last executing test programs: 1m58.471848697s ago: executing program 0 (id=205): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCGETS2(r0, 0x8910, &(0x7f0000000040)) 1m58.211234035s ago: executing program 0 (id=208): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[], 0x0) 1m58.061273715s ago: executing program 0 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f00000000c0), &(0x7f0000000280)=""/225}, 0x20) 1m57.946255763s ago: executing program 0 (id=213): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x20000c, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1m57.321567586s ago: executing program 0 (id=217): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fb8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 1m55.269681436s ago: executing program 0 (id=230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m54.973673007s ago: executing program 32 (id=230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.922062571s ago: executing program 5 (id=1539): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000040)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRES16, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRES64=r0, @ANYRESHEX], 0x0, 0x0, &(0x7f0000000000)) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3.631623941s ago: executing program 5 (id=1544): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.368700847s ago: executing program 1 (id=1546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x48080) 2.368520627s ago: executing program 1 (id=1547): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@host, 0x3db3}, @local, 0x0, 0x200, 0x6, 0x800052e, 0x0, 0x1000, 0xe278}) 2.345941589s ago: executing program 1 (id=1548): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x3, &(0x7f00000000c0)={0x11, "cc9efc7ddb01702fa900"}}) 1.527635845s ago: executing program 3 (id=1554): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00d77fbe9e57a434f929f74bee0c10f9cecfc3ead3b77b247312d0ad8ba2674f257f47c684e0aec5cb3009a5028bd4f70eef4b274a5c38fec4079e5f43b598a9e97e460422eae305e57ae786347345f1de885fa6957858a8b0377854b8190607303abd6aee330a8caac51797b7a15b53acc98e0d526b12f36eb277aead8d55f85523364369522d5f49efa95367a99d00d2c3049e41e7d9ffffffd7a5af9bb021ff2474356bb2c975e3e8f87f1064a983db4d47057c94053fbf53a474536fe59f83bfc1843bd6449160b0c4842dbbeef31ac9bd265bf70f693c8c0c0b783b82271433a5d3d3bcd4c7f801004830262a3c414bfbe76d431c2001567510239dd2f2bbc049000000000000000000000092675a0b4430360148a763030694149b66a254a61956fb1b6bcd6cfc49f4f84694e73ed9c4b4d6b47fc89f36d8e5fd41d863a5bdb87562aa6e346b0b210786e0ae945cf920870ccd9657e2d7639d2d2bc46706950fc40406f22ac773d5043bddfe88faba3a973a67a0a8c64c95ba285267c76a7a31636f1e09ea085c771b3aae335b25fcb6b11358349c0f04abad13df1d0a2f732b059707f13b539692c4fc930ccae68178bd95cfea76185a8146ff55219ed65edb3f89f2fd4112fa45eaaee3ad02b5f2ff9c85453a6af8f4a408bc729aec69f33404b61ad21da92b8c813ca3de184e899a596543ca6d9be9f93840870ccda17746cd6461ad770ab337102b891bcd84c1596a60db767d62f38f12b17636d1478ccb6dc3bf80474432a6123cdaf8a02bc6ac95c722c79aae41084a61bdc51f288b399f989893d302e48efd6bde23391c1867f9ae6c744f28ebe7027e1bc4e07a606691ccb47fe3ef3aa065b459734209ebacefaab29152ff79d6ed6b9bc9c638eab2c1a712053b50b19f6d1211483da44776df821c1f071af464fbc301e8282fd80dd61a80920b738a1c99fb4352a73c9e411b038d31ccf463a2d7edc5c339744e0f5052f275809bdba24f2a82b9f49101ed541031052095536b30", @ANYRES16], 0x1, 0xf1e, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) fdatasync(r0) 1.317226459s ago: executing program 5 (id=1568): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x56, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffa}]}}}}}}}}, 0x0) 1.30932715s ago: executing program 3 (id=1559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7, 0x3, 0x6, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x202, 0x1c, 0x1000}, 0x10) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 1.243386865s ago: executing program 2 (id=1560): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xfffffffb) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x20}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1.179756699s ago: executing program 5 (id=1561): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 1.174026309s ago: executing program 4 (id=1562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0x1, 0xffffffff, 0x4, 0xfffffff7, 0x4be1}, {0x7, 0x3fe, 0x7, 0x6, 0x1000}]}) 1.095746895s ago: executing program 2 (id=1563): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f00000000c0)) 1.002650231s ago: executing program 3 (id=1564): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e002000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200030000000500040001000000050003"], 0x44}}, 0x0) 912.933917ms ago: executing program 4 (id=1565): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0xb4, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) 885.192919ms ago: executing program 2 (id=1566): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 881.977379ms ago: executing program 3 (id=1567): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "5a8435", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 848.595212ms ago: executing program 4 (id=1569): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 763.368587ms ago: executing program 5 (id=1570): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x82, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20) 758.382968ms ago: executing program 3 (id=1571): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xac3, &(0x7f0000000e00)="$eJzs3U2MW0cBAOCxd73ZTVPilIQuaWgTCm356abZLOEngqRKhETUVIhLpYpLlKYlIgSJIgFVJZKcuNGqChInfsSpl6ogJHpBUU9cKtFIFVJPhQMHoiAqcSiBxCj2jNee2Hn2/j07/j7p7XjejD0z3ufn5/fezARgYlWbf5eW5ishXHzjlaP/eOjvczfXHGrnqDf/TnfEaiGESoxPZ6/33lQrvP7+iyd7hZWw2Pyb4uHJq+3n3hVCOBd2h0uhHnZevPzyW4tPHD9/7MKet189eGV9Wg8AAJPl65cOLu3465/v23bttfsPh03t9en4vB7jW+Jx/+F44J+O/6uhO17pWDrNZPmm41Kd68431SNfZzm1LN90n/JnsvJrffJtCrcvf6pjXa92wzhL23E9VKoLXfFqdWGh9Zs8NH/Xz1QWzp4+8+zzJVUUWHP/fiCEsLtjOXKhOz5qy6ERqMMKl8YI1GEsl8MbV9a1Rkvpbd6gpbG17D0QQEt+vfAW5/IzC6vTfrXpwcq/+ni19/NhDWz09j9U+TMllx+U/5vz9jisnTt1a0rtSp+jLTGeX0fI71/q//nLr3R0r82vR9QGrGe/6wjjcn2hXz2nNrgeK9Wv/vl2caf6cgzT+/CVrtQHuj4/+f90XP7HQG8f5Of/LRbLaC+hK15bzWs1Wq82V+Y+CBhN+X1zjXR9NMrv68vTNxWkzxakzxWkby5Iv6sgHSbZ777/0/BSZfl8V/6bftjz4ek8290x/NCQ9cnPRw5bfn7f77BWW35+PzGMsj+ceOrUF555+nLr/v9Ke/u/Ebf39HOjHj9bl2KGdL4wP6/evve/3l1OtU++e7L63N0jf/Px9u58le3LrxM69jO31GO++3lb++Xb1Z2vnuWbi8tsVt/8+GRz9rx0/JH2q+n9ms7aW8vaMZPVI+1XtsUwrwesRNoe+93/n7bP+VCrPHv6zKnHYjxtp3+aqm26uX7fBtcbWL1B+//Mh+7+P1va62vVzv3C1uX1ldZ+4fX4et3rF9vldKzv+FJL33Pfmppr5l84+d0zz6xx22HSPf+jF7594syZU9/zYMUPvjoa1RjmQfrZMir18WDYB7vXu4iSd0zAutv749ZBwKOnv3PiuVPPnTq7/8CB/YuLB764f2lv87h+b+fRfadzJdQWWEvLX/pl1wQAAAAAAAAAAAAY1A+OHb38zpuff7fV/3+5/1/q/5/u/E39/3+S9f/P+8mnfvCpH+C2HunNPNkAqzNZvlpcPpzVd3tWzo7seR+JYXsev9j/PxWXj+ua6nNvtr7WJ5oNJ3DLeCkz2Rgk+XyBH4/hhRj+OkCJKr2H/su32x7jW1c+6NjW0/gUs8vPahgfeHykrtfNraFjSKPU/7vnuE49+mszXjaix2LZbQR6++dEjf/9r+WGl14XS/9lemPL+/nkbhONvkfpg85gA7A2yp7/M533TOHZP35t9uaSsl19vHt/mY9fCsP4yzvd8VGff3K9y8/n7dvo8stu/0bP/9me/27g/V82Y159ZeX+5xdX3u0oNuwctPy8/Wkc6O3DlX8tlp9a83AYrPzGr7Ly8wtCA/pvVv7mAcu/pf27Vlb+/2L56W175MFBy2/VuFLtrsdc1o50/S8/b5xcz9qfxva8TfnfeKFX+1c4UeONWD5MsnGZZ3ZY2XFE+6B95fP/RufWdv7fdmWz3Vp+H8bnYjztiNN9Dvl8J8PWP91fkb4HdmSvXyn4fjP/73j7UgyLPg9p/t+0PdbjV35HvPlepnitx3t7p+5rYFy9N0rX/5Ky67Hq5crmVbRjtvz6r90yNQJ1WKtltvf/tLGSNm4akW290Wis7wmtAqUWTunvf9m/E8ouv+z3v0g+/29+DJ/P/5un5/P/5un5/L95+lz8D/VLz+f/zd/PfP7fPP3e7HXz+YHnC9I/WpC+s3d6+2f7fQXP31WQ/rGC9D3t9ENdOVL6/bd9/nK+fq9/T0H6gwXpnyhI/2RB+kMF6Y90pHfOAZ3SP1Xw/Dtd6o8yqe2HSZb3z/P5h8mRrv/0+/xvL0gHxtfPXtt35OnffrPe6v8/0z4fkq7jHY7xWvz99MMYz697h474zbQ3Y/xvWfqon++ASZKPn5F/vz9ckA6Mr3Sfl883TKDKbO/VMSwat6rfcT7j5dMx/EwMPxvDR2O4EMO9MdwXw8UNqh/r48jrvz/4UmX59/7WLH3Q+8nz/kBd40SFEPYPWJ/8/MCw97Pn4/gNa7Xlr7A7GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGmqzb9LS/OVEC6+8crRp46f3ntzzaF2jnrz73RHrNZ+XgiPxXAqhr+MD66//+LJzvBGDCthMVRCpb0+PHm1XdJdIYRzYXe4FOph58XLL7+1+MTx88cu7Hn71YNX1u8dAAAAgDvf/wMAAP//Nj4Q1g==") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file1\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f0000000640)) truncate(&(0x7f0000000080)='./file2\x00', 0x0) 636.588036ms ago: executing program 4 (id=1572): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private2, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x3b80, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000100)="a6032ec45a7a", 0x6}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 622.152247ms ago: executing program 5 (id=1573): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 609.542758ms ago: executing program 2 (id=1574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x1, 0x3, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f00000002c0)}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 534.635253ms ago: executing program 4 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000010801030000060000000000000000020500030006000000050003002f00000006000240000c0000090001"], 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x80) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e8005"], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20040040) 416.130861ms ago: executing program 1 (id=1576): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) setreuid(0x0, 0xee00) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x12, r0, 0x0) 390.776323ms ago: executing program 4 (id=1577): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f1f000000050f1f0003031dc5eac00407ad0e475afcf392818f68c2ef4b7feda503"], 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000086b1d010140000102030109025f00030106b8050904000000010100000a24"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 363.087005ms ago: executing program 2 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)={0x38, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x6c}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xf2}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x25}]}]}, 0x38}}, 0x0) 188.670727ms ago: executing program 1 (id=1579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c00038018000080080003400040"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.06313ms ago: executing program 3 (id=1580): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x0) 171.04µs ago: executing program 1 (id=1581): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 0s ago: executing program 2 (id=1582): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1a8, 0x0, &(0x7f00000004c0)="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", 0x0, 0x10487, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200005}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) kernel console output (not intermixed with test programs): s [ 115.653539][ T5437] loop1: detected capacity change from 0 to 512 [ 115.749049][ T5437] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.804886][ T4746] usb 4-1: config 120 has an invalid interface number: 138 but max is 0 [ 115.821489][ T4746] usb 4-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 115.835369][ T5437] EXT4-fs (loop1): 1 truncate cleaned up [ 115.842364][ T4746] usb 4-1: config 120 has no interface number 0 [ 115.848768][ T4746] usb 4-1: config 120 interface 138 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 115.862310][ T4746] usb 4-1: config 120 interface 138 has no altsetting 0 [ 115.875021][ T5437] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001fb,sysvgroups,noblock_validity,,errors=continue. Quota mode: none. [ 115.975841][ T5439] loop2: detected capacity change from 0 to 4096 [ 116.044416][ T4746] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 116.077084][ T4746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.118189][ T4746] usb 4-1: Product: syz [ 116.123109][ T4746] usb 4-1: Manufacturer: syz [ 116.127890][ T5447] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.184444][ T4746] usb 4-1: SerialNumber: syz [ 116.505387][ T4746] ums-usbat 4-1:120.138: USB Mass Storage device detected [ 116.523774][ T4746] ums-usbat 4-1:120.138: This device (03f0,0307,0001 S ee P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 116.523774][ T4746] Please send a copy of this message to and [ 116.650377][ T4746] usb 4-1: USB disconnect, device number 4 [ 116.717675][ T5449] loop5: detected capacity change from 0 to 32768 [ 116.751181][ T5463] loop1: detected capacity change from 0 to 64 [ 116.791514][ T5463] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 116.928800][ T5449] XFS (loop5): Mounting V5 Filesystem [ 117.052699][ T5449] XFS (loop5): Ending clean mount [ 117.312110][ T5489] loop1: detected capacity change from 0 to 512 [ 117.349799][ T4902] XFS (loop5): Unmounting Filesystem [ 117.458145][ T5489] EXT4-fs (loop1): Ignoring removed orlov option [ 117.507160][ T5489] EXT4-fs (loop1): Test dummy encryption mode enabled [ 117.520674][ T5497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 117.535087][ T5495] loop3: detected capacity change from 0 to 2048 [ 117.552756][ T5497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 117.570315][ T5489] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.612072][ T5499] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 117.641859][ T5489] EXT4-fs (loop1): 1 truncate cleaned up [ 117.647752][ T5489] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 117.651116][ T5501] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.725689][ T5489] EXT4-fs (loop1): shut down requested (2) [ 117.779766][ T5497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.400'. [ 117.924876][ T5483] loop2: detected capacity change from 0 to 32768 [ 118.214982][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 118.525460][ T5524] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 118.552817][ T5524] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 118.568724][ T5536] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 118.582899][ T5534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.623900][ T5534] EXT4-fs (loop5): 1 truncate cleaned up [ 118.629719][ T5534] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001fb,sysvgroups,noblock_validity,,errors=continue. Quota mode: none. [ 118.920053][ T5541] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.937134][ T5541] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.292725][ T5556] program syz.3.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.405468][ T5562] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.430080][ T5567] set_capacity_and_notify: 5 callbacks suppressed [ 119.430097][ T5567] loop5: detected capacity change from 0 to 64 [ 119.471288][ T5570] loop3: detected capacity change from 0 to 64 [ 119.472234][ T5562] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.524530][ T5567] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 119.637482][ T5570] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 119.882194][ T5580] loop2: detected capacity change from 0 to 512 [ 120.009434][ T5580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.052540][ T5580] EXT4-fs (loop2): 1 truncate cleaned up [ 120.061241][ T5580] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001fb,sysvgroups,noblock_validity,,errors=continue. Quota mode: none. [ 120.249729][ T5571] loop4: detected capacity change from 0 to 40427 [ 120.387319][ T5571] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 120.417393][ T5571] F2FS-fs (loop4): invalid crc value [ 120.445750][ T5571] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.713642][ T5617] loop5: detected capacity change from 0 to 64 [ 120.735909][ T4229] kernel read not supported for file /dsp1 (pid: 4229 comm: kworker/1:4) [ 120.797137][ T5571] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.825043][ T5617] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 121.115747][ T4190] attempt to access beyond end of device [ 121.115747][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 121.214341][ T4745] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.332971][ T5640] loop1: detected capacity change from 0 to 512 [ 121.422971][ T5640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.448810][ T5640] EXT4-fs (loop1): 1 truncate cleaned up [ 121.486271][ T5640] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001fb,sysvgroups,noblock_validity,,errors=continue. Quota mode: none. [ 121.600047][ T4745] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 121.617243][ T4745] usb 4-1: config 0 has no interface number 0 [ 121.642650][ T4745] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.672487][ T4745] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.693906][ T4745] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 121.731428][ T4745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.776225][ T4745] usb 4-1: config 0 descriptor?? [ 121.979715][ T5637] loop5: detected capacity change from 0 to 32768 [ 122.213133][ T5637] XFS (loop5): Mounting V5 Filesystem [ 122.286085][ T4745] elo 0003:04E7:0030.0005: item fetching failed at offset 6/7 [ 122.295580][ T4745] elo 0003:04E7:0030.0005: parse failed [ 122.301426][ T4745] elo: probe of 0003:04E7:0030.0005 failed with error -22 [ 122.337286][ T5637] XFS (loop5): Ending clean mount [ 122.353249][ T5637] XFS (loop5): Quotacheck needed: Please wait. [ 122.444378][ T5637] XFS (loop5): Quotacheck: Done. [ 122.484082][ T4229] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.506963][ T4745] usb 4-1: USB disconnect, device number 5 [ 122.579993][ T4902] XFS (loop5): Unmounting Filesystem [ 122.589684][ T5684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 122.622681][ T5684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 122.649336][ T5684] bridge0: port 3(vlan3) entered blocking state [ 122.662924][ T5684] bridge0: port 3(vlan3) entered disabled state [ 122.904522][ T4229] usb 3-1: config 0 has no interfaces? [ 122.914929][ T4229] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.933776][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.957205][ T4229] usb 3-1: config 0 descriptor?? [ 123.334998][ T4229] usb 3-1: USB disconnect, device number 6 [ 123.337152][ T26] audit: type=1326 audit(1775705040.527:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5707 comm="syz.4.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4495dfb819 code=0x0 [ 123.399150][ T5712] loop1: detected capacity change from 0 to 128 [ 123.456837][ T5708] loop5: detected capacity change from 0 to 4096 [ 123.689386][ T4902] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 123.709493][ T4902] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 124.121532][ T5727] loop5: detected capacity change from 0 to 8192 [ 124.201704][ T5727] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 124.214415][ T5727] REISERFS (device loop5): using ordered data mode [ 124.237150][ T5727] reiserfs: using flush barriers [ 124.279846][ T5727] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.297672][ T5727] REISERFS (device loop5): checking transaction log (loop5) [ 124.384849][ T5744] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 124.411119][ T5727] REISERFS (device loop5): Using tea hash to sort names [ 124.424645][ T5744] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 124.455241][ T5727] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 124.745246][ T5753] set_capacity_and_notify: 1 callbacks suppressed [ 124.745263][ T5753] loop3: detected capacity change from 0 to 512 [ 125.001494][ T5755] loop2: detected capacity change from 0 to 4096 [ 125.038451][ T5760] loop1: detected capacity change from 0 to 2048 [ 125.200418][ T5760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.344939][ C1] Illegal XDP return value 16128, expect packet loss! [ 125.409556][ T5770] loop5: detected capacity change from 0 to 512 [ 125.447504][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 125.463994][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 125.486484][ T5770] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.494: inode has both inline data and extents flags [ 125.654453][ T5461] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 125.663091][ T5770] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.494: couldn't read orphan inode 15 (err -117) [ 125.728372][ T5770] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.746874][ T5461] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.758699][ T5789] loop3: detected capacity change from 0 to 256 [ 125.855863][ T5770] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #2: comm syz.5.494: directory missing '.' [ 125.884668][ T5789] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 126.088103][ T5804] netlink: 64 bytes leftover after parsing attributes in process `syz.2.509'. [ 126.205837][ T5798] loop4: detected capacity change from 0 to 4096 [ 126.276762][ T5798] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 126.407308][ T5812] fido_id[5812]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.825711][ T5833] loop4: detected capacity change from 0 to 2048 [ 126.901539][ T5829] loop5: detected capacity change from 0 to 4096 [ 127.020466][ T5840] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.082697][ T5829] ntfs3: loop5: ino=21, "rdma.current" The size of extended attributes must not exceed 64KiB [ 127.105023][ T5833] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.148420][ T5833] Remounting filesystem read-only [ 127.164938][ T5833] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.215209][ T4902] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 127.222287][ T5842] NILFS (loop4): mounting fs with errors [ 127.242112][ T4902] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 127.265308][ T5833] Remounting filesystem read-only [ 127.314850][ T5833] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.381221][ T5833] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.426074][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.522'. [ 127.466539][ T5833] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.485510][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.522'. [ 127.526137][ T5833] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.563552][ T5845] bridge0: port 3(vlan2) entered blocking state [ 127.601315][ T5845] bridge0: port 3(vlan2) entered disabled state [ 127.626017][ T5833] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.708998][ T26] audit: type=1800 audit(1775705044.897:12): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.520" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 127.830466][ T5833] syz.4.520 (5833) used greatest stack depth: 19608 bytes left [ 127.864452][ T5816] loop1: detected capacity change from 0 to 32768 [ 128.075081][ T5816] XFS (loop1): Mounting V5 Filesystem [ 128.118011][ T5831] loop3: detected capacity change from 0 to 40427 [ 128.214260][ T5816] XFS (loop1): Ending clean mount [ 128.226152][ T5816] XFS (loop1): Quotacheck needed: Please wait. [ 128.326686][ T5831] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.359680][ T5816] XFS (loop1): Quotacheck: Done. [ 128.417111][ T5872] netlink: 'syz.5.528': attribute type 1 has an invalid length. [ 128.482169][ T5872] netlink: 'syz.5.528': attribute type 2 has an invalid length. [ 128.574123][ T5461] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.605084][ T4188] XFS (loop1): Unmounting Filesystem [ 128.637947][ T5831] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 128.866245][ T4192] attempt to access beyond end of device [ 128.866245][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 128.949239][ T5461] usb 5-1: config 0 has no interfaces? [ 128.954928][ T5461] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.991016][ T5461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.084947][ T5461] usb 5-1: config 0 descriptor?? [ 129.180658][ T5899] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 129.263341][ T5891] ntfs3: loop2: ino=21, "rdma.current" The size of extended attributes must not exceed 64KiB [ 129.285666][ T5899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.468314][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 129.514345][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 129.545984][ T4746] usb 5-1: USB disconnect, device number 4 [ 129.761193][ T5911] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 129.794902][ T5911] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 130.403030][ T26] audit: type=1326 audit(1775705047.587:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.2.547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f917bbc5819 code=0x0 [ 130.504198][ T5453] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.764311][ T5453] usb 4-1: Using ep0 maxpacket: 8 [ 130.884220][ T5453] usb 4-1: config 11 has an invalid interface number: 196 but max is 0 [ 130.901623][ T5453] usb 4-1: config 11 has no interface number 0 [ 130.938576][ T5453] usb 4-1: config 11 interface 196 has no altsetting 0 [ 131.005807][ T5957] set_capacity_and_notify: 3 callbacks suppressed [ 131.005825][ T5957] loop4: detected capacity change from 0 to 8192 [ 131.103400][ T5957] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 131.134271][ T5453] usb 4-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=70.22 [ 131.143491][ T5453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.152746][ T5957] REISERFS (device loop4): using ordered data mode [ 131.168743][ T5957] reiserfs: using flush barriers [ 131.210503][ T5957] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.227331][ T5957] REISERFS (device loop4): checking transaction log (loop4) [ 131.259363][ T5957] REISERFS (device loop4): Using r5 hash to sort names [ 131.266918][ T5453] usb 4-1: Product: syz [ 131.271538][ T5453] usb 4-1: Manufacturer: syz [ 131.317010][ T5453] usb 4-1: SerialNumber: syz [ 131.362197][ T5957] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 131.464342][ T4229] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 131.695534][ T5453] quatech2 4-1:11.196: Quatech 2nd gen USB to Serial Driver converter detected [ 131.744217][ T5453] usb 4-1: qt2_attach - failed to power on unit: -71 [ 131.769109][ T5453] quatech2: probe of 4-1:11.196 failed with error -71 [ 131.844436][ T5453] usb 4-1: USB disconnect, device number 6 [ 131.854323][ T4229] usb 2-1: not running at top speed; connect to a high speed hub [ 131.964732][ T4229] usb 2-1: config 8 has an invalid interface number: 44 but max is 0 [ 131.978593][ T4229] usb 2-1: config 8 has no interface number 0 [ 132.032252][ T4229] usb 2-1: config 8 interface 44 has no altsetting 0 [ 132.073213][ T6007] loop2: detected capacity change from 0 to 2048 [ 132.153374][ T6018] loop4: detected capacity change from 0 to 128 [ 132.234534][ T4229] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 132.251687][ T6018] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 132.265385][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.291329][ T6022] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.293425][ T4229] usb 2-1: Product: syz [ 132.320751][ T6018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.372130][ T4229] usb 2-1: Manufacturer: syz [ 132.384172][ T6007] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.399605][ T4229] usb 2-1: SerialNumber: syz [ 132.432685][ T6007] Remounting filesystem read-only [ 132.455219][ T6007] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.503786][ T6007] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.549491][ T6007] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.579825][ T6007] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.627111][ T6007] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.691638][ T6007] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.717990][ T6007] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 132.757865][ T26] audit: type=1800 audit(1775705049.947:14): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.571" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 132.777305][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.837855][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.845595][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.692657][ T6080] loop4: detected capacity change from 0 to 256 [ 133.816175][ T4741] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 133.838462][ T6080] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 133.844959][ T4229] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 133.894883][ T26] audit: type=1800 audit(1775705051.077:15): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.588" name="file1" dev="loop4" ino=1048619 res=0 errno=0 [ 133.976020][ T4229] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 134.004637][ T4229] dib0700: firmware download failed at 7 with -22 [ 134.024714][ T4229] usb 2-1: USB disconnect, device number 4 [ 134.185700][ T4741] usb 4-1: config 9 interface 0 has no altsetting 0 [ 134.384168][ T4741] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 134.403549][ T4741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.426255][ T6097] loop5: detected capacity change from 0 to 1024 [ 134.443693][ T4741] usb 4-1: Product: syz [ 134.453965][ T4741] usb 4-1: Manufacturer: syz [ 134.468864][ T4741] usb 4-1: SerialNumber: syz [ 134.541126][ T6099] loop4: detected capacity change from 0 to 2048 [ 134.725670][ T6099] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 134.771798][ T6099] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.790492][ T6108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.034275][ T4741] snd-usb-caiaq 4-1:9.0: can't set alt interface. [ 135.060876][ T4741] usb 4-1: unable to init card! (ret=-5) [ 135.075204][ T4741] snd-usb-caiaq: probe of 4-1:9.0 failed with error -5 [ 135.094328][ T4741] usb 4-1: USB disconnect, device number 7 [ 135.768024][ T6121] loop2: detected capacity change from 0 to 8192 [ 135.959291][ T6121] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 135.983386][ T6121] REISERFS (device loop2): using ordered data mode [ 135.993455][ T6121] reiserfs: using flush barriers [ 136.000831][ T6121] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.017988][ T6121] REISERFS (device loop2): checking transaction log (loop2) [ 136.098102][ T6121] REISERFS (device loop2): Using tea hash to sort names [ 136.114948][ T6121] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 136.287547][ T6152] loop5: detected capacity change from 0 to 512 [ 136.387693][ T6152] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 136.431473][ T6152] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.454493][ T6152] EXT4-fs (loop5): shut down requested (0) [ 136.828919][ T6166] loop1: detected capacity change from 0 to 256 [ 136.899763][ T6168] netlink: 36 bytes leftover after parsing attributes in process `syz.5.618'. [ 136.970361][ T6166] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 137.054245][ T26] audit: type=1800 audit(1775705054.237:16): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.620" name="file1" dev="loop1" ino=1048620 res=0 errno=0 [ 137.437941][ T6182] loop5: detected capacity change from 0 to 256 [ 137.598356][ T6182] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe64e, utbl_chksum : 0xe619d30d) [ 137.658959][ T6190] loop4: detected capacity change from 0 to 512 [ 137.812758][ T6190] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 137.839137][ T6191] loop2: detected capacity change from 0 to 2048 [ 137.855152][ T6190] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.874266][ T5461] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.966809][ T6190] EXT4-fs (loop4): shut down requested (0) [ 138.003807][ T6191] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 138.072665][ T6191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.255182][ T5461] usb 2-1: config 0 has no interfaces? [ 138.260790][ T5461] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.290694][ T5461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.332181][ T5461] usb 2-1: config 0 descriptor?? [ 138.714168][ T4746] usb 2-1: USB disconnect, device number 5 [ 138.840214][ T6203] loop4: detected capacity change from 0 to 32768 [ 138.972796][ T307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.990982][ T6203] XFS (loop4): Mounting V5 Filesystem [ 139.045478][ T307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.069943][ T6201] loop5: detected capacity change from 0 to 32768 [ 139.130188][ T6203] XFS (loop4): Ending clean mount [ 139.177780][ T6203] XFS (loop4): Quotacheck needed: Please wait. [ 139.192937][ T307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.335328][ T6203] XFS (loop4): Quotacheck: Done. [ 139.392200][ T307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.612238][ T4190] XFS (loop4): Unmounting Filesystem [ 139.982567][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 140.036197][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 140.184132][ T5460] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 140.564316][ T5460] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.573597][ T5460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.589549][ T6256] loop1: detected capacity change from 0 to 1024 [ 140.609833][ T5460] usb 6-1: config 0 descriptor?? [ 140.639612][ T6258] loop4: detected capacity change from 0 to 512 [ 140.655445][ T5460] cp210x 6-1:0.0: cp210x converter detected [ 140.737835][ T6256] hfsplus: failed to load root directory [ 140.759816][ T6258] EXT4-fs (loop4): Ignoring removed bh option [ 140.815645][ T6236] chnl_net:caif_netlink_parms(): no params data found [ 140.848004][ T6258] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 140.971075][ T6258] EXT4-fs (loop4): 1 truncate cleaned up [ 140.994237][ T6258] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 141.099266][ T5460] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 141.185484][ T6275] loop2: detected capacity change from 0 to 128 [ 141.232863][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.263350][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.293513][ T6236] device bridge_slave_0 entered promiscuous mode [ 141.304447][ T6275] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.329363][ T6275] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.384269][ T5460] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 141.404360][ T5460] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 141.416131][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.423252][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.445353][ T6236] device bridge_slave_1 entered promiscuous mode [ 141.474276][ T5460] usb 6-1: cp210x converter now attached to ttyUSB0 [ 141.554983][ T5460] usb 6-1: USB disconnect, device number 2 [ 141.605704][ T307] device hsr_slave_0 left promiscuous mode [ 141.616041][ T307] device hsr_slave_1 left promiscuous mode [ 141.641663][ T5460] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.662372][ T5460] cp210x 6-1:0.0: device disconnected [ 141.682602][ T307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.702049][ T307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.729898][ T307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.743323][ T307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.775427][ T307] device bridge_slave_1 left promiscuous mode [ 141.784181][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.815702][ T307] device bridge_slave_0 left promiscuous mode [ 141.823270][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.836513][ T6291] loop4: detected capacity change from 0 to 4096 [ 141.890563][ T307] device veth1_macvtap left promiscuous mode [ 141.924583][ T6291] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 141.927809][ T307] device veth0_macvtap left promiscuous mode [ 142.045959][ T307] device veth1_vlan left promiscuous mode [ 142.051857][ T307] device veth0_vlan left promiscuous mode [ 142.067957][ T26] audit: type=1800 audit(1775705059.257:17): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.663" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 142.194108][ T4746] Bluetooth: hci3: command 0x0409 tx timeout [ 142.562910][ T307] team0 (unregistering): Port device team_slave_1 removed [ 142.579939][ T307] team0 (unregistering): Port device team_slave_0 removed [ 142.593112][ T307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.612360][ T307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.702873][ T307] bond0 (unregistering): Released all slaves [ 142.756071][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.813150][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.913106][ T6321] loop2: detected capacity change from 0 to 1024 [ 142.981318][ T6236] team0: Port device team_slave_0 added [ 143.028982][ T6321] hfsplus: failed to load root directory [ 143.096446][ T6236] team0: Port device team_slave_1 added [ 143.294153][ T5460] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.301870][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.344214][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.432377][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.493002][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.508870][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.561490][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.583584][ T6339] loop5: detected capacity change from 0 to 2048 [ 143.673249][ T6339] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 143.684848][ T5460] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.695523][ T5460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.713309][ T5460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.723574][ T5460] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 143.733242][ T5460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.779154][ T5460] usb 2-1: config 0 descriptor?? [ 143.783909][ T6339] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.865495][ T6236] device hsr_slave_0 entered promiscuous mode [ 143.892229][ T6236] device hsr_slave_1 entered promiscuous mode [ 144.008347][ T6349] loop2: detected capacity change from 0 to 4096 [ 144.062786][ T6349] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 144.172027][ T26] audit: type=1800 audit(1775705061.357:18): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.677" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 144.187736][ T6317] loop4: detected capacity change from 0 to 40427 [ 144.285355][ T4742] Bluetooth: hci3: command 0x041b tx timeout [ 144.297980][ T5460] wacom 0003:056A:0010.0007: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 144.319549][ T6317] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 144.344165][ T6317] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.388795][ T5460] wacom 0003:056A:0010.0007: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 144.410131][ T5460] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0007/input/input12 [ 144.454355][ T6317] F2FS-fs (loop4): invalid crc value [ 144.552545][ T6317] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.635509][ T5460] usb 2-1: USB disconnect, device number 6 [ 144.842239][ T6317] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.861854][ T6317] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.875938][ T6361] fido_id[6361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 145.359767][ T6366] loop5: detected capacity change from 0 to 8192 [ 145.491253][ T6366] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 145.517946][ T6366] REISERFS (device loop5): using ordered data mode [ 145.535011][ T6366] reiserfs: using flush barriers [ 145.551790][ T6366] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.654609][ T6366] REISERFS (device loop5): checking transaction log (loop5) [ 145.964124][ T6366] REISERFS (device loop5): Using tea hash to sort names [ 145.971435][ T6366] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 146.096424][ T6236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.147217][ T6236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.220664][ T6236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.264479][ T6236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.356561][ T4746] Bluetooth: hci3: command 0x040f tx timeout [ 146.592444][ T6369] loop1: detected capacity change from 0 to 32768 [ 146.634955][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.684988][ T6369] XFS: attr2 mount option is deprecated. [ 146.830020][ T6369] XFS (loop1): Mounting V5 Filesystem [ 146.901337][ T6369] XFS (loop1): Ending clean mount [ 146.974497][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.994574][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.013107][ T6369] XFS (loop1): Quotacheck needed: Please wait. [ 147.029632][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.082262][ T6403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.134122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.153330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.181149][ T6369] XFS (loop1): Quotacheck: Done. [ 147.189959][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.197173][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.250773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.287597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.302929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.322812][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.330040][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.373269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.396737][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.418994][ T4188] XFS (loop1): Unmounting Filesystem [ 147.478385][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.506898][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.566811][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.604354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.613299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.624327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.632968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.658117][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.689428][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.737128][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.203560][ T6413] chnl_net:caif_netlink_parms(): no params data found [ 148.406556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.422204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.434678][ T4742] Bluetooth: hci3: command 0x0419 tx timeout [ 148.461240][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.598698][ T6420] loop4: detected capacity change from 0 to 32768 [ 148.718215][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.734270][ T6420] XFS (loop4): Mounting V5 Filesystem [ 148.746941][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.762706][ T6445] loop1: detected capacity change from 0 to 512 [ 148.811917][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.882064][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.911821][ T6420] XFS (loop4): Ending clean mount [ 148.946252][ T6413] device bridge_slave_0 entered promiscuous mode [ 149.004466][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.012924][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.078109][ T6236] device veth0_vlan entered promiscuous mode [ 149.091677][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.114869][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.123097][ T6413] device bridge_slave_1 entered promiscuous mode [ 149.253355][ T4190] XFS (loop4): Unmounting Filesystem [ 149.271554][ T6413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.308142][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.324283][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.341998][ T6236] device veth1_vlan entered promiscuous mode [ 149.371565][ T6413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.538373][ T6413] team0: Port device team_slave_0 added [ 149.626669][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.658363][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.705227][ T6236] device veth0_macvtap entered promiscuous mode [ 149.715765][ T6413] team0: Port device team_slave_1 added [ 149.783110][ T6236] device veth1_macvtap entered promiscuous mode [ 149.792974][ T6480] loop1: detected capacity change from 0 to 512 [ 149.896040][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.917094][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.942421][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.968025][ T6480] EXT4-fs (loop1): Ignoring removed bh option [ 149.983208][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.024128][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.035725][ T4742] Bluetooth: hci2: command 0x0409 tx timeout [ 150.063981][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.073875][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.100113][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.110761][ T6480] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 150.120724][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.138659][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.147284][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.181050][ T6413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.202074][ T6480] EXT4-fs (loop1): 1 truncate cleaned up [ 150.207968][ T6480] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 150.274768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.282987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.299665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.339567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.359608][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.401976][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.448617][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.479559][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.504058][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.544817][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.564371][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.587222][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.615535][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.644798][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.651812][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.677786][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.753978][ T6413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.808579][ T307] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.851770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.874386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.906601][ T6236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.954181][ T6236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.963024][ T6236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.015168][ T6511] option changes via remount are deprecated (pid=6510 comm=syz.4.708) [ 151.017091][ T6236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.032522][ T6511] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 "" [ 151.171659][ T307] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.255475][ T6413] device hsr_slave_0 entered promiscuous mode [ 151.277379][ T6494] loop5: detected capacity change from 0 to 32768 [ 151.284497][ T6413] device hsr_slave_1 entered promiscuous mode [ 151.314622][ T6413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.323869][ T6413] Cannot create hsr debugfs directory [ 151.357051][ T307] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.389640][ T6494] XFS (loop5): Mounting V5 Filesystem [ 151.472524][ T307] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.526810][ T6494] XFS (loop5): Ending clean mount [ 151.540994][ T6501] loop1: detected capacity change from 0 to 40427 [ 151.559911][ T6494] XFS (loop5): Quotacheck needed: Please wait. [ 151.564623][ T6501] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 151.637282][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.650023][ T6501] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 151.665496][ T6494] XFS (loop5): Quotacheck: Done. [ 151.667632][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.739099][ T6501] F2FS-fs (loop1): invalid crc value [ 151.787525][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.821261][ T6501] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 22694528485) [ 151.844790][ T4902] XFS (loop5): Unmounting Filesystem [ 151.925312][ T6501] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 151.947350][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.986485][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.020433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.125322][ T4741] Bluetooth: hci2: command 0x041b tx timeout [ 152.215452][ T6501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 153.153031][ T6576] loop1: detected capacity change from 0 to 512 [ 153.247134][ T6576] EXT4-fs (loop1): Ignoring removed nobh option [ 153.269918][ T6576] EXT4-fs (loop1): Ignoring removed orlov option [ 153.317432][ T6576] EXT4-fs error (device loop1): __ext4_iget:4912: inode #11: block 1: comm syz.1.723: invalid block [ 153.336207][ T6413] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.366081][ T6576] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.723: couldn't read orphan inode 11 (err -117) [ 153.384454][ T6576] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000000,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,nogrpid,sysvgroups,orlov,grpquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 153.409205][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.454499][ T6413] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.560623][ T6413] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.578586][ T6576] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.723: Directory hole found for htree leaf block 0 [ 153.602637][ T6413] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.985137][ T6413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.018385][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.030617][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.046120][ T6413] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.093278][ T307] device hsr_slave_0 left promiscuous mode [ 154.101665][ T307] device hsr_slave_1 left promiscuous mode [ 154.109436][ T307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.118760][ T307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.126963][ T307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.135537][ T307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.155310][ T307] device bridge_slave_1 left promiscuous mode [ 154.177959][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.194696][ T307] device bridge_slave_0 left promiscuous mode [ 154.204367][ T4746] Bluetooth: hci2: command 0x040f tx timeout [ 154.223545][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.244339][ T4741] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.265118][ T307] device veth1_macvtap left promiscuous mode [ 154.271234][ T307] device veth0_macvtap left promiscuous mode [ 154.296066][ T307] device veth1_vlan left promiscuous mode [ 154.311576][ T307] device veth0_vlan left promiscuous mode [ 154.494271][ T4741] usb 2-1: Using ep0 maxpacket: 8 [ 154.616794][ T307] team0 (unregistering): Port device team_slave_1 removed [ 154.635660][ T307] team0 (unregistering): Port device team_slave_0 removed [ 154.662926][ T307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.703265][ T307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.794471][ T4741] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 154.810923][ T4741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.819906][ T4741] usb 2-1: Product: syz [ 154.839970][ T4741] usb 2-1: Manufacturer: syz [ 154.874165][ T4741] usb 2-1: SerialNumber: syz [ 154.880788][ T4741] usb 2-1: config 0 descriptor?? [ 154.913175][ T307] bond0 (unregistering): Released all slaves [ 154.926636][ T4741] gspca_main: se401-2.14.0 probing 047d:5003 [ 154.976503][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.991170][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.000721][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.007878][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.016847][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.026603][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.037108][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.044272][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.053334][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.081910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.091989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.133217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.147676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.156250][ T5460] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.165245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.175269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.184715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.201684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.211135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.229056][ T6413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.242192][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.251582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.262100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.363232][ T4741] gspca_se401: Too many frame sizes [ 155.536607][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.557020][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.572335][ T4741] usb 2-1: USB disconnect, device number 7 [ 155.575197][ T5460] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.589709][ T5460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.604408][ T5460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.615523][ T5460] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 155.624837][ T5460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.639116][ T5460] usb 4-1: config 0 descriptor?? [ 155.671909][ T6413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.706937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.726931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.764798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.784401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.796250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.830023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.846681][ T6413] device veth0_vlan entered promiscuous mode [ 155.871713][ T6413] device veth1_vlan entered promiscuous mode [ 155.930676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.952970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.973308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.993568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.008573][ T6413] device veth0_macvtap entered promiscuous mode [ 156.029871][ T6413] device veth1_macvtap entered promiscuous mode [ 156.075711][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.096915][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.129968][ T5460] wacom 0003:056A:0010.0008: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 156.147042][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.207412][ T5460] wacom 0003:056A:0010.0008: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.3-1/input0 [ 156.219108][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.233629][ T5460] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0010.0008/input/input15 [ 156.245742][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.264858][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.274958][ T4742] Bluetooth: hci2: command 0x0419 tx timeout [ 156.293982][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.315455][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.346446][ T5460] usb 4-1: USB disconnect, device number 8 [ 156.377323][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.415692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.436467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.503167][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.553205][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.573630][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.584846][ T6647] fido_id[6647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 156.599399][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.616209][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.641605][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.656320][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.676113][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.728818][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.760028][ T6413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.804006][ T6413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.829916][ T6413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.845074][ T6413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.878225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.905474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.108164][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.124769][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 157.139695][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.172211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.230245][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.260136][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.291719][ T5201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.831542][ T6675] loop3: detected capacity change from 0 to 32768 [ 157.838546][ T4229] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.931541][ T6675] XFS (loop3): Mounting V5 Filesystem [ 158.047265][ T6675] XFS (loop3): Ending clean mount [ 158.147679][ T6236] XFS (loop3): Unmounting Filesystem [ 158.204336][ T4229] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.221097][ T4229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.245860][ T4229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.267443][ T4229] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 158.305396][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.348395][ T4229] usb 6-1: config 0 descriptor?? [ 158.877903][ T4229] wacom 0003:056A:0010.0009: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 158.909219][ T4229] wacom 0003:056A:0010.0009: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0 [ 158.970281][ T4229] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.0009/input/input20 [ 159.101412][ T4229] usb 6-1: USB disconnect, device number 3 [ 159.180179][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'. [ 159.208899][ T6724] fido_id[6724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 159.498308][ T6735] nbd0: detected capacity change from 0 to 549764202496 [ 159.522943][ T146] block nbd0: Receive control failed (result -104) [ 159.604633][ T6741] program syz.2.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.042842][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.052204][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.228599][ T6774] program syz.5.800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.379390][ T6781] loop3: detected capacity change from 0 to 2048 [ 160.466869][ T6781] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.522869][ T5461] hid-generic 0005:16C0:05DF.000A: item fetching failed at offset 0/1 [ 160.579294][ T5461] hid-generic: probe of 0005:16C0:05DF.000A failed with error -22 [ 160.752502][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.760131][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.012979][ T6811] bridge0: port 3(syz_tun) entered blocking state [ 161.034858][ T6811] bridge0: port 3(syz_tun) entered disabled state [ 161.061052][ T6811] device syz_tun entered promiscuous mode [ 161.478940][ T6835] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.789161][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'. [ 161.822127][ T6848] loop2: detected capacity change from 0 to 64 [ 161.970967][ T307] attempt to access beyond end of device [ 161.970967][ T307] loop2: rw=1, want=268435470, limit=64 [ 162.013080][ T307] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 164.350169][ T6954] loop2: detected capacity change from 0 to 4096 [ 164.574564][ T6413] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 164.581156][ T6413] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 164.739600][ T6975] loop2: detected capacity change from 0 to 1024 [ 164.861630][ T6975] hfsplus: bad catalog entry type [ 164.961447][ T307] hfsplus: b-tree write err: -5, ino 25 [ 164.976130][ T307] hfsplus: b-tree write err: -5, ino 4 [ 164.983443][ T307] hfsplus: b-tree write err: -5, ino 2 [ 164.997934][ T307] hfsplus: b-tree write err: -5, ino 26 [ 165.548291][ T7016] syz.5.899[7016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.548493][ T7016] syz.5.899[7016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.981927][ T6997] loop2: detected capacity change from 0 to 32768 [ 166.167339][ T6997] XFS (loop2): Mounting V5 Filesystem [ 166.377087][ T6997] XFS (loop2): Ending clean mount [ 166.396271][ T6997] XFS (loop2): Quotacheck needed: Please wait. [ 166.492003][ T6997] XFS (loop2): Quotacheck: Done. [ 166.658735][ T6413] XFS (loop2): Unmounting Filesystem [ 167.181110][ T7087] loop3: detected capacity change from 0 to 64 [ 167.501046][ T7096] loop2: detected capacity change from 0 to 64 [ 168.023545][ T7124] program syz.1.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.236992][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 168.380576][ T7144] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.953'. [ 168.727989][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 168.860386][ T7173] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 168.885386][ T7173] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 168.949547][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.5.969'. [ 168.980532][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.5.969'. [ 169.000990][ T7179] netlink: 60 bytes leftover after parsing attributes in process `syz.5.969'. [ 169.019902][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.5.969'. [ 169.325260][ T7194] device batadv_slave_1 entered promiscuous mode [ 169.353808][ T7191] device batadv_slave_1 left promiscuous mode [ 169.398985][ T7197] loop3: detected capacity change from 0 to 256 [ 169.485228][ T7199] mkiss: ax0: crc mode is auto. [ 170.017968][ T7216] loop2: detected capacity change from 0 to 8192 [ 170.083075][ T7232] program syz.3.992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.115593][ T7216] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 170.152860][ T7216] REISERFS (device loop2): using ordered data mode [ 170.220160][ T7216] reiserfs: using flush barriers [ 170.292529][ T7216] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.362793][ T7216] REISERFS (device loop2): checking transaction log (loop2) [ 170.373051][ T7216] REISERFS (device loop2): Using r5 hash to sort names [ 170.392880][ T7216] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 170.421271][ T26] audit: type=1800 audit(1775705087.607:19): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.985" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 170.441517][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.075013][ T7273] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.181421][ T7279] loop3: detected capacity change from 0 to 512 [ 171.324195][ T7279] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 171.342285][ T7279] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.373858][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.416456][ T7279] EXT4-fs (loop3): shut down requested (1) [ 171.543499][ T4229] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.569495][ T7290] loop2: detected capacity change from 0 to 512 [ 171.678378][ T7290] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 171.696622][ T7290] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.934307][ T4229] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 171.963542][ T4229] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 171.974202][ T4229] usb 5-1: config 220 has an invalid descriptor of length 41, skipping remainder of the config [ 172.019023][ T4229] usb 5-1: config 220 has no interface number 2 [ 172.034327][ T4229] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 172.066206][ T7301] loop3: detected capacity change from 0 to 4096 [ 172.084785][ T4229] usb 5-1: config 220 interface 0 has no altsetting 0 [ 172.094241][ T4229] usb 5-1: config 220 interface 76 has no altsetting 0 [ 172.101157][ T4229] usb 5-1: config 220 interface 1 has no altsetting 0 [ 172.117746][ T7301] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 172.324357][ T4229] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 172.343789][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.370941][ T4229] usb 5-1: Product: syz [ 172.384024][ T4229] usb 5-1: Manufacturer: syz [ 172.404010][ T4229] usb 5-1: SerialNumber: syz [ 172.506347][ T7320] overlayfs: upper fs does not support file handles, falling back to index=off. [ 172.564143][ T7320] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 172.609750][ T7328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.774480][ T4229] usb 5-1: selecting invalid altsetting 0 [ 172.781225][ T4229] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 172.819643][ T4229] usb 5-1: No valid video chain found. [ 172.892967][ T7340] netlink: 'syz.5.1040': attribute type 20 has an invalid length. [ 172.935649][ T4229] usb 5-1: selecting invalid altsetting 0 [ 172.941489][ T4229] usbtest: probe of 5-1:220.1 failed with error -22 [ 172.978854][ T4229] usb 5-1: USB disconnect, device number 5 [ 173.545119][ T7373] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.798110][ T7381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1057'. [ 173.824869][ T7381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1057'. [ 173.990860][ T7393] loop3: detected capacity change from 0 to 8 [ 174.136308][ T7393] SQUASHFS error: Failed to read block 0x6de: -5 [ 174.143257][ T7393] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 174.189025][ T7393] SQUASHFS error: Failed to read block 0x63a: -5 [ 174.212853][ T7393] SQUASHFS error: Unable to read metadata cache entry [638] [ 174.227676][ T7393] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 174.586218][ T7420] netlink: 'syz.2.1075': attribute type 20 has an invalid length. [ 174.955056][ T7412] loop3: detected capacity change from 0 to 40427 [ 174.964107][ T5460] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 175.023758][ T7412] F2FS-fs (loop3): invalid crc value [ 175.033659][ T7412] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.093884][ T307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.132231][ T7412] F2FS-fs (loop3): Start checkpoint disabled! [ 175.149998][ T7412] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 175.206106][ T307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.244573][ T5460] usb 5-1: Using ep0 maxpacket: 8 [ 175.313755][ T307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.363756][ T154] attempt to access beyond end of device [ 175.363756][ T154] loop3: rw=2049, want=40976, limit=40427 [ 175.408743][ T5460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 175.428812][ T5460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.440445][ T5460] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.457284][ T5460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 175.472073][ T5460] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 175.486130][ T5460] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 175.499163][ T5460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.531368][ T307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.531814][ T5460] usb 5-1: config 0 descriptor?? [ 175.568132][ T7426] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.045508][ T5460] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.092303][ T5451] usb 5-1: USB disconnect, device number 6 [ 176.314154][ T5460] usb 3-1: Using ep0 maxpacket: 32 [ 176.464183][ T5460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.483972][ T5460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.514349][ T5460] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.518384][ T7446] chnl_net:caif_netlink_parms(): no params data found [ 176.542670][ T5460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.590434][ T5460] usb 3-1: config 0 descriptor?? [ 176.597275][ T7478] overlayfs: upper fs does not support file handles, falling back to index=off. [ 176.645302][ T5460] hub 3-1:0.0: USB hub found [ 176.654414][ T7478] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 176.813860][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.854223][ T5460] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 176.901229][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.922988][ T7446] device bridge_slave_0 entered promiscuous mode [ 176.985286][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.998752][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.028267][ T7446] device bridge_slave_1 entered promiscuous mode [ 177.127534][ T7446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.175291][ T7446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.287093][ T5460] hid-generic 0003:046D:C31C.000B: item fetching failed at offset 0/1 [ 177.306731][ T7446] team0: Port device team_slave_0 added [ 177.324643][ T5460] hid-generic: probe of 0003:046D:C31C.000B failed with error -22 [ 177.337018][ T7446] team0: Port device team_slave_1 added [ 177.436692][ T7446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.448788][ T7446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.500180][ T7446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.513535][ T7446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.521069][ T7446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.555534][ T7446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.614300][ T5460] usb 3-1: USB disconnect, device number 7 [ 177.836854][ T7446] device hsr_slave_0 entered promiscuous mode [ 177.849197][ T7520] loop6: detected capacity change from 0 to 8 [ 177.884028][ T7446] device hsr_slave_1 entered promiscuous mode [ 177.895432][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.906469][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.924138][ T7446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.931770][ T7446] Cannot create hsr debugfs directory [ 177.934616][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.948515][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.973843][ T307] device hsr_slave_0 left promiscuous mode [ 178.017159][ T307] device hsr_slave_1 left promiscuous mode [ 178.025430][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.036474][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.044379][ T5460] Bluetooth: hci5: command 0x0409 tx timeout [ 178.064654][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.075706][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.109975][ T307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.123117][ T307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.130480][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.141498][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.160623][ T307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.181828][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.191868][ T307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.193070][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.217049][ T307] device bridge_slave_1 left promiscuous mode [ 178.238256][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.254168][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.265193][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.279443][ T307] device bridge_slave_0 left promiscuous mode [ 178.298405][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.305894][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.316878][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.334120][ T7520] ldm_validate_partition_table(): Disk read failed. [ 178.350831][ T307] device veth1_macvtap left promiscuous mode [ 178.364512][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.370389][ T307] device veth0_macvtap left promiscuous mode [ 178.375520][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.414081][ T307] device veth1_vlan left promiscuous mode [ 178.424293][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.435266][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.455537][ T307] device veth0_vlan left promiscuous mode [ 178.499440][ T7520] Dev loop6: unable to read RDB block 0 [ 178.551475][ T7520] loop6: unable to read partition table [ 178.580466][ T7520] loop6: partition table beyond EOD, truncated [ 178.628508][ T4178] ldm_validate_partition_table(): Disk read failed. [ 178.643490][ T7520] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 178.665539][ T4178] Dev loop6: unable to read RDB block 0 [ 178.686903][ T4178] loop6: unable to read partition table [ 178.703097][ T4178] loop6: partition table beyond EOD, truncated [ 178.741452][ T7526] ldm_validate_partition_table(): Disk read failed. [ 178.789100][ T7526] Dev loop6: unable to read RDB block 0 [ 178.841318][ T7526] loop6: unable to read partition table [ 178.861415][ T7526] loop6: partition table beyond EOD, truncated [ 178.893882][ T7526] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 179.287605][ T307] team0 (unregistering): Port device team_slave_1 removed [ 179.326035][ T307] team0 (unregistering): Port device team_slave_0 removed [ 179.351320][ T307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.376489][ T307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.585554][ T307] bond0 (unregistering): Released all slaves [ 179.750083][ T7534] Falling back ldisc for ptm0. [ 180.114025][ T5452] Bluetooth: hci5: command 0x041b tx timeout [ 180.215698][ T7573] loop3: detected capacity change from 0 to 24 [ 181.666049][ T7597] loop3: detected capacity change from 0 to 131072 [ 181.816704][ T7597] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 181.825054][ T7597] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 181.833590][ T1107] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 181.876069][ T7581] loop2: detected capacity change from 0 to 40427 [ 181.889865][ T7597] F2FS-fs (loop3): invalid crc value [ 181.952624][ T7597] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.960933][ T7581] F2FS-fs (loop2): invalid crc value [ 182.006707][ T7446] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.029062][ T7597] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 182.036285][ T7597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 182.041578][ T7581] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.087262][ T7446] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.147184][ T7446] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.197198][ T5454] Bluetooth: hci5: command 0x040f tx timeout [ 182.205273][ T7446] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.234228][ T1107] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 182.267402][ T1107] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 182.288346][ T7581] F2FS-fs (loop2): Start checkpoint disabled! [ 182.314780][ T1107] usb 6-1: config 0 interface 0 has no altsetting 0 [ 182.323850][ T7581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 182.504325][ T1107] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.513503][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 182.564042][ T1107] usb 6-1: Product: syz [ 182.569550][ T1107] usb 6-1: Manufacturer: syz [ 182.580708][ T1107] usb 6-1: SerialNumber: syz [ 182.600620][ T1107] usb 6-1: config 0 descriptor?? [ 182.620903][ T7446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.696013][ T7446] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.704697][ T1107] usb 6-1: selecting invalid altsetting 0 [ 182.719821][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.738889][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.792531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.814636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.853152][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.860367][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.913885][ T7592] usb 6-1: selecting invalid altsetting 0 [ 182.915870][ T9] attempt to access beyond end of device [ 182.915870][ T9] loop2: rw=2049, want=40984, limit=40427 [ 182.932935][ T7592] usb 6-1: 0:0: usb_set_interface failed (-22) [ 182.944763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.974001][ T7592] usb 6-1: selecting invalid altsetting 0 [ 182.987687][ T7592] usb 6-1: 0:0: usb_set_interface failed (-22) [ 183.011572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.026858][ T7592] usb 6-1: selecting invalid altsetting 0 [ 183.071993][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.079214][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.103050][ T7592] usb 6-1: 0:0: usb_set_interface failed (-22) [ 183.140230][ T5461] usb 6-1: USB disconnect, device number 4 [ 183.198667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.221037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.251060][ T5460] kernel read not supported for file /dsp1 (pid: 5460 comm: kworker/0:17) [ 183.302143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.345457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.393646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.461356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.487992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.525903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.586081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.616028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.652376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.694766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.746528][ T7446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.085140][ T7664] loop2: detected capacity change from 0 to 24 [ 184.274495][ T4230] Bluetooth: hci5: command 0x0419 tx timeout [ 184.367466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.401941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.465684][ T7446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.638762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.685317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.804885][ T7694] sp0: Synchronizing with TNC [ 184.839282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.855033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.890076][ T7446] device veth0_vlan entered promiscuous mode [ 184.908956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.944686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.993007][ T7446] device veth1_vlan entered promiscuous mode [ 185.101662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.123415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.182370][ T7709] loop9: detected capacity change from 0 to 7 [ 185.194967][ T7446] device veth0_macvtap entered promiscuous mode [ 185.216703][ C0] print_req_error: 43 callbacks suppressed [ 185.216722][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.233567][ C0] buffer_io_error: 43 callbacks suppressed [ 185.233585][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.246678][ T7446] device veth1_macvtap entered promiscuous mode [ 185.284805][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.295824][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.330717][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.341757][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.348396][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.369457][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.380507][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.389254][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.400259][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.411859][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.421852][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.432849][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.443479][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.454509][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.463114][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.474859][ T7709] ldm_validate_partition_table(): Disk read failed. [ 185.483034][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.494040][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.513598][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.524627][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.532951][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.543949][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.560152][ T7709] Dev loop9: unable to read RDB block 0 [ 185.572584][ T7709] loop9: unable to read partition table [ 185.583554][ T7709] loop9: partition table beyond EOD, truncated [ 185.599786][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.640321][ T7709] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 185.668845][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.702543][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.733544][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.774588][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.819653][ T7446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.879985][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.931773][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.969612][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.000966][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.030622][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.063745][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.092620][ T7446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.111848][ T7446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.125986][ T5452] Bluetooth: hci4: command 0x0406 tx timeout [ 186.151315][ T7446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.183740][ T7446] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.215986][ T7446] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.241332][ T7446] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.270405][ T7446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.453940][ C1] sched: RT throttling activated [ 186.467080][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.468679][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.516237][ T5201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.533744][ T3560] ldm_validate_partition_table(): Disk read failed. [ 186.551289][ T5201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.564681][ T3560] Dev loop9: unable to read RDB block 0 [ 186.571471][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.611630][ T3560] loop9: unable to read partition table [ 186.635266][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.663000][ T3560] loop9: partition table beyond EOD, truncated [ 186.698903][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.755590][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.800804][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.982357][ T5201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.004202][ T5201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.011801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.062803][ T7742] loop3: detected capacity change from 0 to 64 [ 187.100746][ T7739] loop2: detected capacity change from 0 to 4096 [ 187.212162][ T7739] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 187.238676][ T7742] Trying to free block not in datazone [ 188.050145][ T7788] loop2: detected capacity change from 0 to 64 [ 188.303038][ T7805] genirq: Flags mismatch irq 1. 00000000 (dt2814) vs. 00000080 (i8042) [ 188.382218][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1205'. [ 188.865442][ T7840] loop3: detected capacity change from 0 to 2048 [ 188.943623][ T7840] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.986483][ T26] audit: type=1800 audit(1775705106.177:20): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1216" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 189.006877][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.106591][ T4745] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.273732][ T7866] loop3: detected capacity change from 0 to 1024 [ 189.342369][ T7866] hfsplus: bad catalog entry type [ 189.421173][ T5201] hfsplus: b-tree write err: -5, ino 25 [ 189.427288][ T5201] hfsplus: b-tree write err: -5, ino 4 [ 189.432868][ T5201] hfsplus: b-tree write err: -5, ino 2 [ 189.444749][ T5201] hfsplus: b-tree write err: -5, ino 26 [ 189.474244][ T4745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.518750][ T4745] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.704230][ T4745] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.723682][ T4745] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.744107][ T4745] usb 3-1: Product: syz [ 189.748829][ T4745] usb 3-1: Manufacturer: syz [ 189.764516][ T4745] usb 3-1: SerialNumber: syz [ 189.785638][ T4745] usb 3-1: config 0 descriptor?? [ 189.794842][ T1282] block nbd0: Possible stuck request ffff888020d20000: control (read@0,4096B). Runtime 30 seconds [ 189.903402][ T26] audit: type=1326 audit(1775705107.087:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 189.966569][ T26] audit: type=1326 audit(1775705107.087:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 190.018431][ T26] audit: type=1326 audit(1775705107.117:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 190.072223][ T1107] usb 3-1: USB disconnect, device number 8 [ 190.075029][ T26] audit: type=1326 audit(1775705107.117:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 190.118260][ T7896] loop3: detected capacity change from 0 to 64 [ 190.131524][ T26] audit: type=1326 audit(1775705107.117:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 190.166183][ T26] audit: type=1326 audit(1775705107.117:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 190.241362][ T26] audit: type=1326 audit(1775705107.117:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 190.308606][ T26] audit: type=1326 audit(1775705107.137:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 190.393494][ T26] audit: type=1326 audit(1775705107.137:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.5.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e1011819 code=0x7ffc0000 [ 190.609537][ T7921] tipc: Started in network mode [ 190.670289][ T7921] tipc: Node identity 0f000000000000000f, cluster identity 4711 [ 191.100667][ T7950] UBIFS error (pid: 7950): cannot open "c8:", error -22 [ 191.143767][ T7954] pimreg: tun_chr_ioctl cmd 21731 [ 191.868219][ T7968] loop2: detected capacity change from 0 to 32768 [ 191.985972][ T7987] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1282'. [ 192.007202][ T7986] loop3: detected capacity change from 0 to 512 [ 192.130879][ T7986] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 192.139606][ T7992] fuse: Bad value for 'fd' [ 192.202352][ T7992] cgroup: Unexpected value for 'cpuset_v2_mode' [ 192.266322][ T7986] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1283: bad orphan inode 15 [ 192.328201][ T7986] ext4_test_bit(bit=14, block=18) = 1 [ 192.342648][ T7986] is_bad_inode(inode)=0 [ 192.368763][ T7986] NEXT_ORPHAN(inode)=1023 [ 192.388295][ T7986] max_ino=32 [ 192.404931][ T7986] i_nlink=0 [ 192.426028][ T7986] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.468508][ T7986] ext2 filesystem being mounted at /131/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 192.532456][ T7986] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.1283: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 192.587057][ T8003] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 193.213526][ T8001] loop2: detected capacity change from 0 to 32768 [ 193.290533][ T8001] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 193.290533][ T8001] [ 193.347987][ T8001] ERROR: (device loop2): remounting filesystem as read-only [ 193.368738][ T8001] xtLookup: xtSearch returned -5 [ 193.387106][ T8001] free_index: error reading directory table [ 193.535894][ T8027] loop3: detected capacity change from 0 to 65 [ 193.617662][ T8027] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 194.183793][ T8050] loop3: detected capacity change from 0 to 512 [ 194.268007][ T8050] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 194.277284][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.277334][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.342397][ T8050] EXT4-fs (loop3): mount failed [ 194.418538][ T8050] autofs4:pid:8050:autofs_fill_super: could not open pipe file descriptor [ 194.545236][ T4742] kernel read not supported for file /dsp1 (pid: 4742 comm: kworker/1:8) [ 194.847499][ T8083] program syz.2.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.052749][ T8089] loop2: detected capacity change from 0 to 4096 [ 195.132028][ T8095] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.304044][ T4742] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 195.607091][ T1107] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.687087][ T4742] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.698220][ T8114] loop2: detected capacity change from 0 to 4096 [ 195.730316][ T8114] __ntfs_warning: 10 callbacks suppressed [ 195.730333][ T8114] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 195.840356][ T8114] ntfs: volume version 3.1. [ 195.864570][ T4742] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 195.884616][ T4742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.912061][ T8114] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 195.925431][ T4742] usb 6-1: Product: syz [ 195.929648][ T4742] usb 6-1: Manufacturer: syz [ 195.945213][ T4742] usb 6-1: SerialNumber: syz [ 195.952630][ T8114] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 195.972999][ T4742] usb 6-1: config 0 descriptor?? [ 195.999741][ T8128] program syz.1.1347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.026671][ T4742] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 196.150198][ T1107] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 196.189952][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.238009][ T1107] usb 4-1: Product: syz [ 196.274140][ T1107] usb 4-1: Manufacturer: syz [ 196.278826][ T1107] usb 4-1: SerialNumber: syz [ 196.341687][ T1107] usb 4-1: config 0 descriptor?? [ 196.411727][ T1107] sierra 4-1:0.0: Sierra USB modem converter detected [ 196.638903][ T1107] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 196.676676][ T1107] usb 4-1: USB disconnect, device number 9 [ 196.723158][ T1107] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 196.746562][ T1107] sierra 4-1:0.0: device disconnected [ 196.904096][ T4742] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 196.921226][ T4742] gspca_pac7302: probe of 6-1:0.0 failed with error -71 [ 196.944192][ T4742] usb 6-1: USB disconnect, device number 5 [ 196.991207][ T8143] loop2: detected capacity change from 0 to 40427 [ 197.052818][ T8143] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 197.104649][ T8143] F2FS-fs (loop2): invalid crc value [ 197.157056][ T8143] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.324100][ T8143] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 197.523399][ T6413] attempt to access beyond end of device [ 197.523399][ T6413] loop2: rw=2049, want=45104, limit=40427 [ 197.883879][ T8165] loop3: detected capacity change from 0 to 32768 [ 198.010403][ T8165] (syz.3.1362,8165,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.061560][ T8165] (syz.3.1362,8165,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.128343][ T8165] JBD2: Ignoring recovery information on journal [ 198.313720][ T8165] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 198.527504][ T5452] kernel read not supported for file /dsp1 (pid: 5452 comm: kworker/0:11) [ 198.780723][ T6236] ocfs2: Unmounting device (7,3) on (node local) [ 199.080807][ T8222] netlink: 'syz.5.1388': attribute type 5 has an invalid length. [ 199.493421][ T8247] loop3: detected capacity change from 0 to 4096 [ 199.541121][ T8247] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 199.590056][ T8247] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 199.668923][ T8258] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.684011][ T4746] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 199.690458][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop3 [ 199.712466][ T8257] loop2: detected capacity change from 0 to 1024 [ 199.853877][ T5201] hfsplus: b-tree write err: -5, ino 25 [ 199.863281][ T5201] hfsplus: b-tree write err: -5, ino 4 [ 199.880134][ T5201] hfsplus: b-tree write err: -5, ino 2 [ 199.895320][ T5201] hfsplus: b-tree write err: -5, ino 20 [ 199.939664][ T4746] usb 5-1: Using ep0 maxpacket: 32 [ 200.006013][ T8267] loop2: detected capacity change from 0 to 64 [ 200.093718][ T8267] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 200.224408][ T4746] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 200.224444][ T4746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.224467][ T4746] usb 5-1: Product: syz [ 200.224484][ T4746] usb 5-1: Manufacturer: syz [ 200.224501][ T4746] usb 5-1: SerialNumber: syz [ 200.226475][ T4746] usb 5-1: config 0 descriptor?? [ 200.266699][ T4746] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 200.266771][ T4746] dvb-usb: bulk message failed: -22 (4/0) [ 200.266834][ T4746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 200.266962][ T4746] dvb-usb: bulk message failed: -22 (5/0) [ 200.266979][ T4746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 200.273045][ T4746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.284247][ T4746] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 200.284322][ T4746] usb 5-1: media controller created [ 200.311333][ T4746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.330951][ T4746] usb 5-1: selecting invalid altsetting 3 [ 200.330975][ T4746] ttusb2: set interface to alts=3 failed [ 200.377305][ T4746] DVB: Unable to find symbol tda10086_attach() [ 200.377322][ T4746] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 200.415238][ T4746] dvb-usb: bulk message failed: -22 (4/0) [ 200.415264][ T4746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 200.415337][ T4746] dvb-usb: bulk message failed: -22 (5/0) [ 200.415352][ T4746] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 200.415396][ T4746] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 200.491853][ T8243] dvb-usb: bulk message failed: -22 (7/0) [ 200.491943][ T8243] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 200.492142][ T8243] ttusb2: i2c transfer failed. [ 200.493317][ T5453] usb 5-1: USB disconnect, device number 7 [ 200.543452][ T5453] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 201.245697][ T5453] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 201.278941][ T8308] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 201.524879][ T5453] usb 6-1: Using ep0 maxpacket: 8 [ 201.594914][ T8286] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1415'. [ 201.664849][ T5453] usb 6-1: unable to get BOS descriptor or descriptor too short [ 201.724218][ T5460] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 201.755350][ T5453] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 201.763210][ T5453] usb 6-1: can't read configurations, error -71 [ 201.904142][ T5452] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 201.964950][ T4230] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.364104][ T5452] usb 4-1: Using ep0 maxpacket: 8 [ 202.374201][ T5460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 202.391670][ T5460] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 202.405304][ T5460] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 202.414983][ T5460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.430371][ T5460] usb 3-1: config 0 descriptor?? [ 202.454298][ T8316] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 202.534419][ T5452] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.542968][ T5452] usb 4-1: config 179 has no interface number 0 [ 202.551483][ T5452] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 202.563120][ T5452] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 202.574964][ T5452] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 202.586667][ T5452] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 202.598803][ T4230] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.608559][ T5452] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 202.622243][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.638991][ T4230] usb 2-1: config 0 descriptor?? [ 202.645719][ T5452] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 202.656236][ T5452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.684371][ T8328] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 202.687217][ T4230] cp210x 2-1:0.0: cp210x converter detected [ 202.764269][ T5453] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 202.930008][ T8363] block nbd4: NBD_DISCONNECT [ 202.947139][ T5460] acrux 0003:1A34:0802.000C: unknown main item tag 0x7 [ 202.961327][ T5452] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input25 [ 202.976765][ T5460] acrux 0003:1A34:0802.000C: item fetching failed at offset 24/40 [ 202.988936][ T5460] acrux 0003:1A34:0802.000C: parse failed [ 203.007825][ T5460] acrux: probe of 0003:1A34:0802.000C failed with error -22 [ 203.015797][ T5453] usb 6-1: Using ep0 maxpacket: 32 [ 203.126627][ T1107] usb 4-1: USB disconnect, device number 10 [ 203.134096][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 203.143062][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.152007][ T1107] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 203.173549][ T4746] usb 3-1: USB disconnect, device number 9 [ 203.214393][ T5453] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 203.223421][ T5453] usb 6-1: config 0 has no interface number 0 [ 203.229679][ T5453] usb 6-1: config 0 interface 184 has no altsetting 0 [ 203.374293][ T4230] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 203.382409][ T4230] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 203.391309][ T4230] usb 2-1: cp210x converter now attached to ttyUSB0 [ 203.402712][ T4230] usb 2-1: USB disconnect, device number 8 [ 203.409175][ T4742] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 203.422753][ T4230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.431052][ T5453] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 203.442165][ T4230] cp210x 2-1:0.0: device disconnected [ 203.448317][ T5453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.459406][ T5453] usb 6-1: Product: syz [ 203.470424][ T5453] usb 6-1: Manufacturer: syz [ 203.475173][ T5453] usb 6-1: SerialNumber: syz [ 203.492207][ T5453] usb 6-1: config 0 descriptor?? [ 203.536364][ T5453] smsc75xx v1.0.0 [ 203.644045][ T5452] Bluetooth: hci2: command 0x0401 tx timeout [ 203.716765][ T8372] loop3: detected capacity change from 0 to 512 [ 203.784297][ T4742] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 203.797168][ T4742] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.809205][ T4742] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.822922][ T4742] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.833679][ T4742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.846109][ T8372] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.862569][ T8372] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.904925][ T8372] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 204.154234][ T4742] usb 5-1: GET_CAPABILITIES returned 0 [ 204.159932][ T4742] usbtmc 5-1:16.0: can't read capabilities [ 204.197202][ T5453] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 204.208779][ T5453] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 204.229144][ T5453] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 204.240423][ T5453] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 204.271515][ T5453] usb 6-1: USB disconnect, device number 7 [ 204.313052][ T8392] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 204.360463][ T5452] usb 5-1: USB disconnect, device number 8 [ 204.378287][ T8394] program syz.1.1467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.463060][ T8400] loop3: detected capacity change from 0 to 64 [ 205.260890][ T8438] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 205.343503][ T8436] sp0: Synchronizing with TNC [ 205.589719][ T8457] loop3: detected capacity change from 0 to 512 [ 206.174061][ T4230] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 206.564263][ T4230] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 206.591236][ T4230] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 206.607909][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 206.634186][ T4742] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 206.703217][ T8527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1514'. [ 206.784354][ T5454] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.804481][ T4230] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.823826][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 206.842811][ T4230] usb 3-1: Product: syz [ 206.852950][ T4230] usb 3-1: Manufacturer: syz [ 206.868147][ T4230] usb 3-1: SerialNumber: syz [ 206.893367][ T4230] usb 3-1: config 0 descriptor?? [ 206.935964][ T8538] mkiss: ax0: crc mode is auto. [ 206.959220][ T4230] usb 3-1: selecting invalid altsetting 0 [ 207.004418][ T4742] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.012486][ T4742] usb 6-1: config 0 has no interface number 0 [ 207.040567][ T4742] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 207.055891][ T5454] usb 4-1: Using ep0 maxpacket: 8 [ 207.088865][ T4742] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 207.120415][ T4742] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.147607][ T4742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.178671][ T4742] usb 6-1: config 0 descriptor?? [ 207.200274][ T8473] usb 3-1: selecting invalid altsetting 0 [ 207.205865][ T8507] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 207.207085][ T5454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.229024][ T4742] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 207.233882][ T8473] usb 3-1: 0:0: usb_set_interface failed (-22) [ 207.253518][ T5454] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.268236][ T8473] usb 3-1: selecting invalid altsetting 0 [ 207.271391][ T5454] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 207.276776][ T8473] usb 3-1: 0:0: usb_set_interface failed (-22) [ 207.298023][ T5454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.322377][ T8473] usb 3-1: selecting invalid altsetting 0 [ 207.329304][ T5454] usb 4-1: config 0 descriptor?? [ 207.329600][ T8473] usb 3-1: 0:0: usb_set_interface failed (-22) [ 207.341821][ T4742] usb 3-1: USB disconnect, device number 10 [ 207.480235][ T5453] usb 6-1: USB disconnect, device number 8 [ 207.574035][ T4230] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 207.605844][ T4742] usb 4-1: USB disconnect, device number 11 [ 207.964223][ T4230] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 207.999732][ T4230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.086430][ T8556] device gretap0 entered promiscuous mode [ 208.113538][ T8556] device ipvlan1 entered promiscuous mode [ 208.142576][ T8556] device ipvlan1 left promiscuous mode [ 208.175441][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 208.187793][ T8556] device gretap0 left promiscuous mode [ 208.214409][ T4230] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.223554][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 208.249774][ T4230] usb 2-1: Product: syz [ 208.263990][ T4230] usb 2-1: Manufacturer: syz [ 208.268677][ T4230] usb 2-1: SerialNumber: syz [ 208.300376][ T4230] usb 2-1: config 0 descriptor?? [ 208.364689][ T4230] usb 2-1: selecting invalid altsetting 0 [ 208.631597][ T5453] usb 2-1: USB disconnect, device number 9 [ 208.724550][ T1107] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 208.794419][ T4230] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 208.884191][ T4742] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 208.974081][ T1107] usb 6-1: Using ep0 maxpacket: 8 [ 209.054253][ T4746] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 209.124085][ T4742] usb 4-1: Using ep0 maxpacket: 16 [ 209.197503][ T4230] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 209.209608][ T4230] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 209.221182][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.254200][ T1107] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 209.263655][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.272146][ T1107] usb 6-1: Product: syz [ 209.276650][ T1107] usb 6-1: Manufacturer: syz [ 209.281293][ T1107] usb 6-1: SerialNumber: syz [ 209.286274][ T4742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 209.294158][ T4746] usb 3-1: Using ep0 maxpacket: 16 [ 209.302417][ T1107] usb 6-1: config 0 descriptor?? [ 209.350467][ T1107] gspca_main: se401-2.14.0 probing 047d:5003 [ 209.374593][ T4742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.392076][ T4742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.410970][ T4230] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.415591][ T4746] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.422560][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.439501][ T4746] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.452054][ T4230] usb 5-1: Product: syz [ 209.458893][ T4230] usb 5-1: Manufacturer: syz [ 209.459683][ T4746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.463534][ T4230] usb 5-1: SerialNumber: syz [ 209.479844][ T4746] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 209.489323][ T4746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.511283][ T4230] usb 5-1: config 0 descriptor?? [ 209.516591][ T4746] usb 3-1: config 0 descriptor?? [ 209.554467][ T4742] usb 4-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 209.563706][ T4742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.575223][ T4230] usb 5-1: selecting invalid altsetting 0 [ 209.577539][ T4742] usb 4-1: Product: syz [ 209.585838][ T4742] usb 4-1: Manufacturer: syz [ 209.590635][ T4742] usb 4-1: SerialNumber: syz [ 209.789707][ T8578] usb 5-1: selecting invalid altsetting 0 [ 209.796397][ T8578] usb 5-1: 0:0: usb_set_interface failed (-22) [ 209.802614][ T8578] usb 5-1: selecting invalid altsetting 0 [ 209.808761][ T8578] usb 5-1: 0:0: usb_set_interface failed (-22) [ 209.815215][ T8578] usb 5-1: selecting invalid altsetting 0 [ 209.821795][ T8578] usb 5-1: 0:0: usb_set_interface failed (-22) [ 209.829056][ T5454] usb 5-1: USB disconnect, device number 9 [ 209.964253][ T4742] usb 4-1: unit 6: unexpected type 0x0d [ 209.969863][ T4742] usb 4-1: unit 0 not found! [ 209.986541][ T4742] usb 4-1: USB disconnect, device number 12 [ 210.003373][ T1107] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 210.014226][ T4230] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.027314][ T4746] hid (null): usage index exceeded [ 210.032496][ T4746] hid (null): unknown global tag 0xe [ 210.041505][ T4746] hid (null): usage index exceeded [ 210.048650][ T4746] hid (null): unknown global tag 0xc [ 210.067214][ T4746] hid (null): report_id 0 is invalid [ 210.203094][ T5454] usb 6-1: USB disconnect, device number 9 [ 210.230858][ T4745] usb 3-1: USB disconnect, device number 11 [ 210.246135][ T4865] udevd[4865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.314163][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 210.459956][ T4230] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 210.474727][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.513713][ T4230] usb 2-1: config 0 descriptor?? [ 210.533400][ T8613] program syz.4.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.609104][ T8615] loop3: detected capacity change from 0 to 4096 [ 210.675693][ T8620] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.794358][ T4230] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 210.869653][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.934827][ T4230] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 210.952329][ T4230] usb 2-1: media controller created [ 211.049693][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.124159][ T4230] az6027: usb out operation failed. (-71) [ 211.154046][ T4230] az6027: usb out operation failed. (-71) [ 211.160398][ T4230] stb0899_attach: Driver disabled by Kconfig [ 211.176885][ T4230] az6027: no front-end attached [ 211.176885][ T4230] [ 211.264069][ T4230] az6027: usb out operation failed. (-71) [ 211.269879][ T4230] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 211.293434][ T4230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 211.317945][ T4230] dvb-usb: schedule remote query interval to 400 msecs. [ 211.348770][ T4230] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 211.374315][ T4230] usb 2-1: USB disconnect, device number 10 [ 211.437660][ T8652] loop3: detected capacity change from 0 to 2048 [ 211.496702][ T4230] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 211.545186][ T8658] loop6: detected capacity change from 0 to 8 [ 211.558959][ C1] print_req_error: 23 callbacks suppressed [ 211.558985][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.576020][ C1] buffer_io_error: 23 callbacks suppressed [ 211.576034][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.592163][ T8659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.628845][ T8661] bridge_slave_0: default FDB implementation only supports local addresses [ 211.638238][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.649265][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.691291][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.702318][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.744785][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.755808][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.770516][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.781712][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.791109][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.802107][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.817818][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.828937][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.838145][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.849150][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.857501][ T8658] ldm_validate_partition_table(): Disk read failed. [ 211.865617][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.876629][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.944442][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.955465][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.992775][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'. [ 212.006966][ T8652] NILFS (loop3): error -2 truncating bmap (ino=16) [ 212.011146][ T8658] Dev loop6: unable to read RDB block 0 [ 212.074437][ T8658] loop6: unable to read partition table [ 212.081299][ T8658] loop6: partition table beyond EOD, truncated [ 212.084355][ T8659] ------------[ cut here ]------------ [ 212.093651][ T8659] WARNING: CPU: 0 PID: 8659 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 212.103201][ T8659] Modules linked in: [ 212.107198][ T8659] CPU: 0 PID: 8659 Comm: segctord Not tainted syzkaller #0 [ 212.107996][ T8658] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 212.114540][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.114570][ T8659] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 212.114601][ T8659] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 212.114626][ T8659] RSP: 0018:ffffc90002faf390 EFLAGS: 00010293 [ 212.114649][ T8659] RAX: ffffffff830ec6ac RBX: ffff888079c861a0 RCX: ffff88802a9cbb80 [ 212.114669][ T8659] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 212.114684][ T8659] RBP: 0000000000000003 R08: ffff88805d3971d7 R09: 1ffff1100ba72e3a [ 212.114700][ T8659] R10: dffffc0000000000 R11: ffffed100ba72e3b R12: ffff88802a9cd308 [ 212.114718][ T8659] R13: ffff888061a829e0 R14: 00000000003f0002 R15: ffff88805a1800b0 [ 212.210409][ T8659] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 212.219436][ T8659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.226081][ T8659] CR2: 00007f5a3b5efa08 CR3: 00000000638a0000 CR4: 00000000003506f0 [ 212.234135][ T8659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.234400][ T8674] program syz.2.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.242147][ T8659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.242164][ T8659] Call Trace: [ 212.242173][ T8659] [ 212.242189][ T8659] nilfs_dat_commit_update+0x24/0x40 [ 212.242219][ T8659] nilfs_btree_commit_update_v+0x93/0x410 [ 212.276809][ T8659] nilfs_btree_propagate+0x95a/0xcf0 [ 212.282163][ T8659] nilfs_bmap_propagate+0x70/0x120 [ 212.287347][ T8659] nilfs_segctor_apply_buffers+0x15d/0x320 [ 212.293195][ T8659] ? nilfs_collect_file_data+0xc0/0xc0 [ 212.298725][ T8659] nilfs_segctor_scan_file+0x7af/0x9d0 [ 212.304255][ T8659] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 212.311419][ T8659] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 212.317373][ T8659] ? rcu_is_watching+0x11/0xa0 [ 212.322177][ T8659] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 212.328207][ T8659] ? verify_lock_unused+0x140/0x140 [ 212.333458][ T8659] ? nilfs_transaction_unlock+0x220/0x220 [ 212.339326][ T8659] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 212.345575][ T8659] ? clear_nonspinnable+0x60/0x60 [ 212.350645][ T8659] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 212.356184][ T8659] ? __lock_acquire+0x7d10/0x7d10 [ 212.361250][ T8659] ? __rwlock_init+0x140/0x140 [ 212.366081][ T8659] ? do_raw_spin_unlock+0x11d/0x230 [ 212.371365][ T8659] ? _raw_spin_unlock+0x24/0x40 [ 212.376275][ T8659] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 212.381778][ T8659] nilfs_segctor_construct+0x17b/0x690 [ 212.387318][ T8659] nilfs_segctor_thread+0x523/0x1180 [ 212.392667][ T8659] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 212.398647][ T8659] ? nilfs_iput_work_func+0x70/0x70 [ 212.403924][ T8659] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 212.409859][ T8659] ? _raw_spin_unlock+0x40/0x40 [ 212.414803][ T8659] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 212.420746][ T8659] ? init_wait_entry+0xd0/0xd0 [ 212.425603][ T8659] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 212.431538][ T8659] ? __kthread_parkme+0x157/0x1b0 [ 212.436687][ T8659] kthread+0x436/0x520 [ 212.440791][ T8659] ? nilfs_iput_work_func+0x70/0x70 [ 212.446085][ T8659] ? kthread_blkcg+0xd0/0xd0 [ 212.450717][ T8659] ret_from_fork+0x1f/0x30 [ 212.455384][ T8659] [ 212.458447][ T8659] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.465748][ T8659] CPU: 0 PID: 8659 Comm: segctord Not tainted syzkaller #0 [ 212.472979][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.483062][ T8659] Call Trace: [ 212.486371][ T8659] [ 212.489330][ T8659] dump_stack_lvl+0x188/0x250 [ 212.494046][ T8659] ? show_regs_print_info+0x20/0x20 [ 212.499282][ T8659] ? load_image+0x400/0x400 [ 212.503830][ T8659] panic+0x2e5/0x810 [ 212.507778][ T8659] ? bpf_jit_dump+0xd0/0xd0 [ 212.512330][ T8659] ? ret_from_fork+0x1f/0x30 [ 212.516956][ T8659] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 212.522365][ T8659] __warn+0x248/0x2b0 [ 212.526380][ T8659] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 212.531792][ T8659] report_bug+0x1b7/0x2e0 [ 212.536171][ T8659] handle_bug+0x3a/0x70 [ 212.540363][ T8659] exc_invalid_op+0x16/0x40 [ 212.544994][ T8659] asm_exc_invalid_op+0x16/0x20 [ 212.549885][ T8659] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 212.555903][ T8659] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 212.575580][ T8659] RSP: 0018:ffffc90002faf390 EFLAGS: 00010293 [ 212.581687][ T8659] RAX: ffffffff830ec6ac RBX: ffff888079c861a0 RCX: ffff88802a9cbb80 [ 212.589694][ T8659] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 212.597699][ T8659] RBP: 0000000000000003 R08: ffff88805d3971d7 R09: 1ffff1100ba72e3a [ 212.605712][ T8659] R10: dffffc0000000000 R11: ffffed100ba72e3b R12: ffff88802a9cd308 [ 212.613726][ T8659] R13: ffff888061a829e0 R14: 00000000003f0002 R15: ffff88805a1800b0 [ 212.622402][ T8659] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 212.628027][ T8659] nilfs_dat_commit_update+0x24/0x40 [ 212.633350][ T8659] nilfs_btree_commit_update_v+0x93/0x410 [ 212.639116][ T8659] nilfs_btree_propagate+0x95a/0xcf0 [ 212.644460][ T8659] nilfs_bmap_propagate+0x70/0x120 [ 212.649649][ T8659] nilfs_segctor_apply_buffers+0x15d/0x320 [ 212.655585][ T8659] ? nilfs_collect_file_data+0xc0/0xc0 [ 212.661084][ T8659] nilfs_segctor_scan_file+0x7af/0x9d0 [ 212.666600][ T8659] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 212.673762][ T8659] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 212.679693][ T8659] ? rcu_is_watching+0x11/0xa0 [ 212.684501][ T8659] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 212.690499][ T8659] ? verify_lock_unused+0x140/0x140 [ 212.695759][ T8659] ? nilfs_transaction_unlock+0x220/0x220 [ 212.701525][ T8659] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 212.707737][ T8659] ? clear_nonspinnable+0x60/0x60 [ 212.712837][ T8659] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 212.718355][ T8659] ? __lock_acquire+0x7d10/0x7d10 [ 212.723442][ T8659] ? __rwlock_init+0x140/0x140 [ 212.728246][ T8659] ? do_raw_spin_unlock+0x11d/0x230 [ 212.733489][ T8659] ? _raw_spin_unlock+0x24/0x40 [ 212.738368][ T8659] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 212.743886][ T8659] nilfs_segctor_construct+0x17b/0x690 [ 212.749496][ T8659] nilfs_segctor_thread+0x523/0x1180 [ 212.754855][ T8659] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 212.760881][ T8659] ? nilfs_iput_work_func+0x70/0x70 [ 212.766122][ T8659] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 212.772049][ T8659] ? _raw_spin_unlock+0x40/0x40 [ 212.776937][ T8659] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 212.782877][ T8659] ? init_wait_entry+0xd0/0xd0 [ 212.787688][ T8659] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 212.793627][ T8659] ? __kthread_parkme+0x157/0x1b0 [ 212.798707][ T8659] kthread+0x436/0x520 [ 212.802803][ T8659] ? nilfs_iput_work_func+0x70/0x70 [ 212.808032][ T8659] ? kthread_blkcg+0xd0/0xd0 [ 212.812823][ T8659] ret_from_fork+0x1f/0x30 [ 212.817307][ T8659] [ 212.820609][ T8659] Kernel Offset: disabled [ 212.825263][ T8659] Rebooting in 86400 seconds..