.960165][ T5788] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.056008][ T8804] loop5: detected capacity change from 0 to 262144 [ 238.095693][ T8836] loop2: detected capacity change from 0 to 512 [ 238.104585][ T8804] F2FS-fs (loop5): invalid crc value [ 238.180342][ T8804] F2FS-fs (loop5): Found nat_bits in checkpoint [ 238.185584][ T8836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 238.195171][ T8836] System zones: 1-12 [ 238.227605][ T8836] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.856: missing EA_INODE flag [ 238.241728][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 238.328730][ T8804] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 238.348417][ T8836] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.856: error while reading EA inode 12 err=-117 [ 238.453496][ T8836] EXT4-fs (loop2): 1 orphan inode deleted [ 238.475982][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 238.484559][ T8836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.564923][ T23] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 238.605832][ T23] usb 2-1: config 0 has no interface number 0 [ 238.612230][ T23] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 238.636916][ T8836] fscrypt (loop2, inode 15): Reserved bits set in encryption policy [ 238.675379][ T23] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.714906][ T23] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 238.766251][ T23] usb 2-1: config 0 interface 196 has no altsetting 0 [ 238.804839][ T23] usb 2-1: string descriptor 0 read error: -71 [ 238.811400][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 238.859577][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.874911][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.899192][ T23] usb 2-1: config 0 descriptor?? [ 238.948041][ T23] usb 2-1: can't set config #0, error -71 [ 238.979127][ T28] audit: type=1400 audit(1794329018.959:11): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=8847 comm="syz.1.858" name="/" offset=59 [ 239.005401][ T23] usb 2-1: USB disconnect, device number 7 [ 239.997467][ T8879] loop0: detected capacity change from 0 to 512 [ 240.080182][ T8879] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.868: invalid indirect mapped block 256 (level 2) [ 240.200172][ T8879] EXT4-fs (loop0): Remounting filesystem read-only [ 240.208026][ T8879] EXT4-fs (loop0): 2 truncates cleaned up [ 240.244027][ T8879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.390438][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.464906][ T789] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 240.594116][ T8897] loop0: detected capacity change from 0 to 2048 [ 240.664679][ T8899] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.684993][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 240.715623][ T789] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 240.739307][ T789] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.776508][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.817617][ T789] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.847658][ T789] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.897048][ T789] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.931809][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.225617][ T789] usb 2-1: GET_CAPABILITIES returned 0 [ 241.231318][ T789] usbtmc 2-1:16.0: can't read capabilities [ 241.457647][ T9] usb 2-1: USB disconnect, device number 8 [ 241.581945][ T8916] loop2: detected capacity change from 0 to 512 [ 241.612121][ T8916] EXT4-fs: Ignoring removed nobh option [ 241.692693][ T8916] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #3: comm syz.2.876: corrupted inode contents [ 241.761932][ T8916] EXT4-fs error (device loop2): ext4_dirty_inode:6188: inode #3: comm syz.2.876: mark_inode_dirty error [ 241.818092][ T8916] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #3: comm syz.2.876: corrupted inode contents [ 241.836559][ T1192] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 241.861771][ T8916] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #3: comm syz.2.876: mark_inode_dirty error [ 241.889084][ T8916] Quota error (device loop2): write_blk: dquota write failed [ 241.908510][ T8916] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 241.935129][ T8916] EXT4-fs error (device loop2): ext4_acquire_dquot:6958: comm syz.2.876: Failed to acquire dquot type 0 [ 242.006910][ T8916] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #16: comm syz.2.876: corrupted inode contents [ 242.050004][ T8916] EXT4-fs error (device loop2): ext4_dirty_inode:6188: inode #16: comm syz.2.876: mark_inode_dirty error [ 242.075098][ T1192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.103345][ T1192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.108294][ T8916] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #16: comm syz.2.876: corrupted inode contents [ 242.126042][ T1192] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.139966][ T1192] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.149499][ T1192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.165981][ T1192] usb 1-1: config 0 descriptor?? [ 242.189594][ T8916] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #16: comm syz.2.876: mark_inode_dirty error [ 242.205864][ T8916] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #16: comm syz.2.876: corrupted inode contents [ 242.264010][ T8916] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 242.311205][ T8916] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #16: comm syz.2.876: corrupted inode contents [ 242.334291][ T8916] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.876: mark_inode_dirty error [ 242.391980][ T8916] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 242.442801][ T8916] EXT4-fs (loop2): 1 truncate cleaned up [ 242.458526][ T8916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.496214][ T8916] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.619214][ T1192] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description [ 242.646039][ T1192] plantronics 0003:047F:FFFF.0005: parse failed [ 242.662823][ T1192] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 242.703291][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.837724][ T1192] usb 1-1: USB disconnect, device number 4 [ 243.001973][ T5802] Bluetooth: hci0: unknown advertising packet type: 0x72 [ 243.002108][ T5802] Bluetooth: hci0: Malformed LE Event: 0x02 [ 243.457803][ T8959] loop1: detected capacity change from 0 to 1024 [ 244.025104][ T8974] loop1: detected capacity change from 0 to 4096 [ 244.130002][ T8974] ntfs3: loop1: ino=3, mi_enum_attr [ 244.643784][ T28] audit: type=1326 audit(1794329024.619:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 244.734949][ T28] audit: type=1326 audit(1794329024.619:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 244.835031][ T28] audit: type=1326 audit(1794329024.639:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 244.929789][ T28] audit: type=1326 audit(1794329024.639:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 245.015117][ T28] audit: type=1326 audit(1794329024.669:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 245.045844][ T9009] loop1: detected capacity change from 0 to 512 [ 245.093042][ T28] audit: type=1326 audit(1794329024.669:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 245.178494][ T9009] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.901: inode has both inline data and extents flags [ 245.195266][ T28] audit: type=1326 audit(1794329024.669:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 245.220006][ T28] audit: type=1326 audit(1794329024.669:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 245.245516][ T28] audit: type=1326 audit(1794329024.669:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 245.271549][ T28] audit: type=1326 audit(1794329024.669:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.0.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921dba8f19 code=0x7ffc0000 [ 245.306910][ T9009] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.901: couldn't read orphan inode 15 (err -117) [ 245.348846][ T9009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.441796][ T1192] kernel write not supported for file /sg0 (pid: 1192 comm: kworker/0:2) [ 245.524184][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.337185][ T9054] loop1: detected capacity change from 0 to 8 [ 247.795472][ T9112] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 247.921691][ T9118] gfs2: gfs2 mount does not exist [ 248.935039][ T9160] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 248.944489][ T9160] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 249.105172][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 249.316333][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 249.328252][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 249.345622][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 249.376595][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 249.400514][ T9] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 249.424866][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.445640][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 249.464916][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 249.495555][ T9] usb 3-1: Product: syz [ 249.505363][ T9] usb 3-1: Manufacturer: syz [ 249.510067][ T9] usb 3-1: SerialNumber: syz [ 249.529619][ T9] usb 3-1: config 0 descriptor?? [ 249.548898][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.595353][ T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 249.671082][ T9177] netlink: 136 bytes leftover after parsing attributes in process `syz.5.959'. [ 249.806556][ T5854] usb 3-1: USB disconnect, device number 9 [ 249.806566][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 249.849371][ T5854] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 249.880480][ T9185] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 249.891497][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 249.901859][ T9185] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 249.914187][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 250.667569][ T9218] loop2: detected capacity change from 0 to 128 [ 250.742006][ T9218] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 250.842893][ T9218] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.889966][ T9218] ext2 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.033222][ T9218] overlayfs: upper fs needs to support d_type. [ 251.184156][ T6801] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.506829][ T9240] loop5: detected capacity change from 0 to 2048 [ 251.562376][ T9240] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 251.582159][ T9240] UDF-fs: Scanning with blocksize 512 failed [ 251.623437][ T9240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.824825][ T5775] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 251.841999][ T9245] program syz.5.989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.025228][ T5775] usb 3-1: Using ep0 maxpacket: 32 [ 252.037375][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.050538][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.064807][ T5775] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.094962][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.115927][ T5775] usb 3-1: config 0 descriptor?? [ 252.136344][ T5775] hub 3-1:0.0: USB hub found [ 252.340069][ T5775] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 252.597368][ T9259] loop0: detected capacity change from 0 to 256 [ 252.692301][ T9259] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 252.744566][ T5775] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0 [ 252.810189][ T5775] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 252.888270][ T9266] loop1: detected capacity change from 0 to 2048 [ 252.920229][ T9266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.085218][ T789] usb 3-1: USB disconnect, device number 10 [ 253.682159][ T9284] loop2: detected capacity change from 0 to 1024 [ 253.747482][ T9284] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 253.774976][ T9284] hfsplus: failed to load root directory [ 254.006194][ T9291] loop1: detected capacity change from 0 to 128 [ 254.024502][ T9291] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.075300][ T9291] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.152717][ T9290] loop0: detected capacity change from 0 to 4096 [ 254.229339][ T9290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.256439][ T50] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.640990][ T9286] loop5: detected capacity change from 0 to 32768 [ 254.675806][ T9301] loop1: detected capacity change from 0 to 16 [ 254.747027][ T9286] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 254.876957][ T9286] XFS (loop5): Ending clean mount [ 254.965768][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.097716][ T9313] loop1: detected capacity change from 0 to 4096 [ 255.104085][ T8097] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 255.189746][ T9315] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 255.204347][ T9313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.212383][ T9317] netpci0: tun_chr_ioctl cmd 1074812117 [ 255.340936][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.417542][ T9315] EXT4-fs (loop2): 1 truncate cleaned up [ 255.430421][ T9315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.583750][ T9315] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 255.686019][ T9323] sd 0:0:1:0: PR command failed: 1026 [ 255.713368][ T9323] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 255.727636][ T9323] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 255.844331][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.086541][ T9334] set_capacity_and_notify: 1 callbacks suppressed [ 256.086564][ T9334] loop2: detected capacity change from 0 to 512 [ 256.224293][ T9334] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 256.265003][ T9334] System zones: 0-2, 18-18, 34-35 [ 256.281235][ T9334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.296484][ T9334] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.383654][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.990618][ T9366] loop2: detected capacity change from 0 to 256 [ 257.264477][ T9374] loop0: detected capacity change from 0 to 1024 [ 257.460450][ T9379] loop1: detected capacity change from 0 to 1024 [ 257.486814][ T9379] EXT4-fs: inline encryption not supported [ 257.492790][ T9379] EXT4-fs: Ignoring removed oldalloc option [ 257.632013][ T9379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 257.693662][ T9379] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.795395][ T9379] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.1045: lblock 3 mapped to illegal pblock 3 (length 3) [ 257.868653][ T9379] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 257.894851][ T9379] EXT4-fs (loop1): This should not happen!! Data will be lost [ 257.894851][ T9379] [ 257.948064][ T9396] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.1045: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 258.000520][ T9396] EXT4-fs error (device loop1) in ext4_setattr:5717: Corrupt filesystem [ 258.159922][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 258.405538][ T5775] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 258.596587][ T9409] loop5: detected capacity change from 0 to 32768 [ 258.608815][ T5775] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.632424][ T5775] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.634279][ T9409] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 258.659411][ T5775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 258.666643][ T5775] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 258.677442][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.689384][ T5775] usb 1-1: config 0 descriptor?? [ 258.700261][ T9409] JBD2: Ignoring recovery information on journal [ 258.792871][ T9409] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 258.935536][ T9409] syz.5.1056 (9409) used greatest stack depth: 19320 bytes left [ 259.040475][ T8097] ocfs2: Unmounting device (7,5) on (node local) [ 259.139292][ T5775] playstation 0003:054C:09CC.0007: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 259.319725][ T5775] playstation 0003:054C:09CC.0007: Invalid byte count transferred, expected 16 got 0 [ 259.354826][ T5775] playstation 0003:054C:09CC.0007: Failed to retrieve DualShock4 pairing info: -22 [ 259.364573][ T5775] playstation 0003:054C:09CC.0007: Failed to get MAC address from DualShock4 [ 259.424884][ T5775] playstation 0003:054C:09CC.0007: Failed to create dualshock4. [ 259.441671][ T5775] playstation: probe of 0003:054C:09CC.0007 failed with error -22 [ 259.532250][ T5853] usb 1-1: USB disconnect, device number 5 [ 259.596492][ T9424] WARNING! power/level is deprecated; use power/control instead [ 259.675120][ T1192] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 259.857229][ T9422] loop2: detected capacity change from 0 to 32768 [ 259.865456][ T1192] usb 2-1: Using ep0 maxpacket: 16 [ 259.877232][ T1192] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.895376][ T9422] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop2 scanned by syz.2.1062 (9422) [ 259.912386][ T1192] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.932941][ T1192] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.945483][ T1192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.954599][ T9422] BTRFS info (device loop2): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 259.965860][ T1192] usb 2-1: Product: syz [ 259.970117][ T1192] usb 2-1: Manufacturer: syz [ 259.975616][ T9422] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 259.985422][ T9422] BTRFS info (device loop2): using free space tree [ 259.993808][ T1192] usb 2-1: SerialNumber: syz [ 260.078475][ T5775] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 260.184980][ T9422] BTRFS info (device loop2): enabling ssd optimizations [ 260.193319][ T9422] BTRFS info (device loop2): auto enabling async discard [ 260.215167][ T1192] usb 2-1: 0:2 : does not exist [ 260.235885][ T1192] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 260.319154][ T5775] usb 6-1: Using ep0 maxpacket: 8 [ 260.349204][ T5775] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 260.364906][ T1192] usb 2-1: USB disconnect, device number 9 [ 260.375736][ T5775] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.406937][ T5775] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.445121][ T5775] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.479428][ T5775] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.518675][ T5775] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.535505][ T9449] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1066'. [ 260.555121][ T5775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.572725][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.577529][ T9449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1066'. [ 260.726644][ T6801] BTRFS info (device loop2): last unmount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 260.844630][ T5775] usb 6-1: GET_CAPABILITIES returned 0 [ 260.855292][ T5775] usbtmc 6-1:16.0: can't read capabilities [ 261.042818][ T9457] loop1: detected capacity change from 0 to 512 [ 261.072083][ T23] usb 6-1: USB disconnect, device number 3 [ 261.096289][ T9457] EXT4-fs: Ignoring removed bh option [ 261.199612][ T9457] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 261.267346][ T9457] EXT4-fs (loop1): 1 truncate cleaned up [ 261.317028][ T9457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.633644][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.082931][ T9452] loop0: detected capacity change from 0 to 32768 [ 262.115593][ T789] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 262.164251][ T9452] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 262.259542][ T9452] XFS (loop0): Ending clean mount [ 262.337966][ T5788] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 262.358262][ T789] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.372556][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.383032][ T789] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 262.402926][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.417671][ T789] usb 2-1: config 0 descriptor?? [ 262.718543][ T9490] loop5: detected capacity change from 0 to 512 [ 262.732456][ T9490] EXT4-fs: Ignoring removed orlov option [ 262.776663][ T9490] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 262.847032][ T789] usbhid 2-1:0.0: can't add hid device: -71 [ 262.878611][ T789] usbhid: probe of 2-1:0.0 failed with error -71 [ 262.920141][ T789] usb 2-1: USB disconnect, device number 10 [ 263.229756][ T9506] loop5: detected capacity change from 0 to 164 [ 263.541433][ T9513] xt_hashlimit: size too large, truncated to 1048576 [ 263.595944][ T9518] xt_hashlimit: size too large, truncated to 1048576 [ 263.875001][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.882203][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.775045][ T5775] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 264.925302][ T9557] loop2: detected capacity change from 0 to 1024 [ 264.964939][ T5775] usb 1-1: Using ep0 maxpacket: 32 [ 264.975319][ T5775] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.009665][ T5775] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.042762][ T5775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 265.080745][ T5775] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 265.100747][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.114391][ T5775] usb 1-1: Product: syz [ 265.131917][ T5775] usb 1-1: Manufacturer: syz [ 265.142099][ T5775] usb 1-1: SerialNumber: syz [ 265.173650][ T5775] usb 1-1: config 0 descriptor?? [ 265.232686][ T9563] loop1: detected capacity change from 0 to 512 [ 265.304482][ T9563] EXT4-fs error (device loop1): ext4_init_orphan_info:585: comm syz.1.1107: inode #0: comm syz.1.1107: iget: illegal inode # [ 265.335669][ T9563] EXT4-fs (loop1): get orphan inode failed [ 265.363251][ T9563] EXT4-fs (loop1): mount failed [ 265.474382][ T6801] hfsplus: node 4:3 still has 1 user(s)! [ 265.646440][ T5775] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 265.653705][ T9567] cougar: G6 mapped to space [ 266.065852][ T5775] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 266.148701][ T5775] usb 1-1: USB disconnect, device number 6 [ 267.428909][ T9615] loop2: detected capacity change from 0 to 512 [ 267.451152][ T9615] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 267.528182][ T9615] EXT4-fs (loop2): 1 truncate cleaned up [ 267.556444][ T9615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.760989][ T9622] loop1: detected capacity change from 0 to 164 [ 267.836494][ T9622] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 267.886780][ T9622] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 267.905142][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.270818][ T9632] loop2: detected capacity change from 0 to 256 [ 268.291947][ T9632] exfat: Deprecated parameter 'utf8' [ 268.315187][ T9632] exfat: Deprecated parameter 'namecase' [ 268.321204][ T9632] exfat: Deprecated parameter 'namecase' [ 268.333087][ T9632] exfat: Deprecated parameter 'utf8' [ 268.384924][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 268.384967][ T28] audit: type=1400 audit(1794329048.359:32): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9633 comm="syz.1.1136" name="unknown" offset=82 [ 268.438049][ T9632] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 269.245383][ T9645] loop2: detected capacity change from 0 to 4096 [ 269.332047][ T9645] ntfs3: loop2: ino=9, mi_enum_attr [ 269.353478][ T9645] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 269.385091][ T9645] ntfs3: loop2: ino=9, mi_enum_attr [ 269.387371][ T9649] loop1: detected capacity change from 0 to 2048 [ 269.390723][ T9645] ntfs3: loop2: ino=b, mi_enum_attr [ 269.459034][ T9649] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 269.465800][ T9645] ntfs3: loop2: Failed to load $Extend (-22). [ 269.475183][ T9649] loop1: partition table partially beyond EOD, truncated [ 269.482370][ T9645] ntfs3: loop2: Failed to initialize $Extend. [ 269.488945][ T9649] loop1: p1 size 196608 extends beyond EOD, truncated [ 269.506610][ T9649] loop1: p2 start 4278190080 is beyond EOD, truncated [ 269.535491][ T9649] loop1: p4 size 8192 extends beyond EOD, truncated [ 269.595271][ T9649] loop1: p5 size 196608 extends beyond EOD, truncated [ 269.653740][ T9649] loop1: p6 size 8192 extends beyond EOD, truncated [ 270.313387][ T9663] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 270.394653][ T9667] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 270.479240][ T9673] loop0: detected capacity change from 0 to 64 [ 271.371716][ T9700] loop2: detected capacity change from 0 to 512 [ 271.382283][ T3435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.398003][ T9700] EXT4-fs: Ignoring removed orlov option [ 271.404120][ T3435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.435985][ T9700] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 271.551146][ T9700] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4064: comm syz.2.1167: Allocating blocks 41-42 which overlap fs metadata [ 271.655459][ T9700] Quota error (device loop2): write_blk: dquota write failed [ 271.664342][ T9700] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 271.677768][ T3435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.688389][ T3435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.712778][ T9700] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4064: comm syz.2.1167: Allocating blocks 41-42 which overlap fs metadata [ 271.749810][ T9700] Quota error (device loop2): write_blk: dquota write failed [ 271.757652][ T9700] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 271.771132][ T9700] EXT4-fs error (device loop2): ext4_acquire_dquot:6958: comm syz.2.1167: Failed to acquire dquot type 1 [ 271.795704][ T9700] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 271.833107][ T9707] loop5: detected capacity change from 0 to 2048 [ 271.845214][ T9700] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #12: comm syz.2.1167: corrupted inode contents [ 271.892621][ T9700] EXT4-fs error (device loop2): ext4_dirty_inode:6188: inode #12: comm syz.2.1167: mark_inode_dirty error [ 271.906104][ T9707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.951381][ T9700] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #12: comm syz.2.1167: corrupted inode contents [ 271.967848][ T3435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.996200][ T9700] EXT4-fs error (device loop2): __ext4_ext_dirty:208: inode #12: comm syz.2.1167: mark_inode_dirty error [ 272.014831][ T3435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.032273][ T9700] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #12: comm syz.2.1167: corrupted inode contents [ 272.097980][ T9700] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 272.131595][ T9700] EXT4-fs error (device loop2): ext4_do_update_inode:5294: inode #12: comm syz.2.1167: corrupted inode contents [ 272.182868][ T9700] EXT4-fs error (device loop2): ext4_truncate:4314: inode #12: comm syz.2.1167: mark_inode_dirty error [ 272.235428][ T9700] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 272.250068][ T3435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.278487][ T9700] EXT4-fs (loop2): 1 truncate cleaned up [ 272.289183][ T3435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.302564][ T9700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.342086][ T5802] Bluetooth: hci0: Zero size dump init pkt [ 272.361348][ T9700] EXT4-fs error (device loop2): __ext4_remount:6761: comm syz.2.1167: Abort forced by user [ 272.374654][ T9700] EXT4-fs (loop2): Remounting filesystem read-only [ 272.382180][ T9700] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 272.558526][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.837411][ T3435] tipc: Disabling bearer [ 272.885219][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.900087][ T3435] tipc: Left network mode [ 272.913018][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.923312][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.954602][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.968680][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.985585][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.214144][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 273.386474][ T9721] rxe_eth0 speed is unknown, defaulting to 1000 [ 275.075669][ T5798] Bluetooth: hci3: command tx timeout [ 275.213981][ T9784] loop1: detected capacity change from 0 to 4096 [ 275.321710][ T9784] ntfs3: loop1: ino=19, mi_enum_attr [ 275.340685][ T9784] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 276.094486][ T9721] chnl_net:caif_netlink_parms(): no params data found [ 276.185241][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 276.255547][ T9786] loop5: detected capacity change from 0 to 32768 [ 276.325111][ T5775] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 276.393658][ T9786] JBD2: Ignoring recovery information on journal [ 276.542365][ T5775] usb 2-1: not running at top speed; connect to a high speed hub [ 276.595420][ T5775] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 276.604447][ T5775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.636860][ T9786] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 276.702503][ T5775] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 276.754953][ T5775] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 276.764367][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.903495][ T5775] usb 2-1: config 0 descriptor?? [ 276.950026][ T5775] usb 2-1: Found UVC 9.00 device (046d:0825) [ 276.960675][ T3435] hsr_slave_0: left promiscuous mode [ 276.970946][ T3435] hsr_slave_1: left promiscuous mode [ 276.980585][ T8097] ocfs2: Unmounting device (7,5) on (node local) [ 277.011315][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.035173][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.066072][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.084951][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.103987][ T3435] bridge_slave_1: left promiscuous mode [ 277.112319][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.131776][ T3435] bridge_slave_0: left allmulticast mode [ 277.142286][ T3435] bridge_slave_0: left promiscuous mode [ 277.149190][ T5802] Bluetooth: hci3: command tx timeout [ 277.168037][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.237479][ T3435] veth1_macvtap: left promiscuous mode [ 277.243228][ T3435] veth0_macvtap: left promiscuous mode [ 277.249333][ T3435] veth1_vlan: left promiscuous mode [ 277.255044][ T3435] veth0_vlan: left promiscuous mode [ 277.378149][ T5775] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 277.401807][ T5775] uvcvideo 2-1:0.1: Failed to query (129) UVC probe control : -32 (exp. 48). [ 277.413818][ T5775] uvcvideo 2-1:0.1: Failed to initialize the device (-5). [ 277.451455][ T5775] usb 2-1: USB disconnect, device number 11 [ 278.196184][ T9822] loop2: detected capacity change from 0 to 32768 [ 278.273737][ T9822] JBD2: Ignoring recovery information on journal [ 278.357103][ T9822] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 278.598696][ T6801] ocfs2: Unmounting device (7,2) on (node local) [ 279.244870][ T5802] Bluetooth: hci3: command tx timeout [ 279.320420][ T9848] loop1: detected capacity change from 0 to 1024 [ 280.002144][ T3435] team0 (unregistering): Port device team_slave_1 removed [ 280.068439][ T28] audit: type=1400 audit(1794329060.039:33): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9867 comm="syz.1.1225" [ 280.138764][ T3435] team0 (unregistering): Port device team_slave_0 removed [ 280.227382][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.309466][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.943075][ T3435] bond0 (unregistering): Released all slaves [ 281.095174][ T9870] tipc: Started in network mode [ 281.114877][ T9870] tipc: Node identity ac14140f, cluster identity 4711 [ 281.122370][ T9870] tipc: New replicast peer: 255.255.255.255 [ 281.201804][ T9870] tipc: Enabled bearer , priority 10 [ 281.215737][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 281.236557][ T9721] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.243948][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.265498][ T9721] bridge_slave_0: entered allmulticast mode [ 281.273391][ T9721] bridge_slave_0: entered promiscuous mode [ 281.304847][ T5802] Bluetooth: hci3: command tx timeout [ 281.312213][ T9721] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.338749][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.365160][ T9721] bridge_slave_1: entered allmulticast mode [ 281.372841][ T9721] bridge_slave_1: entered promiscuous mode [ 281.484614][ T9721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.540173][ T9721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.623562][ T9881] loop2: detected capacity change from 0 to 4096 [ 281.707218][ T9721] team0: Port device team_slave_0 added [ 281.723034][ T9886] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.771198][ T9721] team0: Port device team_slave_1 added [ 281.925672][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.932806][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.980189][ T9881] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 282.018213][ T9721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.087760][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.128088][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.174919][ T9721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.219121][ T3435] IPVS: stop unused estimator thread 0... [ 282.288186][ T5775] tipc: Node number set to 2886997007 [ 282.486011][ T9721] hsr_slave_0: entered promiscuous mode [ 282.512808][ T9721] hsr_slave_1: entered promiscuous mode [ 282.536007][ T9721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.554155][ T9721] Cannot create hsr debugfs directory [ 283.257518][ T9897] loop1: detected capacity change from 0 to 32768 [ 283.330988][ T9897] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 283.377669][ T9721] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.425893][ T9897] XFS (loop1): Ending clean mount [ 283.467680][ T9721] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.531359][ T9721] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.581053][ T9721] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.759958][ T5787] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 283.945577][ T9721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.127007][ T9721] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.163934][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.171197][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.233330][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 284.302489][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.309771][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.615287][ T5775] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 284.638079][ T9946] program syz.1.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.817273][ T5775] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 284.834751][ T5775] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 284.852523][ T9954] loop1: detected capacity change from 0 to 1024 [ 284.874755][ T5775] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 284.926986][ T5775] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 284.958992][ T5775] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 284.989890][ T5775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.011707][ T9954] hfsplus: bad catalog file entry [ 285.027455][ T9936] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.055076][ T9936] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.067134][ T9936] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.120118][ T1085] hfsplus: b-tree write err: -5, ino 3 [ 285.125989][ T5775] pl2303 6-1:1.0: pl2303 converter detected [ 285.135562][ T5775] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 285.165046][ T1085] hfsplus: bad catalog file entry [ 285.245528][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.495185][ T9936] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 285.518993][ T9936] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 285.559604][ T9970] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 285.571605][ T9936] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 285.615413][ T9936] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 285.664344][ T9936] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 285.877594][ T9975] loop1: detected capacity change from 0 to 256 [ 286.254566][ T9934] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 286.306262][ T9934] pl2303 ttyUSB0: error sending break = -32 [ 286.330264][ T5775] usb 6-1: USB disconnect, device number 4 [ 286.395840][ T5775] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 286.420062][ T5775] pl2303 6-1:1.0: device disconnected [ 286.700984][ T9721] veth0_vlan: entered promiscuous mode [ 286.760866][ T9721] veth1_vlan: entered promiscuous mode [ 286.899305][ T9721] veth0_macvtap: entered promiscuous mode [ 286.937549][ T9721] veth1_macvtap: entered promiscuous mode [ 286.999221][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.024872][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.045613][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.070381][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.093227][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.124587][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.147339][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.182095][ T9976] loop2: detected capacity change from 0 to 32768 [ 287.201858][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.260005][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.294355][ T9976] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 287.303047][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.303077][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.303103][ T9721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.303117][ T9721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.319834][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.441722][ T9976] XFS (loop2): Ending clean mount [ 287.446261][ T9721] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.517239][ T9721] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.533804][ T9982] loop1: detected capacity change from 0 to 40427 [ 287.557220][ T9982] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 287.561101][ T9721] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.574962][ T9982] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 287.602315][ T9721] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.631995][ T9982] F2FS-fs (loop1): invalid crc value [ 287.643939][ T9976] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 287.687972][ T9982] F2FS-fs (loop1): Found nat_bits in checkpoint [ 287.831049][ T9982] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 288.051963][ T6801] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.095041][ T9982] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 288.147042][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.185173][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.286959][ T9982] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 288.313740][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.329736][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.421101][ T5787] syz-executor: attempt to access beyond end of device [ 288.421101][ T5787] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 288.490227][ T5787] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 290.250278][ T995] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.420947][ T995] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.557824][ T995] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.642449][T10063] loop5: detected capacity change from 0 to 512 [ 290.719582][T10063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.866772][T10063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.878385][ T995] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.935029][T10063] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.128363][T10063] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1275: bg 0: block 217: padding at end of block bitmap is not set [ 291.171899][T10063] EXT4-fs (loop5): Remounting filesystem read-only [ 291.352493][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.370675][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.568335][T10080] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 291.846885][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.872215][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.882671][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.894089][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.929186][T10088] sd 0:0:1:0: PR command failed: 1026 [ 291.935410][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.946615][T10088] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 291.953435][T10088] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 291.965802][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.096855][T10065] loop2: detected capacity change from 0 to 32768 [ 292.106597][T10085] rxe_eth0 speed is unknown, defaulting to 1000 [ 292.275609][T10065] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 292.489468][T10065] XFS (loop2): Ending clean mount [ 292.763851][ T6801] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 292.999242][T10107] loop1: detected capacity change from 0 to 736 [ 293.049876][T10083] loop5: detected capacity change from 0 to 32768 [ 293.321028][ T8097] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 293.321028][ T8097] [ 293.393842][ T8097] ERROR: (device loop5): remounting filesystem as read-only [ 294.030386][ T5798] Bluetooth: hci3: command tx timeout [ 294.490293][T10136] loop1: detected capacity change from 0 to 512 [ 294.576303][T10136] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1298: bg 0: block 5: invalid block bitmap [ 294.657706][T10136] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6660: Corrupt filesystem [ 294.692212][T10136] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1298: invalid indirect mapped block 3 (level 2) [ 294.773142][T10136] EXT4-fs (loop1): 1 orphan inode deleted [ 294.785791][T10136] EXT4-fs (loop1): 1 truncate cleaned up [ 294.798879][T10136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.989997][T10085] chnl_net:caif_netlink_parms(): no params data found [ 295.033651][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.100954][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 295.331389][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 295.370174][ T8] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 295.398531][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.580766][T10160] loop2: detected capacity change from 0 to 8 [ 295.617813][ T995] hsr_slave_0: left promiscuous mode [ 295.644143][ T995] hsr_slave_1: left promiscuous mode [ 295.702009][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.708528][ T8] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 295.729930][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.753508][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.761943][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.771182][ T8] wwan wwan0: port wwan0qmi0 attached [ 295.834873][ T995] bridge_slave_1: left allmulticast mode [ 295.840702][ T995] bridge_slave_1: left promiscuous mode [ 295.859402][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.899800][ T995] bridge_slave_0: left allmulticast mode [ 295.914759][ T995] bridge_slave_0: left promiscuous mode [ 295.926324][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.964623][T10166] loop1: detected capacity change from 0 to 1024 [ 296.017222][ T995] veth1_macvtap: left promiscuous mode [ 296.023003][ T995] veth0_macvtap: left promiscuous mode [ 296.031293][ T995] veth1_vlan: left promiscuous mode [ 296.037502][ T995] veth0_vlan: left promiscuous mode [ 296.061006][T10166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.105111][ T5798] Bluetooth: hci3: command tx timeout [ 296.263777][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.549828][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 296.759089][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 296.774881][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 296.839161][ T23] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 296.854754][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.862985][ T23] usb 3-1: Product: syz [ 296.885179][ T23] usb 3-1: Manufacturer: syz [ 296.890199][ T23] usb 3-1: SerialNumber: syz [ 297.053390][T10184] loop5: detected capacity change from 0 to 8 [ 297.120674][T10184] SQUASHFS error: Failed to read block 0x26067d: -5 [ 297.149944][T10184] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 297.170572][T10184] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 297.349887][T10189] kAFS: bad VL server IP address [ 297.473659][T10191] netlink: 'syz.5.1307': attribute type 1 has an invalid length. [ 297.490816][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'. [ 297.611101][ C1] usb 3-1: invalid arpc response id received: 1 [ 297.827004][ T23] usb 3-1: failed to send ARPC request 1: -71 [ 297.834512][ T23] usb 3-1: failed to execute ARPC: -71 [ 297.901308][ T23] usb 3-1: failed to set connected state for cport 0: -71 [ 297.952047][ T23] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 297.963376][ T23] usb 3-1: failed to send ARPC request 3: -71 [ 297.989066][ T23] usb 3-1: failed to execute ARPC: -71 [ 298.000527][ T23] usb 3-1: failed to clear cport 0: -71 [ 298.035057][ T23] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 298.106110][ T23] es2_ap_driver: probe of 3-1:1.0 failed with error -71 [ 298.152982][ T23] usb 3-1: USB disconnect, device number 11 [ 298.193489][ T5798] Bluetooth: hci3: command tx timeout [ 298.381007][T10193] loop1: detected capacity change from 0 to 32768 [ 298.390229][ T995] team0 (unregistering): Port device team_slave_1 removed [ 298.489072][ T995] team0 (unregistering): Port device team_slave_0 removed [ 298.558453][T10193] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 298.590663][T10193] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 298.713521][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.734219][T10193] XFS (loop1): Ending clean mount [ 298.778550][T10193] XFS (loop1): Quotacheck needed: Please wait. [ 298.903088][T10193] XFS (loop1): Quotacheck: Done. [ 298.940251][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.072134][ T5787] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 299.897569][ T995] bond0 (unregistering): Released all slaves [ 300.050427][T10085] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.064851][ T8] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, c2:6c:e5:de:cc:f1 [ 300.108199][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.139214][ T8] usb 6-1: USB disconnect, device number 5 [ 300.145368][T10085] bridge_slave_0: entered allmulticast mode [ 300.153260][T10085] bridge_slave_0: entered promiscuous mode [ 300.183761][ T8] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 300.203591][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.211220][T10085] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.239436][T10085] bridge_slave_1: entered allmulticast mode [ 300.256762][T10085] bridge_slave_1: entered promiscuous mode [ 300.265159][ T5798] Bluetooth: hci3: command tx timeout [ 300.340088][T10217] loop2: detected capacity change from 0 to 256 [ 300.456155][ T8] wwan wwan0: port wwan0qmi0 disconnected [ 300.531030][T10085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.571247][T10085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.765838][T10226] loop5: detected capacity change from 0 to 1024 [ 300.838897][T10085] team0: Port device team_slave_0 added [ 300.908159][T10085] team0: Port device team_slave_1 added [ 301.090504][T10085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.116934][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.201392][T10085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.325554][T10085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.332709][T10085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.414903][T10085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.621365][T10085] hsr_slave_0: entered promiscuous mode [ 301.647952][T10085] hsr_slave_1: entered promiscuous mode [ 301.684483][T10085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.699791][T10085] Cannot create hsr debugfs directory [ 301.723704][T10245] loop2: detected capacity change from 0 to 512 [ 301.790066][T10245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 301.846466][T10245] EXT4-fs (loop2): 1 truncate cleaned up [ 301.853907][T10245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.996298][T10253] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1326'. [ 302.053362][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.463480][T10085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.506132][T10085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.527003][T10269] loop2: detected capacity change from 0 to 32768 [ 303.538385][T10085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.630626][T10085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.643397][T10269] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 303.787647][ T789] kernel write not supported for file /ppp (pid: 789 comm: kworker/1:2) [ 303.836224][T10269] XFS (loop2): Ending clean mount [ 304.083006][ T6801] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 304.088932][T10085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.233430][T10085] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.350821][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.358235][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.437144][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.444596][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.540656][T10285] loop1: detected capacity change from 0 to 40427 [ 304.600004][T10285] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 304.669708][T10285] F2FS-fs (loop1): invalid crc value [ 304.741802][T10285] F2FS-fs (loop1): Found nat_bits in checkpoint [ 305.006581][T10285] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 305.132512][T10285] syz.1.1339: attempt to access beyond end of device [ 305.132512][T10285] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 305.317951][ T5787] syz-executor: attempt to access beyond end of device [ 305.317951][ T5787] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.426417][ T5787] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 305.474456][T10085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.808426][T10339] loop2: detected capacity change from 0 to 1024 [ 305.903362][T10339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 306.011016][T10339] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.254101][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 306.280194][T10354] loop5: detected capacity change from 0 to 512 [ 306.378650][T10354] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1350: Invalid inode bitmap blk 4 in block_group 0 [ 306.514658][T10354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.653049][T10085] veth0_vlan: entered promiscuous mode [ 306.690176][T10354] EXT4-fs (loop5): shut down requested (2) [ 306.724640][T10085] veth1_vlan: entered promiscuous mode [ 306.893493][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.894494][T10085] veth0_macvtap: entered promiscuous mode [ 307.037146][T10085] veth1_macvtap: entered promiscuous mode [ 307.119126][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.184897][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.200545][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.245157][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.271624][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.300344][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.332134][T10085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.349577][T10380] program syz.1.1359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.374080][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.385721][T10377] loop2: detected capacity change from 0 to 164 [ 307.464814][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.525551][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.554760][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.600702][T10085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.612441][T10085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.627991][T10085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.711309][T10085] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.761766][T10085] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.804785][T10085] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.814265][T10085] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.158343][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.188347][T10395] loop2: detected capacity change from 0 to 128 [ 308.195529][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.334012][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.354052][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.594031][T10406] loop2: detected capacity change from 0 to 1024 [ 308.646793][T10406] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 308.669679][T10406] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 308.710764][T10406] EXT4-fs (loop2): invalid journal inode [ 308.759295][T10406] EXT4-fs (loop2): can't get journal size [ 308.785154][T10406] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12c, mo2=0002] [ 308.793616][T10406] System zones: 0-1, 4-36, 102-102 [ 308.869456][T10406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.235356][ T6801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.723424][T10438] netlink: 'syz.1.1377': attribute type 4 has an invalid length. [ 310.015712][T10446] loop1: detected capacity change from 0 to 128 [ 310.071966][T10423] loop6: detected capacity change from 0 to 32768 [ 310.151631][T10446] syz.1.1379: attempt to access beyond end of device [ 310.151631][T10446] loop1: rw=3, sector=137, nr_sectors = 7 limit=128 [ 310.213564][T10423] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 310.244606][T10446] syz.1.1379: attempt to access beyond end of device [ 310.244606][T10446] loop1: rw=2051, sector=144, nr_sectors = 57 limit=128 [ 310.395366][T10452] loop5: detected capacity change from 0 to 512 [ 310.486020][T10423] XFS (loop6): Ending clean mount [ 310.539844][T10452] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1381: inode has both inline data and extents flags [ 310.556133][T10423] XFS (loop6): Quotacheck needed: Please wait. [ 310.652518][T10452] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1381: couldn't read orphan inode 15 (err -117) [ 310.705575][ T28] audit: type=1400 audit(1794329090.679:34): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10463 comm="syz.2.1384" name="unknown" offset=16 [ 310.814279][T10423] XFS (loop6): Quotacheck: Done. [ 310.852409][T10452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.015054][T10085] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.206662][ T8097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.366788][T10475] sctp: [Deprecated]: syz.1.1397 (pid 10475) Use of int in max_burst socket option deprecated. [ 311.366788][T10475] Use struct sctp_assoc_value instead [ 311.397004][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1389'. [ 311.676361][T10481] loop1: detected capacity change from 0 to 2048 [ 311.694658][T10484] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.714229][T10481] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 311.753808][T10481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.999675][ T5787] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 312.020529][ T5787] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 312.072049][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1392'. [ 312.755324][ T2918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.776060][T10485] loop2: detected capacity change from 0 to 32768 [ 312.908703][T10485] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 312.926177][T10491] loop6: detected capacity change from 0 to 32768 [ 313.013448][T10491] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 313.025018][T10485] XFS (loop2): Ending clean mount [ 313.098399][ T2918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.262896][T10491] XFS (loop6): Ending clean mount [ 313.410676][ T6801] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 313.508984][T10085] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 313.518427][ T2918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.695479][T10515] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1399'. [ 313.737255][T10515] netlink: 'syz.5.1399': attribute type 3 has an invalid length. [ 314.134471][ T2918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.533504][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.553123][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.565372][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.595468][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.609209][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 314.620377][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.825983][T10525] rxe_eth0 speed is unknown, defaulting to 1000 [ 314.956248][T10536] loop6: detected capacity change from 0 to 128 [ 314.998315][T10536] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 315.060446][ T2918] tipc: Disabling bearer [ 315.070218][ T2918] tipc: Left network mode [ 315.128484][T10536] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 93: 0x5a != 0x5e [ 315.178889][T10536] UDF-fs: error (device loop6): udf_count_free_bitmap: udf_count_free failed [ 315.208167][T10536] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 93: 0x5a != 0x5e [ 315.258457][T10536] UDF-fs: error (device loop6): udf_count_free_bitmap: udf_count_free failed [ 316.006226][T10551] loop6: detected capacity change from 0 to 164 [ 316.113459][T10551] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 316.401234][T10564] loop5: detected capacity change from 0 to 128 [ 316.744949][ T5798] Bluetooth: hci1: command tx timeout [ 317.425295][T10525] chnl_net:caif_netlink_parms(): no params data found [ 317.571413][T10579] loop2: detected capacity change from 0 to 32768 [ 317.611992][T10579] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 317.698827][T10579] JBD2: Ignoring recovery information on journal [ 317.927368][T10579] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 318.269888][T10601] ================================================================== [ 318.269910][T10601] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0 [ 318.269962][T10601] Write of size 4 at addr ffffc90003e19000 by task syz.5.1424/10601 [ 318.269983][T10601] [ 318.270043][T10601] CPU: 0 PID: 10601 Comm: syz.5.1424 Not tainted syzkaller #0 [ 318.270068][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 318.270101][T10601] Call Trace: [ 318.270119][T10601] [ 318.270138][T10601] dump_stack_lvl+0x18c/0x250 [ 318.270184][T10601] ? sys_imageblit+0x1bac/0x25d0 [ 318.270221][T10601] ? show_regs_print_info+0x20/0x20 [ 318.270250][T10601] ? load_image+0x420/0x420 [ 318.270275][T10601] ? mark_lock+0x94/0x320 [ 318.270309][T10601] print_report+0xa8/0x210 [ 318.270335][T10601] ? sys_imageblit+0x1bac/0x25d0 [ 318.270362][T10601] kasan_report+0x117/0x150 [ 318.270393][T10601] ? sys_imageblit+0x1bac/0x25d0 [ 318.270425][T10601] sys_imageblit+0x1bac/0x25d0 [ 318.270462][T10601] ? sys_copyarea+0x2530/0x2530 [ 318.270506][T10601] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 318.270538][T10601] soft_cursor+0xa01/0xc30 [ 318.270570][T10601] bit_cursor+0x16dd/0x1f60 [ 318.270610][T10601] ? bit_clear_margins+0x550/0x550 [ 318.270641][T10601] ? get_color+0x2e8/0x4d0 [ 318.270662][T10601] ? bit_clear_margins+0x550/0x550 [ 318.270689][T10601] ? fbcon_cursor+0x430/0x640 [ 318.270711][T10601] ? add_softcursor+0x8c/0x440 [ 318.270738][T10601] con_flush_chars+0x1fa/0x280 [ 318.270764][T10601] con_write+0x2e/0x40 [ 318.270788][T10601] do_output_char+0x64a/0x960 [ 318.270844][T10601] __process_echoes+0x2e0/0x9f0 [ 318.270878][T10601] n_tty_receive_buf_common+0xc81/0x1380 [ 318.270924][T10601] ? paste_selection+0x1db/0x540 [ 318.270957][T10601] paste_selection+0x33e/0x540 [ 318.270992][T10601] ? set_selection_kernel+0x17b0/0x17b0 [ 318.271042][T10601] ? do_task_dead+0xd0/0xd0 [ 318.271068][T10601] ? __might_fault+0xaa/0x120 [ 318.271093][T10601] ? __might_fault+0xc6/0x120 [ 318.271115][T10601] ? __might_fault+0xaa/0x120 [ 318.271139][T10601] ? tioclinux+0x34e/0x450 [ 318.271163][T10601] vt_ioctl+0x813/0x1f20 [ 318.271194][T10601] ? __vt_event_wait+0x260/0x260 [ 318.271227][T10601] ? __fget_files+0x28/0x460 [ 318.271262][T10601] ? tty_jobctrl_ioctl+0x378/0xba0 [ 318.271288][T10601] tty_ioctl+0x91e/0xdc0 [ 318.271313][T10601] ? tty_get_icount+0xb0/0xb0 [ 318.271337][T10601] __se_sys_ioctl+0xfd/0x170 [ 318.271371][T10601] do_syscall_64+0x55/0xb0 [ 318.271399][T10601] ? clear_bhb_loop+0x40/0x90 [ 318.271432][T10601] ? clear_bhb_loop+0x40/0x90 [ 318.271464][T10601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.271504][T10601] RIP: 0033:0x7fe1749a8f19 [ 318.271579][T10601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.271605][T10601] RSP: 002b:00007fe175804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.271632][T10601] RAX: ffffffffffffffda RBX: 00007fe174c25fa0 RCX: 00007fe1749a8f19 [ 318.271648][T10601] RDX: 0000200000000080 RSI: 000000000000541c RDI: 0000000000000003 [ 318.271663][T10601] RBP: 00007fe174a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 318.271677][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.271691][T10601] R13: 00007fe174c26038 R14: 00007fe174c25fa0 R15: 00007ffe52e35f68 [ 318.271717][T10601] [ 318.271725][T10601] [ 318.271730][T10601] The buggy address belongs to a 768-page vmalloc region starting at 0xffffc90003b19000 allocated at drm_fbdev_generic_helper_fb_probe+0x247/0x520 [ 318.271782][T10601] Memory state around the buggy address: [ 318.271794][T10601] ffffc90003e18f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.271809][T10601] ffffc90003e18f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.271823][T10601] >ffffc90003e19000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 318.271834][T10601] ^ [ 318.271845][T10601] ffffc90003e19080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 318.271859][T10601] ffffc90003e19100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 318.271870][T10601] ================================================================== [ 318.272088][T10601] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 318.272101][T10601] CPU: 0 PID: 10601 Comm: syz.5.1424 Not tainted syzkaller #0 [ 318.272123][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 318.272135][T10601] Call Trace: [ 318.272143][T10601] [ 318.272150][T10601] dump_stack_lvl+0x18c/0x250 [ 318.272195][T10601] ? show_regs_print_info+0x20/0x20 [ 318.272223][T10601] ? load_image+0x420/0x420 [ 318.272253][T10601] panic+0x2ca/0x720 [ 318.272277][T10601] ? bpf_jit_dump+0xd0/0xd0 [ 318.272299][T10601] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 318.272335][T10601] ? _raw_spin_unlock+0x40/0x40 [ 318.272357][T10601] ? print_memory_metadata+0x314/0x400 [ 318.272385][T10601] ? sys_imageblit+0x1bac/0x25d0 [ 318.272415][T10601] check_panic_on_warn+0x84/0xa0 [ 318.272445][T10601] ? sys_imageblit+0x1bac/0x25d0 [ 318.272473][T10601] end_report+0x6f/0x130 [ 318.272510][T10601] kasan_report+0x128/0x150 [ 318.272539][T10601] ? sys_imageblit+0x1bac/0x25d0 [ 318.272573][T10601] sys_imageblit+0x1bac/0x25d0 [ 318.272612][T10601] ? sys_copyarea+0x2530/0x2530 [ 318.272652][T10601] drm_fbdev_generic_defio_imageblit+0x2c/0x110 [ 318.272679][T10601] soft_cursor+0xa01/0xc30 [ 318.272712][T10601] bit_cursor+0x16dd/0x1f60 [ 318.272751][T10601] ? bit_clear_margins+0x550/0x550 [ 318.272784][T10601] ? get_color+0x2e8/0x4d0 [ 318.272807][T10601] ? bit_clear_margins+0x550/0x550 [ 318.272836][T10601] ? fbcon_cursor+0x430/0x640 [ 318.272858][T10601] ? add_softcursor+0x8c/0x440 [ 318.272884][T10601] con_flush_chars+0x1fa/0x280 [ 318.272909][T10601] con_write+0x2e/0x40 [ 318.272934][T10601] do_output_char+0x64a/0x960 [ 318.272961][T10601] __process_echoes+0x2e0/0x9f0 [ 318.272995][T10601] n_tty_receive_buf_common+0xc81/0x1380 [ 318.273034][T10601] ? paste_selection+0x1db/0x540 [ 318.273064][T10601] paste_selection+0x33e/0x540 [ 318.273097][T10601] ? set_selection_kernel+0x17b0/0x17b0 [ 318.273125][T10601] ? do_task_dead+0xd0/0xd0 [ 318.273148][T10601] ? __might_fault+0xaa/0x120 [ 318.273170][T10601] ? __might_fault+0xc6/0x120 [ 318.273191][T10601] ? __might_fault+0xaa/0x120 [ 318.273216][T10601] ? tioclinux+0x34e/0x450 [ 318.273239][T10601] vt_ioctl+0x813/0x1f20 [ 318.273269][T10601] ? __vt_event_wait+0x260/0x260 [ 318.273302][T10601] ? __fget_files+0x28/0x460 [ 318.273337][T10601] ? tty_jobctrl_ioctl+0x378/0xba0 [ 318.273361][T10601] tty_ioctl+0x91e/0xdc0 [ 318.273384][T10601] ? tty_get_icount+0xb0/0xb0 [ 318.273407][T10601] __se_sys_ioctl+0xfd/0x170 [ 318.273439][T10601] do_syscall_64+0x55/0xb0 [ 318.273464][T10601] ? clear_bhb_loop+0x40/0x90 [ 318.273500][T10601] ? clear_bhb_loop+0x40/0x90 [ 318.273529][T10601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.273555][T10601] RIP: 0033:0x7fe1749a8f19 [ 318.273574][T10601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.273591][T10601] RSP: 002b:00007fe175804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.273612][T10601] RAX: ffffffffffffffda RBX: 00007fe174c25fa0 RCX: 00007fe1749a8f19 [ 318.273626][T10601] RDX: 0000200000000080 RSI: 000000000000541c RDI: 0000000000000003 [ 318.273649][T10601] RBP: 00007fe174a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 318.273662][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.273673][T10601] R13: 00007fe174c26038 R14: 00007fe174c25fa0 R15: 00007ffe52e35f68 [ 318.273698][T10601] [ 318.273730][T10601] Kernel Offset: disabled [ 318.828243][ T5798] Bluetooth: hci1: command tx timeout