last executing test programs: 51.415846581s ago: executing program 2 (id=211): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2200002, &(0x7f0000000000)=ANY=[], 0x2, 0x610b, &(0x7f000000e100)="$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") set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x5) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002040)=""/4108, 0x100c) 50.372196237s ago: executing program 2 (id=215): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[], 0x21, 0x58a, &(0x7f0000000700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 50.07199402s ago: executing program 2 (id=218): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 49.908007486s ago: executing program 2 (id=221): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x8c48, &(0x7f00000001c0)=ANY=[], 0x1, 0x5cb, &(0x7f0000001200)="$eJzs3E1v3MYZAOChLEULBTUKBI0dx0AYJwfnYGV3VcsQ0oO3FCUx2V0uSCqQT0VQy6lQKS3qFmh88yVt0BY99Vzk2l/Q39N7zj2q4H7I+lZkyVVaPA8gzezy5cw7FMXBEjsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECIkuVmsxWFbtZf34hPliwXee+U7ZP2/nmgOGAmhDC9128IUf0TGo1wc/TWzTdexP6o/nUn3Bi9uhEaddEIz15/84cfvTE9Ve84E0XhlIRezjlbfPrls19+tr29+Ztz9hLC5ad+UbvR+fdZTftZmWe9zmoaZ2UeLy0uNj9cWynjlayblo/KKu3FSZF2qryI7yYPQwhLC3E6/yhf768ud7ppfDf5IG4tLT241242F+OP5wdppyjz/ocfz5fJWtbtZv3VYUy9+V77nfCgPhE/yaq4Sju9OH6ytb25cFaSdVDruwS1R9UPTgxqN9vtVqvdbi3eX7r/oNlsjM/WvTemm4eEw7tMv4KTlu+710LjT3v/9JNr3GuXeR2Hl7Gb/PWqUwAAAABesWh4jz0a3p2/OaytZN20eSBmN7qy9AAAAIBLMPxof2N8AyCEmyE6+vkfAAAA+N/2x1PX2IUoCuVgNposVRlsvB/tdOpaZ+fa6K1rh1usVm5F18eNDIvF6fGrJL0dvTUKemsS/e24eHJWHlFRzETPL5ZA+HO4NYq59XhUPp5sGfUyt5J10/l/he5HrdDpXJ+q0o3qd19s/T6Eoti99nW/dz0KT7a2N+d//qvtx8NcntetPN8Zf0PiyBclDuYyG/bl8tu9dY/jET88OOKZ4Y2YetRf93tzo36bg+703vinhnvvHvmTnjL+r8Lbo5i350bl3MHxN+o+W/PHjH5/Fq3Bxvuz487GI585Xxa3RzG3775XF+/dHW+Z2ZdF+6ws2vuP/+hYhKnLyGL/sVg4JYvdsLW9uXDBLACuypPDs9Bo3g0v5v8j8+748hYfbuqUq9wZs3s9hZ85u//izF6+Cu+OYt69Nf1iLj50RW+eNa80v+O8HsLxWfwj3Pn730JYD3cmwSfNsXW/fzkwq0Y739Q7fHOk38lK87LbjuoX12Z3fh3efPrls3tbO599vvn55hft9sJi88fN5v12mBkOY1yYewA4Rlp8G81Vf4iKIhv8rLW01OpUa2lc5MkncZEtr6Zx1q/SIlnr9FfTeFDkVZ7k3bryabaclnG5PhjkRRWv5EU8yMtsY/jkl3j86Jcy7XX6VZaUg27aKdM4yftVJ6ni5axM4sH6T7tZuZYWw53LQZpkK1nSqbK8H5f5epGk83Fcpum+wGw57VfZSlZX+/GgyHqd4lH8ad5d76XxclomRTao8lGDk76y/kpe9IbNzl/1wQaA74mnYfwEu71H2Z27EhpnxBzX75F7pADAf83hWXr2qhMCAAAAAAAAAAAAAACO2L9c7yfjRXkXWxH4792Rk2IaYa8SwksvOjyl8vD14za9c5ldXLwSQph+pV1MHpx05SP9/6g06spUuOo0Js9ZfNl2ohDC2cE/qGOu6ooEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf7TwAAAP//eC+Syw==") mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204081, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/175, 0xaf) 49.370328949s ago: executing program 2 (id=226): unshare(0x6060600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 48.641923841s ago: executing program 2 (id=234): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@uni_xlate}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 48.430266161s ago: executing program 32 (id=234): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000540)={[{@shortname_winnt}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@debug}, {@uni_xlate}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$eJzs3bFqU1EYB/AvbaqlIOkgFEXwiotTaCruEVEQCgqSwc1iU5QkFgwE2qHVyZfQV9DRVXAQV19ABKmCi906CJF6Y2NL2kRqcov9/ZZ8JOd/z3cuIYcMObl3rlFbXG4ubW5uxORkLvLlKMdWLqZjLMYj9SQAgP/JVrsd39uprHsBAEbD/g8Ax8+A+//tEbYEAAzZwN//x0bWEgAwZHfutnNplUxGNJ61Kq1K+pg+e3UpHkY9qjEbhfgR0d6R1jduzl+fTbZ9mY5KY72TX29VxnfnS1GI6d75UpLanZ+IqU7+41RUYy4Kcbp3fq5n/kRcuvjH/MUoxIf7sRz1WIztbDe/VkqSa7fm9+RP/hoHAAAAAAAAAAAAAAAAAAAAAADDUEx29Dy/p1jc7/U0n56vk4/+5wPtPZ8nH2fz2a4dAAAAAAAAAAAAAAAAAAAAjormymptoV6vPj6oePT+5dt+YwYscp15D3udwxenLnx+vv+Yp39zf/5t8eZ8lrdlwOLdxoMzl5szV45KPyurtYmD3lrfChFDmv1Vpmv/veq+g2delBder336OuiVM/gwAgAAAAAAAAAAAAAAAACAY677o9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT//394RdZrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwEAAP//Rp2fMw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 10.830791512s ago: executing program 5 (id=479): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2af, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @multicast1}}}, 0xa0) 10.193900299s ago: executing program 5 (id=487): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x6}, 0x2) 9.810879316s ago: executing program 5 (id=489): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 9.631539754s ago: executing program 5 (id=491): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x81012, r0, 0x0) 9.132192285s ago: executing program 5 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 8.127272869s ago: executing program 5 (id=504): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.938769447s ago: executing program 33 (id=504): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.751420488s ago: executing program 1 (id=515): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d000009058202000200000009050337072c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.597360671s ago: executing program 3 (id=538): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) 3.843103453s ago: executing program 1 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$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") mount$bind(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x82020, 0x0) 2.979236471s ago: executing program 1 (id=541): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb08000100000000000800010002000000080001000000000008000100"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68) 2.233226263s ago: executing program 0 (id=544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 2.035302601s ago: executing program 3 (id=545): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.925427776s ago: executing program 3 (id=547): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}}, 0x0, 0x0, 0x31, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d97692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) 1.812524241s ago: executing program 0 (id=548): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x41, 0x4800003e, r0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x649, 0x48001018, r2, 0x0) 1.699058906s ago: executing program 3 (id=549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r2, @in={{0x2, 0x4e23, @empty}}, 0x1, 0xb}, &(0x7f0000000100)=0x90) 1.697173386s ago: executing program 0 (id=551): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) getdents64(r0, 0x0, 0x4f) 1.553565422s ago: executing program 4 (id=552): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e) 1.436083597s ago: executing program 4 (id=553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r1, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.37140326s ago: executing program 0 (id=554): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000500)=ANY=[], 0x1, 0xc4d, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 1.275948714s ago: executing program 1 (id=555): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x40c040, &(0x7f0000001940)={[{@bsdgroups}, {@bh}, {@lazytime}, {@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@resuid}, {@usrquota}, {@data_writeback}]}, 0x3e, 0x515, &(0x7f0000000700)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 1.246001975s ago: executing program 4 (id=556): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) 1.159337609s ago: executing program 0 (id=557): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) 1.085358462s ago: executing program 4 (id=558): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 991.212706ms ago: executing program 4 (id=559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000c40)=""/4, 0x4}], 0x1, 0x0, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 711.311488ms ago: executing program 3 (id=560): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xa3, &(0x7f0000000640)={0x0, 0xe8cf, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 571.132505ms ago: executing program 1 (id=561): rt_sigprocmask(0x2, &(0x7f00000001c0)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdc01}, 0x10}}, 0x0) 514.299697ms ago: executing program 0 (id=562): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xfffffff9, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000d40)=[{&(0x7f0000000980)="a4", 0x1}], 0x1) 471.302619ms ago: executing program 3 (id=563): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004002e"], 0x58}}, 0x0) 378.997033ms ago: executing program 1 (id=564): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2008012, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1004}}, {@inlinecrypt}, {@quota}]}, 0x1, 0x572, &(0x7f0000000300)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10e) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) read(r0, 0x0, 0x0) 0s ago: executing program 4 (id=565): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xe, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4009c00) kernel console output (not intermixed with test programs): NGE): veth0_to_bond: link becomes ready [ 86.761868][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.771544][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.788261][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.817398][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.830296][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.839219][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.847054][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.856018][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.866282][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.878535][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.887322][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.896452][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.907445][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.916674][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.928178][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.970225][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.978869][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.993009][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.002263][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.013116][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.021704][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.031626][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.041392][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.050800][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.068536][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.077366][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.085524][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.100014][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.109818][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.119877][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.153539][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.165215][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.181677][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.200034][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.208350][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.217331][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.228065][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.238435][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.248439][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.258562][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.270271][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.279418][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.290614][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.300606][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.325738][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.344643][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.376755][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.388509][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.397506][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.407865][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.418625][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.427149][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.446246][ T4182] device veth0_vlan entered promiscuous mode [ 87.467538][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.494725][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.504531][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.512997][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.533672][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.547639][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.558346][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.570513][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.580738][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.594238][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.632346][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.641537][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.654094][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.665404][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.683795][ T4182] device veth1_vlan entered promiscuous mode [ 87.713636][ T4181] device veth0_vlan entered promiscuous mode [ 87.728430][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.739238][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.749135][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.761287][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.774591][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.791102][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.802318][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.814448][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.822784][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.840680][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.858017][ T4181] device veth1_vlan entered promiscuous mode [ 87.877173][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.888864][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.900032][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.911019][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.950510][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.985698][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.999574][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.012275][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.023331][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.033312][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.043445][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.052335][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.063706][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.073184][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.097066][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.131238][ T4182] device veth0_macvtap entered promiscuous mode [ 88.161485][ T4181] device veth0_macvtap entered promiscuous mode [ 88.182696][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.203531][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.223178][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.241407][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.253298][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.264778][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.275414][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.285525][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.299089][ T4181] device veth1_macvtap entered promiscuous mode [ 88.346826][ T4182] device veth1_macvtap entered promiscuous mode [ 88.368287][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.379245][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.391272][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.404710][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.420856][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.440438][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.456402][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.469452][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.481979][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.493323][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.503682][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.514717][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.544174][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.559455][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.575371][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.584946][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.597149][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.606388][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.616722][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.626532][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.639424][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.651525][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.660598][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.676150][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.686723][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.693108][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 88.696045][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 88.704597][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.715035][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 88.719450][ T4180] device veth0_vlan entered promiscuous mode [ 88.736556][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.749388][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.762213][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.774158][ T4183] device veth0_vlan entered promiscuous mode [ 88.783147][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 88.794029][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.802652][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 88.808591][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.825881][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.837435][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.851996][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.868842][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.890134][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.900764][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.910547][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.920783][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.934048][ T4180] device veth1_vlan entered promiscuous mode [ 88.949923][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.959210][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.970226][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.985735][ T4183] device veth1_vlan entered promiscuous mode [ 89.106691][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.118031][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.132074][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.147470][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.161243][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.196538][ T4180] device veth0_macvtap entered promiscuous mode [ 89.218110][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.227319][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.236126][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.247275][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.259037][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.269606][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.278108][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.289385][ T4184] device veth0_vlan entered promiscuous mode [ 89.301362][ T4183] device veth0_macvtap entered promiscuous mode [ 89.325601][ T4183] device veth1_macvtap entered promiscuous mode [ 89.334731][ T4180] device veth1_macvtap entered promiscuous mode [ 89.370344][ T4184] device veth1_vlan entered promiscuous mode [ 89.429362][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.444663][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.455969][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.468485][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.480920][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.495099][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.509729][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.521982][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.535233][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.550695][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.569483][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.591707][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.608470][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.621097][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.631634][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.643030][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.655460][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.665364][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.674145][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.684919][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.695326][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.704873][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.714248][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.724261][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.734584][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.744139][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.759875][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.763002][ T490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.780393][ T490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.780627][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.800683][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.814203][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.824562][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.835662][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.848883][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.863337][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.872308][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884246][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.894832][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.913394][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.922311][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.931207][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.944787][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.963937][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.966097][ T4180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.979238][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.985524][ T4180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.999242][ T4180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.009275][ T4180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.049579][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.058988][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.069551][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.095969][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.096770][ T4184] device veth0_macvtap entered promiscuous mode [ 90.116882][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.162678][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.176129][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.202990][ T4184] device veth1_macvtap entered promiscuous mode [ 90.231366][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.248342][ T490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.254858][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.283806][ T490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.347333][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.356639][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.373334][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.389691][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.402264][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.413927][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.426670][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.426690][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.426702][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.426711][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.441054][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.487309][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.503397][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.538610][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.552360][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.582230][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.595924][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.613723][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.633003][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.645982][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.657800][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.669300][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.680715][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.696944][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.711457][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.763293][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.772928][ T4257] Bluetooth: hci4: command 0x0419 tx timeout [ 90.784650][ T4241] Bluetooth: hci0: command 0x0419 tx timeout [ 90.792727][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 90.798150][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.834877][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.855699][ T490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.859775][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 90.878261][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.882658][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 90.908247][ T490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.910859][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.927403][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.971846][ T4309] sp0: Synchronizing with TNC [ 91.021478][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.092129][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.117382][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.181954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.318183][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.341149][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.383648][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.449320][ T490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.485650][ T490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.511893][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.760219][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.891456][ T4344] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.465251][ T4369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.31'. [ 92.508754][ T4372] loop4: detected capacity change from 0 to 128 [ 92.642915][ T4372] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.654050][ T4372] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.683803][ T4257] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.750177][ T4381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'. [ 93.083133][ T4389] process 'syz.3.41' launched './file0' with NULL argv: empty string added [ 93.084889][ T4393] netlink: 'syz.0.42': attribute type 5 has an invalid length. [ 93.116123][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.137630][ T4257] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 93.182932][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.229734][ T4257] usb 2-1: config 0 descriptor?? [ 93.544538][ T4407] netlink: 104 bytes leftover after parsing attributes in process `syz.0.48'. [ 93.548096][ T4410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.586802][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 93.745984][ T4415] tipc: Started in network mode [ 93.751697][ T4415] tipc: Node identity ac14140f, cluster identity 4711 [ 93.791223][ T4415] tipc: New replicast peer: 255.255.255.255 [ 93.800832][ T4257] greenasia 0003:0E8F:0012.0001: hidraw0: USB HID v0.07 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 93.804832][ T4415] tipc: Enabled bearer , priority 10 [ 93.851184][ T4257] greenasia 0003:0E8F:0012.0001: no inputs found [ 93.866073][ T4422] loop3: detected capacity change from 0 to 512 [ 94.038592][ T4422] EXT4-fs (loop3): Ignoring removed nobh option [ 94.076911][ T4422] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 94.091282][ T7] usb 2-1: USB disconnect, device number 2 [ 94.109786][ T4422] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.55: invalid indirect mapped block 256 (level 1) [ 94.146681][ T4422] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.55: invalid indirect mapped block 2683928664 (level 1) [ 94.259674][ T4425] fido_id[4425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 94.278298][ T4434] loop2: detected capacity change from 0 to 2048 [ 94.292527][ T4422] EXT4-fs (loop3): 1 truncate cleaned up [ 94.299058][ T4422] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,noquota,usrjquota=.grpquota,barrier=0x0000000000000008,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 94.437545][ T4434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.520846][ T4434] ======================================================= [ 94.520846][ T4434] WARNING: The mand mount option has been deprecated and [ 94.520846][ T4434] and is ignored by this kernel. Remove the mand [ 94.520846][ T4434] option from the mount to silence this warning. [ 94.520846][ T4434] ======================================================= [ 94.562993][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.670515][ T4422] EXT4-fs (loop3): shut down requested (2) [ 94.780266][ T4449] loop4: detected capacity change from 0 to 128 [ 94.926389][ T4297] tipc: Node number set to 2886997007 [ 94.946695][ T4449] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 95.124945][ T4449] hpfs: filesystem error: improperly stopped [ 95.132248][ T4449] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 95.179854][ T4463] loop0: detected capacity change from 0 to 512 [ 95.213787][ T4449] hpfs: You really don't want any checks? You are crazy... [ 95.221630][ T4449] hpfs: hpfs_map_sector(): read error [ 95.234699][ T4460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.256860][ T4449] hpfs: code page support is disabled [ 95.274326][ T4449] hpfs: hpfs_map_4sectors(): unaligned read [ 95.286372][ T4460] bond0: (slave rose0): Enslaving as an active interface with an up link [ 95.312645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 95.344533][ T4463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.355875][ T4475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 95.367688][ T4475] netlink: 58 bytes leftover after parsing attributes in process `syz.1.77'. [ 95.391008][ T4470] loop3: detected capacity change from 0 to 256 [ 95.398477][ T4449] hpfs: hpfs_map_4sectors(): unaligned read [ 95.441633][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.454604][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.464596][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.471047][ T4449] hpfs: filesystem error: unable to find root dir [ 95.472835][ T4297] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.478994][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.479443][ T4449] [ 95.488391][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.508187][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.511559][ T4463] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.528728][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.528758][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.528777][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.528795][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.528814][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.528834][ T4298] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 95.551120][ T4298] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 95.631735][ T4470] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.669314][ T26] audit: type=1800 audit(1764173119.878:2): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.75" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 95.712683][ T4470] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 95.719065][ T26] audit: type=1800 audit(1764173119.908:3): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.75" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 95.912707][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 95.967652][ T4297] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 96.002600][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.039015][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 96.074529][ T4297] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 96.273875][ T4297] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 96.301385][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.318430][ T4507] loop3: detected capacity change from 0 to 1024 [ 96.340715][ T4297] usb 3-1: Product: syz [ 96.358833][ T4297] usb 3-1: Manufacturer: syz [ 96.397102][ T4297] usb 3-1: SerialNumber: syz [ 96.429583][ T4507] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 96.433639][ T4297] usb 3-1: config 0 descriptor?? [ 96.457338][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.458951][ T7] usb 2-1: config 0 has no interfaces? [ 96.514394][ T4297] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 96.517824][ T7] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 96.584888][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.589803][ T4507] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 96.602285][ T7] usb 2-1: config 0 descriptor?? [ 96.729578][ T4488] loop0: detected capacity change from 0 to 32768 [ 96.791304][ T4297] scsi host1: usb-storage 3-1:0.0 [ 96.800065][ T4488] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.80 (4488) [ 96.912277][ T4488] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 96.962353][ T4488] BTRFS info (device loop0): using free space tree [ 97.009491][ T7] kernel write not supported for file /uhid (pid: 7 comm: kworker/0:0) [ 97.032657][ T4488] BTRFS info (device loop0): has skinny extents [ 97.129070][ T7] usb 2-1: USB disconnect, device number 3 [ 97.177616][ T4257] usb 3-1: USB disconnect, device number 2 [ 97.237430][ T4547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'. [ 97.452551][ T4488] BTRFS info (device loop0): enabling ssd optimizations [ 97.471384][ T4566] netlink: 32 bytes leftover after parsing attributes in process `syz.4.96'. [ 97.487841][ T4566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96'. [ 97.546033][ T26] audit: type=1326 audit(1764173121.748:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 97.715863][ T4574] sctp: [Deprecated]: syz.3.98 (pid 4574) Use of int in max_burst socket option. [ 97.715863][ T4574] Use struct sctp_assoc_value instead [ 97.742557][ T26] audit: type=1326 audit(1764173121.758:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 97.867309][ T26] audit: type=1326 audit(1764173121.818:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 97.886701][ T4577] device macsec1 entered promiscuous mode [ 97.919651][ T4577] device macvlan1 entered promiscuous mode [ 97.925684][ T4488] BTRFS warning (device loop0): can't clear the default_subvol feature bit while mounted [ 97.960849][ T4577] device macvlan1 left promiscuous mode [ 98.063640][ T26] audit: type=1326 audit(1764173121.858:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 98.150292][ T26] audit: type=1326 audit(1764173121.858:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 98.262583][ T26] audit: type=1326 audit(1764173121.858:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 98.315110][ T1111] cfg80211: failed to load regulatory.db [ 98.432942][ T26] audit: type=1326 audit(1764173121.858:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 98.508416][ T1111] kernel write not supported for file /input/mouse0 (pid: 1111 comm: kworker/0:2) [ 98.526510][ T26] audit: type=1326 audit(1764173121.868:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 98.713698][ T4608] loop4: detected capacity change from 0 to 4096 [ 98.779688][ T4619] loop3: detected capacity change from 0 to 1024 [ 98.810802][ T4608] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 99.067157][ T4631] device netdevsim0 entered promiscuous mode [ 99.074616][ T4619] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 99.102926][ T4631] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 99.164511][ T4619] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.192235][ T4619] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.113: bg 0: block 112: padding at end of block bitmap is not set [ 99.242014][ T4619] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 99.271372][ T4608] ntfs3: loop4: ino=5, "/" directory corrupted [ 99.319738][ T4619] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.319738][ T4619] [ 99.486814][ T4266] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 99.559667][ T4266] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 99.596458][ T4266] EXT4-fs (loop3): This should not happen!! Data will be lost [ 99.596458][ T4266] [ 99.632083][ T4651] loop1: detected capacity change from 0 to 64 [ 99.968117][ T4665] mmap: syz.4.131 (4665) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 100.138855][ T4674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.255554][ T4681] loop3: detected capacity change from 0 to 256 [ 100.295523][ T4681] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.351897][ T4681] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 100.367928][ T4622] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.400982][ T4681] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 100.411640][ T4688] loop4: detected capacity change from 0 to 2048 [ 100.501214][ T4688] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.542890][ T4299] udevd[4299]: incorrect nilfs2 checksum on /dev/loop4 [ 100.612992][ T4622] usb 3-1: Using ep0 maxpacket: 16 [ 100.626703][ T4694] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.742846][ T4622] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 100.761783][ T4622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 100.774418][ T4622] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 100.789352][ T4622] usb 3-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 100.800448][ T4622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.858360][ T4622] usb 3-1: config 0 descriptor?? [ 100.889975][ T4703] tap0: tun_chr_ioctl cmd 1074025678 [ 100.898659][ T4703] tap0: group set to 0 [ 101.120100][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 101.130930][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 101.149350][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 101.170227][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 101.183202][ T4717] loop3: detected capacity change from 0 to 4096 [ 101.185001][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 101.205033][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 101.216240][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 101.227640][ T4719] sch_fq: defrate 0 ignored. [ 101.242084][ T4717] NILFS (loop3): invalid segment: Checksum error in segment payload [ 101.272164][ T4717] NILFS (loop3): trying rollback from an earlier position [ 101.338482][ T4717] NILFS (loop3): recovery complete [ 101.377020][ T4722] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.396057][ T4622] wacom 0003:056A:0307.0003: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.2-1/input0 [ 101.432326][ T4717] NILFS (loop3): error -2 reading inode: ino=50245708239751 [ 101.606879][ T4248] usb 3-1: USB disconnect, device number 3 [ 101.807362][ T4744] loop4: detected capacity change from 0 to 16 [ 101.825159][ T4743] loop1: detected capacity change from 0 to 1024 [ 101.888113][ T4743] EXT4-fs (loop1): inline encryption not supported [ 101.897060][ T4744] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 101.907652][ T4743] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.996890][ T4743] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 102.385466][ T4760] loop3: detected capacity change from 0 to 4096 [ 102.447485][ T4760] ntfs3: loop3: ino=3, Correct links count -> 2. [ 102.577740][ T4776] __nla_validate_parse: 46 callbacks suppressed [ 102.577759][ T4776] netlink: 277 bytes leftover after parsing attributes in process `syz.4.178'. [ 102.724749][ T4760] ntfs3: loop3: failed to convert "0000" to cp950 [ 102.845291][ T4782] input: syz0 as /devices/virtual/input/input8 [ 103.045619][ T4791] loop2: detected capacity change from 0 to 256 [ 103.234939][ T4791] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.582227][ T4827] loop3: detected capacity change from 0 to 512 [ 103.894358][ T4827] EXT4-fs (loop3): Test dummy encryption mode enabled [ 103.927461][ T4848] loop1: detected capacity change from 0 to 256 [ 103.997226][ T4827] EXT4-fs error (device loop3): __ext4_iget:4908: inode #11: block 1: comm syz.3.202: invalid block [ 104.055179][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.120297][ T4848] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 104.171034][ T4827] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.202: couldn't read orphan inode 11 (err -117) [ 104.237496][ T4827] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,nogrpid,max_dir_size_kb=0x0000000000000004,journal_dev=0x0000000000000005,nodiscard,dax=inode,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 104.412805][ T1111] usb 1-1: Using ep0 maxpacket: 32 [ 104.610648][ T4859] loop3: detected capacity change from 0 to 64 [ 104.672823][ T4850] loop2: detected capacity change from 0 to 32768 [ 104.751296][ T4859] hfs: request for non-existent node 1317 in B*Tree [ 104.780809][ T4859] hfs: request for non-existent node 1317 in B*Tree [ 104.792770][ T1111] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 104.805633][ T4859] hfs: request for non-existent node 1536 in B*Tree [ 104.816470][ T4859] hfs: request for non-existent node 1536 in B*Tree [ 104.832716][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.857658][ T1111] usb 1-1: Product: syz [ 104.862317][ T1111] usb 1-1: Manufacturer: syz [ 104.888157][ T1111] usb 1-1: SerialNumber: syz [ 104.900163][ T4842] loop4: detected capacity change from 0 to 32768 [ 104.907580][ T1111] usb 1-1: config 0 descriptor?? [ 104.951525][ T154] hfs: request for non-existent node 1317 in B*Tree [ 104.976997][ T154] hfs: request for non-existent node 1317 in B*Tree [ 105.027842][ T4842] find_entry called with index >= next_index [ 105.179161][ T4855] loop1: detected capacity change from 0 to 32768 [ 105.268559][ T4855] [ 105.268559][ T4855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.268559][ T4855] [ 105.379095][ T4184] [ 105.379095][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.379095][ T4184] [ 105.403324][ T1111] airspy 1-1:0.0: Board ID: 00 [ 105.408333][ T1111] airspy 1-1:0.0: Firmware version: [ 105.462427][ T4869] loop3: detected capacity change from 0 to 2048 [ 105.464481][ T4184] [ 105.464481][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 105.464481][ T4184] [ 105.492992][ T4871] loop2: detected capacity change from 0 to 736 [ 105.514275][ T4869] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 105.545264][ T4869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.852900][ T1111] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 105.916710][ T4878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 105.945110][ T1111] airspy 1-1:0.0: Registered as swradio24 [ 105.994890][ T1111] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 106.053142][ T1111] usb 1-1: USB disconnect, device number 2 [ 106.714400][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.890023][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.032007][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.164880][ T4257] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.186408][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.257857][ T4921] loop4: detected capacity change from 0 to 512 [ 107.306891][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 107.424081][ T4921] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,grpquota,,errors=continue. Quota mode: writeback. [ 107.562984][ T4257] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.572347][ T4257] usb 1-1: config 0 has no interface number 0 [ 107.665537][ T4257] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.732992][ T4257] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.819671][ T4935] loop3: detected capacity change from 0 to 32768 [ 107.836413][ T4935] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.248 (4935) [ 107.851789][ T4257] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 107.890400][ T4917] chnl_net:caif_netlink_parms(): no params data found [ 107.917398][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.963796][ T4257] usb 1-1: config 0 descriptor?? [ 108.002968][ T4935] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 108.056306][ T4935] BTRFS info (device loop3): using free space tree [ 108.093370][ T4935] BTRFS info (device loop3): has skinny extents [ 108.243909][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.288248][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.363187][ T4935] BTRFS info (device loop3): enabling ssd optimizations [ 108.368707][ T4917] device bridge_slave_0 entered promiscuous mode [ 108.426127][ T4935] capability: warning: `syz.3.248' uses 32-bit capabilities (legacy support in use) [ 108.439217][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.449171][ T4917] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.504782][ T4257] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0004/input/input9 [ 108.523743][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.585805][ T4917] device bridge_slave_1 entered promiscuous mode [ 108.723084][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 108.843443][ T1111] usb 5-1: config 0 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.874432][ T1111] usb 5-1: config 0 interface 0 altsetting 208 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.882389][ T4972] loop1: detected capacity change from 0 to 32768 [ 108.919125][ T1111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.943984][ T1111] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 108.963657][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.002188][ T1111] usb 5-1: config 0 descriptor?? [ 109.048429][ T4257] holtek_kbd 0003:04D9:A055.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 109.100995][ T4257] usb 1-1: USB disconnect, device number 3 [ 109.139598][ T4972] XFS (loop1): Mounting V5 Filesystem [ 109.186650][ T4993] fido_id[4993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 109.252772][ T4615] Bluetooth: hci1: command 0x0409 tx timeout [ 109.408840][ T4972] XFS (loop1): Ending clean mount [ 109.550015][ T4917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.604865][ T1111] holtek 0003:1241:5015.0005: unknown main item tag 0x0 [ 109.637725][ T1111] holtek 0003:1241:5015.0005: unknown global tag 0xd [ 109.652506][ T1111] holtek 0003:1241:5015.0005: item 0 2 1 13 parsing failed [ 109.665098][ T4917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.675445][ T1111] holtek 0003:1241:5015.0005: parse failed [ 109.681491][ T1111] holtek: probe of 0003:1241:5015.0005 failed with error -22 [ 109.749784][ T4184] XFS (loop1): Unmounting Filesystem [ 109.791764][ T4917] team0: Port device team_slave_0 added [ 109.895106][ T1111] usb 5-1: USB disconnect, device number 2 [ 109.934393][ T4917] team0: Port device team_slave_1 added [ 110.018485][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.027396][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.056811][ T4917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.146944][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.158558][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.199427][ T4917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.525111][ T5026] loop3: detected capacity change from 0 to 128 [ 110.539491][ T4917] device hsr_slave_0 entered promiscuous mode [ 110.584802][ T4917] device hsr_slave_1 entered promiscuous mode [ 110.590741][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 110.615552][ T4917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.640456][ T5026] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.644017][ T5028] cgroup: Need name or subsystem set [ 110.654201][ T5026] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.660402][ T4917] Cannot create hsr debugfs directory [ 110.966221][ T5045] input: syz0 as /devices/virtual/input/input10 [ 111.164648][ T4257] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.285346][ T9] device hsr_slave_0 left promiscuous mode [ 111.302713][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.314327][ T9] device hsr_slave_1 left promiscuous mode [ 111.332924][ T4615] Bluetooth: hci1: command 0x041b tx timeout [ 111.348638][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.386011][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.416465][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.434924][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.451077][ T9] device bridge_slave_1 left promiscuous mode [ 111.463988][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.507030][ T9] device bridge_slave_0 left promiscuous mode [ 111.514772][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.541218][ T9] device veth1_macvtap left promiscuous mode [ 111.549528][ T9] device veth0_macvtap left promiscuous mode [ 111.559961][ T9] device veth1_vlan left promiscuous mode [ 111.570939][ T9] device veth0_vlan left promiscuous mode [ 111.602888][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.623900][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.634851][ T1111] usb 4-1: Using ep0 maxpacket: 32 [ 111.656398][ T4257] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 111.668258][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.681916][ T4257] usb 1-1: config 0 descriptor?? [ 111.762807][ T1111] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 111.775325][ T1111] usb 4-1: config 0 has no interface number 0 [ 111.784713][ T1111] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.797196][ T1111] usb 4-1: config 0 interface 85 has no altsetting 0 [ 111.895593][ T9] team0 (unregistering): Port device team_slave_1 removed [ 111.919268][ T9] team0 (unregistering): Port device team_slave_0 removed [ 111.934394][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.960278][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.973369][ T1111] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 111.988135][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.001031][ T1111] usb 4-1: Product: syz [ 112.009473][ T1111] usb 4-1: Manufacturer: syz [ 112.017982][ T1111] usb 4-1: SerialNumber: syz [ 112.038262][ T1111] usb 4-1: config 0 descriptor?? [ 112.061311][ T9] bond0 (unregistering): Released all slaves [ 112.175261][ T4257] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 112.191066][ T4257] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 112.240359][ T4257] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0006/input/input12 [ 112.288918][ T5070] syz.1.279 uses obsolete (PF_INET,SOCK_PACKET) [ 112.313058][ T5070] device syzkaller1 entered promiscuous mode [ 112.336551][ T4257] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 112.367275][ T4917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.426121][ T4917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.434848][ T4199] usb 1-1: USB disconnect, device number 4 [ 112.517906][ T5078] fido_id[5078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 112.568790][ T5081] loop4: detected capacity change from 0 to 512 [ 112.635983][ T4917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.645442][ T5081] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 112.658552][ T4917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.712283][ T1111] appletouch 4-1:0.85: Geyser mode initialized. [ 112.724498][ T5081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 112.735629][ T1111] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input11 [ 112.793359][ T5081] System zones: 1-12 [ 112.872092][ T5081] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.281: corrupted in-inode xattr [ 112.948690][ T4615] usb 4-1: USB disconnect, device number 2 [ 112.962647][ T5081] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.281: couldn't read orphan inode 15 (err -117) [ 113.042977][ T5081] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 113.067935][ T4917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.084532][ T4615] appletouch 4-1:0.85: input: appletouch disconnected [ 113.187600][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.200028][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.287987][ T4917] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.328308][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.409160][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.418128][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 113.448792][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.456400][ T4987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.548767][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.616804][ T5114] netlink: 104 bytes leftover after parsing attributes in process `syz.3.287'. [ 113.622064][ T5115] loop3: detected capacity change from 0 to 7 [ 113.663188][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.705664][ T5115] Dev loop3: unable to read RDB block 7 [ 113.706880][ T490] loop: Write error at byte offset 127, length 3584. [ 113.733246][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.754380][ T5115] loop3: unable to read partition table [ 113.765544][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 113.765669][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.778746][ C1] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 113.786213][ T4987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.804622][ T5120] loop0: detected capacity change from 0 to 764 [ 113.839270][ T5115] loop3: partition table beyond EOD, truncated [ 113.869620][ T5115] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CÿjmámÛÀ¿Ã½?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 113.952280][ T5120] rock: directory entry would overflow storage [ 113.978593][ T5120] rock: sig=0x4f50, size=4, remaining=3 [ 113.985462][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.002994][ T3559] Dev loop3: unable to read RDB block 7 [ 114.010908][ T5120] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 114.020328][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.037103][ T3559] loop3: unable to read partition table [ 114.062169][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.078354][ T3559] loop3: partition table beyond EOD, truncated [ 114.101193][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.125220][ T5122] loop4: detected capacity change from 0 to 8192 [ 114.174049][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.190984][ T5126] loop3: detected capacity change from 0 to 4096 [ 114.214017][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.248612][ T5126] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 114.259197][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.275987][ T5134] loop1: detected capacity change from 0 to 512 [ 114.334155][ T5122] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 114.357025][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.437981][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.442952][ T5122] REISERFS (device loop4): using ordered data mode [ 114.475375][ T5122] reiserfs: using flush barriers [ 114.506478][ T5122] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.536016][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.542652][ T4622] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.624185][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.679911][ T5122] REISERFS (device loop4): checking transaction log (loop4) [ 114.719066][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.852707][ T4622] usb 1-1: Using ep0 maxpacket: 8 [ 114.972831][ T4622] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 114.990361][ T4622] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.007949][ T4622] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.067952][ T4622] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.125777][ T4622] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.161483][ T5122] REISERFS (device loop4): Using tea hash to sort names [ 115.196611][ T4622] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.221391][ T4622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.236163][ T5122] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 115.317639][ T5156] loop3: detected capacity change from 0 to 256 [ 115.389178][ T5159] netlink: 104 bytes leftover after parsing attributes in process `syz.1.297'. [ 115.479537][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.493845][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 115.525631][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.539051][ T4622] usb 1-1: usb_control_msg returned -32 [ 115.549020][ T4622] usbtmc 1-1:16.0: can't read capabilities [ 115.593587][ T4917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.731115][ T5171] loop1: detected capacity change from 0 to 256 [ 115.854370][ T5171] FAT-fs (loop1): Directory bread(block 64) failed [ 115.861570][ T5171] FAT-fs (loop1): Directory bread(block 65) failed [ 115.949979][ T5171] FAT-fs (loop1): Directory bread(block 66) failed [ 115.967114][ T5171] FAT-fs (loop1): Directory bread(block 67) failed [ 115.987890][ T5179] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 116.020813][ T5171] FAT-fs (loop1): Directory bread(block 68) failed [ 116.029946][ T5171] FAT-fs (loop1): Directory bread(block 69) failed [ 116.050802][ T5171] FAT-fs (loop1): Directory bread(block 70) failed [ 116.058637][ T5171] FAT-fs (loop1): Directory bread(block 71) failed [ 116.088211][ T5171] FAT-fs (loop1): Directory bread(block 72) failed [ 116.119865][ T5171] FAT-fs (loop1): Directory bread(block 73) failed [ 116.189733][ T4248] usb 1-1: USB disconnect, device number 5 [ 116.223309][ T5189] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 116.223309][ T5189] The task syz.3.303 (5189) triggered the difference, watch for misbehavior. [ 116.286761][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.325977][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.384046][ T5192] loop6: detected capacity change from 0 to 7 [ 116.422095][ T5192] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 116.445009][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.445025][ T5192] loop6: partition table partially beyond EOD, [ 116.445850][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.470284][ T5192] truncated [ 116.477551][ T5192] loop6: p1 size 262016 extends beyond EOD, truncated [ 116.539128][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.580105][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.624841][ T4917] device veth0_vlan entered promiscuous mode [ 116.706548][ T4917] device veth1_vlan entered promiscuous mode [ 116.738706][ T5196] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.850707][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.866068][ T4852] udevd[4852]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 116.883523][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.956813][ T4917] device veth0_macvtap entered promiscuous mode [ 117.003226][ T4917] device veth1_macvtap entered promiscuous mode [ 117.153161][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.212539][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.245676][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.254891][ T5203] loop4: detected capacity change from 0 to 8192 [ 117.269723][ T5216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.313'. [ 117.289833][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.309483][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.335382][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.358061][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.369085][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.413754][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.474657][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.501613][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.556720][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.613413][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.674551][ T4297] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x5 [ 117.699671][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.700174][ T4297] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 117.730736][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.781004][ T4297] hid-generic 00A0:0006:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 117.781557][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.868911][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.896102][ T5240] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.903640][ T5242] loop3: detected capacity change from 0 to 22 [ 117.926023][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.937251][ T5242] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 117.950429][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.964717][ T4917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.983209][ T4917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.012266][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.041515][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.075004][ T5242] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 118.084268][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.092664][ T4297] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 118.127872][ T4917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.153572][ T4917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.193029][ T4917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.252737][ T4298] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.333120][ T4917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.352158][ T5250] loop0: detected capacity change from 0 to 32768 [ 118.582668][ T4298] usb 2-1: Using ep0 maxpacket: 16 [ 118.619202][ T5250] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.664992][ T5258] loop3: detected capacity change from 0 to 512 [ 118.694366][ T4297] usb 5-1: config 0 has no interfaces? [ 118.712023][ T4297] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 118.713593][ T4987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.753641][ T5258] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 118.761946][ T5258] EXT4-fs (loop3): inline encryption not supported [ 118.768877][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.773028][ T5258] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.790716][ T4987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.801553][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.835843][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.847064][ T4297] usb 5-1: config 0 descriptor?? [ 118.863981][ T5258] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 118.871169][ T5258] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.913429][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.935754][ T4298] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 118.940372][ T5258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.967080][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.987672][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.996376][ T5258] EXT4-fs (loop3): 1 truncate cleaned up [ 119.017876][ T5258] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 119.022350][ T4298] usb 2-1: Product: syz [ 119.057882][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 119.198053][ T4298] usb 2-1: Manufacturer: syz [ 119.216470][ T4298] usb 2-1: SerialNumber: syz [ 119.271380][ T1111] usb 5-1: USB disconnect, device number 3 [ 119.279025][ T4298] usb 2-1: config 0 descriptor?? [ 119.391434][ T5258] EXT4-fs (loop3): Test dummy encryption mode enabled [ 119.414262][ T5258] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 119.798422][ T4298] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 119.832377][ T4298] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.873177][ T4298] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 119.931963][ T4298] usb 2-1: media controller created [ 119.932716][ T1108] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 119.990276][ T5295] loop4: detected capacity change from 0 to 512 [ 119.999484][ T4298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.011865][ T5246] dtv5100: wlen = 0, aborting. [ 120.131499][ T5295] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 120.144826][ T4298] zl10353_read_register: readreg error (reg=127, ret==0) [ 120.156121][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.333'. [ 120.166989][ T4298] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 120.192316][ T4298] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 120.283049][ T4298] usb 2-1: USB disconnect, device number 4 [ 120.352775][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.403714][ T1108] usb 1-1: config 1 has no interface number 0 [ 120.411704][ T1108] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.453519][ T1108] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 120.465536][ T4298] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 120.492588][ T1108] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 120.545235][ T1108] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 120.610706][ T5310] loop5: detected capacity change from 0 to 2048 [ 120.617970][ T1108] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 120.643170][ T5285] loop3: detected capacity change from 0 to 32768 [ 120.665429][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 120.710804][ T5310] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 120.751607][ T5285] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.327 (5285) [ 120.786685][ T5310] UDF-fs: Scanning with blocksize 512 failed [ 120.828410][ T1108] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.872992][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.915665][ T5310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.920709][ T1108] usb 1-1: Product: syz [ 120.942736][ T1108] usb 1-1: Manufacturer: syz [ 120.958825][ T1108] usb 1-1: SerialNumber: syz [ 121.027903][ T5281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.047031][ T5285] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 121.119863][ T5285] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 121.182637][ T5285] BTRFS info (device loop3): use zstd compression, level 3 [ 121.269917][ T5285] BTRFS info (device loop3): using free space tree [ 121.309068][ T5281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.327640][ T5281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.354300][ T5332] loop4: detected capacity change from 0 to 2048 [ 121.361251][ T5285] BTRFS info (device loop3): has skinny extents [ 121.500848][ T5332] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 121.602805][ T4199] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.616587][ T5281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.822295][ T5285] BTRFS info (device loop3): enabling ssd optimizations [ 122.003670][ T4199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.038046][ T4199] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.073984][ T5281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.114017][ T5281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.121642][ T4199] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.175331][ T1108] cdc_ncm 1-1:1.1: bind() failure [ 122.363755][ T4199] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 122.442616][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.492593][ T4199] usb 2-1: Product: syz [ 122.497670][ T4199] usb 2-1: Manufacturer: syz [ 122.511853][ T4199] usb 2-1: SerialNumber: syz [ 122.542269][ T4298] usb 1-1: USB disconnect, device number 6 [ 122.609747][ T5362] loop5: detected capacity change from 0 to 32768 [ 122.630393][ T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 122.674731][ T4199] hub 2-1:1.0: bad descriptor, ignoring hub [ 122.682297][ T4199] hub: probe of 2-1:1.0 failed with error -5 [ 122.701210][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 122.718139][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.718139][ T9] [ 122.738286][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 122.773490][ T9] EXT4-fs (loop4): Free/Dirty block details [ 122.801324][ T9] EXT4-fs (loop4): free_blocks=2415919504 [ 122.830715][ T9] EXT4-fs (loop4): dirty_blocks=2336 [ 122.840631][ T9] EXT4-fs (loop4): Block reservation details [ 122.849395][ T9] EXT4-fs (loop4): i_reserved_data_blocks=146 [ 122.928415][ T4266] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 256 with error 28 [ 122.946576][ T4199] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 122.981761][ T4266] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.981761][ T4266] [ 123.418543][ T5394] loop0: detected capacity change from 0 to 32768 [ 123.570209][ T5400] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 123.625711][ T5394] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 123.711948][ T5411] loop4: detected capacity change from 0 to 256 [ 123.726665][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 123.823741][ T5334] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 123.982708][ T5392] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.033923][ T5418] loop4: detected capacity change from 0 to 2048 [ 124.068247][ T5418] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 124.078640][ T4852] udevd[4852]: incorrect nilfs2 checksum on /dev/loop4 [ 124.099114][ T5422] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.117452][ T4852] udevd[4852]: incorrect nilfs2 checksum on /dev/loop4 [ 124.168865][ T5418] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 124.195635][ T5418] Remounting filesystem read-only [ 124.219551][ T5418] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 124.234334][ T5418] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 124.245101][ T5418] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 124.258054][ T5418] NILFS (loop4): error -5 truncating bmap (ino=15) [ 124.273881][ T5418] syz.4.357 (5418) used greatest stack depth: 20144 bytes left [ 124.294397][ T4183] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 124.362682][ T5392] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 124.391830][ T5392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.417911][ T5427] loop4: detected capacity change from 0 to 1024 [ 124.449418][ T5392] usb 4-1: config 0 descriptor?? [ 124.507575][ T5392] cp210x 4-1:0.0: cp210x converter detected [ 124.529758][ T1111] usb 2-1: USB disconnect, device number 5 [ 124.550462][ T1111] usblp0: removed [ 124.933444][ T5392] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 124.994171][ T5392] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 125.015280][ T5392] usb 4-1: cp210x converter now attached to ttyUSB0 [ 125.250289][ T5392] usb 4-1: USB disconnect, device number 3 [ 125.346923][ T5392] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.401585][ T5392] cp210x 4-1:0.0: device disconnected [ 125.907073][ T5437] loop4: detected capacity change from 0 to 32768 [ 125.981916][ T5437] XFS (loop4): Invalid device [./file0], error=-15 [ 126.172454][ C0] sched: RT throttling activated [ 126.819416][ T5450] loop1: detected capacity change from 0 to 262144 [ 126.879252][ T5476] loop5: detected capacity change from 0 to 1024 [ 127.114153][ T5473] loop4: detected capacity change from 0 to 32768 [ 127.521645][ T5450] F2FS-fs (loop1): invalid crc value [ 127.626529][ T5450] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.704158][ T5473] XFS (loop4): Mounting V5 Filesystem [ 127.741468][ T5450] F2FS-fs (loop1): Start checkpoint disabled! [ 127.778623][ T5450] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.914022][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 127.914038][ T26] audit: type=1326 audit(1764173152.128:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4a6456829 code=0x7ffc0000 [ 128.005812][ T5473] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 128.033093][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 128.072974][ T26] audit: type=1326 audit(1764173152.268:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4a6456829 code=0x7ffc0000 [ 128.211003][ T5473] XFS (loop4): Starting recovery (logdev: internal) [ 128.362638][ T26] audit: type=1326 audit(1764173152.268:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a64ba749 code=0x7ffc0000 [ 128.371519][ T5473] XFS (loop4): Ending recovery (logdev: internal) [ 128.472655][ T26] audit: type=1326 audit(1764173152.268:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4a6456829 code=0x7ffc0000 [ 128.592573][ T26] audit: type=1326 audit(1764173152.268:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a64ba749 code=0x7ffc0000 [ 128.666092][ T26] audit: type=1326 audit(1764173152.268:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a64ba749 code=0x7ffc0000 [ 128.792359][ T26] audit: type=1326 audit(1764173152.328:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4a6456829 code=0x7ffc0000 [ 128.935017][ T5515] XFS (loop4): User initiated shutdown received. [ 128.982780][ T26] audit: type=1326 audit(1764173152.328:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4a6456829 code=0x7ffc0000 [ 129.025699][ T5515] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485). Shutting down filesystem. [ 129.081708][ T5515] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 129.092635][ T26] audit: type=1326 audit(1764173152.328:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a64ba749 code=0x7ffc0000 [ 129.197118][ T5524] device macsec1 entered promiscuous mode [ 129.220248][ T26] audit: type=1326 audit(1764173152.328:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a64ba749 code=0x7ffc0000 [ 129.250996][ T4183] XFS (loop4): Unmounting Filesystem [ 129.258935][ T5524] device macvlan1 entered promiscuous mode [ 129.283727][ T5526] loop5: detected capacity change from 0 to 512 [ 129.310433][ T5524] device macvlan1 left promiscuous mode [ 129.357441][ T5526] EXT4-fs (loop5): Ignoring removed nobh option [ 129.457519][ T5526] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 129.494078][ T5526] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.387: invalid indirect mapped block 256 (level 1) [ 129.597218][ T5507] loop0: detected capacity change from 0 to 40427 [ 129.648292][ T5526] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.387: invalid indirect mapped block 2683928664 (level 1) [ 129.697747][ T5507] F2FS-fs (loop0): invalid crc value [ 129.748629][ T5526] EXT4-fs (loop5): 1 truncate cleaned up [ 129.760295][ T5507] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.782585][ T5526] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,noquota,usrjquota=.grpquota,barrier=0x0000000000000008,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 129.956453][ T5507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.974411][ T5526] EXT4-fs (loop5): shut down requested (2) [ 130.311668][ T4182] attempt to access beyond end of device [ 130.311668][ T4182] loop0: rw=2049, want=45104, limit=40427 [ 130.354689][ T5550] loop5: detected capacity change from 0 to 512 [ 130.432945][ T5550] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 130.467641][ T5550] EXT4-fs (loop5): inline encryption not supported [ 130.517156][ T5550] EXT4-fs (loop5): Test dummy encryption mode enabled [ 130.532836][ T5550] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 130.564366][ T5550] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.617793][ T5550] EXT4-fs (loop5): 1 truncate cleaned up [ 130.662626][ T5550] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 130.967621][ T5550] EXT4-fs (loop5): Test dummy encryption mode enabled [ 130.975955][ T5551] loop4: detected capacity change from 0 to 32768 [ 131.000300][ T5550] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 131.077335][ T5551] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.389 (5551) [ 131.165867][ T5551] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 131.199085][ T5551] BTRFS info (device loop4): using free space tree [ 131.220833][ T5551] BTRFS info (device loop4): has skinny extents [ 131.249070][ T5560] loop5: detected capacity change from 0 to 2048 [ 131.323078][ T5560] EXT4-fs (loop5): Ignoring removed bh option [ 131.465433][ T5551] BTRFS info (device loop4): enabling ssd optimizations [ 131.516764][ T5551] BTRFS warning (device loop4): can't clear the default_subvol feature bit while mounted [ 131.535172][ T5560] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 131.631489][ T5560] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.755269][ T5560] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 131.763492][ T5592] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 131.800502][ T5560] EXT4-fs (loop5): This should not happen!! Data will be lost [ 131.800502][ T5560] [ 131.891506][ T5592] EXT4-fs (loop5): This should not happen!! Data will be lost [ 131.891506][ T5592] [ 131.912056][ T5592] EXT4-fs (loop5): Total free blocks count 0 [ 131.949312][ T5592] EXT4-fs (loop5): Free/Dirty block details [ 132.022659][ T5592] EXT4-fs (loop5): free_blocks=2415919104 [ 132.064002][ T4298] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.078054][ T5560] EXT4-fs (loop5): Total free blocks count 0 [ 132.091910][ T5556] loop3: detected capacity change from 0 to 32768 [ 132.127991][ T5592] EXT4-fs (loop5): dirty_blocks=48 [ 132.162643][ T5560] EXT4-fs (loop5): Free/Dirty block details [ 132.207720][ T5556] XFS (loop3): Mounting V5 Filesystem [ 132.263478][ T5613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.399'. [ 132.517015][ T5556] XFS (loop3): Ending clean mount [ 132.537525][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.575142][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.600543][ T5556] XFS (loop3): Quotacheck needed: Please wait. [ 132.622686][ T4298] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 132.648986][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.706903][ T4298] usb 2-1: config 0 descriptor?? [ 132.742525][ T5556] XFS (loop3): Quotacheck: Done. [ 132.842793][ T4199] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.955749][ T4181] XFS (loop3): Unmounting Filesystem [ 133.190031][ T4298] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 133.232848][ T4199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 133.247285][ T5631] loop4: detected capacity change from 0 to 32768 [ 133.260648][ T4199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.285497][ T4199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 133.297614][ T4298] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 133.388848][ T5631] (syz.4.407,5631,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.403074][ T4298] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 133.437099][ T5631] (syz.4.407,5631,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.502242][ T5631] JBD2: Ignoring recovery information on journal [ 133.509110][ T4199] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 133.524924][ T4199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.543055][ T4199] usb 1-1: Product: syz [ 133.550709][ T4199] usb 1-1: Manufacturer: syz [ 133.557074][ T4199] usb 1-1: SerialNumber: syz [ 133.572653][ T4199] usb 1-1: config 0 descriptor?? [ 133.589962][ T5631] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 133.624842][ T5610] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.792711][ T4298] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.837533][ T4199] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 133.882854][ T5610] usb 6-1: Using ep0 maxpacket: 16 [ 133.921110][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 134.192763][ T4298] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.192831][ T5610] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 134.210801][ T4298] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 134.215377][ T5610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.227722][ T4298] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.236734][ T5610] usb 6-1: Product: syz [ 134.256215][ T5610] usb 6-1: Manufacturer: syz [ 134.261156][ T5610] usb 6-1: SerialNumber: syz [ 134.283975][ T5665] loop4: detected capacity change from 0 to 64 [ 134.293713][ T5610] usb 6-1: config 0 descriptor?? [ 134.423004][ T4298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.432331][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.447634][ T4298] usb 4-1: Product: syz [ 134.456525][ T4298] usb 4-1: Manufacturer: syz [ 134.461684][ T4298] usb 4-1: SerialNumber: syz [ 134.772804][ T5610] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 134.789987][ T5610] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.826070][ T5610] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 134.835198][ T5610] usb 6-1: media controller created [ 134.848607][ T5610] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.971435][ T5668] loop4: detected capacity change from 0 to 2048 [ 135.020000][ T5668] EXT4-fs (loop4): Ignoring removed bh option [ 135.085944][ T5668] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 135.214638][ T5668] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.246255][ T5668] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28 [ 135.259551][ T4983] usb 2-1: USB disconnect, device number 6 [ 135.271526][ T4983] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 135.280042][ T5668] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.280042][ T5668] [ 135.297863][ T5668] EXT4-fs (loop4): Total free blocks count 0 [ 135.323323][ T5682] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 135.356022][ T5670] loop1: detected capacity change from 0 to 32768 [ 135.368252][ T5668] EXT4-fs (loop4): Free/Dirty block details [ 135.375232][ T5668] EXT4-fs (loop4): free_blocks=2415919104 [ 135.381339][ T5682] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.381339][ T5682] [ 135.397539][ T5668] EXT4-fs (loop4): dirty_blocks=48 [ 135.407527][ T5668] EXT4-fs (loop4): Block reservation details [ 135.416563][ T5610] zl10353_read_register: readreg error (reg=127, ret==0) [ 135.426688][ T5682] EXT4-fs (loop4): Total free blocks count 0 [ 135.433130][ T5610] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 135.442073][ T5610] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 135.472778][ T5610] usb 6-1: USB disconnect, device number 2 [ 135.486146][ T5670] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.415 (5670) [ 135.531990][ T5610] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 135.570143][ T5670] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 135.587683][ T4257] usb 1-1: USB disconnect, device number 7 [ 135.614934][ T4298] cdc_ncm 4-1:1.0: bind() failure [ 135.636034][ T5670] BTRFS info (device loop1): using free space tree [ 135.649233][ T5670] BTRFS info (device loop1): has skinny extents [ 135.745033][ T4298] usbtest: probe of 4-1:1.1 failed with error -71 [ 135.760225][ T4298] usb 4-1: USB disconnect, device number 4 [ 135.769785][ T4299] udevd[4299]: setting owner of /dev/bus/usb/004/004 to uid=0, gid=0 failed: No such file or directory [ 135.828861][ T5704] loop4: detected capacity change from 0 to 512 [ 135.904488][ T5704] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 135.942642][ T5704] EXT4-fs (loop4): inline encryption not supported [ 135.953557][ T5704] EXT4-fs (loop4): Test dummy encryption mode enabled [ 135.960570][ T5670] BTRFS info (device loop1): enabling ssd optimizations [ 135.972877][ T5704] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 135.980044][ T5704] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.045589][ T5670] BTRFS warning (device loop1): can't clear the default_subvol feature bit while mounted [ 136.100066][ T5704] EXT4-fs (loop4): 1 truncate cleaned up [ 136.147441][ T5704] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 136.594129][ T5704] EXT4-fs (loop4): Test dummy encryption mode enabled [ 136.644633][ T5704] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 137.156919][ T5765] loop4: detected capacity change from 0 to 256 [ 137.192660][ T5384] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.240064][ T5765] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 137.253581][ T5751] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.296474][ T5768] loop1: detected capacity change from 0 to 64 [ 137.309830][ T5728] loop5: detected capacity change from 0 to 32768 [ 137.453391][ T5728] XFS (loop5): Mounting V5 Filesystem [ 137.506959][ T5768] hfs: request for non-existent node 131072 in B*Tree [ 137.532756][ T5751] usb 1-1: Using ep0 maxpacket: 8 [ 137.572875][ T5384] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 137.589180][ T5768] hfs: request for non-existent node 131072 in B*Tree [ 137.657000][ T5728] XFS (loop5): Ending clean mount [ 137.728605][ T5788] tun0: tun_chr_ioctl cmd 1074025675 [ 137.735881][ T5728] XFS (loop5): Quotacheck needed: Please wait. [ 137.743137][ T5384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.748889][ T5788] tun0: persist enabled [ 137.791723][ T5792] tun0: tun_chr_ioctl cmd 1074025675 [ 137.811227][ T5384] usb 4-1: config 0 descriptor?? [ 137.827966][ T5792] tun0: persist enabled [ 137.858764][ T5751] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 137.864808][ T5384] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 137.885620][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 137.912733][ T5751] usb 1-1: Product: syz [ 137.949885][ T5751] usb 1-1: Manufacturer: syz [ 137.957900][ T5751] usb 1-1: SerialNumber: syz [ 137.965357][ T5751] usb 1-1: config 0 descriptor?? [ 138.001726][ T5728] XFS (loop5): Quotacheck: Done. [ 138.028312][ T5751] usbtest 1-1:0.0: FX2 device [ 138.047989][ T5751] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 138.072888][ T5801] block nbd4: Device being setup by another task [ 138.140408][ T4917] XFS (loop5): Unmounting Filesystem [ 138.155397][ T5748] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.255495][ T5609] usb 1-1: USB disconnect, device number 8 [ 138.317327][ T5384] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 138.462797][ T5748] usb 2-1: Using ep0 maxpacket: 32 [ 138.602864][ T5748] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 138.791168][ T4198] block nbd4: Receive control failed (result -32) [ 138.792102][ T5797] block nbd4: shutting down sockets [ 138.822982][ T5748] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.867368][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.892522][ T5748] usb 2-1: Product: syz [ 138.896958][ T5748] usb 2-1: Manufacturer: syz [ 138.901820][ T5748] usb 2-1: SerialNumber: syz [ 138.920526][ T5830] loop5: detected capacity change from 0 to 4096 [ 138.930203][ T5748] usb 2-1: config 0 descriptor?? [ 138.953059][ T5793] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 138.972768][ T5384] gspca_cpia1: usb_control_msg 05, error -71 [ 138.978973][ T5384] cpia1 4-1:0.0: unexpected systemstate: 00 [ 139.052933][ T5384] usb 4-1: USB disconnect, device number 5 [ 139.064238][ T5830] ntfs: volume version 3.1. [ 139.156942][ T5830] __ntfs_error: 58 callbacks suppressed [ 139.156963][ T5830] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 139.208315][ T5830] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 139.240837][ T5844] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 139.257693][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.265982][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.278911][ T5749] usb 2-1: USB disconnect, device number 7 [ 139.333244][ T5748] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.716836][ T5847] loop5: detected capacity change from 0 to 32768 [ 139.787965][ T5748] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.801885][ T5748] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.824360][ T5748] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.840635][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.858959][ T5847] XFS (loop5): Mounting V5 Filesystem [ 139.873155][ T5841] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.141888][ T5847] XFS (loop5): Ending clean mount [ 140.152203][ T5863] loop1: detected capacity change from 0 to 4096 [ 140.192927][ T5847] XFS (loop5): User initiated shutdown received. [ 140.198962][ T5748] usb 1-1: USB disconnect, device number 9 [ 140.208734][ T5847] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 140.238909][ T5847] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 140.265572][ T5863] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 140.340334][ T4917] XFS (loop5): Unmounting Filesystem [ 140.749137][ T5868] loop3: detected capacity change from 0 to 1024 [ 140.796948][ T5000] udevd[5000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.045019][ T5260] hfsplus: b-tree write err: -5, ino 4 [ 141.162930][ T5865] loop4: detected capacity change from 0 to 32768 [ 141.366983][ T5865] XFS (loop4): Mounting V5 Filesystem [ 141.492680][ T5865] XFS (loop4): Ending clean mount [ 141.544152][ T5865] XFS (loop4): Quotacheck needed: Please wait. [ 141.603562][ T5880] loop3: detected capacity change from 0 to 4096 [ 141.628487][ T5880] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 141.728117][ T5865] XFS (loop4): Quotacheck: Done. [ 141.794538][ T4183] XFS (loop4): Unmounting Filesystem [ 141.810247][ T5880] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 142.172169][ T5870] loop5: detected capacity change from 0 to 32768 [ 142.229912][ T4269] ntfs3: loop3: ino=1e, Internal error [ 142.269693][ T4269] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 142.406014][ T4181] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 142.451257][ T5870] XFS (loop5): Mounting V5 Filesystem [ 142.461983][ T26] audit: type=1326 audit(1764173166.678:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 142.502074][ T5904] loop1: detected capacity change from 0 to 256 [ 142.577920][ T26] audit: type=1326 audit(1764173166.678:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 142.664228][ T5870] XFS (loop5): Ending clean mount [ 142.685616][ T5870] XFS (loop5): Quotacheck needed: Please wait. [ 142.747503][ T5912] loop4: detected capacity change from 0 to 1024 [ 142.781392][ T26] audit: type=1326 audit(1764173166.678:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 142.808224][ T5909] xt_hashlimit: max too large, truncated to 1048576 [ 142.898743][ T5870] XFS (loop5): Quotacheck: Done. [ 142.909094][ T5912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.968423][ T26] audit: type=1326 audit(1764173166.708:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5901 comm="syz.4.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91896fe749 code=0x7ffc0000 [ 142.981936][ T5870] XFS (loop5): User initiated shutdown received. [ 143.099948][ T5870] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 143.142799][ T5870] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 143.292153][ T4917] XFS (loop5): Unmounting Filesystem [ 143.438559][ T5925] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 143.819990][ T5907] loop0: detected capacity change from 0 to 40427 [ 143.892167][ T5943] loop4: detected capacity change from 0 to 128 [ 143.927603][ T5945] device ip6_vti0 entered promiscuous mode [ 143.949882][ T5907] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 143.997671][ T5907] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 144.019220][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.473'. [ 144.100602][ T5907] F2FS-fs (loop0): invalid crc value [ 144.146581][ T5950] loop1: detected capacity change from 0 to 1024 [ 144.151561][ T5907] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.164768][ T5953] loop3: detected capacity change from 0 to 256 [ 144.253436][ T5953] exfat: Deprecated parameter 'utf8' [ 144.263221][ T5953] exfat: Deprecated parameter 'namecase' [ 144.293761][ T5953] exfat: Deprecated parameter 'namecase' [ 144.343585][ T5907] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 144.347106][ T5953] exfat: Deprecated parameter 'utf8' [ 144.358787][ T5907] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.374241][ T5950] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.406107][ T26] audit: type=1800 audit(1764173168.618:86): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.460" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 144.461234][ T5953] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 144.501563][ T5969] loop5: detected capacity change from 0 to 64 [ 144.615317][ T4182] attempt to access beyond end of device [ 144.615317][ T4182] loop0: rw=2049, want=45104, limit=40427 [ 144.831320][ T5978] sctp: [Deprecated]: syz.3.483 (pid 5978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.831320][ T5978] Use struct sctp_sack_info instead [ 145.165199][ T5974] loop1: detected capacity change from 0 to 8192 [ 145.267547][ T5974] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 145.279739][ T5974] REISERFS (device loop1): using ordered data mode [ 145.287055][ T5974] reiserfs: using flush barriers [ 145.294523][ T5974] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.403110][ T5974] REISERFS (device loop1): checking transaction log (loop1) [ 145.449306][ T5974] REISERFS (device loop1): Using r5 hash to sort names [ 145.475631][ T5974] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 145.691934][ T5995] loop5: detected capacity change from 0 to 512 [ 145.788386][ T5995] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 145.820070][ T5995] EXT4-fs (loop5): invalid journal inode [ 145.875274][ T5995] EXT4-fs (loop5): can't get journal size [ 145.892676][ T4199] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.954011][ T5995] EXT4-fs (loop5): 1 truncate cleaned up [ 145.966306][ T5995] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue. Quota mode: writeback. [ 146.001758][ T5982] loop4: detected capacity change from 0 to 32768 [ 146.077438][ T5982] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.486 (5982) [ 146.142296][ T4917] EXT4-fs error (device loop5): __ext4_iget:4908: inode #11: block 1828716567: comm syz-executor: invalid block [ 146.240691][ T5982] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 146.274234][ T4917] EXT4-fs error (device loop5): __ext4_iget:4908: inode #11: block 1828716567: comm syz-executor: invalid block [ 146.341633][ T5982] BTRFS info (device loop4): setting nodatacow, compression disabled [ 146.366032][ T4199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.402865][ T5982] BTRFS info (device loop4): force clearing of disk cache [ 146.411061][ T5982] BTRFS info (device loop4): enabling ssd optimizations [ 146.422554][ T4199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.472620][ T5982] BTRFS info (device loop4): using spread ssd allocation scheme [ 146.499139][ T5982] BTRFS info (device loop4): turning off barriers [ 146.522722][ T4199] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.535903][ T5982] BTRFS info (device loop4): disabling free space tree [ 146.545638][ T4199] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 146.555965][ T4199] usb 4-1: Manufacturer: syz [ 146.578597][ T5982] BTRFS info (device loop4): not using ssd optimizations [ 146.586673][ T5982] BTRFS info (device loop4): not using spread ssd allocation scheme [ 146.597882][ T4199] usb 4-1: config 0 descriptor?? [ 146.612915][ T5749] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.638782][ T5982] BTRFS info (device loop4): has skinny extents [ 146.694104][ T5982] BTRFS info (device loop4): clearing free space tree [ 146.703507][ T5982] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.716311][ T5982] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.882653][ T5749] usb 2-1: Using ep0 maxpacket: 32 [ 146.884247][ T490] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.023496][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.049458][ T6041] loop0: detected capacity change from 0 to 8 [ 147.058915][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.111447][ T5749] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 147.141370][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.159125][ T6041] SQUASHFS error: zlib decompression failed, data probably corrupt [ 147.184451][ T5749] usb 2-1: config 0 descriptor?? [ 147.194723][ T490] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.212708][ T6041] SQUASHFS error: Failed to read block 0x9f: -5 [ 147.229605][ T6041] SQUASHFS error: Unable to read metadata cache entry [9d] [ 147.248481][ T6041] SQUASHFS error: Unable to read inode 0x40127 [ 147.356050][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.717431][ T6047] loop0: detected capacity change from 0 to 4096 [ 147.717915][ T5749] hid-led 0003:27B8:01ED.000B: item fetching failed at offset 0/2 [ 147.734777][ T5749] hid-led: probe of 0003:27B8:01ED.000B failed with error -22 [ 147.834484][ T4199] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 147.848675][ T4199] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 147.857740][ T4199] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 147.866435][ T4199] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 147.878618][ T4199] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 147.968829][ T4199] usb 4-1: USB disconnect, device number 6 [ 147.998548][ T6054] usb 2-1: USB disconnect, device number 8 [ 148.037558][ T490] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.168474][ T490] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.459476][ T6073] netlink: 80 bytes leftover after parsing attributes in process `syz.3.513'. [ 148.539495][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 148.845254][ T5392] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.892685][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.901278][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.946013][ T6048] device bridge_slave_0 entered promiscuous mode [ 148.989407][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.002694][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.018580][ T6048] device bridge_slave_1 entered promiscuous mode [ 149.070281][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.098877][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.134904][ T6048] team0: Port device team_slave_0 added [ 149.178584][ T6048] team0: Port device team_slave_1 added [ 149.236005][ T5392] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.271803][ T5392] usb 2-1: config 1 has no interface number 0 [ 149.280007][ T5392] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.295261][ T5392] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 149.307577][ T5392] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 149.322257][ T5392] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 9223, setting to 1024 [ 149.393295][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.411605][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.442410][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.494220][ T5392] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.520439][ T5392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.566862][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.581381][ T5392] usb 2-1: Product: syz [ 149.600206][ T5392] usb 2-1: Manufacturer: syz [ 149.639400][ T5392] usb 2-1: SerialNumber: syz [ 149.720497][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.742016][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.772566][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.842006][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.937796][ T6077] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.973052][ T5384] Bluetooth: hci1: command 0x0409 tx timeout [ 150.050520][ T6048] device hsr_slave_0 entered promiscuous mode [ 150.068300][ T5384] hid-generic 0005:16C0:5505.000C: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 150.100107][ T6048] device hsr_slave_1 entered promiscuous mode [ 150.170188][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.181976][ T6048] Cannot create hsr debugfs directory [ 150.338938][ T6148] fido_id[6148]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 150.532793][ T5384] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 150.594167][ T6077] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.624099][ T5392] cdc_ncm 2-1:1.1: bind() failure [ 150.745392][ T490] device hsr_slave_0 left promiscuous mode [ 150.751920][ T490] device hsr_slave_1 left promiscuous mode [ 150.759053][ T490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.767458][ T490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.778545][ T490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.786876][ T490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.798158][ T490] device bridge_slave_1 left promiscuous mode [ 150.798757][ T6147] loop4: detected capacity change from 0 to 32768 [ 150.810946][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.832883][ T6147] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.533 (6147) [ 150.842733][ T4983] usb 2-1: USB disconnect, device number 9 [ 150.877054][ T490] device bridge_slave_0 left promiscuous mode [ 150.890667][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.899273][ T6147] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 150.908422][ T5384] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 150.909927][ T6147] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 150.927948][ T5384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.929150][ T6147] BTRFS info (device loop4): use lzo compression, level 0 [ 150.950174][ T490] device veth1_macvtap left promiscuous mode [ 150.956951][ T490] device veth0_macvtap left promiscuous mode [ 150.967399][ T5384] usb 1-1: config 0 descriptor?? [ 150.971720][ T6147] BTRFS info (device loop4): max_inline at 0 [ 150.979771][ T490] device veth1_vlan left promiscuous mode [ 150.990039][ T490] device veth0_vlan left promiscuous mode [ 150.998529][ T6147] BTRFS info (device loop4): force clearing of disk cache [ 151.012885][ T5387] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.016362][ T6147] BTRFS info (device loop4): turning on sync discard [ 151.042918][ T6147] BTRFS info (device loop4): disabling free space tree [ 151.060522][ T6147] BTRFS info (device loop4): setting nodatasum [ 151.082572][ T6147] BTRFS info (device loop4): has skinny extents [ 151.240688][ T6147] BTRFS info (device loop4): enabling ssd optimizations [ 151.256941][ T6147] BTRFS info (device loop4): clearing free space tree [ 151.264502][ T5387] usb 4-1: Using ep0 maxpacket: 16 [ 151.275106][ T6147] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.307668][ T6147] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.482267][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 151.492042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 151.501677][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 151.510843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 151.519937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 151.529199][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 151.539050][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 151.551911][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 151.563303][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 151.986505][ T6184] loop1: detected capacity change from 0 to 131072 [ 152.040227][ T6184] F2FS-fs (loop1): invalid crc value [ 152.054952][ T5609] Bluetooth: hci1: command 0x041b tx timeout [ 152.062317][ T5387] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 152.082962][ T5387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.103669][ T5387] usb 4-1: Product: syz [ 152.108291][ T5387] usb 4-1: Manufacturer: syz [ 152.116168][ T6184] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.150651][ T6184] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 152.158446][ T5387] usb 4-1: SerialNumber: syz [ 152.168168][ T5387] usb 4-1: config 0 descriptor?? [ 152.187608][ T6184] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 152.215353][ T5387] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 152.235894][ T490] team0 (unregistering): Port device team_slave_1 removed [ 152.298982][ T4852] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (4852) [ 152.425658][ T5384] pegasus: probe of 1-1:0.0 failed with error -71 [ 152.439487][ T5384] usb 1-1: USB disconnect, device number 10 [ 152.645033][ T490] team0 (unregistering): Port device team_slave_0 removed [ 152.645116][ T6192] usb 4-1: USB disconnect, device number 7 [ 152.727628][ T490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.778860][ T490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.067862][ T490] bond0 (unregistering): Released all slaves [ 153.170781][ T6048] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 153.238826][ T6048] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 153.319326][ T6048] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.371264][ T6048] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.502932][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'. [ 153.899242][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.941728][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.954464][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.977952][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.028169][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.075379][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.095516][ T6239] loop1: detected capacity change from 0 to 512 [ 154.111080][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.118398][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.138174][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.143865][ T6054] Bluetooth: hci1: command 0x040f tx timeout [ 154.199816][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.220718][ T6239] EXT4-fs (loop1): Ignoring removed bh option [ 154.251199][ T6239] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.291542][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.307924][ T6239] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 154.328521][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.335701][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.343346][ T6239] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.361593][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.366664][ T6239] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 154.401604][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.426388][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.467943][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.518417][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.550944][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.609634][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.667483][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.716135][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.798749][ T6264] netlink: 'syz.3.563': attribute type 11 has an invalid length. [ 154.998501][ T6269] loop1: detected capacity change from 0 to 512 [ 155.022237][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.071769][ T6269] EXT4-fs (loop1): inline encryption not supported [ 155.072014][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.155251][ T6269] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001004,inlinecrypt,quota,,errors=continue. Quota mode: writeback. [ 155.180959][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.193143][ T6269] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.323417][ T6269] [ 155.325790][ T6269] ====================================================== [ 155.332939][ T6269] WARNING: possible circular locking dependency detected [ 155.340681][ T6269] syzkaller #0 Not tainted [ 155.345127][ T6269] ------------------------------------------------------ [ 155.352188][ T6269] syz.1.564/6269 is trying to acquire lock: [ 155.358338][ T6269] ffff88805fa8e0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 155.367744][ T6269] [ 155.367744][ T6269] but task is already holding lock: [ 155.375226][ T6269] ffff8880639df020 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 155.385270][ T6269] [ 155.385270][ T6269] which lock already depends on the new lock. [ 155.385270][ T6269] [ 155.395869][ T6269] [ 155.395869][ T6269] the existing dependency chain (in reverse order) is: [ 155.407323][ T6269] [ 155.407323][ T6269] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 155.415627][ T6269] down_write+0x38/0x60 [ 155.421901][ T6269] ext4_truncate+0x96d/0x10d0 [ 155.428984][ T6269] ext4_setattr+0xffe/0x19e0 [ 155.434901][ T6269] notify_change+0xbcd/0xee0 [ 155.441684][ T6269] do_truncate+0x197/0x220 [ 155.451259][ T6269] do_sys_ftruncate+0x31b/0x3d0 [ 155.461991][ T6269] do_syscall_64+0x4c/0xa0 [ 155.470093][ T6269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.479748][ T6269] [ 155.479748][ T6269] -> #4 (jbd2_handle){++++}-{0:0}: [ 155.488483][ T6269] start_this_handle+0x1338/0x15a0 [ 155.495136][ T6269] jbd2__journal_start+0x2b7/0x5a0 [ 155.502341][ T6269] jbd2_journal_start+0x26/0x30 [ 155.511623][ T6269] ocfs2_start_trans+0x374/0x6c0 [ 155.518178][ T6269] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 155.527704][ T6269] ocfs2_dismount_volume+0x1de/0x880 [ 155.534842][ T6269] generic_shutdown_super+0x130/0x300 [ 155.543130][ T6269] kill_block_super+0x7c/0xe0 [ 155.551061][ T6269] deactivate_locked_super+0x93/0xf0 [ 155.558211][ T6269] cleanup_mnt+0x418/0x4d0 [ 155.563779][ T6269] task_work_run+0x125/0x1a0 [ 155.570581][ T6269] exit_to_user_mode_loop+0x10f/0x130 [ 155.577339][ T6269] exit_to_user_mode_prepare+0xee/0x180 [ 155.586639][ T6269] syscall_exit_to_user_mode+0x16/0x40 [ 155.593807][ T6269] do_syscall_64+0x58/0xa0 [ 155.600252][ T6269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.608179][ T6269] [ 155.608179][ T6269] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 155.618956][ T6269] down_read+0x44/0x2e0 [ 155.625071][ T6269] ocfs2_start_trans+0x368/0x6c0 [ 155.632318][ T6269] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 155.641052][ T6269] ocfs2_dismount_volume+0x1de/0x880 [ 155.647532][ T6269] generic_shutdown_super+0x130/0x300 [ 155.654177][ T6269] kill_block_super+0x7c/0xe0 [ 155.660009][ T6269] deactivate_locked_super+0x93/0xf0 [ 155.665969][ T6269] cleanup_mnt+0x418/0x4d0 [ 155.672048][ T6269] task_work_run+0x125/0x1a0 [ 155.682129][ T6269] exit_to_user_mode_loop+0x10f/0x130 [ 155.689293][ T6269] exit_to_user_mode_prepare+0xee/0x180 [ 155.695995][ T6269] syscall_exit_to_user_mode+0x16/0x40 [ 155.703118][ T6269] do_syscall_64+0x58/0xa0 [ 155.709298][ T6269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.718063][ T6269] [ 155.718063][ T6269] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 155.731646][ T6269] ocfs2_start_trans+0x269/0x6c0 [ 155.739629][ T6269] ocfs2_acquire_dquot+0x677/0xaf0 [ 155.746618][ T6269] dqget+0x778/0xeb0 [ 155.753872][ T6269] __dquot_initialize+0x3b6/0xcb0 [ 155.762766][ T6269] ocfs2_get_init_inode+0x138/0x1b0 [ 155.768863][ T6269] ocfs2_mknod+0x8aa/0x22b0 [ 155.775127][ T6269] ocfs2_mkdir+0x192/0x410 [ 155.781321][ T6269] vfs_mkdir+0x387/0x570 [ 155.788464][ T6269] do_mkdirat+0x1d7/0x5a0 [ 155.794404][ T6269] __x64_sys_mkdirat+0x85/0x90 [ 155.803035][ T6269] do_syscall_64+0x4c/0xa0 [ 155.808973][ T6269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.815905][ T6269] [ 155.815905][ T6269] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 155.825551][ T6269] down_write+0x38/0x60 [ 155.831097][ T6269] ocfs2_create_local_dquot+0x194/0x1750 [ 155.838367][ T6269] ocfs2_acquire_dquot+0x7cb/0xaf0 [ 155.844203][ T6269] dqget+0x778/0xeb0 [ 155.848759][ T6269] __dquot_initialize+0x3b6/0xcb0 [ 155.854504][ T6269] ocfs2_get_init_inode+0x138/0x1b0 [ 155.860952][ T6269] ocfs2_mknod+0x8aa/0x22b0 [ 155.866093][ T6269] ocfs2_mkdir+0x192/0x410 [ 155.871135][ T6269] vfs_mkdir+0x387/0x570 [ 155.876178][ T6269] do_mkdirat+0x1d7/0x5a0 [ 155.881788][ T6269] __x64_sys_mkdirat+0x85/0x90 [ 155.887497][ T6269] do_syscall_64+0x4c/0xa0 [ 155.892781][ T6269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.899301][ T6269] [ 155.899301][ T6269] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 155.907560][ T6269] __lock_acquire+0x2c33/0x7c60 [ 155.913290][ T6269] lock_acquire+0x197/0x3f0 [ 155.918790][ T6269] __mutex_lock_common+0x1eb/0x2390 [ 155.924985][ T6269] mutex_lock_nested+0x17/0x20 [ 155.930812][ T6269] dquot_commit+0x5a/0x410 [ 155.936769][ T6269] ext4_write_dquot+0x1f0/0x360 [ 155.942248][ T6269] mark_all_dquot_dirty+0xf9/0x400 [ 155.948148][ T6269] __dquot_alloc_space+0x5d0/0xe20 [ 155.955195][ T6269] ext4_mb_new_blocks+0xf68/0x4940 [ 155.961184][ T6269] ext4_ext_map_blocks+0x191a/0x6650 [ 155.967562][ T6269] ext4_map_blocks+0x981/0x1b30 [ 155.973716][ T6269] ext4_getblk+0x16d/0x630 [ 155.979008][ T6269] ext4_bread+0x26/0x180 [ 155.984192][ T6269] ext4_append+0x2c3/0x560 [ 155.989615][ T6269] ext4_init_new_dir+0x2a2/0x940 [ 155.995195][ T6269] ext4_mkdir+0x47d/0xc50 [ 156.000053][ T6269] vfs_mkdir+0x387/0x570 [ 156.004809][ T6269] do_mkdirat+0x1d7/0x5a0 [ 156.011913][ T6269] __x64_sys_mkdirat+0x85/0x90 [ 156.017298][ T6269] do_syscall_64+0x4c/0xa0 [ 156.022503][ T6269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.029111][ T6269] [ 156.029111][ T6269] other info that might help us debug this: [ 156.029111][ T6269] [ 156.039694][ T6269] Chain exists of: [ 156.039694][ T6269] &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem [ 156.039694][ T6269] [ 156.052684][ T6269] Possible unsafe locking scenario: [ 156.052684][ T6269] [ 156.060391][ T6269] CPU0 CPU1 [ 156.065814][ T6269] ---- ---- [ 156.071697][ T6269] lock(&ei->i_data_sem); [ 156.076420][ T6269] lock(jbd2_handle); [ 156.083008][ T6269] lock(&ei->i_data_sem); [ 156.090806][ T6269] lock(&dquot->dq_lock); [ 156.095573][ T6269] [ 156.095573][ T6269] *** DEADLOCK *** [ 156.095573][ T6269] [ 156.103900][ T6269] 4 locks held by syz.1.564/6269: [ 156.109437][ T6269] #0: ffff88805db3c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 156.119346][ T6269] #1: ffff8880639dd3b0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 156.131140][ T6269] #2: ffff8880639df020 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 156.141370][ T6269] #3: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 156.151897][ T6269] [ 156.151897][ T6269] stack backtrace: [ 156.158525][ T6269] CPU: 1 PID: 6269 Comm: syz.1.564 Not tainted syzkaller #0 [ 156.166250][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.177751][ T6269] Call Trace: [ 156.181375][ T6269] [ 156.184485][ T6269] dump_stack_lvl+0x168/0x230 [ 156.189355][ T6269] ? load_image+0x3b0/0x3b0 [ 156.194643][ T6269] ? show_regs_print_info+0x20/0x20 [ 156.199977][ T6269] ? print_circular_bug+0x12b/0x1a0 [ 156.205435][ T6269] check_noncircular+0x274/0x310 [ 156.210755][ T6269] ? add_chain_block+0x940/0x940 [ 156.216585][ T6269] ? lockdep_lock+0xdc/0x1e0 [ 156.222105][ T6269] ? mark_lock+0x94/0x320 [ 156.227641][ T6269] __lock_acquire+0x2c33/0x7c60 [ 156.232765][ T5749] Bluetooth: hci1: command 0x0419 tx timeout [ 156.234781][ T6269] ? hlock_conflict+0x59/0x1f0 [ 156.234811][ T6269] ? check_noncircular+0x16f/0x310 [ 156.253835][ T6269] ? add_chain_block+0x940/0x940 [ 156.259159][ T6269] ? lockdep_lock+0xdc/0x1e0 [ 156.263968][ T6269] ? verify_lock_unused+0x140/0x140 [ 156.269329][ T6269] ? lockdep_unlock+0x134/0x2d0 [ 156.274520][ T6269] ? lockdep_lock+0x1e0/0x1e0 [ 156.279627][ T6269] ? check_noncircular+0x16f/0x310 [ 156.285261][ T6269] ? mark_lock+0x94/0x320 [ 156.289729][ T6269] ? __lock_acquire+0x289d/0x7c60 [ 156.294778][ T6269] lock_acquire+0x197/0x3f0 [ 156.299311][ T6269] ? dquot_commit+0x5a/0x410 [ 156.303904][ T6269] ? __might_sleep+0xf0/0xf0 [ 156.308779][ T6269] ? read_lock_is_recursive+0x10/0x10 [ 156.314174][ T6269] ? rcu_lock_release+0x5/0x20 [ 156.319291][ T6269] ? dquot_commit+0x5a/0x410 [ 156.324299][ T6269] __mutex_lock_common+0x1eb/0x2390 [ 156.329522][ T6269] ? dquot_commit+0x5a/0x410 [ 156.334177][ T6269] ? __might_sleep+0xf0/0xf0 [ 156.339155][ T6269] ? mutex_lock_io_nested+0x60/0x60 [ 156.345397][ T6269] mutex_lock_nested+0x17/0x20 [ 156.351021][ T6269] dquot_commit+0x5a/0x410 [ 156.355489][ T6269] ? __ext4_journal_start_sb+0x1bd/0x360 [ 156.361270][ T6269] ext4_write_dquot+0x1f0/0x360 [ 156.366217][ T6269] mark_all_dquot_dirty+0xf9/0x400 [ 156.371342][ T6269] __dquot_alloc_space+0x5d0/0xe20 [ 156.376697][ T6269] ext4_mb_new_blocks+0xf68/0x4940 [ 156.381814][ T6269] ? ext4_mb_pa_callback+0xd0/0xd0 [ 156.387038][ T6269] ? ext4_ext_check_overlap+0x15f/0x560 [ 156.393023][ T6269] ? ext4_inode_to_goal_block+0x313/0x450 [ 156.398861][ T6269] ext4_ext_map_blocks+0x191a/0x6650 [ 156.404371][ T6269] ? kasan_quarantine_put+0xd4/0x220 [ 156.410115][ T6269] ? kfree+0xef/0x2a0 [ 156.414104][ T6269] ? ext4_ext_release+0x10/0x10 [ 156.418965][ T6269] ? rwsem_write_trylock+0x12f/0x1b0 [ 156.424256][ T6269] ? ext4_es_lookup_extent+0x60a/0xa00 [ 156.429706][ T6269] ext4_map_blocks+0x981/0x1b30 [ 156.435070][ T6269] ? ext4_map_blocks+0x55d/0x1b30 [ 156.440125][ T6269] ? ext4_issue_zeroout+0x250/0x250 [ 156.445330][ T6269] ? ext4_map_blocks+0x6a2/0x1b30 [ 156.450451][ T6269] ext4_getblk+0x16d/0x630 [ 156.456133][ T6269] ? ext4_get_block_unwritten+0x30/0x30 [ 156.461775][ T6269] ? __brelse+0x55/0x90 [ 156.466584][ T6269] ext4_bread+0x26/0x180 [ 156.471225][ T6269] ext4_append+0x2c3/0x560 [ 156.475759][ T6269] ? ext4_init_new_dir+0x940/0x940 [ 156.480892][ T6269] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 156.486750][ T6269] ext4_init_new_dir+0x2a2/0x940 [ 156.491785][ T6269] ext4_mkdir+0x47d/0xc50 [ 156.496288][ T6269] ? ext4_symlink+0xcc0/0xcc0 [ 156.501613][ T6269] ? inode_permission+0xef/0x480 [ 156.506648][ T6269] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 156.511970][ T6269] ? security_inode_mkdir+0xb3/0x100 [ 156.517261][ T6269] vfs_mkdir+0x387/0x570 [ 156.521873][ T6269] do_mkdirat+0x1d7/0x5a0 [ 156.526252][ T6269] ? vfs_mkdir+0x570/0x570 [ 156.530701][ T6269] ? getname_flags+0x1fe/0x500 [ 156.535606][ T6269] __x64_sys_mkdirat+0x85/0x90 [ 156.541691][ T6269] do_syscall_64+0x4c/0xa0 [ 156.547470][ T6269] ? clear_bhb_loop+0x30/0x80 [ 156.552157][ T6269] ? clear_bhb_loop+0x30/0x80 [ 156.557042][ T6269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.563119][ T6269] RIP: 0033:0x7ff189703e97 [ 156.567865][ T6269] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.588037][ T6269] RSP: 002b:00007ff18796be68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 156.596831][ T6269] RAX: ffffffffffffffda RBX: 00007ff18796bef0 RCX: 00007ff189703e97 [ 156.604890][ T6269] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 156.613036][ T6269] RBP: 0000000000000000 R08: 0000200000000240 R09: 0000000000000000 [ 156.621271][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 156.629515][ T6269] R13: 00007ff18796beb0 R14: 0000000000000000 R15: 0000000000000000 [ 156.637815][ T6269] [ 156.716074][ T6269] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.564: corrupted inode contents [ 156.744676][ T6269] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #2: comm syz.1.564: mark_inode_dirty error [ 156.782017][ T6269] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.564: corrupted inode contents [ 156.797469][ T6269] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.564: mark_inode_dirty error [ 156.807735][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.820569][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.834515][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.013685][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.025764][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.064694][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.073599][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.086176][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.095228][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.107483][ T6048] device veth0_vlan entered promiscuous mode [ 157.120722][ T6048] device veth1_vlan entered promiscuous mode [ 157.142129][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.155334][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.165856][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.186089][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.201187][ T6048] device veth0_macvtap entered promiscuous mode [ 157.213070][ T6048] device veth1_macvtap entered promiscuous mode [ 157.229055][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.240912][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.253415][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.265685][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.276955][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.289309][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.301304][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.314163][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.328826][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.340293][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.351101][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.360507][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.370815][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.384611][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.395694][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.406051][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.418088][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.429025][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.439683][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.450529][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.461945][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.474763][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.485563][ T6048] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.497200][ T6048] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.507070][ T6048] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.516636][ T6048] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.528538][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.544131][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.583056][ T6048] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 157.609360][ T4623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.623400][ T6048] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 157.632180][ T4623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.647107][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.678234][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.688262][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.698166][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready