last executing test programs: 2m45.20414363s ago: executing program 1 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110029bd7000fddbdf650e0000000c00028004000480"], 0x20}, 0x1, 0x0, 0x0, 0x40054}, 0x20000000) 2m44.973467905s ago: executing program 1 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.853502788s ago: executing program 1 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000440ffffffff0800064017000001080007400000000108000240000000170900010073797a30000000000900020073797a32"], 0x8c}}, 0x40) 2m44.76841s ago: executing program 1 (id=713): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m44.259111932s ago: executing program 1 (id=721): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="05000000010040", 0x7) 2m42.747966408s ago: executing program 1 (id=737): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0xfd, 0x0, 0x4}, {0x20, 0x0, 0x6, 0xfffdf035}, {0x6, 0x7f, 0x4, 0xd}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 2m42.581730162s ago: executing program 32 (id=737): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0xfd, 0x0, 0x4}, {0x20, 0x0, 0x6, 0xfffdf035}, {0x6, 0x7f, 0x4, 0xd}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 2m15.298141861s ago: executing program 3 (id=1044): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 2m15.040491057s ago: executing program 3 (id=1049): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000180)="a5", 0xfdef}], 0x1) 2m14.830413282s ago: executing program 3 (id=1053): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 2m14.774035334s ago: executing program 3 (id=1054): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x58c, &(0x7f0000001540)="$eJzs3U9sHFcZAPBvdh0ndU3ThEZqyiGBRKR/lNjtSk4DB8IBDhT1UiRUqRysZGOHrJNgu6I2F/fGiQoEAlRRNeKABBKxxAE4VBQkDkgECYEQFmolEAf+tIBwD7QBFs3urLPxzppt7Xjczu8nbfbNm+d87+3me9p9b+IJoLQOp38kEaMRcS0i9rYPb25wuP303dry9NXa8nQSzeZjf09a7a7Ulqc7TTs/d3tELEXE3RHxk3MRZ3b1xp1bWLww2WjUZ7PjsfmZy2NzC4vHz89MTtWn6hdrtYdPTUycOjkx/iZGk2x49pOXX9n/2+lHp54/9O/HT858829JnG6NO9aNYyvl9WgoiTh9K4IVoJqOJyJGBmx/oP7MC7e4Swzoy/tXxtL37q6IONrK/71Rbb2bER967ol/7o0PXu/3s9dWnvvzdvYVANg6zdTujU9329NbBbxNVSL97p9UTkREu1ypnDjR/g5/V4xUGpfm5h84d+nJi2fbawR3xq7KufON+ni2VnBn7ErS4wdb5RvHD607rkXEvoj4fPW21vGJM5caZ7d1pgM6RiNe/t5nzgzfvi7//1Rt5z/wzpXm/69/+oMfpeXXqkX3BthOaf5/+7WZR0L+Q+nIfygv+Q/lsT7F5T+Ul/yH8pL/UF7yH8pL/kN5yX8oL/kP5dWd/9IfymnfoRdXkohY+sBtrUdqODuX82t7gHeQZjPxP/qhpHz2h/IaKroDQGHWvuN/qdh+AMXZ+DdnR+zpd+Ly1vcF2B6VojsAFObYQft/UFbW/6G8rP9DefmMD1j/h/Kx/g/lNdrn/l/v6rp313hE3BERP6/u2t251xfw9jUa8fKz177/RETlL0n2+f/Y3qOjk6+89OPudsPJv1pbBMMR8dlnH/vqU5Pz87MPpvX/WKuf/1pW/1BRowEG0cnTTh4D5TW3sHhhstGozyq8qcIbzR3RDYUdW+isqO+U/uQXOvPAldrydOexXXPPM/dHvPrh9kUIadyr2aN9dihbm9zT2qMcWU1uulYh2YK9yy8cj1h6OiLuzht/kt3vvL3zMbJa7Yn/7uw5fRzM1k/SNgcGjF+9Y3Px7+mKf6gr/nsGjL/yiQEb3iL7vlNs/Od/l73+40NDea//Zq+N2f9/zj/yrU0G2KQ//qHY+EcPFRv/K5ciXkznn/G8/Kukabm287l+/hntuk76rfrcsRvz39We+a+yNv9V+8x/hweM87PH65/Kq6/+IuLVpyPuyY3fibenFWtktdIT/0jX/HPvBvH/+vFfXcirP/1SRPNKxLHIj98da2x+5vLY3MLi8fMzk1P1qfrFWu3hUxMTp05OjI+11qjHOivVvR69fuAjefVHvtEe/0if+J3x93v9mxuMudvi1z89+t6c+l8ebMe/90j++78/i99+/Yd64r8ve07/nfwnu5Y3bfN6ROzO6u+LiB++sO/+vH597Ho7/tk+46/cFL93/A8MOP4v/v6/T+bVP/XRAf8CAGBL9V8aKLpnAADAVtuOncaixwjkG1kdju5t4GSpa19h6ca+Qlr/era/UF2KeCPbY0jr78t2ydJy7kYDsOMcWHz/b4ruAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDZzS0sXphsNOqzc0X3BNhu/wsAAP//NOr9bw==") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000480)='./file0\x00') 2m14.394054943s ago: executing program 3 (id=1057): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2m12.894545158s ago: executing program 3 (id=1075): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 2m12.855651079s ago: executing program 33 (id=1075): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 1m15.021445495s ago: executing program 2 (id=1645): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2000002, &(0x7f0000000080)={[{@barrier_none}, {@usrjquota_file, 0x4}, {@grpquota}, {@expose_privroot}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f00000033c0)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, r0, 0x0, 0x7ffffffd) 1m14.022613459s ago: executing program 2 (id=1650): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) 1m13.422900133s ago: executing program 2 (id=1655): r0 = epoll_create1(0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) 1m13.292541466s ago: executing program 2 (id=1656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 1m13.200138198s ago: executing program 2 (id=1657): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x4000) 1m13.061437452s ago: executing program 2 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004883}, 0x80) 58.01952248s ago: executing program 34 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004883}, 0x80) 6.146691854s ago: executing program 5 (id=2350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d04, &(0x7f0000000200)="4ba69c") 5.772269123s ago: executing program 5 (id=2355): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000c00, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=cp437,iocharset=iso8859-7,nodiscard,errors=continue,iocharset=iso8859-13,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00\x00'], 0x21, 0x61e2, &(0x7f00000063c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x101, 0x1) getdents(r0, 0x0, 0x0) 4.519926652s ago: executing program 5 (id=2371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000100)='0\x00', 0x2) 4.182487111s ago: executing program 5 (id=2376): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5548, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setresuid(0xffffffffffffffff, 0xee00, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) 2.594765698s ago: executing program 5 (id=2388): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x82}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x20, 0x0, 0x28, {0x19, 0x1, "83efb930f0187ff0478fa22a61a54607b71ea9e404009c479cffff45cb92e449c42123ec25cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.058651131s ago: executing program 0 (id=2394): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.724299729s ago: executing program 7 (id=2402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010015, 0x0, 0xfffffffffffffffc}]}) 1.590654922s ago: executing program 6 (id=2403): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'geneve1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0086dd", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.590358722s ago: executing program 7 (id=2404): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0, 0x2}, 0x20) 1.576394103s ago: executing program 6 (id=2405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="1e", 0xff80}], 0x2a0) 1.524126264s ago: executing program 7 (id=2406): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000004c0)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x4, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x9, 0x8, 0xfe9, 0x401, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20007, 0x8]}) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f00000000c0)={0x1, &(0x7f0000000040)}) 1.415109687s ago: executing program 6 (id=2407): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) 1.383613947s ago: executing program 6 (id=2408): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88c1}, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 1.372778417s ago: executing program 7 (id=2409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x3c}, 0x1, 0x620b}, 0x0) 1.323450219s ago: executing program 6 (id=2410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nolargeio}, {@nolargeio}, {@bsdgroups}]}, 0x1, 0xb92c, &(0x7f000002e340)="$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") open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) 1.28352946s ago: executing program 7 (id=2411): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002400)={&(0x7f00000023c0)=[r1], 0x1, 0x80800}) 1.211274452s ago: executing program 7 (id=2412): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)={[{@disable_ext_identify}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@noextent_cache}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1.122134094s ago: executing program 0 (id=2413): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x585c, 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10) 877.906779ms ago: executing program 4 (id=2415): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}], 0x1c) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0x4, @remote, 0x8}}}, &(0x7f0000000200)=0x84) 824.478421ms ago: executing program 0 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x303, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002380), r0) 721.706903ms ago: executing program 4 (id=2417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) 686.544364ms ago: executing program 0 (id=2418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f, 0x40300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x9}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x50}}, 0x0) 631.746775ms ago: executing program 4 (id=2419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000040007800c00020000000000000000000c0004"], 0x30}}, 0x0) 453.774209ms ago: executing program 4 (id=2420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="14002380060003000300000005001f00010000004400238005000e000300000005001d000000000006000300c900000008000b000700000006000d0004"], 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x0) 261.890564ms ago: executing program 4 (id=2421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r2, @ANYBLOB="0500330003"], 0x2c}}, 0x80) 225.147735ms ago: executing program 6 (id=2422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 197.758216ms ago: executing program 0 (id=2423): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 103.958927ms ago: executing program 0 (id=2424): syz_clone3(&(0x7f0000000400)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000011}) ppoll(&(0x7f0000000040)=[{r1, 0x401}], 0x1, 0x0, 0x0, 0x0) 83.448718ms ago: executing program 4 (id=2425): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp775'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/58, 0x3a) getdents(r0, 0xfffffffffffffffd, 0xbb) 0s ago: executing program 5 (id=2426): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0x2, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x1400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x1b8, 0x9, 0xffffffffffffffff}]}, 0x78) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): -fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 192.539872][ T8716] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 192.575600][ T8711] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 192.591735][ T8723] loop2: detected capacity change from 0 to 256 [ 192.604176][ T8716] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 192.604449][ T8711] EXT4-fs (loop4): orphan cleanup on readonly fs [ 192.623469][ T8711] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1530: bg 0: block 34: padding at end of block bitmap is not set [ 192.655232][ T8716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.680209][ T8711] Quota error (device loop4): write_blk: dquota write failed [ 192.688296][ T8711] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 192.689678][ T8723] exfat: Deprecated parameter 'utf8' [ 192.712056][ T8717] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1531: casefold flag without casefold feature [ 192.719156][ T8723] exfat: Deprecated parameter 'utf8' [ 192.739350][ T8723] exfat: Deprecated parameter 'utf8' [ 192.766836][ T8711] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1530: Failed to acquire dquot type 1 [ 192.789553][ T8723] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 192.846822][ T8711] EXT4-fs (loop4): 1 truncate cleaned up [ 192.897488][ T8711] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback. [ 193.092255][ T8731] loop5: detected capacity change from 0 to 512 [ 193.210384][ T8731] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 193.231720][ T8731] EXT4-fs (loop5): mount failed [ 193.255047][ T8735] loop2: detected capacity change from 0 to 1024 [ 193.348012][ T8731] autofs4:pid:8731:autofs_fill_super: could not open pipe file descriptor [ 193.606685][ T8746] program syz.5.1542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.854778][ T8732] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1546 (8732) [ 194.004125][ T8732] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 194.012496][ T8764] mkiss: ax0: crc mode is auto. [ 194.046051][ T8732] BTRFS info (device loop0): force zlib compression, level 3 [ 194.086164][ T8732] BTRFS info (device loop0): turning on flush-on-commit [ 194.109409][ T8732] BTRFS info (device loop0): max_inline at 4096 [ 194.115719][ T8732] BTRFS info (device loop0): using free space tree [ 194.159100][ T8732] BTRFS info (device loop0): has skinny extents [ 194.372497][ T1324] kernel read not supported for file /video9 (pid: 1324 comm: kworker/0:2) [ 194.497860][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.504355][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.546714][ T8732] BTRFS info (device loop0): enabling ssd optimizations [ 194.806006][ T8769] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 194.839134][ T8769] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 194.867988][ T8769] F2FS-fs (loop4): invalid crc value [ 194.952811][ T8769] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.050364][ T1107] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 195.080009][ T1107] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.139428][ T8769] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 195.169558][ T8769] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 195.291414][ T8769] attempt to access beyond end of device [ 195.291414][ T8769] loop4: rw=2049, want=45104, limit=40427 [ 195.798696][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1570'. [ 195.842302][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1570'. [ 196.218946][ T8825] set_capacity_and_notify: 2 callbacks suppressed [ 196.218962][ T8825] loop6: detected capacity change from 0 to 40427 [ 196.304144][ T8825] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 196.315823][ T8825] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 196.414291][ T8825] F2FS-fs (loop6): Found nat_bits in checkpoint [ 196.563408][ T8825] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 196.581288][ T8825] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 196.676808][ T8838] loop2: detected capacity change from 0 to 40427 [ 196.714225][ T8838] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 196.781742][ T4227] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.794857][ T8838] F2FS-fs (loop2): invalid crc value [ 196.827105][ T8838] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.923333][ T4227] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.981951][ T8838] F2FS-fs (loop2): recover fsync data on readonly fs [ 197.009468][ T8838] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 197.039434][ T8838] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 197.067470][ T8858] loop0: detected capacity change from 0 to 256 [ 197.097150][ T4227] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.109754][ T8838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 197.244419][ T4227] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.453126][ T8860] loop6: detected capacity change from 0 to 4096 [ 197.521091][ T8861] lo speed is unknown, defaulting to 1000 [ 197.536677][ T8860] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 197.692457][ T8860] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 197.731034][ T8860] ntfs3: loop6: Failed to load $Extend. [ 198.131951][ T8878] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 198.187000][ T8878] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 198.261877][ T8861] chnl_net:caif_netlink_parms(): no params data found [ 198.304731][ T8888] loop0: detected capacity change from 0 to 2048 [ 198.406357][ T8893] netem: change failed [ 198.423801][ T8867] loop4: detected capacity change from 0 to 32768 [ 198.455037][ T8888] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 198.515533][ T8867] [ 198.515533][ T8867] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.515533][ T8867] [ 198.594864][ T26] audit: type=1800 audit(1785416925.179:75): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1583" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 198.619465][ T4265] udevd[4265]: incorrect nilfs2 checksum on /dev/loop0 [ 198.629847][ T8905] loop2: detected capacity change from 0 to 2048 [ 198.658397][ T8907] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.646553][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.682804][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.731090][ T8861] device bridge_slave_0 entered promiscuous mode [ 198.759211][ T4198] [ 198.759211][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.759211][ T4198] [ 198.784470][ T8905] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.839334][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.886435][ T4198] [ 198.886435][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.886435][ T4198] [ 198.904648][ T8911] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952 [ 198.949386][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.957194][ T8911] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 198.957973][ T8861] device bridge_slave_1 entered promiscuous mode [ 199.129491][ T8888] syz.0.1586 (8888) used greatest stack depth: 20096 bytes left [ 199.162535][ T8911] Remounting filesystem read-only [ 199.214480][ T8861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.259262][ T8911] NILFS (loop0): error -5 truncating bmap (ino=15) [ 199.281799][ T8861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.368559][ T8920] loop4: detected capacity change from 0 to 256 [ 199.422453][ T4185] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 199.449574][ T4233] Bluetooth: hci3: command 0x0409 tx timeout [ 199.455826][ T8920] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 199.486038][ T8861] team0: Port device team_slave_0 added [ 199.538960][ T8861] team0: Port device team_slave_1 added [ 199.791911][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.829070][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.908842][ T8938] loop4: detected capacity change from 0 to 2048 [ 199.916446][ T8861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.986808][ T8938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.029746][ T8938] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.085984][ T8947] mkiss: ax0: crc mode is auto. [ 200.280556][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.287547][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.326204][ T8861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.389111][ T4456] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 200.571966][ T4227] device hsr_slave_0 left promiscuous mode [ 200.600046][ T4227] device hsr_slave_1 left promiscuous mode [ 200.608194][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.617286][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.636671][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.664747][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.695433][ T4227] device bridge_slave_1 left promiscuous mode [ 200.712541][ T8967] i2c i2c-0: new_device: Can't parse I2C address [ 200.712715][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.746694][ T4227] device bridge_slave_0 left promiscuous mode [ 200.760309][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.771985][ T4456] usb 5-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 200.805256][ T4227] device veth1_macvtap left promiscuous mode [ 200.822618][ T4227] device veth0_macvtap left promiscuous mode [ 200.836731][ T4227] device veth1_vlan left promiscuous mode [ 200.846971][ T4227] device veth0_vlan left promiscuous mode [ 200.950425][ T4456] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 200.976866][ T4456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.002388][ T4456] usb 5-1: Product: syz [ 201.019195][ T4456] usb 5-1: Manufacturer: syz [ 201.044376][ T4456] usb 5-1: SerialNumber: syz [ 201.316738][ T8981] loop6: detected capacity change from 0 to 4096 [ 201.364056][ T8981] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 201.381640][ T8984] loop2: detected capacity change from 0 to 1024 [ 201.424334][ T8981] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 201.438756][ T4456] usb 5-1: unit 1 not found! [ 201.444449][ T4456] usb 5-1: unit 108 not found! [ 201.464259][ T4456] usb 5-1: USB disconnect, device number 10 [ 201.476361][ T8984] EXT4-fs (loop2): Ignoring removed bh option [ 201.491889][ T8981] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.515268][ T8984] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.523324][ T8981] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 201.559246][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 201.561554][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.589863][ T8981] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.594729][ T4227] team0 (unregistering): Port device team_slave_1 removed [ 201.604446][ T8981] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 201.674127][ T8981] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.676788][ T8984] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,dioread_nolock,stripe=0x0000000000000010,bh,init_itable,,errors=continue. Quota mode: none. [ 201.694542][ T8981] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 201.728456][ T4227] team0 (unregistering): Port device team_slave_0 removed [ 201.753042][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.787923][ T8981] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.797557][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.811977][ T8981] ntfs: volume version 3.1. [ 201.817009][ T8984] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.1614: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 201.855016][ T8984] EXT4-fs error (device loop2): ext4_check_all_de:667: inode #12: block 7: comm syz.2.1614: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 202.036553][ T8988] loop4: detected capacity change from 0 to 128 [ 202.193547][ T8988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 202.233971][ T4227] bond0 (unregistering): Released all slaves [ 202.237039][ T8988] System zones: 1-3, 19-19, 35-36 [ 202.280290][ T8988] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none. [ 202.331841][ T8988] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.428826][ T8997] udc-core: couldn't find an available UDC or it's busy [ 202.471191][ T8997] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 202.474929][ T8861] device hsr_slave_0 entered promiscuous mode [ 202.526306][ T8861] device hsr_slave_1 entered promiscuous mode [ 202.563430][ T8861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.579155][ T8861] Cannot create hsr debugfs directory [ 202.618371][ T8988] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 203.220227][ T8999] loop2: detected capacity change from 0 to 32768 [ 203.249241][ T4234] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.349757][ T8999] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 203.457309][ T8996] loop6: detected capacity change from 0 to 40427 [ 203.499102][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 203.516487][ T8996] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 203.609635][ T2286] Bluetooth: hci3: command 0x040f tx timeout [ 203.630535][ T8996] F2FS-fs (loop6): invalid crc value [ 203.648476][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 203.653543][ T8996] F2FS-fs (loop6): Found nat_bits in checkpoint [ 203.677835][ T4234] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 203.703591][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.734405][ T4234] usb 5-1: config 0 descriptor?? [ 203.811443][ T4234] gspca_main: sq930x-2.14.0 probing 041e:403c [ 203.813924][ T8996] F2FS-fs (loop6): recover fsync data on readonly fs [ 203.889284][ T8996] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 203.896273][ T8996] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 203.939822][ T8996] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 204.104137][ T8861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.152743][ T8861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.224632][ T8861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.251093][ T8861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.402304][ T9045] netlink: 'syz.0.1629': attribute type 3 has an invalid length. [ 204.465596][ T9045] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1629'. [ 204.519182][ T4234] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 204.525116][ T4234] sq930x: probe of 5-1:0.0 failed with error -71 [ 204.540362][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.544104][ T9044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.575886][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.579834][ T4234] usb 5-1: USB disconnect, device number 11 [ 204.600533][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.634094][ T8861] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.679998][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.695000][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.765334][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.772626][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.839807][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.861929][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.917025][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.960757][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.967962][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.021855][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.085415][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.137653][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.188626][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.242471][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.298266][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.368209][ T8861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.419465][ T8861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.472802][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.497534][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.525953][ T9043] loop2: detected capacity change from 0 to 32768 [ 205.548069][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.590299][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.686815][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.704484][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 205.752440][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.946774][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1641'. [ 206.069511][ T9083] loop4: detected capacity change from 0 to 4096 [ 206.254526][ T9083] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 206.320363][ T9083] ntfs3: loop4: Failed to load $Extend. [ 206.442556][ T9095] loop6: detected capacity change from 0 to 4096 [ 206.453759][ T8861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.487285][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.502551][ T9083] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 206.526635][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.639472][ T9105] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 206.671718][ T9095] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 206.783803][ T4198] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 206.815020][ T9095] ntfs3: loop6: failed to convert "0080" to cp860 [ 206.839871][ T9095] ntfs3: loop6: failed to convert name for inode 1e. [ 206.846986][ T4198] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 207.009981][ T9107] loop2: detected capacity change from 0 to 8192 [ 207.088968][ T9107] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 207.115376][ T9075] loop0: detected capacity change from 0 to 40427 [ 207.122019][ T9107] REISERFS (device loop2): using ordered data mode [ 207.178189][ T9107] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.201106][ T9107] REISERFS (device loop2): checking transaction log (loop2) [ 207.215297][ T9107] REISERFS (device loop2): Using r5 hash to sort names [ 207.238349][ T6280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.247720][ T6280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.269941][ T9107] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 207.288868][ T9075] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 207.307140][ T9075] F2FS-fs (loop0): invalid crc value [ 207.353195][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.370125][ T9075] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.380573][ T9107] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 207.384170][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.468909][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.527621][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.622139][ T8861] device veth0_vlan entered promiscuous mode [ 207.628556][ T9075] F2FS-fs (loop0): recover fsync data on readonly fs [ 207.663841][ T9075] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 207.698109][ T8861] device veth1_vlan entered promiscuous mode [ 207.721438][ T9075] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 207.784729][ T9075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.860158][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.879551][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.959608][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.010894][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.082814][ T8861] device veth0_macvtap entered promiscuous mode [ 208.113983][ T8861] device veth1_macvtap entered promiscuous mode [ 208.229529][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.298113][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.340169][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.385359][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.403555][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.456271][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.477574][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.489455][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.524743][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.546416][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.586013][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.615363][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.647261][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.698763][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.745577][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.762024][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.779104][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.824744][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.837845][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.848316][ T8861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.864859][ T8861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.877378][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.892321][ T6280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.908857][ T6280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.067708][ T9172] loop6: detected capacity change from 0 to 32768 [ 209.081960][ T8861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.130652][ T8861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.156458][ T8861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.192220][ T8861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.219740][ T9172] XFS: ikeep mount option is deprecated. [ 209.424556][ T9172] XFS (loop6): Mounting V5 Filesystem [ 209.509878][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.509902][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.511340][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.614759][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.705291][ T9172] XFS (loop6): Ending clean mount [ 209.718230][ T9172] XFS (loop6): Quotacheck needed: Please wait. [ 209.758024][ T9202] loop0: detected capacity change from 0 to 256 [ 209.798734][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.852320][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.910826][ T9202] exfat: Deprecated parameter 'utf8' [ 209.930916][ T9202] exfat: Deprecated parameter 'utf8' [ 209.991114][ T9172] XFS (loop6): Quotacheck: Done. [ 210.068652][ T9202] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 210.139136][ T4456] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 210.150787][ T7229] XFS (loop6): Unmounting Filesystem [ 210.238276][ T9208] loop5: detected capacity change from 0 to 4096 [ 210.385447][ T9208] ntfs3: loop5: ino=3, Correct links count -> 2. [ 210.385837][ T9214] loop0: detected capacity change from 0 to 256 [ 210.549415][ T4456] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 210.757572][ T9208] ntfs3: loop5: failed to convert "0080" to cp874 [ 210.780216][ T4456] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 210.799700][ T4456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.819450][ T4456] usb 5-1: Product: syz [ 210.824463][ T9208] ntfs3: loop5: failed to convert name for inode 1e. [ 210.840570][ T4456] usb 5-1: Manufacturer: syz [ 210.849349][ T4456] usb 5-1: SerialNumber: syz [ 210.931318][ T4456] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 210.972971][ T9225] loop0: detected capacity change from 0 to 64 [ 211.374393][ T4456] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 211.650991][ T9245] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 212.173170][ T9267] mkiss: ax0: crc mode is auto. [ 212.442894][ T9273] loop5: detected capacity change from 0 to 1024 [ 212.523775][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1693'. [ 212.538231][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1693'. [ 212.646950][ T9273] hfsplus: invalid catalog entry type [ 212.674387][ T9273] hfsplus: invalid catalog entry type [ 212.905824][ T4234] usb 5-1: USB disconnect, device number 12 [ 213.142104][ T9292] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1699'. [ 213.429820][ T9300] loop6: detected capacity change from 0 to 4096 [ 213.431148][ T9305] loop4: detected capacity change from 0 to 1024 [ 213.523654][ T9308] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.582940][ T9305] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x000000000000001f,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,errors=continue. Quota mode: none. [ 213.831978][ T9305] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1705: bg 0: block 153: padding at end of block bitmap is not set [ 214.093161][ T9323] netlink: 6856 bytes leftover after parsing attributes in process `syz.6.1711'. [ 214.253410][ T9331] loop6: detected capacity change from 0 to 256 [ 214.809829][ T4462] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 215.037050][ T9347] loop5: detected capacity change from 0 to 128 [ 215.058656][ T9349] loop0: detected capacity change from 0 to 764 [ 215.115569][ T9347] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 215.130676][ T9347] FAT-fs (loop5): Filesystem has been set read-only [ 215.144001][ T9347] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 215.153356][ T9347] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f0b) [ 215.189546][ T4462] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.222432][ T4462] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.320624][ T4462] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 215.369623][ T4462] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 215.395694][ T4462] usb 7-1: SerialNumber: syz [ 215.414994][ T9355] bond0: Device is already in use. [ 215.503671][ T9359] device geneve1 entered promiscuous mode [ 215.547369][ T9359] device batadv0 entered promiscuous mode [ 215.572697][ T9359] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 215.610283][ T9359] Cannot create hsr debugfs directory [ 215.634136][ T9359] device geneve1 left promiscuous mode [ 215.680065][ T9359] device batadv0 left promiscuous mode [ 215.732057][ T4462] usb 7-1: 0:2 : does not exist [ 216.020968][ T4462] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 216.040874][ T9367] loop4: detected capacity change from 0 to 32768 [ 216.075453][ T4462] usb 7-1: USB disconnect, device number 4 [ 216.147916][ T9367] read_mapping_page failed! [ 216.154020][ T9367] ERROR: (device loop4): txCommit: [ 216.154020][ T9367] [ 216.166158][ T9367] ERROR: (device loop4): remounting filesystem as read-only [ 216.350043][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.557860][ T9378] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1739'. [ 216.589106][ T9378] netem: invalid attributes len -24 [ 216.594483][ T9378] netem: change failed [ 216.691352][ T9369] loop5: detected capacity change from 0 to 40427 [ 216.790807][ T9369] F2FS-fs (loop5): invalid crc value [ 216.820169][ T9389] Falling back ldisc for ttyS3. [ 216.844983][ T9369] F2FS-fs (loop5): Found nat_bits in checkpoint [ 216.942809][ T9388] loop6: detected capacity change from 0 to 4096 [ 216.996171][ T9388] ntfs3: loop6: ino=3, Correct links count -> 2. [ 217.016376][ T9369] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 217.128292][ T8861] attempt to access beyond end of device [ 217.128292][ T8861] loop5: rw=2049, want=45104, limit=40427 [ 217.172437][ T9388] ntfs3: loop6: failed to convert "0080" to cp874 [ 217.204190][ T9388] ntfs3: loop6: failed to convert name for inode 1e. [ 217.778433][ T9415] loop5: detected capacity change from 0 to 512 [ 217.824138][ T9419] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 217.835984][ T9419] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 217.904391][ T9415] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.102685][ T9427] program syz.0.1758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.290479][ T9431] loop0: detected capacity change from 0 to 16 [ 218.346149][ T9431] erofs: (device loop0): mounted with root inode @ nid 36. [ 218.838938][ T9426] loop4: detected capacity change from 0 to 32768 [ 218.876785][ T9426] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1757 (9426) [ 218.910298][ T9426] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 218.920975][ T9426] BTRFS info (device loop4): using free space tree [ 218.931948][ T9426] BTRFS info (device loop4): has skinny extents [ 219.063348][ T9433] loop6: detected capacity change from 0 to 32768 [ 219.218173][ T9472] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 219.218173][ T9472] The task syz.0.1770 (9472) triggered the difference, watch for misbehavior. [ 219.257333][ T9426] BTRFS info (device loop4): enabling ssd optimizations [ 219.797632][ T9482] loop6: detected capacity change from 0 to 256 [ 220.402075][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1782'. [ 220.425167][ T9498] netlink: 'syz.6.1782': attribute type 25 has an invalid length. [ 220.515266][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1782'. [ 220.553039][ T9503] tipc: Started in network mode [ 220.599351][ T9503] tipc: Node identity , cluster identity 4711 [ 220.979919][ T9524] base or size exceeds the MTRR width [ 221.037480][ T9526] loop6: detected capacity change from 0 to 8 [ 221.275205][ T9534] loop0: detected capacity change from 0 to 2048 [ 221.423623][ T9534] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.442622][ T9536] loop5: detected capacity change from 0 to 4096 [ 221.760118][ T9552] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.836365][ T9536] NILFS (loop5): nilfs_palloc_freev (ino=3): entry number 1882 already freed [ 221.875744][ T9555] loop6: detected capacity change from 0 to 256 [ 221.882928][ T9536] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 221.920604][ T9557] loop0: detected capacity change from 0 to 128 [ 222.019157][ T9555] exfat: Deprecated parameter 'utf8' [ 222.024924][ T9555] exfat: Deprecated parameter 'utf8' [ 222.139642][ T9555] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 222.378126][ T9571] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1815'. [ 222.407643][ T9572] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.609143][ T4268] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 222.618367][ T9574] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 222.660984][ T9574] EXT4-fs (loop6): invalid journal inode [ 223.049491][ T4268] usb 5-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config [ 223.079089][ T4268] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 223.110405][ T4268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 223.153676][ T9590] set_capacity_and_notify: 2 callbacks suppressed [ 223.153694][ T9590] loop6: detected capacity change from 0 to 64 [ 223.159424][ T4268] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.370596][ T7229] hfs: node 4:3 still has 1 user(s)! [ 223.430070][ T4268] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 223.484620][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.517464][ T9579] loop5: detected capacity change from 0 to 32768 [ 223.525868][ T4268] usb 5-1: Product: syz [ 223.531725][ T4268] usb 5-1: Manufacturer: syz [ 223.547028][ T4268] usb 5-1: SerialNumber: syz [ 223.565373][ T4268] usb 5-1: config 0 descriptor?? [ 223.629465][ T9569] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 223.671607][ T4268] ati_remote_probe: Unexpected desc.bNumEndpoints [ 223.683613][ T9579] [ 223.683613][ T9579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.683613][ T9579] [ 223.715891][ T9586] loop0: detected capacity change from 0 to 32768 [ 223.777460][ T9579] [ 223.777460][ T9579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.777460][ T9579] [ 223.862613][ T9579] [ 223.862613][ T9579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.862613][ T9579] [ 223.880365][ T9579] [ 223.880365][ T9579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.880365][ T9579] [ 223.903287][ T4234] usb 5-1: USB disconnect, device number 13 [ 223.968421][ T9586] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.997035][ T9579] [ 223.997035][ T9579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.997035][ T9579] [ 224.008905][ T9579] [ 224.008905][ T9579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.008905][ T9579] [ 224.037568][ T276] [ 224.037568][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.037568][ T276] [ 224.073485][ T9579] ERROR: (device loop5): diWrite: ixpxd invalid [ 224.073485][ T9579] [ 224.139975][ T9579] ERROR: (device loop5): txCommit: [ 224.139975][ T9579] [ 224.175513][ T9579] ERROR: (device loop5): diFree: invalid inoext [ 224.175513][ T9579] [ 224.305523][ T9162] Set syz1 is full, maxelem 65536 reached [ 224.350521][ T9604] lo speed is unknown, defaulting to 1000 [ 224.436350][ T1171] JFS: metapage_get_blocks failed [ 224.467315][ T9586] syz.0.1821 (9586) used greatest stack depth: 18304 bytes left [ 224.476399][ T1171] [ 224.476399][ T1171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.476399][ T1171] [ 224.503590][ T9609] netlink: 'syz.6.1831': attribute type 29 has an invalid length. [ 224.520964][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 224.545939][ T9609] netlink: 'syz.6.1831': attribute type 29 has an invalid length. [ 224.546954][ T1171] [ 224.546954][ T1171] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.546954][ T1171] [ 224.566727][ T4234] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 224.592033][ T9604] chnl_net:caif_netlink_parms(): no params data found [ 224.605178][ T276] [ 224.605178][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.605178][ T276] [ 224.673697][ T1171] ERROR: (device loop5): diWrite: ixpxd invalid [ 224.673697][ T1171] [ 224.723965][ T9616] loop6: detected capacity change from 0 to 512 [ 224.726116][ T1171] ERROR: (device loop5): txCommit: [ 224.726116][ T1171] [ 224.758503][ T1171] jfs_write_inode: jfs_commit_inode failed! [ 224.765602][ T8861] [ 224.765602][ T8861] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.765602][ T8861] [ 224.783820][ T9616] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 224.806646][ T8861] [ 224.806646][ T8861] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.806646][ T8861] [ 224.821329][ T9616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0102] [ 224.831501][ T9616] EXT4-fs (loop6): orphan cleanup on readonly fs [ 224.856637][ T9616] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.1834: attempt to clear invalid blocks 1024 len 1 [ 224.872097][ T4234] usb 5-1: Using ep0 maxpacket: 8 [ 224.883132][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.891389][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.900430][ T9604] device bridge_slave_0 entered promiscuous mode [ 224.908448][ T9620] loop0: detected capacity change from 0 to 256 [ 224.923447][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.932189][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.937453][ T9620] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 224.940266][ T9616] EXT4-fs (loop6): Remounting filesystem read-only [ 224.965246][ T9604] device bridge_slave_1 entered promiscuous mode [ 224.990346][ T9604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.004285][ T9604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.009366][ T4234] usb 5-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config [ 225.041748][ T9604] team0: Port device team_slave_0 added [ 225.046720][ T9616] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1834: bg 0: block 361: padding at end of block bitmap is not set [ 225.083992][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 225.105135][ T9616] EXT4-fs (loop6): Remounting filesystem read-only [ 225.123197][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 225.135817][ T9616] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 225.145318][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.147952][ T9616] EXT4-fs (loop6): Remounting filesystem read-only [ 225.165833][ T9616] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1834: invalid indirect mapped block 1811939328 (level 0) [ 225.187349][ T9616] EXT4-fs (loop6): Remounting filesystem read-only [ 225.195595][ T9616] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1834: invalid indirect mapped block 2185560079 (level 1) [ 225.229749][ T9616] EXT4-fs (loop6): Remounting filesystem read-only [ 225.236541][ T9616] EXT4-fs (loop6): 1 truncate cleaned up [ 225.298017][ T9616] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort. Quota mode: none. [ 225.301492][ T9604] team0: Port device team_slave_1 added [ 225.378836][ T6280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.409409][ T4234] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 225.418948][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.452961][ T4234] usb 5-1: Product: syz [ 225.472826][ T4234] usb 5-1: config 0 descriptor?? [ 225.519162][ T4234] usb 5-1: can't set config #0, error -71 [ 225.540278][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.547243][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.554562][ T4234] usb 5-1: USB disconnect, device number 14 [ 225.651385][ T9604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.720733][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.754304][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.889095][ T9604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.923127][ T9649] loop6: detected capacity change from 0 to 256 [ 225.953119][ T6280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.010268][ T9647] loop5: detected capacity change from 0 to 8192 [ 226.042149][ T9604] device hsr_slave_0 entered promiscuous mode [ 226.067717][ T9649] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 226.101263][ T9647] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 226.108080][ T9604] device hsr_slave_1 entered promiscuous mode [ 226.119127][ T9604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.129460][ T9604] Cannot create hsr debugfs directory [ 226.140659][ T9653] pim6reg0: tun_chr_ioctl cmd 2147767520 [ 226.149285][ T9659] loop4: detected capacity change from 0 to 512 [ 226.168523][ T9647] REISERFS (device loop5): using ordered data mode [ 226.175905][ T9647] reiserfs: using flush barriers [ 226.188628][ T9659] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 226.203026][ T9647] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 226.245511][ T9659] UDF-fs: Scanning with blocksize 512 failed [ 226.253162][ T9647] REISERFS (device loop5): checking transaction log (loop5) [ 226.265586][ T9659] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 226.266164][ T6280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.280766][ T9659] UDF-fs: Scanning with blocksize 1024 failed [ 226.306539][ T9659] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 226.334797][ T9659] UDF-fs: Scanning with blocksize 2048 failed [ 226.341042][ T5356] Bluetooth: hci5: command 0x0409 tx timeout [ 226.365078][ T9659] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 226.387637][ T9647] REISERFS (device loop5): Using r5 hash to sort names [ 226.418504][ T9647] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 226.434378][ T9647] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 226.456228][ T9659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.494961][ T9647] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 226.528163][ T6280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.544717][ T9661] loop6: detected capacity change from 0 to 4096 [ 226.586537][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1853'. [ 226.636954][ T9661] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 226.671604][ T9661] EXT4-fs (loop6): inline encryption not supported [ 226.704236][ T9667] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 226.723704][ T9661] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 226.740876][ T9667] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 226.752423][ T9661] System zones: 0-5 [ 226.810904][ T9661] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,journal_dev=0x0000000000000f6b,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 226.814129][ T9604] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 226.873453][ T9604] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 226.903071][ T9604] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 226.917820][ T9661] fs-verity: sha512 using implementation "sha512-avx2" [ 226.932970][ T9604] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 227.045952][ T9679] loop0: detected capacity change from 0 to 2048 [ 227.155128][ T9679] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 227.186156][ T9679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.232648][ T9684] EXT4-fs (loop4): too many log groups per flexible block group [ 227.243447][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 227.243463][ T26] audit: type=1800 audit(1785416953.829:76): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1866" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 227.299259][ T9684] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 227.306305][ T9684] EXT4-fs (loop4): mount failed [ 227.342254][ T4456] Bluetooth: hci4: command 0x0406 tx timeout [ 227.403581][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.533765][ T9604] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.564806][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.597036][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.720939][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.745243][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.792429][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.800449][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.836347][ T9700] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 227.883223][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.055385][ T9700] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 228.102481][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.129758][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.143563][ T9700] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 228.177864][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.185671][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.196229][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.197128][ T9700] EXT4-fs (loop4): This should not happen!! Data will be lost [ 228.197128][ T9700] [ 228.205708][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.236570][ T9700] EXT4-fs (loop4): Total free blocks count 0 [ 228.275812][ T9700] EXT4-fs (loop4): Free/Dirty block details [ 228.284249][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.306455][ T9700] EXT4-fs (loop4): free_blocks=2415919504 [ 228.314696][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.340679][ T9700] EXT4-fs (loop4): dirty_blocks=16 [ 228.358190][ T9700] EXT4-fs (loop4): Block reservation details [ 228.360215][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.409342][ T4239] Bluetooth: hci5: command 0x041b tx timeout [ 228.414040][ T9726] set_capacity_and_notify: 2 callbacks suppressed [ 228.414056][ T9726] loop6: detected capacity change from 0 to 256 [ 228.415975][ T9700] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 228.440984][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.470833][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.505643][ T9716] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 228.580751][ T9716] EXT4-fs (loop4): This should not happen!! Data will be lost [ 228.580751][ T9716] [ 228.585938][ T9604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.608144][ T9726] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 228.629488][ T9604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.649917][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.670718][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.694209][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.751494][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.764887][ T9735] loop5: detected capacity change from 0 to 22 [ 228.806971][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.931950][ T9735] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 229.004102][ T9735] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 229.224611][ T9757] loop4: detected capacity change from 0 to 128 [ 229.332394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.369712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.385289][ T9760] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1884'. [ 229.390725][ T9604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.444882][ T6280] device hsr_slave_0 left promiscuous mode [ 229.461907][ T6280] device hsr_slave_1 left promiscuous mode [ 229.468760][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.518734][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.545637][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.613563][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.629257][ T1324] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 229.669673][ T6280] device bridge_slave_1 left promiscuous mode [ 229.686778][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.726208][ T6280] device bridge_slave_0 left promiscuous mode [ 229.746094][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.756391][ T9772] loop5: detected capacity change from 0 to 256 [ 229.796523][ T6280] device veth1_macvtap left promiscuous mode [ 229.805470][ T6280] device veth0_macvtap left promiscuous mode [ 229.835057][ T6280] device veth1_vlan left promiscuous mode [ 229.851544][ T6280] device veth0_vlan left promiscuous mode [ 229.974652][ T9774] loop9: detected capacity change from 0 to 524287936 [ 230.009628][ T1324] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 230.037488][ T1324] usb 7-1: config 0 has no interface number 0 [ 230.046618][ T1324] usb 7-1: config 0 interface 56 has no altsetting 0 [ 230.209456][ T1324] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 230.226404][ T1324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.245624][ T1324] usb 7-1: Product: syz [ 230.265715][ T1324] usb 7-1: Manufacturer: syz [ 230.276967][ T1324] usb 7-1: SerialNumber: syz [ 230.301101][ T1324] usb 7-1: config 0 descriptor?? [ 230.308229][ T4456] infiniband syz0: ib_query_port failed (-19) [ 230.357183][ T6280] bond1 (unregistering): Released all slaves [ 230.490982][ T4462] Bluetooth: hci5: command 0x040f tx timeout [ 230.574321][ T4462] usb 7-1: USB disconnect, device number 5 [ 230.689550][ T6280] team0 (unregistering): Port device team_slave_1 removed [ 230.712781][ T6280] team0 (unregistering): Port device team_slave_0 removed [ 230.732660][ T6280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.756317][ T6280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.912261][ T6280] bond0 (unregistering): Released all slaves [ 231.212877][ T9788] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1894'. [ 231.599607][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.618864][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.702755][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.725141][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.812059][ T9604] device veth0_vlan entered promiscuous mode [ 231.820141][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.828674][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.891267][ T9604] device veth1_vlan entered promiscuous mode [ 231.988460][ T9836] loop4: detected capacity change from 0 to 1024 [ 232.025220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.059899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.077801][ T9839] loop5: detected capacity change from 0 to 1024 [ 232.090822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.096426][ T9836] EXT4-fs (loop4): Ignoring removed orlov option [ 232.114934][ T9841] loop6: detected capacity change from 0 to 256 [ 232.137891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.153118][ T9836] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noquota,norecovery,,errors=continue. Quota mode: none. [ 232.180266][ T9604] device veth0_macvtap entered promiscuous mode [ 232.217441][ T9604] device veth1_macvtap entered promiscuous mode [ 232.269804][ T9839] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.374249][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.410567][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.423545][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.434685][ T9839] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,noquota,barrier,auto_da_alloc,dioread_nolock,. Quota mode: none. [ 232.435910][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.559052][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.573774][ T4456] Bluetooth: hci5: command 0x0419 tx timeout [ 232.599170][ T9839] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.621421][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.679136][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.691621][ T9839] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 232.710610][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.741359][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.812817][ T9848] loop0: detected capacity change from 0 to 8192 [ 232.834519][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.850006][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.899690][ T9857] loop6: detected capacity change from 0 to 512 [ 232.923601][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.989300][ T9848] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 232.999460][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.053222][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.083169][ T9848] REISERFS (device loop0): using ordered data mode [ 233.106197][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.123370][ T9848] reiserfs: using flush barriers [ 233.132731][ T9848] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.145824][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.170644][ T9848] REISERFS (device loop0): checking transaction log (loop0) [ 233.197905][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.199459][ T9848] REISERFS (device loop0): Using r5 hash to sort names [ 233.220955][ T9604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.244158][ T9604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.249823][ T9848] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 233.268382][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.338768][ T9857] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.369146][ T9857] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.418248][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.516916][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.573493][ T9604] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.634601][ T9604] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.661968][ T9604] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.677960][ T9604] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.878046][ T9880] ALSA: mixer_oss: invalid OSS volume '' [ 233.913218][ T9880] ALSA: mixer_oss: invalid OSS volume '' [ 233.949118][ T9880] ALSA: mixer_oss: invalid OSS volume '–b"(CÄyVk߯ñÑ¡=&' [ 233.992752][ T9880] ALSA: mixer_oss: invalid OSS volume 'þÔL„­!\¾—ÜÑìò¹ëëûÕcëìä·=*' [ 234.062752][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.082062][ T9880] ALSA: mixer_oss: invalid OSS volume 'Ê6ªÃ]ûó}Írg³06Êãuvîá`ªE”]²' [ 234.122569][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.130773][ T9880] ALSA: mixer_oss: invalid OSS volume '„5y¢MvÆïÚ^L ·âðhìëU×#¨ºù' [ 234.130795][ T9880] ALSA: mixer_oss: invalid OSS volume 'ah8g!á{º$žð¤Icµù‰lô+2)ZÎÅCÁñ’' [ 234.130808][ T9880] ALSA: mixer_oss: invalid OSS volume 'òBAò>½ƒ3åwÈá(ó*7' [ 234.130833][ T9880] ALSA: mixer_oss: invalid OSS volume '/ÄA/' [ 234.130863][ T9880] ALSA: mixer_oss: invalid OSS volume 'ú>¸7þ' [ 234.130890][ T9880] ALSA: mixer_oss: invalid OSS volume 'o†á)–[ÜdÂLLûUN.ÞÐîSÅ4ò³?¾æç' [ 234.130908][ T9880] ALSA: mixer_oss: invalid OSS volume 'µb6†‡åʽ8‘¡3>!,Ý[߉1â\·ÌMç' [ 234.131016][ T9880] ALSA: mixer_oss: invalid OSS volume '' [ 234.131025][ T9880] ALSA: mixer_oss: invalid OSS volume '' [ 234.131384][ T9880] ALSA: mixer_oss: invalid OSS volume '' [ 234.274898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.351234][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.389191][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.427508][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.471048][ T9900] loop0: detected capacity change from 0 to 128 [ 234.589106][ T7595] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 234.610665][ T9900] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,abort,,errors=continue. Quota mode: none. [ 234.761482][ T9900] ext4 filesystem being mounted at /429/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.842593][ T9900] fscrypt (loop0, inode 12): Mutually exclusive encryption flags (0x14) [ 234.889415][ T7595] usb 6-1: Using ep0 maxpacket: 32 [ 235.029513][ T7595] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 235.071891][ T9921] loop7: detected capacity change from 0 to 8192 [ 235.176413][ T9921] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 235.226696][ T9929] loop6: detected capacity change from 0 to 4096 [ 235.239270][ T9921] REISERFS (device loop7): using ordered data mode [ 235.269403][ T7595] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 235.309407][ T9921] reiserfs: using flush barriers [ 235.314595][ T7595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.339115][ T9921] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.374057][ T7595] usb 6-1: Product: syz [ 235.386020][ T7595] usb 6-1: Manufacturer: syz [ 235.421356][ T7595] usb 6-1: SerialNumber: syz [ 235.445633][ T9921] REISERFS (device loop7): checking transaction log (loop7) [ 235.462441][ T7595] usb 6-1: config 0 descriptor?? [ 235.531564][ T7595] usb 6-1: bad CDC descriptors [ 235.536900][ T7595] usb 6-1: unsupported MDLM descriptors [ 235.549926][ T9941] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.745884][ T7595] usb 6-1: USB disconnect, device number 9 [ 235.805246][ T9921] REISERFS (device loop7): Using tea hash to sort names [ 235.842553][ T9932] loop0: detected capacity change from 0 to 40427 [ 235.857674][ T9921] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 235.889242][ T9921] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 235.927256][ T9932] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 235.992039][ T9932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 236.034235][ T9954] loop4: detected capacity change from 0 to 256 [ 236.101093][ T9932] F2FS-fs (loop0): invalid crc value [ 236.173701][ T9932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 236.206303][ T9954] FAT-fs (loop4): Directory bread(block 64) failed [ 236.223252][ T9921] REISERFS error (device loop7): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 236.243879][ T9954] FAT-fs (loop4): Directory bread(block 65) failed [ 236.260680][ T9954] FAT-fs (loop4): Directory bread(block 66) failed [ 236.276892][ T9954] FAT-fs (loop4): Directory bread(block 67) failed [ 236.295006][ T9921] REISERFS (device loop7): Remounting filesystem read-only [ 236.301278][ T9954] FAT-fs (loop4): Directory bread(block 68) failed [ 236.330821][ T9954] FAT-fs (loop4): Directory bread(block 69) failed [ 236.372653][ T9954] FAT-fs (loop4): Directory bread(block 70) failed [ 236.396166][ T9954] FAT-fs (loop4): Directory bread(block 71) failed [ 236.409288][ T9954] FAT-fs (loop4): Directory bread(block 72) failed [ 236.417771][ T9932] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 236.426433][ T9932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.480265][ T9954] FAT-fs (loop4): Directory bread(block 73) failed [ 237.760459][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1967'. [ 237.819108][ T4234] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 238.104795][ T4234] usb 8-1: Using ep0 maxpacket: 8 [ 238.239528][ T4234] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 238.279032][ T4234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.391862][ T4234] pvrusb2: Hardware description: Terratec Grabster AV400 [ 238.417776][T10045] loop0: detected capacity change from 0 to 4096 [ 238.421488][ T4234] pvrusb2: ********** [ 238.462934][ T4234] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 238.499347][ T4234] pvrusb2: Important functionality might not be entirely working. [ 238.519024][ T4234] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 238.542914][T10045] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 238.572887][T10055] loop5: detected capacity change from 0 to 256 [ 238.651847][ T4234] pvrusb2: ********** [ 238.722942][ T2425] pvrusb2: Invalid write control endpoint [ 238.925199][T10013] pvrusb2: Killing an I2C write to 8 that is too large (desired=62 limit=61) [ 238.934913][ T4234] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 238.997543][ T5352] usb 8-1: USB disconnect, device number 2 [ 239.006502][T10030] loop6: detected capacity change from 0 to 32768 [ 239.047808][T10030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1970 (10030) [ 239.089260][ T2425] pvrusb2: Invalid write control endpoint [ 239.097957][T10030] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 239.106446][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 239.117558][T10030] BTRFS info (device loop6): use zlib compression, level 3 [ 239.138667][T10030] BTRFS info (device loop6): turning on sync discard [ 239.149834][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 239.171695][T10030] BTRFS info (device loop6): using free space tree [ 239.176568][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 239.199311][T10030] BTRFS info (device loop6): has skinny extents [ 239.204930][ T2425] pvrusb2: Device being rendered inoperable [ 239.235511][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 239.277942][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 239.369508][ T4234] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.389092][ T2425] pvrusb2: Attached sub-driver cx25840 [ 239.395803][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.405115][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 239.438807][ T4234] usb 5-1: config 0 descriptor?? [ 239.449600][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 239.498890][ T4234] cp210x 5-1:0.0: cp210x converter detected [ 239.563032][T10030] BTRFS info (device loop6): enabling ssd optimizations [ 239.627394][ T26] audit: type=1800 audit(1785416966.209:77): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1970" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 239.929896][ T4234] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 240.002081][ T4234] usb 5-1: cp210x converter now attached to ttyUSB0 [ 240.117105][ T5352] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 240.424337][ T5352] usb 8-1: Using ep0 maxpacket: 32 [ 240.524488][ T4445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop6 scanned by udevd (4445) [ 240.524892][ T5353] usb 5-1: USB disconnect, device number 15 [ 240.586274][ T5352] usb 8-1: config 0 has no interfaces? [ 240.602755][ T5352] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 240.619321][ T5353] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.674440][ T5352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.696352][ T5353] cp210x 5-1:0.0: device disconnected [ 240.766399][ T5352] usb 8-1: config 0 descriptor?? [ 240.831531][T10129] loop4: detected capacity change from 0 to 128 [ 240.901122][T10129] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.014235][T10129] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.132417][ T1324] usb 8-1: USB disconnect, device number 3 [ 241.288428][ T4300] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.850300][T10152] loop7: detected capacity change from 0 to 2048 [ 241.885954][T10123] loop6: detected capacity change from 0 to 32768 [ 241.963640][T10152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.185482][T10123] XFS (loop6): Mounting V5 Filesystem [ 242.255880][T10181] loop0: detected capacity change from 0 to 8 [ 242.312945][T10123] XFS (loop6): Ending clean mount [ 242.493802][ T7229] XFS (loop6): Unmounting Filesystem [ 242.878348][T10204] loop0: detected capacity change from 0 to 512 [ 242.923505][T10161] loop4: detected capacity change from 0 to 40427 [ 243.007789][T10161] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 243.023213][T10161] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 243.111941][T10204] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.124396][T10161] F2FS-fs (loop4): invalid crc value [ 243.161012][T10161] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 243.212513][T10204] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.442834][T10161] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 243.514908][T10161] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 243.592496][T10225] device vti0 entered promiscuous mode [ 243.711066][T10233] loop0: detected capacity change from 0 to 64 [ 243.838155][ T4198] attempt to access beyond end of device [ 243.838155][ T4198] loop4: rw=2049, want=45104, limit=40427 [ 243.869745][ T5352] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.885930][T10233] attempt to access beyond end of device [ 243.885930][T10233] loop0: rw=0, want=1026, limit=64 [ 243.946404][T10233] Buffer I/O error on dev loop0, logical block 512, async page read [ 243.982071][T10245] loop7: detected capacity change from 0 to 8 [ 244.018133][T10233] attempt to access beyond end of device [ 244.018133][T10233] loop0: rw=0, want=113154, limit=64 [ 244.046837][T10233] Buffer I/O error on dev loop0, logical block 56576, async page read [ 244.078517][T10247] loop5: detected capacity change from 0 to 4096 [ 244.096837][T10239] attempt to access beyond end of device [ 244.096837][T10239] loop0: rw=0, want=1026, limit=64 [ 244.113438][T10239] Buffer I/O error on dev loop0, logical block 512, async page read [ 244.127805][T10239] attempt to access beyond end of device [ 244.127805][T10239] loop0: rw=0, want=113154, limit=64 [ 244.238596][T10239] Buffer I/O error on dev loop0, logical block 56576, async page read [ 244.258817][T10253] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.262545][ T5352] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.366249][ T26] audit: type=1804 audit(1785416970.949:78): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2019" name="/newroot/95/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 244.404695][ T7350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.503603][T10258] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 245.120374][T10295] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2033'. [ 245.155654][T10298] loop0: detected capacity change from 0 to 256 [ 245.163582][T10295] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2033'. [ 245.223918][T10303] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2033'. [ 245.312737][ T7350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.346807][ T7350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.377520][T10295] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2033'. [ 245.448913][T10311] vivid-001: disconnect [ 245.501139][ T7350] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.519607][T10308] vivid-001: reconnect [ 245.985502][ T5352] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 246.097221][T10305] loop4: detected capacity change from 0 to 32768 [ 246.153697][T10334] loop7: detected capacity change from 0 to 16 [ 246.201181][T10334] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 246.268030][T10305] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 246.413897][ T5352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 246.434537][T10342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2052'. [ 246.474867][ T5352] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.501638][ T5352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 246.546858][T10342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2052'. [ 246.655704][T10345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2052'. [ 246.664687][T10348] loop7: detected capacity change from 0 to 1024 [ 246.676036][T10346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2052'. [ 246.719692][ T5352] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 246.749230][ T5352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.778653][ T5352] usb 6-1: Product: syz [ 246.788820][ T5352] usb 6-1: Manufacturer: syz [ 246.824663][ T5352] usb 6-1: SerialNumber: syz [ 246.832481][T10350] netlink: 16142 bytes leftover after parsing attributes in process `syz.0.2054'. [ 246.854293][ T5352] usb 6-1: config 0 descriptor?? [ 246.960219][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 247.163751][ T5352] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 247.197910][ T5352] imon 6-1:0.0: unable to initialize intf0, err -90 [ 247.218319][ T5352] imon:imon_probe: failed to initialize context! [ 247.255313][ T5352] imon 6-1:0.0: unable to register, err -19 [ 247.297940][ T5352] usb 6-1: USB disconnect, device number 10 [ 247.642871][T10364] loop4: detected capacity change from 0 to 1024 [ 248.041931][T10353] loop0: detected capacity change from 0 to 40427 [ 248.115184][T10353] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 248.126045][T10353] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 248.164023][T10353] F2FS-fs (loop0): invalid crc value [ 248.257781][T10353] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 248.365433][T10381] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2066'. [ 248.546838][T10353] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 248.584948][T10353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 248.852360][ T4185] attempt to access beyond end of device [ 248.852360][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 249.269476][T10403] tipc: Started in network mode [ 249.274611][T10403] tipc: Node identity ac14140f, cluster identity 4711 [ 249.340031][T10403] tipc: New replicast peer: 255.255.255.255 [ 249.347119][T10403] tipc: Enabled bearer , priority 10 [ 249.379260][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.522197][T10406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.619499][T10406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.636441][T10409] loop0: detected capacity change from 0 to 512 [ 249.649379][T10391] loop5: detected capacity change from 0 to 32768 [ 249.668651][T10409] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 249.834131][T10391] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 249.880436][T10409] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 249.903352][T10409] ext4 filesystem being mounted at /453/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.068257][T10417] loop4: detected capacity change from 0 to 2048 [ 250.219573][ T8861] ocfs2: Unmounting device (7,5) on (node local) [ 250.219725][T10417] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noinit_itable,dioread_nolock,init_itable,,errors=continue. Quota mode: none. [ 250.270581][T10407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.319275][T10417] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.378329][T10424] loop0: detected capacity change from 0 to 8 [ 250.429882][T10407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.537708][T10417] fs-verity (loop4, inode 18): Unknown hash algorithm number: 0 [ 250.673667][ T4233] tipc: Node number set to 2886997007 [ 250.763806][T10430] MTRR 1 not used [ 250.866564][T10399] loop7: detected capacity change from 0 to 40427 [ 251.007613][T10399] F2FS-fs (loop7): invalid crc value [ 251.106218][T10436] loop4: detected capacity change from 0 to 8192 [ 251.121196][T10399] F2FS-fs (loop7): Found nat_bits in checkpoint [ 251.173457][T10436] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 251.199339][T10436] REISERFS (device loop4): using ordered data mode [ 251.248034][T10436] reiserfs: using flush barriers [ 251.263388][T10399] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 251.271587][T10436] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.293798][T10453] loop0: detected capacity change from 0 to 256 [ 251.395760][T10399] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 251.408273][T10453] FAT-fs (loop0): Directory bread(block 64) failed [ 251.431067][T10436] REISERFS (device loop4): checking transaction log (loop4) [ 251.479146][T10453] FAT-fs (loop0): Directory bread(block 65) failed [ 251.493030][T10453] FAT-fs (loop0): Directory bread(block 66) failed [ 251.539493][T10453] FAT-fs (loop0): Directory bread(block 67) failed [ 251.567144][T10399] attempt to access beyond end of device [ 251.567144][T10399] loop7: rw=2049, want=45104, limit=40427 [ 251.587599][T10453] FAT-fs (loop0): Directory bread(block 68) failed [ 251.630392][T10453] FAT-fs (loop0): Directory bread(block 69) failed [ 251.653834][T10453] FAT-fs (loop0): Directory bread(block 70) failed [ 251.691385][T10453] FAT-fs (loop0): Directory bread(block 71) failed [ 251.731077][T10453] FAT-fs (loop0): Directory bread(block 72) failed [ 251.745177][T10453] FAT-fs (loop0): Directory bread(block 73) failed [ 251.746652][T10436] REISERFS (device loop4): Using tea hash to sort names [ 251.804672][T10436] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 252.874859][T10489] input: syz1 as /devices/virtual/input/input24 [ 252.888395][T10491] loop5: detected capacity change from 0 to 512 [ 252.962506][T10491] EXT4-fs (loop5): Ignoring removed orlov option [ 252.997433][T10491] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 253.055157][T10491] EXT4-fs (loop5): 1 truncate cleaned up [ 253.071898][T10491] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none. [ 253.576014][T10508] loop0: detected capacity change from 0 to 16 [ 253.611739][T10510] loop5: detected capacity change from 0 to 128 [ 253.668963][T10508] erofs: (device loop0): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 253.737156][T10508] erofs: (device loop0): mounted with root inode @ nid 36. [ 254.005639][T10526] loop4: detected capacity change from 0 to 256 [ 254.321397][ T4233] hid-generic 0005:16C0:5505.000E: item fetching failed at offset 0/2 [ 254.349532][ T4233] hid-generic: probe of 0005:16C0:5505.000E failed with error -22 [ 254.532429][T10545] loop7: detected capacity change from 0 to 8 [ 254.878433][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'. [ 254.962045][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'. [ 255.147668][T10528] loop0: detected capacity change from 0 to 32768 [ 255.171390][T10562] loop7: detected capacity change from 0 to 16 [ 255.187395][T10544] loop5: detected capacity change from 0 to 32768 [ 255.207362][T10563] Â: renamed from pim6reg1 [ 255.234144][T10562] erofs: (device loop7): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 255.282056][T10528] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 255.306787][T10528] JBD2: Ignoring recovery information on journal [ 255.595506][T10528] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 255.611488][T10544] XFS (loop5): Mounting V5 Filesystem [ 255.745704][T10544] XFS (loop5): Ending clean mount [ 255.784203][T10544] XFS (loop5): Quotacheck needed: Please wait. [ 255.829330][T10586] EXT4-fs (loop7): Ignoring removed orlov option [ 255.868797][T10583] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nombcache,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 255.876786][T10586] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 255.929214][T10583] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.945474][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.952279][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.983295][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 256.041453][T10586] EXT4-fs (loop7): 1 truncate cleaned up [ 256.055520][T10544] XFS (loop5): Quotacheck: Done. [ 256.079263][T10586] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none. [ 256.350867][ T8861] XFS (loop5): Unmounting Filesystem [ 256.613835][T10603] set_capacity_and_notify: 2 callbacks suppressed [ 256.613852][T10603] loop4: detected capacity change from 0 to 512 [ 256.646685][T10605] loop6: detected capacity change from 0 to 4096 [ 256.674744][T10603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 256.749407][T10603] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2149: bg 0: block 384: padding at end of block bitmap is not set [ 256.773045][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 256.802190][T10603] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 256.878048][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 256.909359][T10605] NILFS (loop6): invalid segment: Checksum error in segment payload [ 256.936064][T10603] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.2149: attempt to clear invalid blocks 983260 len 1 [ 256.938704][T10605] NILFS (loop6): trying rollback from an earlier position [ 257.023937][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.024127][T10605] NILFS (loop6): recovery complete [ 257.040442][T10603] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.2149: Invalid inode table block 0 in block_group 0 [ 257.069056][T10613] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.109128][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.116037][T10603] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 257.188751][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.197862][T10603] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 257.281972][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.294898][T10603] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.2149: Invalid inode table block 0 in block_group 0 [ 257.316305][T10618] loop7: detected capacity change from 0 to 1024 [ 257.323589][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.334670][T10603] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 257.358406][T10608] loop0: detected capacity change from 0 to 32768 [ 257.364669][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.465311][T10603] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.2149: mark_inode_dirty error [ 257.520637][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.561201][T10603] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 257.592877][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.606059][T10603] EXT4-fs (loop4): 1 truncate cleaned up [ 257.639183][T10603] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 257.685294][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.731567][T10626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.758027][T10603] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2149: Invalid inode bitmap blk 0 in block_group 0 [ 257.809421][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.827547][T10603] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.2149: Invalid inode table block 0 in block_group 0 [ 257.850177][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.862341][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.873051][T10603] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 257.887141][T10627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.932642][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 257.944044][T10603] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz.4.2149: mark_inode_dirty error [ 257.957947][T10627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.969154][T10603] EXT4-fs (loop4): Remounting filesystem read-only [ 258.064823][ T4227] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 258.146112][ T4227] EXT4-fs (loop4): Remounting filesystem read-only [ 258.157393][T10633] program syz.6.2161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.352283][T10641] mkiss: ax0: crc mode is auto. [ 258.398653][T10644] loop5: detected capacity change from 0 to 128 [ 258.399709][T10646] loop0: detected capacity change from 0 to 8 [ 258.531196][T10644] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 258.576527][T10644] hpfs: filesystem error: improperly stopped [ 258.592938][T10644] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 258.633189][T10644] hpfs: You really don't want any checks? You are crazy... [ 258.678234][T10644] hpfs: hpfs_map_sector(): read error [ 258.711130][T10644] hpfs: code page support is disabled [ 258.712220][T10658] loop4: detected capacity change from 0 to 8 [ 258.737124][T10644] hpfs: hpfs_map_4sectors(): unaligned read [ 258.754716][T10644] hpfs: hpfs_map_4sectors(): unaligned read [ 258.776528][T10644] hpfs: filesystem error: unable to find root dir [ 258.820151][T10658] unable to read fragment index table [ 258.863644][T10660] kvm [10659]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 258.961899][T10658] Error parsing options; rc = [-22] [ 259.040859][T10658] loop4: detected capacity change from 0 to 512 [ 259.155279][T10658] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 259.215642][T10658] EXT4-fs (loop4): mount failed [ 259.242581][T10652] loop7: detected capacity change from 0 to 32768 [ 259.537559][T10652] XFS (loop7): Mounting V5 Filesystem [ 259.670209][T10652] XFS (loop7): Ending clean mount [ 260.102575][ T9604] XFS (loop7): Unmounting Filesystem [ 260.269182][T10705] loop0: detected capacity change from 0 to 4096 [ 260.389137][T10705] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 260.658113][T10692] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 260.803296][T10692] JBD2: Ignoring recovery information on journal [ 260.954668][T10692] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 261.100905][T10714] XFS (loop5): Mounting V5 Filesystem [ 261.272359][T10714] XFS (loop5): Ending clean mount [ 261.297297][T10714] XFS (loop5): Quotacheck needed: Please wait. [ 261.370442][ T7229] ocfs2: Unmounting device (7,6) on (node local) [ 261.595547][T10714] XFS (loop5): Quotacheck: Done. [ 261.884314][ T8861] XFS (loop5): Unmounting Filesystem [ 262.086112][T10753] set_capacity_and_notify: 2 callbacks suppressed [ 262.086128][T10753] loop4: detected capacity change from 0 to 128 [ 262.275645][T10736] loop7: detected capacity change from 0 to 40427 [ 262.319965][T10736] F2FS-fs (loop7): invalid crc value [ 262.356278][T10736] F2FS-fs (loop7): Found nat_bits in checkpoint [ 262.669210][T10736] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 262.893216][ T9604] attempt to access beyond end of device [ 262.893216][ T9604] loop7: rw=2049, want=45104, limit=40427 [ 262.916511][T10772] loop4: detected capacity change from 0 to 1024 [ 262.926853][T10770] loop0: detected capacity change from 0 to 2048 [ 263.040648][T10770] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 263.280987][T10770] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 263.386340][T10770] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 263.425442][T10770] EXT4-fs (loop0): This should not happen!! Data will be lost [ 263.425442][T10770] [ 263.436238][T10770] EXT4-fs (loop0): Total free blocks count 0 [ 263.455129][T10770] EXT4-fs (loop0): Free/Dirty block details [ 263.463279][T10770] EXT4-fs (loop0): free_blocks=2415919504 [ 263.482695][T10770] EXT4-fs (loop0): dirty_blocks=32 [ 263.487956][T10770] EXT4-fs (loop0): Block reservation details [ 263.519615][T10770] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 263.581868][T10776] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 263.639328][T10776] EXT4-fs (loop0): This should not happen!! Data will be lost [ 263.639328][T10776] [ 263.727342][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.839231][T10789] loop7: detected capacity change from 0 to 128 [ 263.992044][T10787] loop5: detected capacity change from 0 to 4096 [ 264.253484][T10787] ntfs3: loop5: failed to convert "0080" to cp775 [ 264.262301][T10780] loop4: detected capacity change from 0 to 40427 [ 264.316416][T10798] loop0: detected capacity change from 0 to 2048 [ 264.347232][T10780] F2FS-fs (loop4): invalid crc value [ 264.369441][ T2286] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 264.398655][T10780] F2FS-fs (loop4): Found nat_bits in checkpoint [ 264.401653][T10798] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 264.491230][T10798] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 264.543081][T10798] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 264.559155][T10798] UDF-fs: Scanning with blocksize 512 failed [ 264.576442][T10798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.580769][T10780] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 264.641478][T10780] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 264.679136][ T2286] usb 8-1: Using ep0 maxpacket: 32 [ 264.731720][T10780] attempt to access beyond end of device [ 264.731720][T10780] loop4: rw=2049, want=45104, limit=40427 [ 264.842750][ T2286] usb 8-1: config index 0 descriptor too short (expected 19, got 18) [ 264.895704][T10814] loop0: detected capacity change from 0 to 1024 [ 264.996938][T10814] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 265.015469][T10814] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.044897][ T2286] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 265.074953][ T2286] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.088693][ T2286] usb 8-1: Product: syz [ 265.093157][ T2286] usb 8-1: Manufacturer: syz [ 265.098543][ T2286] usb 8-1: SerialNumber: syz [ 265.105880][ T2286] usb 8-1: config 0 descriptor?? [ 265.114598][T10814] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.2229: lblock 0 mapped to illegal pblock 0 (length 1) [ 265.161191][ T2286] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 265.171310][ T2286] dvb-usb: bulk message failed: -22 (2/0) [ 265.182838][ T2286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.209406][ T2286] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 265.227464][ T2286] usb 8-1: media controller created [ 265.256917][ T2286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.278024][T10824] siw: device registration error -23 [ 265.305465][ T2286] usb 8-1: selecting invalid altsetting 7 [ 265.335818][ T2286] cxusb: set interface failed [ 265.342136][ T2286] dvb-usb: bulk message failed: -22 (1/0) [ 265.365929][T10794] cxusb: i2c rd: len=80 is too big! [ 265.365929][T10794] [ 265.395086][ T2286] DVB: Unable to find symbol lgdt330x_attach() [ 265.409113][ T2286] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 265.574151][ T2286] rc_core: Couldn't load IR keymap rc-dvico-portable [ 265.582215][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2239'. [ 265.609345][ T2286] Registered IR keymap rc-empty [ 265.631526][ T2286] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 265.654523][T10846] loop6: detected capacity change from 0 to 128 [ 265.683951][ T2286] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input25 [ 265.737271][ T2286] dvb-usb: schedule remote query interval to 100 msecs. [ 265.785416][ T2286] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 265.839840][ T2286] usb 8-1: USB disconnect, device number 4 [ 265.985782][T10860] sd 0:0:1:0: PR command failed: 2 [ 265.990765][ T2286] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 266.004695][T10860] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 266.029590][T10860] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 266.355606][T10867] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6) [ 266.416002][T10867] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 266.426338][ T7350] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 266.507354][T10867] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.2253: Failed to acquire dquot type 1 [ 266.580611][T10867] EXT4-fs (loop0): 1 truncate cleaned up [ 266.622282][T10867] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.673330][T10867] ext4 filesystem being mounted at /488/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.726101][T10888] program syz.7.2262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.743917][T10867] udc-core: couldn't find an available UDC or it's busy [ 266.763551][T10890] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2263'. [ 266.779489][T10867] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.869493][ T7350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 266.888439][T10878] F2FS-fs (loop4): invalid crc value [ 266.904760][ T7350] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.926535][ T7350] usb 6-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 266.932820][T10878] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 266.936348][ T7350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.001292][ T7350] usb 6-1: config 0 descriptor?? [ 267.049343][T10861] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 267.274502][T10878] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 267.284763][T10861] udc-core: couldn't find an available UDC or it's busy [ 267.339532][T10861] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 267.356452][T10901] set_capacity_and_notify: 3 callbacks suppressed [ 267.356467][T10901] loop6: detected capacity change from 0 to 4096 [ 267.555470][T10878] attempt to access beyond end of device [ 267.555470][T10878] loop4: rw=2049, want=45104, limit=40427 [ 267.570714][T10910] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.653579][ T7350] wacom 0003:056A:00EC.000F: unknown main item tag 0xd [ 267.672079][ T7350] wacom 0003:056A:00EC.000F: unknown main item tag 0x4 [ 267.723135][ T7350] wacom 0003:056A:00EC.000F: hidraw0: USB HID v0.09 Device [HID 056a:00ec] on usb-dummy_hcd.5-1/input0 [ 267.831694][T10915] udevd[10915]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 267.866952][ T4198] attempt to access beyond end of device [ 267.866952][ T4198] loop4: rw=2049, want=45112, limit=40427 [ 267.973977][ T4233] usb 6-1: USB disconnect, device number 11 [ 268.224814][T10921] loop7: detected capacity change from 0 to 8192 [ 268.380047][T10921] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 268.417924][T10921] REISERFS (device loop7): using ordered data mode [ 268.461411][T10921] reiserfs: using flush barriers [ 268.482762][T10921] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 268.506661][T10921] REISERFS (device loop7): checking transaction log (loop7) [ 268.524061][T10939] program syz.0.2283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.574145][T10921] REISERFS (device loop7): Using r5 hash to sort names [ 268.608495][T10921] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 268.820893][T10951] udc-core: couldn't find an available UDC or it's busy [ 268.858541][T10951] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 268.922584][T10945] loop4: detected capacity change from 0 to 32768 [ 268.986840][T10956] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2291'. [ 269.032336][T10945] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 269.052292][T10945] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 269.101501][T10945] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 269.118698][ T2286] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 269.129844][ T2286] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 269.309610][ T2286] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 179ms [ 269.318685][ T2286] gfs2: fsid=syz:syz.0: jid=0: Done [ 269.358320][T10945] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 269.804168][T10980] udc-core: couldn't find an available UDC or it's busy [ 269.834516][ T4456] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 269.865710][T10980] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 269.991721][T10960] loop6: detected capacity change from 0 to 32768 [ 270.095104][T10960] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop6 scanned by syz.6.2293 (10960) [ 270.127807][T10960] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 270.141136][T10960] BTRFS info (device loop6): using free space tree [ 270.147944][T10960] BTRFS info (device loop6): has skinny extents [ 270.209346][ T4456] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.234965][ T4456] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.238882][T11003] udevd[11003]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 270.299116][T10960] BTRFS info (device loop6): enabling ssd optimizations [ 270.309429][ T2286] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 270.339320][ T4456] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.374621][ T4456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.408923][ T4456] usb 6-1: SerialNumber: syz [ 270.431447][T11008] udevd[11008]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 270.495877][T11010] loop0: detected capacity change from 0 to 256 [ 270.569223][ T2286] usb 8-1: Using ep0 maxpacket: 32 [ 270.622935][T11010] FAT-fs (loop0): Directory bread(block 64) failed [ 270.640864][T11010] FAT-fs (loop0): Directory bread(block 65) failed [ 270.648204][T11010] FAT-fs (loop0): Directory bread(block 66) failed [ 270.662031][T11010] FAT-fs (loop0): Directory bread(block 67) failed [ 270.668894][T11010] FAT-fs (loop0): Directory bread(block 68) failed [ 270.686279][T11010] FAT-fs (loop0): Directory bread(block 69) failed [ 270.696320][T11010] FAT-fs (loop0): Directory bread(block 70) failed [ 270.709397][ T2286] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.728333][ T2286] usb 8-1: config 0 has no interface number 0 [ 270.735418][ T2286] usb 8-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 270.739258][T11010] FAT-fs (loop0): Directory bread(block 71) failed [ 270.769900][ T2286] usb 8-1: config 0 interface 1 has no altsetting 0 [ 270.771540][ T4456] usb 6-1: 0:2 : does not exist [ 270.791904][T11010] FAT-fs (loop0): Directory bread(block 72) failed [ 270.796984][T11007] loop4: detected capacity change from 0 to 40427 [ 270.805491][T11010] FAT-fs (loop0): Directory bread(block 73) failed [ 270.877100][T11007] F2FS-fs (loop4): invalid crc value [ 270.893323][ T4456] usb 6-1: USB disconnect, device number 12 [ 270.932314][T11007] F2FS-fs (loop4): Found nat_bits in checkpoint [ 270.989288][ T2286] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 271.002625][ T2286] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.022729][ T2286] usb 8-1: Product: syz [ 271.027030][ T2286] usb 8-1: Manufacturer: syz [ 271.037572][ T2286] usb 8-1: SerialNumber: syz [ 271.056052][ T2286] usb 8-1: config 0 descriptor?? [ 271.061497][T11007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 271.183926][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.236380][ T4198] attempt to access beyond end of device [ 271.236380][ T4198] loop4: rw=2049, want=45104, limit=40427 [ 271.371250][ T2286] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 271.374628][T11016] udc-core: couldn't find an available UDC or it's busy [ 271.456242][T11016] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 271.468765][ T2286] cx231xx 8-1:0.1: Failed to read PCB config [ 271.504539][ T2286] cx231xx: probe of 8-1:0.1 failed with error -71 [ 271.552140][ T2286] usb 8-1: USB disconnect, device number 5 [ 272.220548][T11053] udc-core: couldn't find an available UDC or it's busy [ 272.257696][T11053] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 272.329170][ T5353] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 272.350219][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 272.633958][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2330'. [ 272.721229][T11068] loop4: detected capacity change from 0 to 32768 [ 272.739506][ T5353] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.748215][ T5353] usb 8-1: config 0 has no interface number 0 [ 272.778280][T11068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2329 (11068) [ 272.874238][T11068] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 272.881900][T11066] loop6: detected capacity change from 0 to 40427 [ 272.928948][T11068] BTRFS info (device loop4): setting nodatasum [ 272.933582][T11066] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 272.937974][T11068] BTRFS info (device loop4): force zlib compression, level 3 [ 272.970677][T11066] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 272.980004][ T5353] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 272.993737][T11068] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 272.995706][ T5353] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.015879][T11077] udevd[11077]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 273.016222][T11066] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x1ffff [ 273.040962][T11068] BTRFS info (device loop4): use lzo compression, level 0 [ 273.040995][T11068] BTRFS info (device loop4): turning on flush-on-commit [ 273.041012][T11068] BTRFS info (device loop4): enabling auto defrag [ 273.041051][T11068] BTRFS info (device loop4): max_inline at 4096 [ 273.041072][T11068] BTRFS info (device loop4): using free space tree [ 273.041085][T11068] BTRFS info (device loop4): has skinny extents [ 273.094390][ T5353] usb 8-1: Product: syz [ 273.103180][T11080] loop0: detected capacity change from 0 to 256 [ 273.110500][ T5353] usb 8-1: Manufacturer: syz [ 273.116110][ T5353] usb 8-1: SerialNumber: syz [ 273.129818][ T5353] usb 8-1: config 0 descriptor?? [ 273.139424][T11066] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x6 [ 273.185509][T11066] F2FS-fs (loop6): invalid crc value [ 273.212582][T11089] udevd[11089]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 273.262454][T11066] F2FS-fs (loop6): Found nat_bits in checkpoint [ 273.400128][ T5353] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 273.425323][T11066] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 273.434615][T10118] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 273.451559][ T5353] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 273.467865][T11066] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 273.467872][T11068] BTRFS info (device loop4): enabling ssd optimizations [ 273.490548][ T5353] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 273.524691][ T5353] usb 8-1: media controller created [ 273.621490][ T5353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.674975][T11066] attempt to access beyond end of device [ 273.674975][T11066] loop6: rw=2049, want=45104, limit=40427 [ 273.729555][T10118] usb 6-1: Using ep0 maxpacket: 16 [ 273.749457][ T5353] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 273.762364][ T4445] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4445) [ 273.821334][T11113] udevd[11113]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 273.847631][ T5353] usb 8-1: USB disconnect, device number 6 [ 273.874447][T10118] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.907416][T10118] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 273.929330][T10118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.951245][T10118] usb 6-1: config 0 descriptor?? [ 274.045480][T11110] loop0: detected capacity change from 0 to 32768 [ 274.311767][T11110] JBD2: Ignoring recovery information on journal [ 274.360685][T11118] loop7: detected capacity change from 0 to 1764 [ 274.463868][T10118] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 274.466916][T11120] loop4: detected capacity change from 0 to 8192 [ 274.499122][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.518648][T11110] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 274.589088][T11120] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 274.638630][T11120] REISERFS (device loop4): using ordered data mode [ 274.658440][T11120] reiserfs: using flush barriers [ 274.670964][T11120] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 274.793251][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 274.799540][T11120] REISERFS (device loop4): checking transaction log (loop4) [ 274.876978][T11120] REISERFS (device loop4): Using r5 hash to sort names [ 274.901229][T10118] usb 6-1: USB disconnect, device number 13 [ 274.911904][T11120] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 274.931839][T11127] device veth1_to_team entered promiscuous mode [ 274.952589][T11127] device veth1_to_team left promiscuous mode [ 274.977792][T11120] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 275.054952][T11120] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 275.089916][T11120] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 275.136219][T11120] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 275.431430][T11138] loop0: detected capacity change from 0 to 1024 [ 275.501250][T11142] size and base must be multiples of 4 kiB [ 275.513962][T11142] CPU: 1 PID: 11142 Comm: syz.5.2350 Not tainted syzkaller #0 [ 275.522215][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 275.535746][T11142] Call Trace: [ 275.539138][T11142] [ 275.542355][T11142] dump_stack_lvl+0x188/0x250 [ 275.547251][T11142] ? show_regs_print_info+0x20/0x20 [ 275.552575][T11142] ? load_image+0x410/0x410 [ 275.557117][T11142] ? __might_fault+0xb3/0x110 [ 275.561912][T11142] mtrr_del+0x81/0xb0 [ 275.566085][T11142] mtrr_ioctl+0x998/0x1140 [ 275.570717][T11142] ? mtrr_close+0x1f0/0x1f0 [ 275.575362][T11142] ? mtrr_close+0x1f0/0x1f0 [ 275.580479][T11142] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 275.586279][T11142] ? proc_reg_poll+0x280/0x280 [ 275.591469][T11142] __se_sys_ioctl+0xfa/0x170 [ 275.596364][T11142] do_syscall_64+0x4c/0xa0 [ 275.601200][T11142] ? clear_bhb_loop+0x30/0x80 [ 275.606400][T11142] ? clear_bhb_loop+0x30/0x80 [ 275.611690][T11142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.618421][T11142] RIP: 0033:0x7f005c7d2f99 [ 275.622891][T11142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.645679][T11142] RSP: 002b:00007f005aa2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.654663][T11142] RAX: ffffffffffffffda RBX: 00007f005ca5afa0 RCX: 00007f005c7d2f99 [ 275.663178][T11142] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003 [ 275.672211][T11142] RBP: 00007f005c869ec4 R08: 0000000000000000 R09: 0000000000000000 [ 275.681338][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.689810][T11142] R13: 00007f005ca5b038 R14: 00007f005ca5afa0 R15: 00007fff481f2ff8 [ 275.699210][T11142] [ 275.843878][T11153] input: syz1 as /devices/virtual/input/input29 [ 275.854279][ T9] hfsplus: bad catalog file entry [ 275.886984][ T9] hfsplus: b-tree write err: -5, ino 3 [ 276.408598][T11172] sp0: Synchronizing with TNC [ 276.509668][T11148] loop7: detected capacity change from 0 to 32768 [ 276.621573][T11148] XFS (loop7): Mounting V5 Filesystem [ 276.630412][T11179] loop4: detected capacity change from 0 to 2048 [ 276.689154][T11179] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 276.774100][T11148] XFS (loop7): Ending clean mount [ 276.844800][T11190] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.923997][T11155] loop5: detected capacity change from 0 to 32768 [ 277.075810][ T9604] XFS (loop7): Unmounting Filesystem [ 277.367730][T11168] XFS (loop0): Mounting V5 Filesystem [ 277.546442][T11168] XFS (loop0): Ending clean mount [ 277.594803][T11221] bridge0: port 3(syz_tun) entered blocking state [ 277.630910][T11168] XFS (loop0): Quotacheck needed: Please wait. [ 277.694071][T11221] bridge0: port 3(syz_tun) entered disabled state [ 277.843322][T11168] XFS (loop0): Quotacheck: Done. [ 277.919364][T11226] set_capacity_and_notify: 1 callbacks suppressed [ 277.919383][T11226] loop4: detected capacity change from 0 to 8192 [ 277.965892][ T4185] XFS (loop0): Unmounting Filesystem [ 277.978646][T11228] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 277.991455][T11228] comedi comedi1: 8255: I/O port conflict (0xe,4) [ 277.998143][T11228] comedi comedi1: 8255: I/O port conflict (0x840006,4) [ 278.047750][T11228] comedi comedi1: 8255: I/O port conflict (0x7ffffffe,4) [ 278.090044][ T26] audit: type=1800 audit(1785417260.680:79): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2378" name="file2" dev="loop4" ino=1048738 res=0 errno=0 [ 278.094325][T11228] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 278.135942][T11226] attempt to access beyond end of device [ 278.135942][T11226] loop4: rw=0, want=57848, limit=8192 [ 278.160436][T11230] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2370'. [ 278.188001][T11226] Buffer I/O error on dev loop4, logical block 57847, async page read [ 278.194819][T11228] comedi comedi1: 8255: I/O port conflict (0x8000006,4) [ 278.224369][T11228] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 278.248169][T11228] comedi comedi1: 8255: I/O port conflict (0xfffffffffeffffff,4) [ 278.278527][T11228] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 278.304983][T11228] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 278.329174][T11228] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 278.356684][T11228] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 278.368050][T11228] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 278.374717][T11228] comedi comedi1: 8255: I/O port conflict (0x4007a,4) [ 278.399259][T11228] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 278.416051][T11228] comedi comedi1: 8255: I/O port conflict (0x7fff,4) [ 278.431438][T11223] loop5: detected capacity change from 0 to 40427 [ 278.438890][T11228] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 278.453438][T11228] comedi comedi1: 8255: I/O port conflict (0xeb0cab5,4) [ 278.494694][T11223] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 278.510183][T11228] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 278.524731][T11223] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 278.547885][T11234] loop7: detected capacity change from 0 to 4096 [ 278.557618][T11228] comedi comedi1: 8255: I/O port conflict (0x85,4) [ 278.578674][T11228] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 278.579660][ T4459] Bluetooth: hci2: command 0x0406 tx timeout [ 278.616284][T11223] F2FS-fs (loop5): invalid crc value [ 278.637806][T11228] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 278.656216][T11228] comedi comedi1: 8255: I/O port conflict (0x800a6b5,4) [ 278.677997][T11223] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 278.742255][T11234] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 278.900094][T11223] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 278.907598][T11223] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 278.923821][T11245] loop6: detected capacity change from 0 to 2048 [ 278.945763][ T4227] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 278.969489][ T5353] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.979883][ T9604] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 278.986452][ T9604] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 279.000029][ T9604] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 279.016701][ T4227] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 279.033430][ T8861] attempt to access beyond end of device [ 279.033430][ T8861] loop5: rw=2049, want=45104, limit=40427 [ 279.048924][ T9604] ntfs3: loop7: ntfs_evict_inode r=3 failed, -22. [ 279.082644][T11245] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.289400][ T5353] usb 5-1: Using ep0 maxpacket: 8 [ 279.325084][T11257] loop0: detected capacity change from 0 to 64 [ 279.439362][ T5353] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 279.467155][T11257] hfs: bad catalog entry type 0 [ 279.473307][ T5353] usb 5-1: config 0 has no interface number 0 [ 279.636241][T11273] netlink: 'syz.7.2396': attribute type 1 has an invalid length. [ 279.659680][ T5353] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 279.679088][ T5353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.692642][ T5353] usb 5-1: Product: syz [ 279.701643][ T5353] usb 5-1: Manufacturer: syz [ 279.711209][ T5353] usb 5-1: SerialNumber: syz [ 279.725455][ T5353] usb 5-1: config 0 descriptor?? [ 279.770985][T11275] serio: Serial port ptm0 [ 279.799221][ T4459] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 279.917747][T11286] kvm [11285]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xfffffffffffffeb4 [ 280.029355][ T5353] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 280.042688][ T5353] usb 5-1: No valid video chain found. [ 280.058730][ T5353] usb 5-1: USB disconnect, device number 16 [ 280.169205][ T4459] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 280.184855][ T4459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 280.197058][ T4459] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 280.212384][ T4459] usb 6-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 280.228765][ T4459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.253716][ T4459] usb 6-1: config 0 descriptor?? [ 280.279408][T11264] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 280.749354][T11304] loop6: detected capacity change from 0 to 65536 [ 280.794050][ T4459] wacom 0003:056A:00E5.0011: ignoring exceeding usage max [ 280.823342][ T4459] wacom 0003:056A:00E5.0011: unknown main item tag 0x0 [ 280.836573][ T4459] wacom 0003:056A:00E5.0011: unknown main item tag 0x2 [ 280.876692][ T4459] wacom 0003:056A:00E5.0011: hidraw0: USB HID v0.05 Device [HID 056a:00e5] on usb-dummy_hcd.5-1/input0 [ 280.943679][T11304] XFS (loop6): Mounting V5 Filesystem [ 281.035482][ T5353] usb 6-1: USB disconnect, device number 14 [ 281.075399][T11326] device team0 entered promiscuous mode [ 281.107692][T11326] device team_slave_0 entered promiscuous mode [ 281.110178][T11331] udevd[11331]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 281.132132][T11326] device team_slave_1 entered promiscuous mode [ 281.186530][T11326] device team0 left promiscuous mode [ 281.197129][T11326] device team_slave_0 left promiscuous mode [ 281.204881][T11304] XFS (loop6): Ending clean mount [ 281.217156][T11326] device team_slave_1 left promiscuous mode [ 281.255353][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2420'. [ 281.269676][ T26] audit: type=1800 audit(1785417263.850:80): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2410" name="file1" dev="loop6" ino=70 res=0 errno=0 [ 281.297486][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2420'. [ 281.361946][T11307] loop7: detected capacity change from 0 to 40427 [ 281.393936][ T7229] XFS (loop6): Unmounting Filesystem [ 281.491916][T11307] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 281.595090][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.611431][T11307] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 281.637288][ C0] ------------[ cut here ]------------ [ 281.651998][T11307] F2FS-fs (loop7): build fault injection attr: rate: 17008, type: 0x1ffff [ 281.655300][ C0] WARNING: CPU: 0 PID: 3558 at net/mac80211/tx.c:4876 __ieee80211_beacon_get+0x178a/0x1ff0 [ 281.665405][T11307] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x6 [ 281.677122][ C0] Modules linked in: [ 281.677142][ C0] CPU: 0 PID: 3558 Comm: udevd Not tainted syzkaller #0 [ 281.696872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 281.708737][ C0] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 281.713112][T11307] F2FS-fs (loop7): invalid crc value [ 281.716340][ C0] Code: 26 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 82 68 26 f8 0f 0b e9 16 ef ff ff e8 76 68 26 f8 <0f> 0b e9 7c f2 ff ff e8 3a 80 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 281.744916][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 281.751098][ C0] RAX: ffffffff8952943a RBX: ffff888060697400 RCX: ffff88807d178000 [ 281.760058][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.768694][ C0] RBP: ffffc90000007af8 R08: ffff88807d178000 R09: 0000000000000003 [ 281.776952][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 281.785302][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 281.787267][T11307] F2FS-fs (loop7): Found nat_bits in checkpoint [ 281.794077][ C0] FS: 00007fe2e7ceb880(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 281.794102][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.794113][ C0] CR2: 0000200000000400 CR3: 000000002a69e000 CR4: 00000000003506f0 [ 281.794127][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.833840][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.842410][ C0] Call Trace: [ 281.844735][T11307] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 281.846224][ C0] [ 281.855749][T11307] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 281.857025][ C0] ? verify_lock_unused+0x140/0x140 [ 281.857059][ C0] ? verify_lock_unused+0x140/0x140 [ 281.876390][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 281.883023][ C0] ? verify_lock_unused+0x140/0x140 [ 281.889021][ C0] ? verify_lock_unused+0x140/0x140 [ 281.894836][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 281.901302][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 281.907028][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 281.907464][T11307] attempt to access beyond end of device [ 281.907464][T11307] loop7: rw=2049, want=45104, limit=40427 [ 281.912673][ C0] __iterate_interfaces+0x225/0x4c0 [ 281.912704][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 281.912734][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 281.912752][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 281.912774][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 281.912793][ C0] ? hw_scan_work+0xef0/0xef0 [ 281.912808][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 281.967222][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 281.973287][ C0] hrtimer_run_softirq+0x176/0x240 [ 281.978670][ C0] handle_softirqs+0x336/0x830 [ 281.983557][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 281.989515][ C0] ? do_softirq+0x210/0x210 [ 281.994654][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 282.000061][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 282.005402][ C0] __irq_exit_rcu+0x13b/0x230 [ 282.010598][ C0] ? irq_exit_rcu+0x20/0x20 [ 282.015705][ C0] irq_exit_rcu+0x5/0x20 [ 282.020356][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 282.026200][ C0] [ 282.029432][ C0] [ 282.033001][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 282.039246][ C0] RIP: 0010:unwind_next_frame+0x111b/0x1cf0 [ 282.045177][ C0] Code: 00 00 00 42 80 3c 28 00 74 05 e8 30 00 89 00 4c 8b 7b 38 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 15 00 89 00 <4c> 8b 63 08 4c 8d 73 10 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 [ 282.067269][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.073623][ C0] RSP: 0018:ffffc90002e9f8d0 EFLAGS: 00000246 [ 282.080155][ C0] RAX: 1ffff920005d3f2e RBX: ffffc90002e9f968 RCX: 0000000000000001 [ 282.088631][ C0] RDX: ffffc90002e9f9a8 RSI: ffffc90002e9fd88 RDI: ffffc90002e9f970 [ 282.097179][ C0] RBP: dffffc0000000000 R08: ffffc90002e9fd88 R09: ffffc90002e9f9b8 [ 282.105546][ C0] R10: dffffc0000000000 R11: fffff520005d3f39 R12: ffffffff8e0f86ed [ 282.113998][ C0] R13: dffffc0000000000 R14: ffffc90002e9f99d R15: ffffc90002e9fd98 [ 282.122397][ C0] ? kmem_cache_alloc+0x15d/0x280 [ 282.127465][ C0] ? stack_trace_save+0xf0/0xf0 [ 282.133826][ C0] arch_stack_walk+0x10c/0x140 [ 282.138731][ C0] ? getname_flags+0xb7/0x4f0 [ 282.139366][T11348] loop4: detected capacity change from 0 to 1024 [ 282.143594][ C0] stack_trace_save+0xa6/0xf0 [ 282.155646][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 282.161778][ C0] ? stack_trace_save+0xa6/0xf0 [ 282.167520][ C0] ? memset+0x1e/0x40 [ 282.171635][ C0] __kasan_slab_alloc+0x92/0xc0 [ 282.176769][ C0] ? __kasan_slab_alloc+0x92/0xc0 [ 282.182114][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 282.187693][ C0] ? kmem_cache_alloc+0x15d/0x280 [ 282.193087][ C0] slab_post_alloc_hook+0x4c/0x380 [ 282.198257][ C0] ? getname_flags+0xb7/0x4f0 [ 282.203106][ C0] ? getname_flags+0xb7/0x4f0 [ 282.207916][ C0] kmem_cache_alloc+0x15d/0x280 [ 282.212997][ C0] getname_flags+0xb7/0x4f0 [ 282.217531][ C0] user_path_at_empty+0x2a/0x190 [ 282.222697][ C0] do_readlinkat+0xd9/0x490 [ 282.227352][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 282.233641][ C0] ? cp_new_stat+0x540/0x540 [ 282.238273][ C0] ? lock_chain_count+0x20/0x20 [ 282.243393][ C0] __x64_sys_readlink+0x7b/0x90 [ 282.248522][ C0] do_syscall_64+0x4c/0xa0 [ 282.253034][ C0] ? clear_bhb_loop+0x30/0x80 [ 282.257738][ C0] ? clear_bhb_loop+0x30/0x80 [ 282.262731][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.268917][ C0] RIP: 0033:0x7fe2e7e473a7 [ 282.273619][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 282.293847][ C0] RSP: 002b:00007ffc5a44bf58 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 282.302883][ C0] RAX: ffffffffffffffda RBX: 00007ffc5a44c430 RCX: 00007fe2e7e473a7 [ 282.311001][ C0] RDX: 0000000000000400 RSI: 00007ffc5a44bf60 RDI: 00007ffc5a44c430 [ 282.319160][ C0] RBP: 00007ffc5a44bf60 R08: 000055f422199424 R09: 0000000000000001 [ 282.327152][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 282.335306][ C0] R13: 0000000000000100 R14: 000055f3e363abe0 R15: 00007ffc5a44cec0 [ 282.343494][ C0] [ 282.346662][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.354297][ C0] CPU: 0 PID: 3558 Comm: udevd Not tainted syzkaller #0 [ 282.361418][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 282.373322][ C0] Call Trace: [ 282.376884][ C0] [ 282.380290][ C0] dump_stack_lvl+0x188/0x250 [ 282.385151][ C0] ? show_regs_print_info+0x20/0x20 [ 282.391327][ C0] ? load_image+0x410/0x410 [ 282.396490][ C0] panic+0x2f8/0x850 [ 282.400397][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 282.405014][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 282.410971][ C0] __warn+0x248/0x2b0 [ 282.414976][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 282.421296][ C0] report_bug+0x1b9/0x2e0 [ 282.426392][ C0] handle_bug+0x3a/0x70 [ 282.430688][ C0] exc_invalid_op+0x16/0x40 [ 282.435473][ C0] asm_exc_invalid_op+0x16/0x20 [ 282.441577][ C0] RIP: 0010:__ieee80211_beacon_get+0x178a/0x1ff0 [ 282.447917][ C0] Code: 26 f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 82 68 26 f8 0f 0b e9 16 ef ff ff e8 76 68 26 f8 <0f> 0b e9 7c f2 ff ff e8 3a 80 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 282.468091][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 282.474326][ C0] RAX: ffffffff8952943a RBX: ffff888060697400 RCX: ffff88807d178000 [ 282.482708][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.490904][ C0] RBP: ffffc90000007af8 R08: ffff88807d178000 R09: 0000000000000003 [ 282.499545][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: f8f8f8f8f8f8f8f8 [ 282.507878][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 282.516443][ C0] ? __ieee80211_beacon_get+0x178a/0x1ff0 [ 282.522205][ C0] ? verify_lock_unused+0x140/0x140 [ 282.527972][ C0] ? verify_lock_unused+0x140/0x140 [ 282.533889][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 282.540177][ C0] ? verify_lock_unused+0x140/0x140 [ 282.545407][ C0] ? verify_lock_unused+0x140/0x140 [ 282.551939][ C0] ? ieee80211_get_buffered_bc+0x75e/0x860 [ 282.557972][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 282.563616][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 282.569267][ C0] __iterate_interfaces+0x225/0x4c0 [ 282.574545][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 282.581100][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 282.587539][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 282.594747][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 282.600091][ C0] ? hw_scan_work+0xef0/0xef0 [ 282.605013][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 282.610386][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 282.615841][ C0] hrtimer_run_softirq+0x176/0x240 [ 282.621198][ C0] handle_softirqs+0x336/0x830 [ 282.626632][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 282.631702][ C0] ? do_softirq+0x210/0x210 [ 282.636238][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 282.641456][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 282.646854][ C0] __irq_exit_rcu+0x13b/0x230 [ 282.652022][ C0] ? irq_exit_rcu+0x20/0x20 [ 282.656731][ C0] irq_exit_rcu+0x5/0x20 [ 282.661469][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 282.667130][ C0] [ 282.670322][ C0] [ 282.673676][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 282.681253][ C0] RIP: 0010:unwind_next_frame+0x111b/0x1cf0 [ 282.687695][ C0] Code: 00 00 00 42 80 3c 28 00 74 05 e8 30 00 89 00 4c 8b 7b 38 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 15 00 89 00 <4c> 8b 63 08 4c 8d 73 10 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 [ 282.709794][ C0] RSP: 0018:ffffc90002e9f8d0 EFLAGS: 00000246 [ 282.716543][ C0] RAX: 1ffff920005d3f2e RBX: ffffc90002e9f968 RCX: 0000000000000001 [ 282.725724][ C0] RDX: ffffc90002e9f9a8 RSI: ffffc90002e9fd88 RDI: ffffc90002e9f970 [ 282.734944][ C0] RBP: dffffc0000000000 R08: ffffc90002e9fd88 R09: ffffc90002e9f9b8 [ 282.743743][ C0] R10: dffffc0000000000 R11: fffff520005d3f39 R12: ffffffff8e0f86ed [ 282.751975][ C0] R13: dffffc0000000000 R14: ffffc90002e9f99d R15: ffffc90002e9fd98 [ 282.760616][ C0] ? kmem_cache_alloc+0x15d/0x280 [ 282.765747][ C0] ? stack_trace_save+0xf0/0xf0 [ 282.770779][ C0] arch_stack_walk+0x10c/0x140 [ 282.775552][ C0] ? getname_flags+0xb7/0x4f0 [ 282.780678][ C0] stack_trace_save+0xa6/0xf0 [ 282.785617][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 282.791674][ C0] ? stack_trace_save+0xa6/0xf0 [ 282.796713][ C0] ? memset+0x1e/0x40 [ 282.800896][ C0] __kasan_slab_alloc+0x92/0xc0 [ 282.806481][ C0] ? __kasan_slab_alloc+0x92/0xc0 [ 282.812430][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 282.818542][ C0] ? kmem_cache_alloc+0x15d/0x280 [ 282.824231][ C0] slab_post_alloc_hook+0x4c/0x380 [ 282.829467][ C0] ? getname_flags+0xb7/0x4f0 [ 282.834150][ C0] ? getname_flags+0xb7/0x4f0 [ 282.840086][ C0] kmem_cache_alloc+0x15d/0x280 [ 282.845167][ C0] getname_flags+0xb7/0x4f0 [ 282.849967][ C0] user_path_at_empty+0x2a/0x190 [ 282.855550][ C0] do_readlinkat+0xd9/0x490 [ 282.861124][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 282.868616][ C0] ? cp_new_stat+0x540/0x540 [ 282.874149][ C0] ? lock_chain_count+0x20/0x20 [ 282.881732][ C0] __x64_sys_readlink+0x7b/0x90 [ 282.886787][ C0] do_syscall_64+0x4c/0xa0 [ 282.892184][ C0] ? clear_bhb_loop+0x30/0x80 [ 282.897315][ C0] ? clear_bhb_loop+0x30/0x80 [ 282.902730][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.908747][ C0] RIP: 0033:0x7fe2e7e473a7 [ 282.913274][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 282.933427][ C0] RSP: 002b:00007ffc5a44bf58 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 282.942071][ C0] RAX: ffffffffffffffda RBX: 00007ffc5a44c430 RCX: 00007fe2e7e473a7 [ 282.950597][ C0] RDX: 0000000000000400 RSI: 00007ffc5a44bf60 RDI: 00007ffc5a44c430 [ 282.959249][ C0] RBP: 00007ffc5a44bf60 R08: 000055f422199424 R09: 0000000000000001 [ 282.968108][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 282.976523][ C0] R13: 0000000000000100 R14: 000055f3e363abe0 R15: 00007ffc5a44cec0 [ 282.985102][ C0] [ 282.988981][ C0] Kernel Offset: disabled [ 282.994136][ C0] Rebooting in 86400 seconds..