last executing test programs: 13m10.806531493s ago: executing program 32 (id=933): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000680)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000001240)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 12m12.782827146s ago: executing program 33 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xe19, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffe8}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x4237}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000090) 9m47.842965383s ago: executing program 34 (id=2928): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0xffc6}, {0x0}], 0x2, 0x0, 0xffffffcc}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 8m37.623486969s ago: executing program 35 (id=3567): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r0, 0x407, 0xc000) 2m32.771205627s ago: executing program 2 (id=6377): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m32.359010878s ago: executing program 2 (id=6381): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='Q') 2m30.162374636s ago: executing program 2 (id=6405): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc810}, 0x4000090) 2m29.934292966s ago: executing program 2 (id=6408): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000001c0)=ANY=[], 0xff, 0x69c, &(0x7f0000000f40)="$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") execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m29.488159691s ago: executing program 2 (id=6411): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m28.819962821s ago: executing program 2 (id=6417): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m28.315188187s ago: executing program 36 (id=6417): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m24.296985735s ago: executing program 5 (id=6461): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m23.903227753s ago: executing program 5 (id=6466): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 2m23.52626443s ago: executing program 5 (id=6470): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 2m22.61461023s ago: executing program 8 (id=6474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m22.07621908s ago: executing program 8 (id=6476): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x200000000008b92, 0x6}) fcntl$lock(r0, 0x25, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x6}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x1, 0xbb7, 0x800}) 2m22.073348957s ago: executing program 5 (id=6477): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000001c0)=ANY=[], 0xff, 0x69c, &(0x7f0000000f40)="$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") execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m21.858272867s ago: executing program 8 (id=6479): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)='\x00!G', 0x3}], 0x14, 0x7, 0x4a) 2m21.644460856s ago: executing program 5 (id=6481): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002"], 0x50}}, 0x4080) 2m20.352344943s ago: executing program 8 (id=6493): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f00000001c0)=ANY=[], 0xff, 0x69c, &(0x7f0000000f40)="$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") execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m20.232440905s ago: executing program 5 (id=6494): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xd, 0x5, 0x8, 0x4, 0x4, 0xfd, 0x4, 0x1, 0x1, 0x1, 0x100006, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x8c, 0xca9f, 0x0, 0xfffffff9, 0xffffffff, 0xe66, 0x13, 0x8, 0x4085, 0x8, 0xfffffff8]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000180)) 2m19.482140782s ago: executing program 37 (id=6494): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xd, 0x5, 0x8, 0x4, 0x4, 0xfd, 0x4, 0x1, 0x1, 0x1, 0x100006, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x8c, 0xca9f, 0x0, 0xfffffff9, 0xffffffff, 0xe66, 0x13, 0x8, 0x4085, 0x8, 0xfffffff8]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000180)) 2m19.461705878s ago: executing program 8 (id=6499): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m19.056122283s ago: executing program 8 (id=6500): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000340)=""/79, 0x4f) exit(0x0) getdents(r0, 0x0, 0x3b) 2m18.297135635s ago: executing program 38 (id=6500): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000340)=""/79, 0x4f) exit(0x0) getdents(r0, 0x0, 0x3b) 1m55.044323775s ago: executing program 4 (id=6672): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) 1m52.983632945s ago: executing program 4 (id=6689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r1, 0x5, 0x4, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac02, 0xfac02, 0xfac04, 0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}]]}, 0x44}}, 0x0) 1m52.604511287s ago: executing program 4 (id=6693): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000c80)={&(0x7f0000000580)={{@local, 0xfff}, {@my=0x0, 0x1}, 0x400, "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"}, 0x1b7, 0x3}) 1m52.363340352s ago: executing program 4 (id=6695): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x95) lseek(r0, 0x100, 0x1) 1m51.798748196s ago: executing program 4 (id=6700): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x176, 0x8, 0x0, 0x200, 0x40, 0x19b2, 0x8000, 0x7, 0xc1, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0xfffffff7, 0x1, 0x8, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x1, 0x4, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x7, 0x7ff, 0x2, 0x8a, 0x3, 0x1, 0x9], [0xfffffed2, 0x7fffffff, 0xffff, 0x7, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x8, 0x40, 0xc14, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x7, 0xd69, 0x9, 0xf404, 0xf0, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x80, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x10000, 0x7f, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0xff, 0x4, 0x8, 0x10000, 0xffffffff, 0x200, 0x7af5, 0x0, 0x9, 0x0, 0xffff, 0x7, 0x6, 0x0, 0x40000081, 0x9, 0x2000002, 0x3, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x7, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c65, 0xa, 0x6, 0x80, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13b, 0x7, 0x8, 0xb757, 0x2, 0x117, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x5, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000200)) 1m50.715225773s ago: executing program 4 (id=6708): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 1m49.838228951s ago: executing program 39 (id=6708): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 9.706874203s ago: executing program 6 (id=7189): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00ea00", 0x4d, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {0x4e1d, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "3ab7132b76a94d86cc7d539c54903f4f959d6247178842014b90ddd5c224b9e071940ad176ef75a06ed71287adf55e1a6b59926990f0415c24f7c1c9a6"}}}}}}}, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f0000000140)=""/19, 0x13}, {0x0, 0x26}, {&(0x7f0000000380)=""/100, 0x64}], 0x3) 8.949558106s ago: executing program 6 (id=7195): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 8.872036603s ago: executing program 1 (id=7196): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0xfffffffffffffdbb, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 8.35322215s ago: executing program 3 (id=7200): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x3}, 0x4) syz_emit_ethernet(0x352, &(0x7f0000002f00)=ANY=[], 0x0) 8.276297837s ago: executing program 6 (id=7201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file2\x00', 0x200800a, &(0x7f0000000200), 0x1, 0xb950, &(0x7f000000d2c0)="$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") creat(&(0x7f0000000300)='./file2\x00', 0x100) 7.173498327s ago: executing program 7 (id=7203): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0, 0x40000103}) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x2010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 6.900162772s ago: executing program 9 (id=7205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @local, @multicast1}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) 6.703047541s ago: executing program 1 (id=7206): write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a00110001", 0x13) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x62}, {&(0x7f0000000480)="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", 0x25}], 0x2, 0x0, 0x0, 0x10}, 0x22000000) 6.553043735s ago: executing program 7 (id=7207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000680)}, 0x20) 6.478489104s ago: executing program 3 (id=7208): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f00000006c0)={[{@nodiscard}, {@nobarrier}, {@inlinecrypt}, {@delalloc}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0xff, 0xbd9, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 6.452442336s ago: executing program 0 (id=7209): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.183556358s ago: executing program 6 (id=7210): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300dc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.125215361s ago: executing program 9 (id=7211): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x20000801}, 0x881) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1) 5.802450588s ago: executing program 7 (id=7212): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.408213309s ago: executing program 1 (id=7213): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x74, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x58, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1360, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x1}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x8001, 0x1}}, @void, @void, @void}}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.977381152s ago: executing program 3 (id=7214): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "c5266ca95dca07a5d7e0ad82600c6d8e6182e15d8857ec6cd0a4d35e1b9bba46", "f0129147c7977fd8024c91e2c88a11f3", {"bdba6e30533c918f9cfad8337ecd4c44", "7fa2b2a4e57872da6894e7a4fe4baebd"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000017c0)=""/117, 0x5c}, {0x0}], 0x2}, 0xa1}], 0x1, 0x0, 0x0) 4.711376338s ago: executing program 9 (id=7215): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000380)=[{r0, 0x10a1}, {r0, 0x4463}], 0x2, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 4.260407373s ago: executing program 0 (id=7216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_mptcp_buf(r0, 0x6, 0x3, 0xfffffffffffffffd, &(0x7f0000000040)=0x1) 4.113473617s ago: executing program 1 (id=7217): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x0) 3.920159387s ago: executing program 3 (id=7218): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 3.720739497s ago: executing program 0 (id=7219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 3.005575961s ago: executing program 1 (id=7220): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x108) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.669249814s ago: executing program 0 (id=7221): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) 2.503416883s ago: executing program 9 (id=7222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x283}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x18) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000340)={0x2, 0x5, 0x8001, 0x1, 0x5, "9e6ec6828999bfaff4c17e6ff25d58d0a0c9a9"}) 2.493377275s ago: executing program 7 (id=7223): unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 2.252623261s ago: executing program 6 (id=7224): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 1.585738125s ago: executing program 7 (id=7225): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x4008032, 0xffffffffffffffff, 0x51c9b000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') lseek(r0, 0x4, 0x2) getdents(r0, 0x0, 0x48) 1.411066128s ago: executing program 3 (id=7226): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xf, 0x6, 0xfffffff0, 0x9}) 1.389813028s ago: executing program 9 (id=7227): syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.37341498s ago: executing program 6 (id=7228): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x214c1e, &(0x7f0000000080)={[{@init_itable}, {@nogrpid}, {@mblk_io_submit}]}, 0x1, 0x510, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121842, 0x15b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.162213145s ago: executing program 1 (id=7229): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x1, @remote, 'ip_vti0\x00'}}, 0x1e) 1.15032421s ago: executing program 0 (id=7230): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x30, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xff}, 0x14) 642.846601ms ago: executing program 9 (id=7231): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/40, 0x28}, {0x0, 0x28}], 0x2}, 0x5}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 274.741316ms ago: executing program 0 (id=7232): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) 10.738731ms ago: executing program 3 (id=7233): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x6, 0x0, {0x3, 0x3, 0x8, 0x2, 0xc8c6}, 0x6}) 0s ago: executing program 7 (id=7234): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): nting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 751.105188][ T30] audit: type=1800 audit(1774496316.245:285): pid=21365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6086" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 751.143036][T21325] XFS (loop8): Ending clean mount [ 751.189091][T21325] XFS (loop8): Quotacheck needed: Please wait. [ 751.380724][T21325] XFS (loop8): Quotacheck: Done. [ 751.462267][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.713607][T13407] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 752.235605][T21397] loop5: detected capacity change from 0 to 1024 [ 754.782247][T21399] loop2: detected capacity change from 0 to 32768 [ 754.868255][ T5911] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 754.949015][T21399] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 755.093565][ T5911] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 755.120006][ T5911] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 755.184007][T21399] XFS (loop2): Ending clean mount [ 755.202596][ T5911] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.259948][T21399] XFS (loop2): Quotacheck needed: Please wait. [ 755.317544][ T5911] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 755.388230][ T5911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 755.428067][T21399] XFS (loop2): Quotacheck: Done. [ 755.452869][ T5911] usb 10-1: Product: syz [ 755.479966][ T5911] usb 10-1: Manufacturer: syz [ 755.525026][ T5911] usb 10-1: SerialNumber: syz [ 755.660585][ T5833] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 755.890153][ T5911] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 756.120110][ T1203] usb 10-1: USB disconnect, device number 17 [ 756.214905][ T1203] usblp0: removed [ 756.385238][T21457] loop2: detected capacity change from 0 to 2048 [ 756.673914][T21457] Alternate GPT is invalid, using primary GPT. [ 756.726125][T21457] loop2: p2 p3 p7 [ 756.896199][ T5188] Alternate GPT is invalid, using primary GPT. [ 756.983262][ T5188] loop2: p2 p3 p7 [ 758.045485][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 758.072500][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 758.084361][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 758.276648][T10068] udevd[10068]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 758.311271][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 758.420206][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 759.099542][ T1203] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 759.313151][ T1203] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 759.369876][ T1203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.496185][ T1203] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 759.554681][ T1203] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 759.634253][ T1203] usb 6-1: Manufacturer: syz [ 759.685054][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6141'. [ 759.713050][ T1203] usb 6-1: config 0 descriptor?? [ 760.091286][ T1203] rc_core: IR keymap rc-hauppauge not found [ 760.097246][ T1203] Registered IR keymap rc-empty [ 760.180767][ T1203] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 760.291190][ T1203] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 760.390436][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 760.433718][ T1203] usb 6-1: USB disconnect, device number 31 [ 760.763804][T21525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.513089][T21538] loop5: detected capacity change from 0 to 2048 [ 761.620512][T21538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.984994][ T5821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.303912][T21553] loop2: detected capacity change from 0 to 256 [ 762.402723][T21553] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 762.543040][ T30] audit: type=1800 audit(1774496327.689:286): pid=21553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6159" name="file1" dev="loop2" ino=1048917 res=0 errno=0 [ 762.625810][T21553] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 762.704937][T21553] FAT-fs (loop2): Filesystem has been set read-only [ 762.797501][T21559] overlayfs: failed to clone upperpath [ 763.212811][T21565] netlink: 260 bytes leftover after parsing attributes in process `syz.8.6164'. [ 764.349069][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 764.623090][ T1203] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 764.848048][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.904129][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.944820][T21589] loop5: detected capacity change from 0 to 128 [ 764.990703][ T1203] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.042471][T21589] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 765.106223][ T1203] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 765.145376][T21589] hpfs: filesystem error: improperly stopped [ 765.184560][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.214129][T21589] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 765.259195][T21589] hpfs: You really don't want any checks? You are crazy... [ 765.279875][ T1203] usb 3-1: config 0 descriptor?? [ 765.313286][T21589] hpfs: hpfs_map_sector(): read error [ 765.372679][T21589] hpfs: code page support is disabled [ 765.410505][T21589] hpfs: hpfs_map_4sectors(): unaligned read [ 765.451290][T21589] hpfs: hpfs_map_4sectors(): unaligned read [ 765.526863][T21589] hpfs: filesystem error: unable to find root dir [ 765.797990][ T1203] hid-multitouch 0003:0EEF:72D0.003A: unknown main item tag 0x0 [ 765.865644][ T1203] hid-multitouch 0003:0EEF:72D0.003A: unknown main item tag 0x0 [ 765.930368][ T1203] hid-multitouch 0003:0EEF:72D0.003A: unknown main item tag 0x0 [ 765.992997][ T1203] hid-multitouch 0003:0EEF:72D0.003A: unknown main item tag 0x0 [ 766.092064][ T1203] hid-multitouch 0003:0EEF:72D0.003A: unknown main item tag 0x0 [ 766.209855][ T1203] hid-multitouch 0003:0EEF:72D0.003A: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 766.365934][T21605] comedi: valid board names for 8255 driver are: [ 766.399290][ T1203] usb 3-1: USB disconnect, device number 26 [ 766.437466][T21605] 8255 [ 766.482941][T21605] comedi: valid board names for vmk80xx driver are: [ 766.526121][T21605] vmk80xx [ 766.566997][T21605] comedi: valid board names for usbduxsigma driver are: [ 766.610742][T21605] usbduxsigma [ 766.648030][T21605] comedi: valid board names for usbduxfast driver are: [ 766.733639][T21605] usbduxfast [ 766.784031][T21605] comedi: valid board names for usbdux driver are: [ 766.840216][T21605] usbdux [ 766.882482][T21606] fido_id[21606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 766.909350][T21605] comedi: valid board names for ni6501 driver are: [ 766.993175][T21605] ni6501 [ 767.010130][T21605] comedi: valid board names for dt9812 driver are: [ 767.073546][T21605] dt9812 [ 767.103526][T21605] comedi: valid board names for ni_labpc_cs driver are: [ 768.222914][T21614] loop8: detected capacity change from 0 to 131072 [ 768.265646][T21605] ni_labpc_cs [ 768.269072][T21605] comedi: valid board names for ni_daq_700 driver are: [ 768.299416][T21614] F2FS-fs (loop8): Test dummy encryption mode enabled [ 768.307689][T21614] F2FS-fs (loop8): invalid crc value [ 768.445725][T21619] 9p: Bad value for 'rfdno' [ 768.458922][T21614] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 768.492773][T21614] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 768.548890][T21605] ni_daq_700 [ 768.552225][T21605] comedi: valid board names for labpc_pci driver are: [ 768.670707][T21605] labpc_pci [ 768.720799][T21605] comedi: valid board names for adl_pci9118 driver are: [ 768.783884][T21605] pci9118dg [ 768.811994][T21605] pci9118hg [ 768.861846][T21605] pci9118hr [ 768.882107][T21605] comedi: valid board names for 8255_pci driver are: [ 768.985502][T21605] 8255_pci [ 768.996032][T21605] comedi: valid board names for s526 driver are: [ 769.053207][T21605] s526 [ 769.077429][T21605] comedi: valid board names for multiq3 driver are: [ 769.150055][T21605] multiq3 [ 769.163780][T21631] loop2: detected capacity change from 0 to 64 [ 769.200440][T21605] comedi: valid board names for pcmuio driver are: [ 769.274455][T21605] pcmuio48 [ 769.277609][T21605] pcmuio96 [ 769.280713][T21605] comedi: valid board names for pcmmio driver are: [ 769.384177][T21605] pcmmio [ 769.387167][T21605] comedi: valid board names for pcmda12 driver are: [ 769.473976][T21605] pcmda12 [ 769.500579][T21605] comedi: valid board names for pcmad driver are: [ 769.592385][T21605] pcmad12 [ 769.621217][T21605] pcmad16 [ 769.647468][T21605] comedi: valid board names for ni_labpc driver are: [ 769.696426][T21605] lab-pc-1200 [ 769.741727][T21605] lab-pc-1200ai [ 769.774505][T21605] lab-pc+ [ 769.794298][T21605] comedi: valid board names for atmio16 driver are: [ 769.849320][T21605] atmio16 [ 769.870479][T21605] atmio16d [ 769.883607][T21605] comedi: valid board names for ni_at_ao driver are: [ 769.931408][T21605] at-ao-6 [ 769.964850][T21605] at-ao-10 [ 769.984461][T21605] comedi: valid board names for ni_at_a2150 driver are: [ 770.044746][T21605] ni_at_a2150 [ 770.072282][T21605] comedi: valid board names for adq12b driver are: [ 770.129863][T21605] adq12b [ 770.155361][T21605] comedi: valid board names for mpc624 driver are: [ 770.217396][T21605] mpc624 [ 770.247348][T21605] comedi: valid board names for c6xdigio driver are: [ 770.282790][T21605] c6xdigio [ 770.325001][T21605] comedi: valid board names for aio_iiro_16 driver are: [ 770.355848][T21641] IPv6: NLM_F_CREATE should be specified when creating new route [ 770.383657][T21605] aio_iiro_16 [ 770.396415][T21605] comedi: valid board names for aio_aio12_8 driver are: [ 770.452785][T21605] aio_aio12_8 [ 770.477454][T21605] aio_ai12_8 [ 770.501241][T21605] aio_ao12_4 [ 770.529736][T21605] comedi: valid board names for fl512 driver are: [ 770.579602][T21605] fl512 [ 770.604816][T21605] comedi: valid board names for dmm32at driver are: [ 770.668506][T21605] dmm32at [ 770.693342][T21605] comedi: valid board names for dt282x driver are: [ 770.751580][T21605] dt2821 [ 770.785430][T21605] dt2821-f [ 770.809619][T21605] dt2821-g [ 770.823397][T21605] dt2823 [ 770.852646][T21605] dt2824-pgh [ 770.879390][T21605] dt2824-pgl [ 770.903245][T21605] dt2825 [ 770.915092][T21605] dt2827 [ 770.934928][T21605] dt2828 [ 770.955513][T21605] dt2829 [ 770.970705][T21605] dt21-ez [ 770.986161][T21605] dt23-ez [ 771.003068][T21605] dt24-ez [ 771.054066][T21605] dt24-ez-pgl [ 771.080589][T21605] comedi: valid board names for dt2817 driver are: [ 771.126899][T21605] dt2817 [ 771.152706][T21605] comedi: valid board names for dt2815 driver are: [ 771.194360][T21605] dt2815 [ 771.225473][T21605] comedi: valid board names for dt2814 driver are: [ 771.272492][T21605] dt2814 [ 771.293423][T21605] comedi: valid board names for dt2811 driver are: [ 771.341112][T21605] dt2811-pgh [ 771.361354][T21605] dt2811-pgl [ 771.377492][T21605] comedi: valid board names for dt2801 driver are: [ 771.418669][T21605] dt2801 [ 771.445885][T21605] comedi: valid board names for das6402 driver are: [ 771.479487][T21605] das6402-12 [ 771.495485][T21605] das6402-16 [ 771.513933][T21605] comedi: valid board names for das1800 driver are: [ 771.548225][T21605] das-1701st [ 771.561971][T21605] das-1701st-da [ 771.574804][T21605] das-1702st [ 771.590418][T21605] das-1702st-da [ 771.602736][T21605] das-1702hr [ 771.621777][T21605] das-1702hr-da [ 771.631809][T21605] das-1701ao [ 771.645560][ T5911] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 771.669912][T21605] das-1702ao [ 771.709943][T21605] das-1801st [ 771.727723][T21605] das-1801st-da [ 771.748678][T21605] das-1802st [ 771.772454][T21605] das-1802st-da [ 771.792777][T21605] das-1802hr [ 771.823126][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 771.829249][T21605] das-1802hr-da [ 771.866502][T21605] das-1801hc [ 771.884966][T21605] das-1802hc [ 771.890519][ T5911] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 771.924231][T21605] das-1801ao [ 771.954943][T21605] das-1802ao [ 771.995046][T21605] comedi: valid board names for das800 driver are: [ 772.001896][ T5911] usb 6-1: config 0 interface 0 has no altsetting 0 [ 772.046539][T21605] das-800 [ 772.053989][ T5911] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 772.097836][T21605] cio-das800 [ 772.117487][T21605] das-801 [ 772.131657][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.140972][T21605] cio-das801 [ 772.172939][T21605] das-802 [ 772.186914][T21605] cio-das802 [ 772.225444][T21605] cio-das802/16 [ 772.233733][ T5911] usb 6-1: config 0 descriptor?? [ 772.271669][T21605] comedi: valid board names for isa-das08 driver are: [ 772.370368][T21605] isa-das08 [ 772.405547][T21605] das08-pgm [ 772.433886][T21605] das08-pgh [ 772.480668][T21605] das08-pgl [ 772.515898][T21605] das08-aoh [ 772.570012][T21605] das08-aol [ 772.605490][T21605] das08-aom [ 772.635922][T21605] das08/jr-ao [ 772.668731][T21605] das08jr-16-ao [ 772.722181][T21605] pc104-das08 [ 772.734632][T21605] das08jr/16 [ 772.761877][T21605] comedi: valid board names for das16m1 driver are: [ 772.799947][ T5911] lenovo 0003:17EF:60B5.003B: unknown main item tag 0x0 [ 772.849444][T21605] das16m1 [ 772.858263][T21605] comedi: valid board names for dac02 driver are: [ 772.886538][ T5911] lenovo 0003:17EF:60B5.003B: unknown main item tag 0x0 [ 772.924095][T21605] dac02 [ 772.936014][ T5911] lenovo 0003:17EF:60B5.003B: unknown main item tag 0x0 [ 772.945250][T21605] comedi: valid board names for rti802 driver are: [ 772.994078][ T5911] lenovo 0003:17EF:60B5.003B: unknown main item tag 0x0 [ 773.012456][T21605] rti802 [ 773.053030][T21605] comedi: valid board names for rti800 driver are: [ 773.071458][ T5911] lenovo 0003:17EF:60B5.003B: unknown main item tag 0x0 [ 773.109921][T21605] rti800 [ 773.112901][T21605] rti815 [ 773.142943][ T5911] lenovo 0003:17EF:60B5.003B: unknown main item tag 0x0 [ 773.162761][T21670] loop8: detected capacity change from 0 to 4096 [ 773.191415][T21605] comedi: valid board names for pcm3724 driver are: [ 773.233186][ T5911] lenovo 0003:17EF:60B5.003B: unknown main item tag 0x4 [ 773.248721][T21605] pcm3724 [ 773.251774][T21605] comedi: valid board names for pcl818 driver are: [ 773.271021][ T5911] lenovo 0003:17EF:60B5.003B: unknown main item tag 0x6 [ 773.303906][T21670] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 773.349378][T21605] pcl818l [ 773.352453][T21605] pcl818h [ 773.358173][ T5911] lenovo 0003:17EF:60B5.003B: reserved main item tag 0xd [ 773.377851][T21605] pcl818hd [ 773.380995][T21605] pcl818hg [ 773.405152][ T5911] lenovo 0003:17EF:60B5.003B: reserved main item tag 0xd [ 773.433504][T21605] pcl818 [ 773.456129][T21605] pcl718 [ 773.471922][T21605] pcm3718 [ 773.475590][ T5911] lenovo 0003:17EF:60B5.003B: hidraw0: USB HID v0.0b Device [HID 17ef:60b5] on usb-dummy_hcd.5-1/input0 [ 773.522008][T21605] comedi: valid board names for pcl816 driver are: [ 773.546889][T21605] pcl816 [ 773.549923][T21605] pcl814b [ 773.622851][T21605] comedi: valid board names for pcl812 driver are: [ 773.636415][T21670] ntfs3(loop8): ino=1a, mi_enum_attr [ 773.693183][ T5911] usb 6-1: USB disconnect, device number 32 [ 773.699804][T21605] pcl812 [ 773.702757][T21605] pcl812pg [ 773.710011][T21670] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 773.798964][T21605] acl8112pg [ 773.802215][T21605] acl8112dg [ 773.805411][T21605] acl8112hg [ 773.926114][T21605] a821pgl [ 773.929193][T21605] a821pglnda [ 773.932479][T21605] a821pgh [ 773.935498][T21605] a822pgl [ 774.083137][T21605] a822pgh [ 774.165031][T21605] a823pgl [ 774.203124][T21605] a823pgh [ 774.276247][T21605] pcl813 [ 774.294684][T21605] pcl813b [ 774.347282][T21605] acl8113 [ 774.350361][T21605] iso813 [ 774.353299][T21605] acl8216 [ 774.403367][T21675] fido_id[21675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 774.456611][T21605] a826pg [ 774.459609][T21605] comedi: valid board names for pcl730 driver are: [ 774.577704][T21605] pcl730 [ 774.641318][T21605] iso730 [ 774.644313][T21605] acl7130 [ 774.682846][T21605] pcm3730 [ 774.685924][T21605] pcl725 [ 774.793151][T21605] p8r8dio [ 774.826430][T21605] acl7225b [ 774.829596][T21605] p16r16dio [ 774.832795][T21605] pcl733 [ 774.922229][T21605] pcl734 [ 774.945912][T21605] opmm-1616-xt [ 774.977282][T21692] loop8: detected capacity change from 0 to 128 [ 774.993797][T21605] pearl-mm-p [ 775.048427][T21605] ir104-pbf [ 775.051701][T21605] comedi: valid board names for pcl726 driver are: [ 775.114849][T21692] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 775.157583][T21605] pcl726 [ 775.160571][T21605] pcl727 [ 775.163503][T21605] pcl728 [ 775.166433][T21605] acl6126 [ 775.198094][T21692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 775.290197][T21605] acl6128 [ 775.293277][T21605] comedi: valid board names for pcl724 driver are: [ 775.372592][T21605] pcl724 [ 775.415355][T21605] pcl722 [ 775.441730][T21605] pcl731 [ 775.444723][T21605] acl7122 [ 775.482220][T21695] netlink: 'syz.9.6219': attribute type 83 has an invalid length. [ 775.518523][T21605] acl7124 [ 775.555941][T21605] pet48dio [ 775.577042][T21605] pcmio48 [ 775.580122][T21605] onyx-mm-dio [ 775.644268][T21605] comedi: valid board names for pcl711 driver are: [ 775.695209][T21605] pcl711 [ 775.726845][T21605] pcl711b [ 775.729928][T21605] acl8112hg [ 775.786147][T21605] acl8112dg [ 775.812387][T21605] comedi: valid board names for amplc_pc263 driver are: [ 775.877013][T21605] pc263 [ 775.879908][T21605] comedi: valid board names for amplc_pc236 driver are: [ 775.962330][T21605] pc36at [ 776.016931][T21605] comedi: valid board names for amplc_dio200 driver are: [ 776.024008][T21605] pc212e [ 776.058305][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6222'. [ 776.097472][T21605] pc214e [ 776.134299][T21605] pc215e [ 776.137573][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6222'. [ 776.166710][T21605] pc218e [ 776.191116][T21605] pc272e [ 776.194102][T21605] comedi: valid board names for comedi_parport driver are: [ 776.278334][T21605] comedi_parport [ 776.282020][T21605] comedi: valid board names for comedi_test driver are: [ 776.384000][T21605] comedi_test [ 776.404455][T21605] comedi: valid board names for comedi_bond driver are: [ 776.490683][T21605] comedi_bond [ 776.658477][T21712] syz_tun: entered allmulticast mode [ 776.716113][T21712] syz_tun: left allmulticast mode [ 777.210827][T21721] syz_tun: entered promiscuous mode [ 777.252831][T21721] syz_tun: entered allmulticast mode [ 777.730346][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.299179][T21736] batadv_slave_0: entered promiscuous mode [ 778.398287][T21736] batman_adv: batadv0: Adding interface: macsec1 [ 778.442852][T21736] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.656537][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.769861][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.842239][T21736] batman_adv: batadv0: Interface activated: macsec1 [ 779.524257][T21756] loop5: detected capacity change from 0 to 128 [ 779.683900][T21756] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 779.819700][T21756] ext4 filesystem being mounted at /1026/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 780.754208][ T5821] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.780813][T15508] kernel read not supported for file /dsp1 (pid: 15508 comm: kworker/0:4) [ 781.376944][T21753] loop8: detected capacity change from 0 to 32768 [ 783.360222][ T5911] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 783.532779][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 783.559244][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 783.605975][ T5911] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 783.656420][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.715915][ T5911] usb 3-1: config 0 descriptor?? [ 783.989222][ T5911] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 784.200216][ T5911] usb 3-1: USB disconnect, device number 27 [ 784.436898][T21822] sctp: [Deprecated]: syz.7.6273 (pid 21822) Use of int in max_burst socket option. [ 784.436898][T21822] Use struct sctp_assoc_value instead [ 784.637085][T21827] netlink: 190972 bytes leftover after parsing attributes in process `syz.7.6276'. [ 785.006547][T21833] loop2: detected capacity change from 0 to 64 [ 785.085534][ T30] audit: type=1800 audit(1774496350.220:287): pid=21833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6279" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 787.313075][ T30] audit: type=1326 audit(1774496352.449:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.539734][ T30] audit: type=1326 audit(1774496352.599:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.563944][ T30] audit: type=1326 audit(1774496352.599:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.587833][ T30] audit: type=1326 audit(1774496352.609:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.612435][ T30] audit: type=1326 audit(1774496352.609:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.645179][ T30] audit: type=1326 audit(1774496352.619:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.672211][ T30] audit: type=1326 audit(1774496352.619:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.695986][ T30] audit: type=1326 audit(1774496352.629:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.719644][ T30] audit: type=1326 audit(1774496352.639:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.9.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 787.949586][T21863] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6294'. [ 787.988060][T21866] netlink: 'syz.2.6295': attribute type 7 has an invalid length. [ 788.635466][T21891] loop2: detected capacity change from 0 to 128 [ 788.694330][T21891] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 788.802498][T21891] ext4 filesystem being mounted at /1020/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 788.887488][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 790.207831][T21907] loop5: detected capacity change from 0 to 131072 [ 790.222202][T21907] F2FS-fs (loop5): Test dummy encryption mode enabled [ 790.249297][T21907] F2FS-fs (loop5): invalid crc value [ 790.360357][T21907] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 790.378884][T21907] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 790.729441][T21911] loop9: detected capacity change from 0 to 32768 [ 790.789125][T21911] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 790.897256][T21911] XFS (loop9): Ending clean mount [ 791.300581][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6328'. [ 791.342075][T21950] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6328'. [ 791.466359][T15127] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 793.643714][ T1203] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 793.816929][ T1203] usb 9-1: Using ep0 maxpacket: 16 [ 793.880968][ T1203] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.916018][ T1203] usb 9-1: config 0 interface 0 has no altsetting 0 [ 793.922713][ T1203] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 793.957421][T21995] loop5: detected capacity change from 0 to 64 [ 793.983902][ T1203] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.125285][ T1203] usb 9-1: config 0 descriptor?? [ 794.468469][T22006] blktrace: Concurrent blktraces are not allowed on nullb0 [ 794.589715][ T1203] mcp2221 0003:04D8:00DD.003C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 795.025467][ T1203] usb 9-1: USB disconnect, device number 19 [ 795.059313][T22026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6359'. [ 795.220617][T22028] loop5: detected capacity change from 0 to 1024 [ 795.289153][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 795.289177][ T30] audit: type=1800 audit(1774496360.416:305): pid=22028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6360" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 795.346364][T22028] syz.5.6360: attempt to access beyond end of device [ 795.346364][T22028] loop5: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 795.488714][ T172] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 795.578000][ T1203] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 795.746186][ T1203] usb 3-1: Using ep0 maxpacket: 32 [ 795.760188][ T1203] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 795.776325][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.785142][ T1203] usb 3-1: Product: syz [ 795.789433][ T1203] usb 3-1: Manufacturer: syz [ 795.794141][ T1203] usb 3-1: SerialNumber: syz [ 795.806166][ T1203] usb 3-1: config 0 descriptor?? [ 796.267302][ T1203] airspy 3-1:0.0: Board ID: 00 [ 796.273585][ T1203] airspy 3-1:0.0: Firmware version: [ 796.331780][T22050] loop8: detected capacity change from 0 to 4096 [ 796.643739][T22048] loop5: detected capacity change from 0 to 32768 [ 796.677156][ T1203] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 796.725573][ T1203] airspy 3-1:0.0: Registered as swradio24 [ 796.741794][ T1203] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 796.770089][T22048] JBD2: Ignoring recovery information on journal [ 796.792681][ T1203] usb 3-1: USB disconnect, device number 28 [ 796.856565][T22048] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 797.030080][T22048] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 797.070727][T22060] loop8: detected capacity change from 0 to 1024 [ 797.133129][ T78] hfsplus: b-tree write err: -5, ino 25 [ 797.145854][T22048] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 797.158247][ T78] hfsplus: b-tree write err: -5, ino 4 [ 797.164181][ T78] hfsplus: b-tree write err: -5, ino 2 [ 797.187222][T22048] OCFS2: File system is now read-only. [ 797.215749][T22048] (syz.5.6369,22048,0):ocfs2_search_chain:1888 ERROR: status = -30 [ 797.270531][T22048] (syz.5.6369,22048,0):ocfs2_search_chain:2011 ERROR: status = -30 [ 797.314879][T22048] (syz.5.6369,22048,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 797.355450][T22048] (syz.5.6369,22048,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 797.427170][T22048] (syz.5.6369,22048,0):ocfs2_claim_new_inode:2392 ERROR: status = -30 [ 797.466325][T22048] (syz.5.6369,22048,0):ocfs2_claim_new_inode:2407 ERROR: status = -30 [ 797.491005][T22070] loop2: detected capacity change from 0 to 256 [ 797.500248][T22048] (syz.5.6369,22048,0):ocfs2_mknod_locked:642 ERROR: status = -30 [ 797.549004][T22048] (syz.5.6369,22048,0):ocfs2_mknod:389 ERROR: status = -30 [ 797.574010][T22075] netlink: 'syz.9.6380': attribute type 30 has an invalid length. [ 797.621740][T22048] (syz.5.6369,22048,0):ocfs2_mknod:506 ERROR: status = -30 [ 797.646624][T22048] (syz.5.6369,22048,0):ocfs2_create:679 ERROR: status = -30 [ 797.686890][T22062] (syz.5.6369,22062,0):ocfs2_reconfigure:670 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 797.833455][T22082] loop8: detected capacity change from 0 to 16 [ 797.891737][T22082] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 797.982520][ T5821] ocfs2: Unmounting device (7,5) on (node local) [ 797.984581][T22086] netlink: 'syz.1.6386': attribute type 1 has an invalid length. [ 798.023079][T22086] netlink: 'syz.1.6386': attribute type 2 has an invalid length. [ 798.065255][T15502] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 798.066246][ T5918] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 798.249716][T15502] usb 3-1: Using ep0 maxpacket: 16 [ 798.267472][T15502] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.269781][ T5918] usb 10-1: Using ep0 maxpacket: 32 [ 798.287154][T22095] netlink: 'syz.1.6390': attribute type 39 has an invalid length. [ 798.305295][T15502] usb 3-1: config 0 interface 0 has no altsetting 0 [ 798.311945][T15502] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 798.313816][ T5918] usb 10-1: config 139 has an invalid interface number: 49 but max is 0 [ 798.335278][T15502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.366007][ T5918] usb 10-1: config 139 has no interface number 0 [ 798.394948][ T5918] usb 10-1: config 139 interface 49 has no altsetting 0 [ 798.414299][ T5918] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 798.431678][ T5918] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.434950][T15502] usb 3-1: config 0 descriptor?? [ 798.453949][T22097] program syz.8.6391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 798.475088][ T5918] usb 10-1: Product: syz [ 798.484750][ T5918] usb 10-1: Manufacturer: syz [ 798.501608][ T5918] usb 10-1: SerialNumber: syz [ 798.892001][T15502] mcp2221 0003:04D8:00DD.003D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 798.965195][ T5918] radio-usb-si4713 10-1:139.49: Si4713 development board discovered: (10C4:8244) [ 799.313593][ T1203] usb 3-1: USB disconnect, device number 29 [ 799.373482][ T5918] radio-usb-si4713 10-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 799.405308][ T5918] usbhid 10-1:139.49: couldn't find an input interrupt endpoint [ 799.442595][ T5918] usb 10-1: USB disconnect, device number 18 [ 799.660327][T22111] loop8: detected capacity change from 0 to 32768 [ 799.705133][ T30] audit: type=1800 audit(1774496364.815:306): pid=22111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6396" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 799.800704][T15508] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 799.987607][T15508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.016531][T15508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.070990][T15508] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 800.072215][ T59] read_mapping_page failed! [ 800.108222][T15508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.125930][ T59] ERROR: (device loop8): txCommit: [ 800.125930][ T59] [ 800.162889][T15508] usb 2-1: config 0 descriptor?? [ 800.174267][ T59] jfs_write_inode: jfs_commit_inode failed! [ 800.275421][T22134] input: syz1 as /devices/virtual/input/input37 [ 800.298178][T22135] loop2: detected capacity change from 0 to 764 [ 800.837422][T15508] usb 2-1: string descriptor 0 read error: -71 [ 800.847124][T15508] uclogic 0003:256C:006D.003E: failed retrieving string descriptor #200: -71 [ 800.855972][T15508] uclogic 0003:256C:006D.003E: failed retrieving pen parameters: -71 [ 800.899195][T15508] uclogic 0003:256C:006D.003E: failed probing pen v2 parameters: -71 [ 800.946352][T15508] uclogic 0003:256C:006D.003E: failed probing parameters: -71 [ 800.964232][T22129] loop5: detected capacity change from 0 to 32768 [ 800.985174][T15508] uclogic 0003:256C:006D.003E: probe with driver uclogic failed with error -71 [ 801.006348][T15508] usb 2-1: USB disconnect, device number 36 [ 801.094310][T22129] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 801.112037][T22129] JBD2: Ignoring recovery information on journal [ 801.217645][T22153] netlink: 'syz.8.6415': attribute type 4 has an invalid length. [ 801.228666][T22129] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 801.352648][ T30] audit: type=1800 audit(1774496366.484:307): pid=22129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6404" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 801.593931][ T5821] ocfs2: Unmounting device (7,5) on (node local) [ 801.693245][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.935270][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.104536][T19610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.117024][T19610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.126295][T19610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.165431][T19610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.174466][T19610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 802.228779][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.274404][T22178] loop5: detected capacity change from 0 to 4096 [ 802.314776][T22182] loop9: detected capacity change from 0 to 512 [ 802.323069][T22182] EXT4-fs: inline encryption not supported [ 802.333861][T22178] EXT4-fs: Ignoring removed nobh option [ 802.335810][T22182] EXT4-fs: Ignoring removed mblk_io_submit option [ 802.354839][T22182] EXT4-fs (loop9): Test dummy encryption mode enabled [ 802.374646][T22178] EXT4-fs (loop5): Test dummy encryption mode enabled [ 802.399916][T22182] EXT4-fs (loop9): orphan cleanup on readonly fs [ 802.430371][T22182] EXT4-fs error (device loop9): ext4_orphan_get:1391: comm syz.9.6428: inode #13: comm syz.9.6428: iget: illegal inode # [ 802.445316][T22182] loop9: lost filesystem error report for type 5 error -117 [ 802.446171][T22182] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6428: couldn't read orphan inode 13 (err -117) [ 802.453561][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 802.453590][ C1] EXT4-fs (loop9): initial error at time 1774496367: ext4_orphan_get:1391 [ 802.453622][ C1] EXT4-fs (loop9): last error at time 1774496367: ext4_orphan_get:1391 [ 802.455243][T22178] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 802.513682][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.525681][T22178] System zones: 0-5 [ 802.555308][T22182] loop9: lost filesystem error report for type 5 error -117 [ 802.563264][T22178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.598867][T22182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 802.756818][T22182] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 802.772702][T22190] loop8: detected capacity change from 0 to 128 [ 802.804399][ T5821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.819316][T22182] EXT4-fs error (device loop9): __ext4_remount:6804: comm syz.9.6428: Abort forced by user [ 802.903696][T22182] EXT4-fs (loop9): Remounting filesystem read-only [ 802.940356][T22182] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 803.132120][T15127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.275781][T22206] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6440'. [ 803.323834][T22206] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6440'. [ 803.601942][ T12] bridge_slave_1: left promiscuous mode [ 803.614812][T22216] loop5: detected capacity change from 0 to 1024 [ 803.646041][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.732256][ T12] bridge_slave_0: left allmulticast mode [ 803.757907][ T12] bridge_slave_0: left promiscuous mode [ 803.793100][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.847906][T22208] nbd2: detected capacity change from 0 to 63 [ 803.861836][T19610] block nbd2: Receive control failed (result -32) [ 803.869625][ T5139] block nbd2: Receive control failed (result -32) [ 803.886291][ T5999] block nbd2: Dead connection, failed to find a fallback [ 803.916244][ T5999] block nbd2: shutting down sockets [ 803.934840][ T5999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.041063][ T5999] buffer_io_error: 14 callbacks suppressed [ 804.041085][ T5999] Buffer I/O error on dev nbd2, logical block 0, async page read [ 804.095545][ T5999] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.122655][ T5999] Buffer I/O error on dev nbd2, logical block 1, async page read [ 804.153064][ T5999] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.173280][ T5999] Buffer I/O error on dev nbd2, logical block 2, async page read [ 804.185897][ T5999] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.217294][ T5139] Bluetooth: hci5: command tx timeout [ 804.218727][ T5999] Buffer I/O error on dev nbd2, logical block 3, async page read [ 804.241162][ T5999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.270435][ T5999] Buffer I/O error on dev nbd2, logical block 0, async page read [ 804.278676][ T5999] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.288649][ T5999] Buffer I/O error on dev nbd2, logical block 1, async page read [ 804.306843][ T5999] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.346720][ T5999] Buffer I/O error on dev nbd2, logical block 2, async page read [ 804.385086][ T5999] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.424423][ T5999] Buffer I/O error on dev nbd2, logical block 3, async page read [ 804.462813][ T5999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.487567][ T5999] Buffer I/O error on dev nbd2, logical block 0, async page read [ 804.514097][ T5999] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 804.544064][ T5999] Buffer I/O error on dev nbd2, logical block 1, async page read [ 804.612541][ T5999] ldm_validate_partition_table(): Disk read failed. [ 804.630493][ T5999] Dev nbd2: unable to read RDB block 0 [ 804.646086][ T5999] nbd2: unable to read partition table [ 804.677982][ T5999] ldm_validate_partition_table(): Disk read failed. [ 804.697060][ T5999] Dev nbd2: unable to read RDB block 0 [ 804.732183][ T5999] nbd2: unable to read partition table [ 804.748344][T22237] rtc_cmos 00:00: Alarms can be up to one day in the future [ 804.886923][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.921634][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.972237][ T12] bond0 (unregistering): Released all slaves [ 805.011695][T22222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6445'. [ 805.142148][ T12] : left promiscuous mode [ 805.286271][T22174] chnl_net:caif_netlink_parms(): no params data found [ 805.375020][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 805.411469][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 805.443154][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 805.461266][ T5919] rtc_cmos 00:00: Alarms can be up to one day in the future [ 805.519187][ T5919] rtc rtc0: __rtc_set_alarm: err=-22 [ 806.298747][T22174] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.301283][ T5139] Bluetooth: hci5: command tx timeout [ 806.362462][T22174] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.397055][T22174] bridge_slave_0: entered allmulticast mode [ 806.404292][ T5919] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 806.447632][T22174] bridge_slave_0: entered promiscuous mode [ 806.572624][ T5919] usb 10-1: Using ep0 maxpacket: 32 [ 806.598830][T22174] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.639563][T22174] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.646965][T22174] bridge_slave_1: entered allmulticast mode [ 806.654167][ T5919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.721879][ T5919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.754914][T22174] bridge_slave_1: entered promiscuous mode [ 806.764536][T22293] loop8: detected capacity change from 0 to 8 [ 806.772467][ T5919] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 806.823368][T22293] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 806.835775][ T5919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.851598][ T5999] udevd[5999]: incorrect cramfs checksum on /dev/loop8 [ 806.878456][T22293] cramfs: bad root offset 4 [ 806.962959][ T5919] usb 10-1: config 0 descriptor?? [ 807.044093][ T5919] hub 10-1:0.0: USB hub found [ 807.113881][T22174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.228479][T22174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.265822][ T5919] hub 10-1:0.0: 1 port detected [ 807.438915][T22174] team0: Port device team_slave_0 added [ 807.480065][T22174] team0: Port device team_slave_1 added [ 807.709691][ T5919] usb 10-1: USB disconnect, device number 19 [ 807.831965][T22174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.891278][T22174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.079124][T22174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.144548][ T12] hsr_slave_0: left promiscuous mode [ 808.203570][T22311] loop5: detected capacity change from 0 to 764 [ 808.241575][ T12] hsr_slave_1: left promiscuous mode [ 808.290142][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.302179][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.333183][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.350256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.364883][ T12] batman_adv: batadv0: Removing interface: macvtap2 [ 808.379495][ T5139] Bluetooth: hci5: command tx timeout [ 808.415496][ T12] veth1_vlan: left promiscuous mode [ 808.455302][ T12] veth0_vlan: left promiscuous mode [ 808.463441][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.472611][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.205372][ T12] team0 (unregistering): Port device team_slave_1 removed [ 809.226357][ T12] team0 (unregistering): Port device team_slave_0 removed [ 809.506588][T22174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.520875][T22174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.550196][T22174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.869910][T22343] loop8: detected capacity change from 0 to 764 [ 809.934885][T22174] hsr_slave_0: entered promiscuous mode [ 809.984562][T22174] hsr_slave_1: entered promiscuous mode [ 810.016240][T22174] debugfs: 'hsr0' already exists in 'hsr' [ 810.051321][T22174] Cannot create hsr debugfs directory [ 810.460359][ T5139] Bluetooth: hci5: command tx timeout [ 810.752888][ T5919] infiniband syz1: ib_query_port failed (-19) [ 810.774311][T22336] loop9: detected capacity change from 0 to 40427 [ 810.787858][T22336] F2FS-fs: heap/no_heap options were deprecated [ 810.828789][T22336] F2FS-fs (loop9): build fault injection rate: 19 [ 810.844284][T22336] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 810.869772][T22336] F2FS-fs (loop9): invalid crc value [ 810.994775][T22336] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 811.015919][T19610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 811.032168][ T12] IPVS: stop unused estimator thread 0... [ 811.038315][T19610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 811.051035][T19610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 811.064331][T19610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 811.078366][T19610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 811.385398][T22336] F2FS-fs (loop9): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 811.447585][T22336] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 811.486677][T22336] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 811.553765][T22336] syz.9.6490: attempt to access beyond end of device [ 811.553765][T22336] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 811.691244][T15127] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0x120/0x3f0 [ 812.247280][T19610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 812.261963][T19610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 812.280930][T19610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 812.289237][T19610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 812.309056][T19610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 812.419148][T22361] chnl_net:caif_netlink_parms(): no params data found [ 812.522593][T22174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 812.535060][T22174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 812.575127][T22174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 812.621074][T22174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 812.731571][T22361] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.738803][T22361] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.746171][T22361] bridge_slave_0: entered allmulticast mode [ 812.754098][T22361] bridge_slave_0: entered promiscuous mode [ 812.780408][T22361] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.792875][T22361] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.801910][T22361] bridge_slave_1: entered allmulticast mode [ 812.809380][T22361] bridge_slave_1: entered promiscuous mode [ 812.907252][T22361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.927272][T22361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.992422][T22361] team0: Port device team_slave_0 added [ 813.003476][T22361] team0: Port device team_slave_1 added [ 813.074420][T22361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.083575][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.115957][T22361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.139833][T22384] chnl_net:caif_netlink_parms(): no params data found [ 813.168553][T22361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.178186][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.180602][ T5139] Bluetooth: hci0: command tx timeout [ 813.208202][T22361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.394929][T22361] hsr_slave_0: entered promiscuous mode [ 813.402567][T22361] hsr_slave_1: entered promiscuous mode [ 813.408992][T22361] debugfs: 'hsr0' already exists in 'hsr' [ 813.416178][T22361] Cannot create hsr debugfs directory [ 813.528183][T22174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.568886][T22384] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.578575][T22384] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.588204][T22384] bridge_slave_0: entered allmulticast mode [ 813.597911][T22384] bridge_slave_0: entered promiscuous mode [ 813.626599][T22384] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.635599][T22384] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.643589][T22384] bridge_slave_1: entered allmulticast mode [ 813.652347][T22384] bridge_slave_1: entered promiscuous mode [ 813.754768][T22384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.775395][T22384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.805846][T22174] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.869112][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.876328][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.889278][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.896459][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.922852][T22384] team0: Port device team_slave_0 added [ 813.932612][T22384] team0: Port device team_slave_1 added [ 814.033297][T22384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.041575][T22384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.070139][T22384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.185482][T22384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.193252][T22384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.226310][T22384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.380925][ T5139] Bluetooth: hci3: command tx timeout [ 814.455898][T22384] hsr_slave_0: entered promiscuous mode [ 814.467399][T22384] hsr_slave_1: entered promiscuous mode [ 814.475203][T22384] debugfs: 'hsr0' already exists in 'hsr' [ 814.483936][T22384] Cannot create hsr debugfs directory [ 814.945624][T22361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 815.057398][T22361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 815.082781][T22361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 815.100012][T22361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 815.203218][T22174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.261078][ T5139] Bluetooth: hci0: command tx timeout [ 815.507121][T22361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.586796][T22361] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.644210][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.651469][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.729156][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.736377][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.812638][T22384] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 815.847792][T22384] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 815.891179][T22384] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 815.922499][T22384] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 816.123605][T22174] veth0_vlan: entered promiscuous mode [ 816.186342][T22174] veth1_vlan: entered promiscuous mode [ 816.219182][T22384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.278031][T22384] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.319011][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.326199][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.351006][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.358145][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.393492][T22361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.422156][T22174] veth0_macvtap: entered promiscuous mode [ 816.461244][ T5139] Bluetooth: hci3: command tx timeout [ 816.482255][T22174] veth1_macvtap: entered promiscuous mode [ 816.562710][T22174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.606620][T22174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.640429][T22361] veth0_vlan: entered promiscuous mode [ 816.652214][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.666823][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.699098][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.716331][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.733806][T22361] veth1_vlan: entered promiscuous mode [ 816.883499][T22361] veth0_macvtap: entered promiscuous mode [ 816.916614][T22361] veth1_macvtap: entered promiscuous mode [ 816.924813][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.945011][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.027770][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.052145][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.069046][T22361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.105983][T22361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.235644][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.281361][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.312866][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.341709][ T5139] Bluetooth: hci0: command tx timeout [ 817.353664][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.406073][T22384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.720958][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.755946][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.816727][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.840854][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.165428][T22534] Bluetooth: MGMT ver 1.23 [ 818.405447][T22512] loop4: detected capacity change from 0 to 32768 [ 818.517729][ T30] audit: type=1800 audit(1774496383.629:308): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6419" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 818.542322][ T5139] Bluetooth: hci3: command tx timeout [ 818.577070][T22384] veth0_vlan: entered promiscuous mode [ 818.661789][T22551] netlink: 164 bytes leftover after parsing attributes in process `syz.7.6507'. [ 818.721267][T22384] veth1_vlan: entered promiscuous mode [ 818.772703][T22551] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6507'. [ 818.945491][ T13] read_mapping_page failed! [ 818.950054][ T13] ERROR: (device loop4): txCommit: [ 818.950054][ T13] [ 818.966143][T22384] veth0_macvtap: entered promiscuous mode [ 819.012051][T22556] input: syz0 as /devices/virtual/input/input38 [ 819.028233][ T13] jfs_write_inode: jfs_commit_inode failed! [ 819.053120][T22384] veth1_macvtap: entered promiscuous mode [ 819.177073][T22384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.244671][T22384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.329693][ T172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.390755][ T172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.415962][T22559] loop0: detected capacity change from 0 to 4096 [ 819.422821][ T5139] Bluetooth: hci0: command tx timeout [ 819.435045][ T172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.487592][ T172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.701282][T22577] loop9: detected capacity change from 0 to 512 [ 819.782489][T22577] EXT4-fs (loop9): Test dummy encryption mode enabled [ 819.837357][T22577] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 819.909806][T22577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 819.958283][T22577] System zones: 1-12 [ 820.008578][T22577] EXT4-fs (loop9): orphan cleanup on readonly fs [ 820.022499][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.030324][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.110584][T22577] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6522: bg 0: block 361: padding at end of block bitmap is not set [ 820.222624][T22577] loop9: lost filesystem error report for type 5 error -117 [ 820.232123][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 820.245917][ C1] EXT4-fs (loop9): initial error at time 1774496385: ext4_validate_block_bitmap:441 [ 820.255341][ C1] EXT4-fs (loop9): last error at time 1774496385: ext4_validate_block_bitmap:441 [ 820.264708][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.292524][T22577] EXT4-fs (loop9): Remounting filesystem read-only [ 820.323150][T22577] EXT4-fs (loop9): 1 truncate cleaned up [ 820.330850][T22577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 820.342934][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.352040][T22586] loop4: detected capacity change from 0 to 1024 [ 820.489936][T22577] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.6522: error -117 reading directory block [ 820.547527][T22586] hfsplus: b-tree write err: -5, ino 2 [ 820.592944][T22596] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.6522: error -117 reading directory block [ 820.623657][ T5139] Bluetooth: hci3: command tx timeout [ 820.718543][ T59] hfsplus: b-tree write err: -5, ino 25 [ 820.741061][ T59] hfsplus: b-tree write err: -5, ino 4 [ 820.747695][T15508] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 820.767139][ T59] hfsplus: b-tree write err: -5, ino 2 [ 820.775478][ T59] hfsplus: b-tree write err: -5, ino 26 [ 820.843880][T15127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 820.979090][T15508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.011005][T15508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.028112][T22604] loop6: detected capacity change from 0 to 128 [ 821.048308][T15508] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 821.091987][T15508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.159259][T15508] usb 2-1: config 0 descriptor?? [ 821.495124][T22620] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6537'. [ 821.542275][T22620] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6537'. [ 821.607270][T15508] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 821.658626][T15508] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 821.694801][T15508] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 821.724330][T15508] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 821.752143][T15508] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 821.807819][T15508] playstation 0003:054C:0DF2.003F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 821.917585][T15508] playstation 0003:054C:0DF2.003F: Invalid reportID received, expected 9 got 0 [ 821.980298][T15508] playstation 0003:054C:0DF2.003F: Failed to retrieve DualSense pairing info: -22 [ 822.035245][T15508] playstation 0003:054C:0DF2.003F: Failed to get MAC address from DualSense [ 822.041031][T22643] loop6: detected capacity change from 0 to 256 [ 822.097163][T15508] playstation 0003:054C:0DF2.003F: Failed to create dualsense. [ 822.129336][T22643] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 822.218742][T15508] playstation 0003:054C:0DF2.003F: probe with driver playstation failed with error -22 [ 822.320224][T15508] usb 2-1: USB disconnect, device number 37 [ 822.649800][T22668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6553'. [ 822.911700][T22678] loop4: detected capacity change from 0 to 128 [ 822.949003][T22680] loop6: detected capacity change from 0 to 128 [ 823.017286][T22680] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 823.031597][T22678] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 823.155649][T22680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 823.171053][T22678] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 823.301206][T22680] overlayfs: upper fs needs to support d_type. [ 823.348202][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6561'. [ 823.359829][T22680] overlayfs: upper fs does not support tmpfile. [ 823.415995][T22696] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 823.622293][T22174] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.144961][T22722] loop0: detected capacity change from 0 to 512 [ 824.152374][T22722] EXT4-fs: Ignoring removed bh option [ 824.230426][T22722] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 824.257304][T22722] EXT4-fs (loop0): 1 truncate cleaned up [ 824.304324][T22722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.483433][T22722] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6572'. [ 824.513411][T22722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6572'. [ 824.636400][T22361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.744155][T19610] Bluetooth: hci3: command tx timeout [ 826.151007][T22754] loop9: detected capacity change from 0 to 32768 [ 826.238040][T22754] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 826.360884][T22754] XFS (loop9): Ending clean mount [ 826.526864][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 826.616416][T15127] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 826.886205][T22799] loop6: detected capacity change from 0 to 32768 [ 826.961068][T22799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6600 (22799) [ 827.061742][T22799] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.152837][T22799] BTRFS info (device loop6): using crc32c checksum algorithm [ 827.257696][T22796] loop0: detected capacity change from 0 to 32768 [ 827.379370][T22796] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 827.445357][T22796] JBD2: Ignoring recovery information on journal [ 827.529772][T22799] BTRFS info (device loop6): enabling ssd optimizations [ 827.541522][T22799] BTRFS info (device loop6): turning on flush-on-commit [ 827.549945][T22799] BTRFS info (device loop6): enabling free space tree [ 827.568384][T22799] BTRFS info (device loop6): enabling auto defrag [ 827.582995][T22796] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 827.605974][T22799] BTRFS info (device loop6): use lzo compression, level 1 [ 827.613221][T22799] BTRFS info (device loop6): max_inline set to 4096 [ 827.775922][T15507] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 827.991129][T15507] usb 5-1: Using ep0 maxpacket: 8 [ 827.997058][T22384] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 828.133923][T15507] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 828.169703][T15507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.218602][T22361] ocfs2: Unmounting device (7,0) on (node local) [ 828.220881][T15507] usb 5-1: Product: syz [ 828.241578][T15507] usb 5-1: Manufacturer: syz [ 828.264967][T15507] usb 5-1: SerialNumber: syz [ 828.325094][T15507] usb 5-1: config 0 descriptor?? [ 828.367190][T15507] gspca_main: se401-2.14.0 probing 047d:5003 [ 828.447257][T22874] loop9: detected capacity change from 0 to 16 [ 828.639332][T22874] erofs (device loop9): mounted with root inode @ nid 36. [ 828.697613][T22874] syz.9.6617: attempt to access beyond end of device [ 828.697613][T22874] loop9: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 828.791684][T15507] gspca_se401: Bayer format not supported! [ 828.834335][T22883] vlan2: entered promiscuous mode [ 828.865405][T22883] bond0: entered promiscuous mode [ 828.870793][T22874] syz.9.6617: attempt to access beyond end of device [ 828.870793][T22874] loop9: rw=0, sector=46, nr_sectors = 1 limit=16 [ 828.873808][T22874] erofs (device loop9): read error -5 @ 0 of nid 36 [ 828.921618][T22883] bond_slave_0: entered promiscuous mode [ 828.937496][T22883] bond_slave_1: entered promiscuous mode [ 829.047282][T15507] usb 5-1: USB disconnect, device number 6 [ 830.234011][T22888] loop0: detected capacity change from 0 to 131072 [ 830.284484][T22888] F2FS-fs (loop0): invalid crc value [ 830.412111][T22888] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 830.455761][T22888] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 830.876792][T22919] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6630'. [ 831.485983][T15502] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 831.546629][T22939] program syz.1.6636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 831.652166][T15502] usb 5-1: Using ep0 maxpacket: 32 [ 831.672973][T15502] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 831.695239][T15502] usb 5-1: config 0 has no interface number 0 [ 831.721160][T15502] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 831.738431][T15502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.758979][T15502] usb 5-1: Product: syz [ 831.767200][T15502] usb 5-1: Manufacturer: syz [ 831.778858][T15502] usb 5-1: SerialNumber: syz [ 831.800488][T15502] usb 5-1: config 0 descriptor?? [ 831.837591][T15502] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 832.103146][T15502] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 832.180624][T15502] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 832.332811][T22951] loop0: detected capacity change from 0 to 4096 [ 832.526001][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 832.534040][T15502] usb 5-1: USB disconnect, device number 7 [ 832.573370][T22951] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 832.607216][T15502] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 832.636398][T15502] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 832.676955][T15502] quatech2 5-1:0.51: device disconnected [ 832.684849][T22951] ntfs3(loop0): ino=0, "file1" failed to extend initialized size to 100003. [ 832.942702][T22969] loop9: detected capacity change from 0 to 1024 [ 833.004281][T22969] hfsplus: request for non-existent node 3 in B*Tree [ 833.033866][T22969] hfsplus: request for non-existent node 3 in B*Tree [ 833.155520][T22969] hfsplus: xattr searching failed [ 833.208427][T22969] hfsplus: extend alloc file! (0,512,366) [ 834.540952][T23013] loop6: detected capacity change from 0 to 4096 [ 834.733843][T23013] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 834.815469][T23030] vlan2: entered allmulticast mode [ 834.836248][T23030] macvtap0: entered allmulticast mode [ 834.863229][T23030] veth0_macvtap: entered allmulticast mode [ 834.870825][T23013] ntfs3(loop6): ino=0, "file1" failed to extend initialized size to 100003. [ 835.299263][T23041] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6674'. [ 835.337191][ T5918] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 835.385786][T23044] tap0: tun_chr_ioctl cmd 1074025675 [ 835.417175][T23044] tap0: persist disabled [ 835.481275][T23048] loop9: detected capacity change from 0 to 128 [ 835.532274][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.565050][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6676'. [ 835.579799][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.601809][ T5918] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 835.663247][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.762851][ T5918] usb 5-1: config 0 descriptor?? [ 835.866219][ T30] audit: type=1326 audit(1774496400.984:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 835.965408][ T30] audit: type=1326 audit(1774496400.984:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.110192][ T30] audit: type=1326 audit(1774496400.994:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.206156][ T30] audit: type=1326 audit(1774496400.994:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.257864][ T5918] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 836.291629][ T5918] hid-steam 0003:28DE:1142.0040: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 836.328460][ T30] audit: type=1326 audit(1774496401.024:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.419068][ T30] audit: type=1326 audit(1774496401.024:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.442894][ T5918] hid-steam 0003:28DE:1142.0040: Steam wireless receiver connected [ 836.468981][T23076] loop9: detected capacity change from 0 to 16 [ 836.484194][ T5918] hid-steam 0003:28DE:1142.0041: unknown main item tag 0x0 [ 836.499987][T23076] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 836.512137][ T30] audit: type=1326 audit(1774496401.024:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.515539][T23075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6684'. [ 836.638490][ T5918] hid-steam 0003:28DE:1142.0041: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 836.650772][ T30] audit: type=1326 audit(1774496401.024:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.678715][ T5918] usb 5-1: USB disconnect, device number 8 [ 836.695886][ T30] audit: type=1326 audit(1774496401.024:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.722708][ T30] audit: type=1326 audit(1774496401.024:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.1.6678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f171ff9c799 code=0x7ffc0000 [ 836.815144][ T5918] hid-steam 0003:28DE:1142.0040: Steam wireless receiver disconnected [ 837.013033][T23082] fido_id[23082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 837.935303][T23113] loop4: detected capacity change from 0 to 2048 [ 837.965957][T23113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 837.969620][T23115] loop6: detected capacity change from 0 to 512 [ 838.149663][T23115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.307359][T23115] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.315741][T23124] netlink: 308 bytes leftover after parsing attributes in process `syz.1.6699'. [ 838.429828][T22174] UDF-fs: error (device loop4): udf_read_inode: (ino 1410) failed !bh [ 838.485393][T22174] UDF-fs: error (device loop4): udf_read_inode: (ino 1410) failed !bh [ 838.584928][T22384] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.805857][T23131] input: syz0 as /devices/virtual/input/input39 [ 839.105384][T23134] loop6: detected capacity change from 0 to 4096 [ 839.503705][T23153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6705'. [ 839.583442][T23153] netlink: 11 bytes leftover after parsing attributes in process `syz.7.6705'. [ 839.890705][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.231143][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.802590][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 840.814942][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 840.825141][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 840.868510][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 840.894382][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 841.211140][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.442566][T23198] loop9: detected capacity change from 0 to 128 [ 841.642146][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.660347][ T59] bridge_slave_1: left allmulticast mode [ 842.666136][ T59] bridge_slave_1: left promiscuous mode [ 842.699044][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.822788][ T59] bridge_slave_0: left allmulticast mode [ 842.850688][ T59] bridge_slave_0: left promiscuous mode [ 842.856614][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.949976][T19610] Bluetooth: hci5: command tx timeout [ 843.487666][T23193] loop0: detected capacity change from 0 to 32768 [ 843.517361][T23193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6720 (23193) [ 843.590757][T23193] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 843.658011][T23193] BTRFS info (device loop0): using crc32c checksum algorithm [ 843.834313][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.898128][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.968831][ T59] bond0 (unregistering): Released all slaves [ 843.975688][T23193] BTRFS info (device loop0): enabling ssd optimizations [ 844.036080][T23193] BTRFS info (device loop0): turning on flush-on-commit [ 844.071771][T23193] BTRFS info (device loop0): enabling free space tree [ 844.120725][ T78] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.141170][T23193] BTRFS info (device loop0): enabling auto defrag [ 844.177596][T23171] chnl_net:caif_netlink_parms(): no params data found [ 844.207770][T23193] BTRFS info (device loop0): use lzo compression, level 1 [ 844.263227][ T78] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.279840][T23193] BTRFS info (device loop0): max_inline set to 4096 [ 844.285920][ T78] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.577732][T22361] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 844.692521][ T78] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 844.971544][T23280] netlink: 'syz.0.6734': attribute type 5 has an invalid length. [ 845.033082][T19610] Bluetooth: hci5: command tx timeout [ 845.117821][T23280] ip6erspan0: entered promiscuous mode [ 845.829592][T15502] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 845.955335][T23303] loop9: detected capacity change from 0 to 512 [ 845.995062][T23303] EXT4-fs: Ignoring removed mblk_io_submit option [ 846.053260][T23171] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.081703][T15502] usb 2-1: Using ep0 maxpacket: 32 [ 846.098749][T23303] EXT4-fs (loop9): orphan cleanup on readonly fs [ 846.108054][T23171] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.149656][T15502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.178816][T23303] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 846.224938][T23171] bridge_slave_0: entered allmulticast mode [ 846.279071][T15502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.313356][T23303] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.6745: attempt to clear invalid blocks 2 len 1 [ 846.364396][T23171] bridge_slave_0: entered promiscuous mode [ 846.394260][T15502] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 846.442257][T23303] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 846.443616][T23303] EXT4-fs (loop9): Remounting filesystem read-only [ 846.452911][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 846.452944][ C1] EXT4-fs (loop9): initial error at time 1774496411: ext4_clear_blocks:876: inode 13 [ 846.452986][ C1] EXT4-fs (loop9): last error at time 1774496411: ext4_clear_blocks:876: inode 13 [ 846.557615][T15502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.666921][T15502] usb 2-1: config 0 descriptor?? [ 846.696559][ T59] hsr_slave_0: left promiscuous mode [ 846.715462][T15502] hub 2-1:0.0: USB hub found [ 846.827457][ T59] hsr_slave_1: left promiscuous mode [ 846.849006][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.886597][T23303] EXT4-fs (loop9): 1 truncate cleaned up [ 846.920581][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.958209][T23303] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 846.982082][T15502] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 847.002873][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.043597][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.134583][ T59] veth1_macvtap: left promiscuous mode [ 847.149797][T19610] Bluetooth: hci5: command tx timeout [ 847.184030][ T59] veth0_macvtap: left promiscuous mode [ 847.233137][ T59] veth1_vlan: left promiscuous mode [ 847.281882][ T59] veth0_vlan: left promiscuous mode [ 847.435838][T15502] hid-generic 0003:046D:C31C.0042: unknown main item tag 0x0 [ 847.472821][T15127] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.561252][T15502] hid-generic 0003:046D:C31C.0042: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 847.689698][T15502] usb 2-1: USB disconnect, device number 38 [ 847.832430][T23318] fido_id[23318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 848.290703][T15502] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 848.452445][T15502] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 848.472946][ T59] team0 (unregistering): Port device team_slave_1 removed [ 848.478082][T15502] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 848.495394][ T59] team0 (unregistering): Port device team_slave_0 removed [ 848.507052][T15502] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 848.535445][T15502] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 848.556512][T15502] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 848.567450][T15502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.585895][T15502] usb 10-1: Product: syz [ 848.595301][T15502] usb 10-1: Manufacturer: syz [ 848.604674][T15502] usb 10-1: SerialNumber: syz [ 848.617690][T15502] usb 10-1: config 0 descriptor?? [ 848.718198][T23171] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.733749][T23171] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.745944][T23171] bridge_slave_1: entered allmulticast mode [ 848.755812][T23171] bridge_slave_1: entered promiscuous mode [ 848.765474][T23309] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 848.770098][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6761'. [ 848.862727][T15502] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 848.892879][T23171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.939331][T23171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.066680][T23333] usb 10-1: Couldn't submit interrupt_out_urb -90 [ 849.112971][T23171] team0: Port device team_slave_0 added [ 849.123749][T15508] usb 10-1: USB disconnect, device number 20 [ 849.163042][T23171] team0: Port device team_slave_1 added [ 849.192099][T19610] Bluetooth: hci5: command tx timeout [ 849.337554][T23171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.379843][T23171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.427418][T23171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.444045][T23171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.514168][T23171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.604350][T23171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.616306][ T5918] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 849.630676][T23376] netlink: 'syz.0.6769': attribute type 1 has an invalid length. [ 849.679484][T23376] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6769'. [ 849.771164][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 849.785069][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.816734][ T5918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.854258][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 849.895470][ T5918] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 849.961426][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.007996][T23171] hsr_slave_0: entered promiscuous mode [ 850.019599][ T5918] usb 2-1: config 0 descriptor?? [ 850.061427][T23171] hsr_slave_1: entered promiscuous mode [ 850.067881][T23171] debugfs: 'hsr0' already exists in 'hsr' [ 850.135975][T23171] Cannot create hsr debugfs directory [ 850.472597][ T5918] hid (null): report_id 3323596431 is invalid [ 850.509127][ T5918] hid (null): unknown global tag 0xe [ 850.536923][ T5918] hid (null): unknown global tag 0xe [ 850.555933][ T5918] hid (null): unknown global tag 0xe [ 850.571952][ T5918] hid (null): unknown global tag 0x63 [ 850.579411][ T5918] hid (null): unknown global tag 0xd [ 850.672268][T23373] loop6: detected capacity change from 0 to 32768 [ 850.695614][T23405] loop9: detected capacity change from 0 to 512 [ 850.700878][T23373] [ 850.700878][T23373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 850.700878][T23373] [ 850.707058][ T5911] usb 2-1: USB disconnect, device number 39 [ 850.799871][T23373] ERROR: (device loop6): diWrite: ixpxd invalid [ 850.799871][T23373] [ 850.810833][T15502] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 850.867476][T23373] ERROR: (device loop6): txCommit: [ 850.867476][T23373] [ 851.012023][T15502] usb 1-1: Using ep0 maxpacket: 16 [ 851.042625][T15502] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 851.082290][T22384] [ 851.082290][T22384] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 851.082290][T22384] [ 851.084397][T15502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.117279][T23412] vxcan2: entered allmulticast mode [ 851.117921][T22384] [ 851.117921][T22384] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 851.117921][T22384] [ 851.147304][T15502] usb 1-1: Product: syz [ 851.152669][T23415] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6783'. [ 851.161968][T15502] usb 1-1: Manufacturer: syz [ 851.166588][T15502] usb 1-1: SerialNumber: syz [ 851.186390][T15502] usb 1-1: config 0 descriptor?? [ 851.619932][T15502] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 851.654590][T15502] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 851.679213][T15502] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 851.714350][T15502] usb 1-1: media controller created [ 851.759362][T15502] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 852.282248][T15502] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 852.347874][T15502] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 852.477431][T15502] usb 1-1: USB disconnect, device number 7 [ 852.715472][T15502] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 853.973745][T23463] loop9: detected capacity change from 0 to 256 [ 854.363668][T23171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 854.666394][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6801'. [ 854.753526][T23171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 854.833973][T23171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 854.908549][T23473] bond0: Device is already in use. [ 854.974273][T23171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 855.112576][T23475] loop0: detected capacity change from 0 to 1024 [ 855.336790][T23475] hfsplus: request for non-existent node 3 in B*Tree [ 855.401412][T23475] hfsplus: request for non-existent node 3 in B*Tree [ 855.881302][ T5911] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 855.950023][T23171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.071811][ T5911] usb 10-1: Using ep0 maxpacket: 32 [ 856.082898][T23171] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.116155][ T5911] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 856.174389][ T5911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.200578][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.207862][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.246320][ T5911] usb 10-1: Product: syz [ 856.250636][ T5911] usb 10-1: Manufacturer: syz [ 856.306789][ T5911] usb 10-1: SerialNumber: syz [ 856.322681][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.329951][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.385179][ T5911] usb 10-1: config 0 descriptor?? [ 856.775934][ T5911] RobotFuzz Open Source InterFace, OSIF 10-1:0.0: version d4.15 found at bus 010 address 021 [ 856.966857][ T5911] usb 10-1: USB disconnect, device number 21 [ 857.110520][T23507] ieee802154 phy0 wpan0: encryption failed: -22 [ 857.644936][T23513] loop6: detected capacity change from 0 to 256 [ 857.663631][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 858.159730][T23521] netlink: 212352 bytes leftover after parsing attributes in process `syz.7.6817'. [ 858.310925][T23523] loop0: detected capacity change from 0 to 2048 [ 858.384109][T23523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 858.474687][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 858.474714][ T30] audit: type=1800 audit(1774496423.579:339): pid=23523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6816" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 858.819505][T23171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.459348][T23542] loop9: detected capacity change from 0 to 1024 [ 859.484630][T23541] loop6: detected capacity change from 0 to 512 [ 859.526537][T23541] EXT4-fs: Ignoring removed bh option [ 859.646799][T23171] veth0_vlan: entered promiscuous mode [ 859.742938][T23541] EXT4-fs: Ignoring removed mblk_io_submit option [ 859.809111][T23541] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 859.868710][T23171] veth1_vlan: entered promiscuous mode [ 859.960921][T23541] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 860.034133][T23541] EXT4-fs (loop6): orphan cleanup on readonly fs [ 860.119825][T23541] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 860.158905][T23171] veth0_macvtap: entered promiscuous mode [ 860.208904][ T13] hfsplus: b-tree write err: -5, ino 25 [ 860.260095][T23171] veth1_macvtap: entered promiscuous mode [ 860.268257][ T13] hfsplus: b-tree write err: -5, ino 4 [ 860.283613][T23541] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 860.323663][ T13] hfsplus: b-tree write err: -5, ino 2 [ 860.367228][T23541] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6825: Failed to acquire dquot type 1 [ 860.489467][T23541] loop6: lost filesystem error report for type 5 error -5 [ 860.492115][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 860.505741][ C0] EXT4-fs (loop6): last error at time 1774496425: ext4_acquire_dquot:7001 [ 860.528396][T23541] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6825: Invalid block bitmap block 0 in block_group 0 [ 860.550972][T23171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.643227][T23541] loop6: lost filesystem error report for type 5 error -117 [ 860.680541][T23171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.704014][T23541] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6825: Invalid block bitmap block 0 in block_group 0 [ 860.795339][T23541] loop6: lost filesystem error report for type 5 error -117 [ 860.845918][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.984338][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.009208][T23541] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6825: Invalid block bitmap block 0 in block_group 0 [ 861.038646][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.066440][T23541] loop6: lost filesystem error report for type 5 error -117 [ 861.078998][T23541] Quota error (device loop6): write_blk: dquota write failed [ 861.141112][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.254316][T23541] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 861.359307][T23541] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6825: Failed to acquire dquot type 1 [ 861.456489][T23541] loop6: lost filesystem error report for type 5 error -28 [ 861.620559][T23541] Quota error (device loop6): write_blk: dquota write failed [ 861.749661][T23541] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 861.766641][T23574] loop0: detected capacity change from 0 to 1024 [ 861.865281][T23541] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6825: Failed to acquire dquot type 1 [ 861.933748][T23574] EXT4-fs: Ignoring removed orlov option [ 861.966274][T23541] loop6: lost filesystem error report for type 5 error -28 [ 861.971656][T23541] EXT4-fs (loop6): 1 orphan inode deleted [ 861.999162][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.054930][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.112305][T23541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 862.263547][T23574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.386627][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.463224][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.630856][ T30] audit: type=1800 audit(1774496427.728:340): pid=23574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6836" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 862.765734][T22384] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.078476][T22361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.614049][ T30] audit: type=1326 audit(1774496429.698:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d40b9c799 code=0x7fc00000 [ 866.193047][T23633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6859'. [ 866.226275][T23631] loop6: detected capacity change from 0 to 2048 [ 866.278215][T23637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6859'. [ 866.383141][T23631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 867.332263][T23646] loop9: detected capacity change from 0 to 4096 [ 868.718062][T23628] loop0: detected capacity change from 0 to 32768 [ 868.907267][T23639] loop3: detected capacity change from 0 to 32768 [ 869.132037][T23639] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 869.297056][T23639] XFS (loop3): AIL initialisation failed: error -12 [ 869.399501][T23639] XFS (loop3): log mount failed [ 869.806632][T23649] loop6: detected capacity change from 0 to 32768 [ 869.923833][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.935912][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.315172][ T1203] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 870.416967][T23699] ea_get: invalid extended attribute [ 870.455182][T23699] ffff888059ee9580: 04 00 00 00 .... [ 870.517033][ T1203] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.621971][ T1203] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.804617][ T1203] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 870.942831][ T1203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 871.009542][ T1203] usb 1-1: SerialNumber: syz [ 871.093548][T23705] fuse: Bad value for 'fd' [ 871.469433][ T1203] usb 1-1: 0:2 : does not exist [ 871.863735][ T1203] usb 1-1: USB disconnect, device number 8 [ 872.553498][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.697437][T23724] loop9: detected capacity change from 0 to 256 [ 872.749250][T23720] can0: slcan on ttyS3. [ 872.833643][T23724] exfat: Deprecated parameter 'utf8' [ 872.997434][T23724] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 873.591325][T23726] can0 (unregistered): slcan off ttyS3. [ 873.884560][T23734] loop6: detected capacity change from 0 to 4096 [ 875.311845][T23758] netlink: 'syz.0.6897': attribute type 10 has an invalid length. [ 875.329199][T23725] loop3: detected capacity change from 0 to 32768 [ 876.062905][T23741] loop9: detected capacity change from 0 to 32768 [ 876.136540][T23760] netlink: 'syz.1.6898': attribute type 2 has an invalid length. [ 876.170227][T23741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6892 (23741) [ 876.888324][T23769] loop3: detected capacity change from 0 to 4096 [ 876.909556][T23774] loop0: detected capacity change from 0 to 1024 [ 877.031761][T23774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 877.131215][T23774] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 877.533834][ T172] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 877.625932][T23786] trusted_key: encrypted_key: hex blob is missing [ 877.657202][ T172] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 877.778998][ T172] EXT4-fs (loop0): This should not happen!! Data will be lost [ 877.778998][ T172] [ 877.845997][ T172] EXT4-fs (loop0): Total free blocks count 0 [ 877.875981][ T172] EXT4-fs (loop0): Free/Dirty block details [ 877.881925][ T172] EXT4-fs (loop0): free_blocks=0 [ 877.938928][ T172] EXT4-fs (loop0): dirty_blocks=16 [ 877.985067][ T172] EXT4-fs (loop0): Block reservation details [ 878.016591][ T172] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 878.057296][T22361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 878.217773][ T30] audit: type=1800 audit(1774496443.325:342): pid=23792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6909" name="file1" dev="tmpfs" ino=6401 res=0 errno=0 [ 879.168227][T23810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.985069][T23769] ntfs3(loop3): Failed to read $AttrDef (-4). [ 880.037021][T23734] ntfs3(loop6): Failed to read $AttrDef (-4). [ 882.320807][T23855] netlink: 'syz.9.6929': attribute type 29 has an invalid length. [ 883.212022][T23871] loop9: detected capacity change from 0 to 256 [ 883.483096][T23871] FAT-fs (loop9): Directory bread(block 64) failed [ 883.542058][T23871] FAT-fs (loop9): Directory bread(block 65) failed [ 883.626857][T23871] FAT-fs (loop9): Directory bread(block 66) failed [ 883.682615][T23871] FAT-fs (loop9): Directory bread(block 67) failed [ 883.753014][T23871] FAT-fs (loop9): Directory bread(block 68) failed [ 883.837590][T23871] FAT-fs (loop9): Directory bread(block 69) failed [ 883.927074][T23871] FAT-fs (loop9): Directory bread(block 70) failed [ 884.059517][T23871] FAT-fs (loop9): Directory bread(block 71) failed [ 884.156479][T23871] FAT-fs (loop9): Directory bread(block 72) failed [ 884.262142][T23871] FAT-fs (loop9): Directory bread(block 73) failed [ 887.537670][T15502] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 887.775148][T15502] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 887.870060][T15502] usb 10-1: config 0 interface 0 has no altsetting 0 [ 887.925879][T15502] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 888.002961][T15502] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 888.073011][T15502] usb 10-1: Product: syz [ 888.136119][T15502] usb 10-1: Manufacturer: syz [ 888.164709][T15502] usb 10-1: SerialNumber: syz [ 888.258769][T15502] usb 10-1: config 0 descriptor?? [ 888.345627][T15502] usb 10-1: selecting invalid altsetting 0 [ 888.505696][T23924] loop3: detected capacity change from 0 to 128 [ 888.631185][T23924] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 888.697469][ T5911] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 888.792478][T23924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 888.902584][ T1144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 888.926863][ T5911] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid maxpacket 252, setting to 64 [ 888.961613][ T30] audit: type=1800 audit(1774496454.053:343): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6952" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 889.021847][T15502] usb 10-1: USB disconnect, device number 22 [ 889.062159][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 889.158183][ T5911] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 889.271373][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 889.312436][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.398099][ T5911] usb 1-1: Product: syz [ 889.427313][ T5911] usb 1-1: Manufacturer: syz [ 889.493725][ T5911] usb 1-1: SerialNumber: syz [ 889.565595][ T5911] usb 1-1: config 0 descriptor?? [ 889.659935][ T5911] usb 1-1: selecting invalid altsetting 0 [ 890.328323][ T5911] usb 1-1: USB disconnect, device number 9 [ 890.677051][T23946] loop9: detected capacity change from 0 to 256 [ 890.712697][T10068] udevd[10068]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.808152][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6961'. [ 891.732790][T23964] netem: incorrect gi model size [ 891.800119][T23964] netem: change failed [ 895.036444][T23975] loop6: detected capacity change from 0 to 32768 [ 895.256360][T23975] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 895.349245][T23975] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop6": -EINTR [ 895.359421][T23975] XFS (loop6): log mount failed [ 896.774572][T24035] loop9: detected capacity change from 0 to 512 [ 896.956207][T24041] loop6: detected capacity change from 0 to 1024 [ 897.013397][T24035] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 897.146435][T24035] FAT-fs (loop9): Filesystem has been set read-only [ 897.285310][T24043] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 897.382912][T19610] Bluetooth: hci5: command tx timeout [ 897.422097][T24045] hfsplus: catalog searching failed [ 897.930777][ T1144] hfsplus: b-tree write err: -5, ino 8 [ 898.166827][T24060] loop0: detected capacity change from 0 to 128 [ 898.298841][T24060] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 898.491447][T24060] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 899.116494][T22361] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 899.411152][T24080] Set syz1 is full, maxelem 0 reached [ 899.528502][T24082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7009'. [ 899.611850][T24082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7009'. [ 900.124188][T24091] loop6: detected capacity change from 0 to 4096 [ 900.330486][T24100] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 901.129316][T24109] loop3: detected capacity change from 0 to 1024 [ 901.216229][T24109] EXT4-fs: Ignoring removed orlov option [ 901.362862][T24112] __vm_enough_memory: pid: 24112, comm: syz.6.7019, bytes: 21199642992640 not enough memory for the allocation [ 901.514878][T24117] loop0: detected capacity change from 0 to 512 [ 901.551427][T24109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.634708][T24117] EXT4-fs: Ignoring removed nobh option [ 901.716031][T24117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 901.966263][T24117] EXT4-fs (loop0): 1 truncate cleaned up [ 902.072971][T24117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.250898][T24124] loop6: detected capacity change from 0 to 8 [ 902.326306][T23171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.475257][T24127] binder: 24125:24127 ioctl c0306201 0 returned -14 [ 902.794752][T22361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.775309][T24161] loop0: detected capacity change from 0 to 256 [ 904.951560][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7039'. [ 906.540296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 907.130600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 907.278353][T24189] loop6: detected capacity change from 0 to 8 [ 909.367764][T24208] loop6: detected capacity change from 0 to 2640 [ 909.451613][T24208] buffer_io_error: 138 callbacks suppressed [ 909.451635][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 909.692404][T24212] loop6: detected capacity change from 2640 to 524287999 [ 909.754345][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 909.841864][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 909.911853][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 909.991267][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.013701][T24217] loop3: detected capacity change from 0 to 512 [ 910.028044][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.099668][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.161101][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.226448][T24217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.252194][T24208] ldm_validate_partition_table(): Disk read failed. [ 910.258874][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.268558][T24224] loop0: detected capacity change from 0 to 512 [ 910.394443][T24217] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 910.561753][T24208] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.698326][T24208] Dev loop6: unable to read RDB block 0 [ 910.775124][T24208] loop6: unable to read partition table [ 910.851533][T24208] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 910.950209][T23171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.369919][T24239] loop9: detected capacity change from 0 to 2048 [ 911.731434][T24239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.151209][ T1219] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 912.361179][ T1219] usb 10-1: Using ep0 maxpacket: 16 [ 912.395994][ T1219] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.481879][ T1219] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 912.617228][ T1219] usb 10-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 912.735101][ T1219] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.826106][ T1219] usb 10-1: config 0 descriptor?? [ 913.383300][ T1219] belkin 0003:1020:0006.0044: unknown main item tag 0x0 [ 913.447326][ T1219] belkin 0003:1020:0006.0044: unknown main item tag 0x0 [ 913.490739][ T1219] belkin 0003:1020:0006.0044: unknown main item tag 0x0 [ 913.578966][ T1219] belkin 0003:1020:0006.0044: unknown main item tag 0x0 [ 913.676692][ T1219] belkin 0003:1020:0006.0044: unknown main item tag 0x0 [ 913.777579][ T1219] belkin 0003:1020:0006.0044: unknown main item tag 0x0 [ 913.788824][T24277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.821401][ T1219] belkin 0003:1020:0006.0044: unknown main item tag 0x7 [ 913.838832][ T1219] belkin 0003:1020:0006.0044: item fetching failed at offset 38/41 [ 913.906095][ T1219] belkin 0003:1020:0006.0044: parse failed [ 913.971536][ T1219] belkin 0003:1020:0006.0044: probe with driver belkin failed with error -22 [ 914.128645][ T1219] usb 10-1: USB disconnect, device number 23 [ 914.387196][T24286] loop3: detected capacity change from 0 to 512 [ 914.613632][T24286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.703631][ T1219] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 914.773637][T24286] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.965284][ T1219] usb 2-1: Using ep0 maxpacket: 16 [ 915.050806][ T1219] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.179188][ T1219] usb 2-1: config 0 interface 0 has no altsetting 0 [ 915.261584][ T1219] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 915.354245][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.435566][ T1219] usb 2-1: config 0 descriptor?? [ 915.654528][T23171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.018450][T24312] loop6: detected capacity change from 0 to 128 [ 916.027744][ T1219] mcp2221 0003:04D8:00DD.0045: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 916.116812][T24312] ext4: Unknown parameter 'hash' [ 916.482406][ T1219] usb 2-1: USB disconnect, device number 40 [ 916.660932][T24320] bond1: entered promiscuous mode [ 917.004949][T24327] loop9: detected capacity change from 0 to 16 [ 917.107167][T24327] erofs (device loop9): mounted with root inode @ nid 36. [ 919.747016][T24371] loop0: detected capacity change from 0 to 256 [ 919.808760][T24371] exfat: Deprecated parameter 'utf8' [ 919.880312][T24371] exfat: Deprecated parameter 'namecase' [ 919.942659][T24371] exfat: Deprecated parameter 'namecase' [ 920.069070][T24371] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 920.137357][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 921.201412][T24386] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7117'. [ 921.348098][T24386] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7117'. [ 921.850117][T24393] loop3: detected capacity change from 0 to 2048 [ 922.088081][T24393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.229494][T24393] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.412873][T24406] loop0: detected capacity change from 0 to 262144 [ 924.443566][T24406] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7123 (24406) [ 924.670261][T24406] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 924.680997][T24406] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 924.856313][T23171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.027142][T24406] BTRFS info (device loop0): deleted orphan free space tree entries [ 925.037764][T24406] BTRFS info (device loop0): checking UUID tree [ 925.054557][T24406] BTRFS info (device loop0): enabling ssd optimizations [ 925.061629][T24406] BTRFS info (device loop0): turning on async discard [ 925.068909][T24406] BTRFS info (device loop0): enabling free space tree [ 925.573591][T22361] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 925.785115][T24434] loop3: detected capacity change from 0 to 64 [ 925.942160][T24434] hfs: unable to locate alternate MDB [ 926.033140][T24434] hfs: continuing without an alternate MDB [ 926.221368][T24434] hfs: walked past end of dir [ 926.230615][ T30] audit: type=1800 audit(1774496491.318:344): pid=24434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7126" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 927.644281][T24453] bpf: Bad value for 'uid' [ 928.759090][T24469] mkiss: ax0: crc mode is auto. [ 928.796094][ T5911] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 929.064204][ T5911] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 929.149766][ T5911] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 929.212826][T24478] rtc_cmos 00:00: Alarms can be up to one day in the future [ 929.276598][ T5911] usb 2-1: config 1 interface 0 has no altsetting 0 [ 929.334557][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.393403][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.488758][ T5911] usb 2-1: Product: syz [ 929.532157][ T5911] usb 2-1: Manufacturer: syz [ 929.573390][ T5911] usb 2-1: SerialNumber: syz [ 929.667849][T24468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 929.772198][T24468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 930.125810][ T5911] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 930.323136][ T5911] usb 2-1: USB disconnect, device number 41 [ 930.406778][T24491] loop3: detected capacity change from 0 to 512 [ 930.587857][T24491] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 930.724273][T24491] System zones: 0-2, 18-18, 34-35 [ 930.838352][T24491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.983661][T24491] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.389824][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.402108][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.921770][T23171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.966554][T24517] loop6: detected capacity change from 0 to 64 [ 932.133887][T15502] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 932.204169][ T5911] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 932.378386][T15502] usb 10-1: Using ep0 maxpacket: 8 [ 932.414368][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 932.430027][T15502] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.483067][ T5911] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 932.547329][T15502] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 932.597784][ T5911] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 932.684691][T15502] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 932.749545][ T5911] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 932.819618][T15502] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.890454][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.955590][T15502] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.979984][ T5911] usb 2-1: Product: syz [ 933.020181][ T5911] usb 2-1: Manufacturer: syz [ 933.070682][T15502] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.090991][ T5911] usb 2-1: SerialNumber: syz [ 933.424415][T24528] netlink: 'syz.0.7158': attribute type 4 has an invalid length. [ 933.448368][T24509] Bluetooth: hci0: command 0x0406 tx timeout [ 933.530868][T15502] usb 10-1: GET_CAPABILITIES returned 0 [ 933.568380][ T5911] usb 2-1: USB disconnect, device number 42 [ 933.608292][T15502] usbtmc 10-1:16.0: can't read capabilities [ 933.784593][T15502] usb 10-1: USB disconnect, device number 24 [ 935.586606][ T30] audit: type=1326 audit(1774496500.686:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 935.847711][ T30] audit: type=1326 audit(1774496500.686:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 936.150107][ T30] audit: type=1326 audit(1774496500.746:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 936.366166][T24572] Failed to get privilege flags for destination (handle=0x2:0x400) [ 936.424713][ T30] audit: type=1326 audit(1774496500.746:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 936.601486][ T30] audit: type=1326 audit(1774496500.746:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 936.849543][ T30] audit: type=1326 audit(1774496500.756:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 937.069667][ T30] audit: type=1326 audit(1774496500.756:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 937.336087][ T30] audit: type=1326 audit(1774496500.756:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 937.580238][ T30] audit: type=1326 audit(1774496500.756:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 937.818191][ T30] audit: type=1326 audit(1774496500.766:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24561 comm="syz.9.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a279c799 code=0x7ffc0000 [ 939.128235][T24595] loop9: detected capacity change from 0 to 4096 [ 939.333660][T24601] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 939.468885][T24604] loop0: detected capacity change from 0 to 128 [ 939.504383][T24599] loop6: detected capacity change from 0 to 4096 [ 942.696179][T24650] loop6: detected capacity change from 0 to 65536 [ 942.852194][T24655] tipc: Started in network mode [ 942.858152][T24655] tipc: Node identity ac14140f, cluster identity 4711 [ 942.865940][T24655] tipc: New replicast peer: 255.255.255.255 [ 942.872573][T24655] tipc: Enabled bearer , priority 10 [ 943.091859][T24650] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 943.493295][T24670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7205'. [ 943.672968][T24650] XFS (loop6): Ending clean mount [ 943.952479][T22384] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 944.082326][ T5918] tipc: Node number set to 2886997007 [ 944.333249][T24678] loop3: detected capacity change from 0 to 4096 [ 944.374232][T24678] EXT4-fs: inline encryption not supported [ 944.527418][T24678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.175009][T23171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.721629][T24711] tipc: Started in network mode [ 946.796141][T24711] tipc: Node identity ac14140f, cluster identity 4711 [ 946.872183][T24711] tipc: New replicast peer: 255.255.255.255 [ 946.977685][T24711] tipc: Enabled bearer , priority 10 [ 947.967349][ T9] tipc: Node number set to 2886997007 [ 948.811854][T24509] Bluetooth: hci3: command 0x0406 tx timeout [ 948.982756][T24734] loop3: detected capacity change from 0 to 512 [ 949.212768][T24738] loop6: detected capacity change from 0 to 512 [ 949.233283][T24734] EXT4-fs (loop3): 1 truncate cleaned up [ 949.260528][T24738] EXT4-fs: Ignoring removed mblk_io_submit option [ 949.353384][T24734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.651952][T24738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.739809][T24734] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 949.870159][T24738] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.164299][T23171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.192353][T24759] [ 950.194722][T24759] ====================================================== [ 950.201739][T24759] WARNING: possible circular locking dependency detected [ 950.208761][T24759] syzkaller #0 Tainted: G L [ 950.214773][T24759] ------------------------------------------------------ [ 950.221809][T24759] syz.6.7228/24759 is trying to acquire lock: [ 950.227888][T24759] ffff88802b274610 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x274/0xeb0 [ 950.237007][T24759] [ 950.237007][T24759] but task is already holding lock: [ 950.244379][T24759] ffff888056bfeb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1140 [ 950.254621][T24759] [ 950.254621][T24759] which lock already depends on the new lock. [ 950.254621][T24759] [ 950.265133][T24759] [ 950.265133][T24759] the existing dependency chain (in reverse order) is: [ 950.274161][T24759] [ 950.274161][T24759] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 950.282632][T24759] percpu_down_read_internal+0x48/0x1c0 [ 950.288727][T24759] ext4_writepages+0x205/0x3b0 [ 950.294064][T24759] do_writepages+0x32e/0x550 [ 950.299199][T24759] __writeback_single_inode+0x133/0x11a0 [ 950.305380][T24759] writeback_single_inode+0x4ac/0xdc0 [ 950.311304][T24759] write_inode_now+0x1c2/0x290 [ 950.316617][T24759] iput+0x8c1/0xe80 [ 950.320974][T24759] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 950.326892][T24759] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 950.333327][T24759] __ext4_expand_extra_isize+0x30d/0x400 [ 950.339500][T24759] __ext4_mark_inode_dirty+0x45c/0x730 [ 950.345493][T24759] ext4_evict_inode+0x7a1/0xeb0 [ 950.351001][T24759] evict+0x61e/0xb10 [ 950.355432][T24759] ext4_orphan_cleanup+0xc38/0x1470 [ 950.361162][T24759] ext4_fill_super+0x59ff/0x6320 [ 950.366643][T24759] get_tree_bdev_flags+0x431/0x4f0 [ 950.372309][T24759] vfs_get_tree+0x92/0x2a0 [ 950.377255][T24759] do_new_mount+0x341/0xd30 [ 950.382298][T24759] __se_sys_mount+0x31d/0x420 [ 950.387665][T24759] do_syscall_64+0x14d/0xf80 [ 950.392800][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.399232][T24759] [ 950.399232][T24759] -> #0 (sb_internal){++++}-{0:0}: [ 950.406567][T24759] __lock_acquire+0x15a5/0x2cf0 [ 950.411983][T24759] lock_acquire+0xf0/0x2e0 [ 950.416953][T24759] percpu_down_read_internal+0x48/0x1c0 [ 950.423048][T24759] ext4_evict_inode+0x274/0xeb0 [ 950.428451][T24759] evict+0x61e/0xb10 [ 950.432891][T24759] ext4_ext_migrate+0xe2a/0x1140 [ 950.438370][T24759] ext4_ioctl+0x234c/0x4b30 [ 950.443420][T24759] __se_sys_ioctl+0xfc/0x170 [ 950.448567][T24759] do_syscall_64+0x14d/0xf80 [ 950.453704][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.460134][T24759] [ 950.460134][T24759] other info that might help us debug this: [ 950.460134][T24759] [ 950.470373][T24759] Possible unsafe locking scenario: [ 950.470373][T24759] [ 950.477838][T24759] CPU0 CPU1 [ 950.483213][T24759] ---- ---- [ 950.488587][T24759] lock(&sbi->s_writepages_rwsem); [ 950.493822][T24759] lock(sb_internal); [ 950.500431][T24759] lock(&sbi->s_writepages_rwsem); [ 950.508180][T24759] rlock(sb_internal); [ 950.512377][T24759] [ 950.512377][T24759] *** DEADLOCK *** [ 950.512377][T24759] [ 950.520522][T24759] 3 locks held by syz.6.7228/24759: [ 950.525736][T24759] #0: ffff88802b274420 (sb_writers#4){++++}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 950.535469][T24759] #1: ffff888059dcbd70 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: ext4_ioctl+0x2344/0x4b30 [ 950.546004][T24759] #2: ffff888056bfeb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1140 [ 950.556858][T24759] [ 950.556858][T24759] stack backtrace: [ 950.562778][T24759] CPU: 0 UID: 0 PID: 24759 Comm: syz.6.7228 Tainted: G L syzkaller #0 PREEMPT(full) [ 950.562817][T24759] Tainted: [L]=SOFTLOCKUP [ 950.562827][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 950.562845][T24759] Call Trace: [ 950.562855][T24759] [ 950.562867][T24759] dump_stack_lvl+0xe8/0x150 [ 950.562910][T24759] print_circular_bug+0x2e1/0x300 [ 950.562956][T24759] check_noncircular+0x12e/0x150 [ 950.563003][T24759] __lock_acquire+0x15a5/0x2cf0 [ 950.563047][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563081][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563113][T24759] ? __dquot_initialize+0xb4f/0xd30 [ 950.563154][T24759] lock_acquire+0xf0/0x2e0 [ 950.563187][T24759] ? ext4_evict_inode+0x274/0xeb0 [ 950.563231][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563268][T24759] percpu_down_read_internal+0x48/0x1c0 [ 950.563303][T24759] ? ext4_evict_inode+0x274/0xeb0 [ 950.563346][T24759] ext4_evict_inode+0x274/0xeb0 [ 950.563389][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563421][T24759] ? inode_wait_for_writeback+0x16d/0x3b0 [ 950.563456][T24759] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 950.563485][T24759] ? do_raw_spin_lock+0x12b/0x2f0 [ 950.563513][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563545][T24759] ? __pfx_ext4_evict_inode+0x10/0x10 [ 950.563594][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563628][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563660][T24759] ? do_raw_spin_unlock+0xf5/0x210 [ 950.563687][T24759] ? __pfx_ext4_evict_inode+0x10/0x10 [ 950.563730][T24759] evict+0x61e/0xb10 [ 950.563764][T24759] ? __pfx_evict+0x10/0x10 [ 950.563793][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563824][T24759] ? _raw_spin_unlock+0x28/0x50 [ 950.563848][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.563879][T24759] ? iput+0xb25/0xe80 [ 950.563924][T24759] ext4_ext_migrate+0xe2a/0x1140 [ 950.563970][T24759] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 950.564006][T24759] ? __pfx_down_write+0x10/0x10 [ 950.564039][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564072][T24759] ? sb_start_write+0x114/0x1c0 [ 950.564101][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564132][T24759] ? mnt_want_write_file+0x164/0x200 [ 950.564164][T24759] ext4_ioctl+0x234c/0x4b30 [ 950.564209][T24759] ? __pfx_ext4_ioctl+0x10/0x10 [ 950.564247][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564278][T24759] ? is_bpf_text_address+0x292/0x2b0 [ 950.564308][T24759] ? is_bpf_text_address+0x26/0x2b0 [ 950.564338][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564369][T24759] ? kernel_text_address+0xa5/0xe0 [ 950.564400][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564431][T24759] ? __kernel_text_address+0xd/0x30 [ 950.564459][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564491][T24759] ? unwind_get_return_address+0x4d/0x90 [ 950.564533][T24759] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.564572][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564604][T24759] ? arch_stack_walk+0xfb/0x150 [ 950.564653][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564684][T24759] ? stack_trace_save+0xa9/0x100 [ 950.564711][T24759] ? __pfx_stack_trace_save+0x10/0x10 [ 950.564737][T24759] ? kasan_save_free_info+0x46/0x50 [ 950.564781][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564813][T24759] ? stack_depot_save_flags+0x33/0x810 [ 950.564854][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564885][T24759] ? format_decode+0xd0/0xe10 [ 950.564922][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564956][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.564988][T24759] ? kasan_save_track+0x4f/0x80 [ 950.565015][T24759] ? kasan_save_track+0x3e/0x80 [ 950.565042][T24759] ? kasan_save_free_info+0x46/0x50 [ 950.565083][T24759] ? __kasan_slab_free+0x5c/0x80 [ 950.565111][T24759] ? kfree+0x1c1/0x630 [ 950.565135][T24759] ? tomoyo_path_number_perm+0x501/0x630 [ 950.565171][T24759] ? security_file_ioctl+0xc3/0x2a0 [ 950.565203][T24759] ? __se_sys_ioctl+0x47/0x170 [ 950.565234][T24759] ? do_syscall_64+0x14d/0xf80 [ 950.565264][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.565305][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.565336][T24759] ? file_ioctl+0x273/0x860 [ 950.565369][T24759] ? __pfx_file_ioctl+0x10/0x10 [ 950.565409][T24759] ? kasan_quarantine_put+0xbb/0x1f0 [ 950.565437][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.565472][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.565506][T24759] ? tomoyo_path_number_perm+0x219/0x630 [ 950.565543][T24759] ? tomoyo_path_number_perm+0x219/0x630 [ 950.565589][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.565620][T24759] ? do_vfs_ioctl+0x1166/0x1530 [ 950.565653][T24759] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 950.565705][T24759] ? __fget_files+0x2a/0x420 [ 950.565747][T24759] ? __fget_files+0x2a/0x420 [ 950.565787][T24759] ? __fget_files+0x3a0/0x420 [ 950.565826][T24759] ? __fget_files+0x2a/0x420 [ 950.565868][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.565900][T24759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 950.565932][T24759] ? __pfx_ext4_ioctl+0x10/0x10 [ 950.565972][T24759] __se_sys_ioctl+0xfc/0x170 [ 950.566005][T24759] do_syscall_64+0x14d/0xf80 [ 950.566035][T24759] ? trace_irq_disable+0x3b/0x150 [ 950.566076][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.566107][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.566134][T24759] RIP: 0033:0x7f0ae359c799 [ 950.566159][T24759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.566182][T24759] RSP: 002b:00007f0ae43a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 950.566209][T24759] RAX: ffffffffffffffda RBX: 00007f0ae3816090 RCX: 00007f0ae359c799 [ 950.566230][T24759] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 950.566247][T24759] RBP: 00007f0ae3632c99 R08: 0000000000000000 R09: 0000000000000000 [ 950.566264][T24759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.566282][T24759] R13: 00007f0ae3816128 R14: 00007f0ae3816090 R15: 00007ffd2badd468 [ 950.566314][T24759] [ 951.924388][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 952.115708][T22384] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.