last executing test programs: 5.078879831s ago: executing program 2 (id=756): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8900) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008c4}, 0x20000001) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 4.864125446s ago: executing program 2 (id=759): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x800449, &(0x7f0000000000)=ANY=[], 0x2, 0x19d, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 4.552383444s ago: executing program 2 (id=763): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x72000) 4.385844408s ago: executing program 2 (id=766): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d6090055443800000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.956314111s ago: executing program 0 (id=783): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0xc031}, 0x20000000) 2.788435565s ago: executing program 0 (id=785): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000200)=[{0x8, 0x1000, 0x0, 0x0}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) 2.505533951s ago: executing program 3 (id=788): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000e40)='./file0\x00', 0xa04807, &(0x7f0000001e80)={[{@rootdir={'rootdir', 0x3d, 0x10001}}, {@dmode={'dmode', 0x3d, 0xdf4a}}, {@unhide}, {@adinicb}, {@partition={'partition', 0x3d, 0x1}}, {@dmode={'dmode', 0x3d, 0x3}}, {@bs={'bs', 0x3d, 0x46a}}, {@gid_ignore}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@fileset={'fileset', 0x3d, 0x3}}, {@uid_ignore}, {@uid_ignore}, {@shortad}]}, 0x1, 0xc4d, &(0x7f00000001c0)="$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") syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1ab8b595a37ffdfe7d2a8c3972bb931d29bb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae8868dc2d6109acd8414dbee7aa20742acf810182f2331cfb73b2e01e1261d3bba73328f0519821983402549938c7156f04f1296fe1ff71ceb7651eb2a258c8d655923aea050ca81e10198a511854de3883c5f80992043afe8dd7037ea4eb991a5fe3ce6c09b34629794b346c1edfbd3382bde8aeca85ffd33eaa8d9150a4bf951e843c3cdef3", @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa9c, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000002c0)={[], [], 0x2f}) 2.238050607s ago: executing program 3 (id=789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) 2.046481762s ago: executing program 3 (id=792): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 1.861374336s ago: executing program 3 (id=796): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.792521898s ago: executing program 2 (id=798): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60}]}) write$ppp(r0, &(0x7f0000000280)="1094e0ee", 0x4) 1.647146982s ago: executing program 3 (id=801): r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0x660}], 0x2, 0x10000, 0x0) 1.564156214s ago: executing program 2 (id=803): syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000001900)=[{0x888, 0x4201, 0x0, 0x0}, {0x2, 0x8201, 0x0, 0x0}], 0x2}) 1.481262415s ago: executing program 3 (id=805): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29f) open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) 1.324939259s ago: executing program 1 (id=808): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xfffffffb) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0xffff, 0x0, 0x0, {[@nop, @mptcp=@syn={0x1e, 0xc, 0xb, 0x1, 0x4, 0x0, 0x8000}]}}}}}}}}, 0x0) 1.207382162s ago: executing program 1 (id=810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200)=r1, 0x4) 1.032500946s ago: executing program 1 (id=812): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5r0b5LDsNdeN/802CRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTG+YvyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5wiN/LKvYs//8/N+Pr/P0hO2clfbyx7c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ+LE9SK/uEFExI0iXtwkCoibRUFRSBQWRUSCKCqKCSNQWEEiFMVFCREVt4iS4laRKEqJ0qKMcKKsKCduE+XF7aKCuEOAuFNUEneJyqKKqCqqibtFdXGPqCFqilriXlFb1BF1RT1xn6gv7hcNxAOioXhQNBIPicbiYdFEPCKaikdFM/GYaC4eFy3EE6KlaCVaizai7f9V/suir3hF9BP9RbIYIAaKV8UgMVgMEUPFMPGaGC5eFyPEGyJFjBSjxJtitHhLjBFvi7FinBgv3hETxEQxSUwWU8RUkSreFdPEe2K6eF/MEDPFLDFbpIk5Yq74QMwT88UC8aFYKD4Si8RisUQsFeniY5EhlolM8YlYLj4VWWKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iM7FD7BS7xG6xR+wV+8TnYr/4QhwQX4ps8dV/Mf/sP+X3AgECJEjQoCEP5IEYiIFYiIU4iIP8kB8iEIF4iIcCUAAKQkEoDIUhARKgGBQDBAQCguJQHKIQhZJQEhIhEUpDaXDgoByUg/JwO1SAClARKkIlqASVoQpUgWpQDapDdagBNaAW1ILaUBvqQl24D+6D+6EBNICG0BAaQSNoDI2hCTSBptAUmkEzaA7NoQW0gJbQElpDa2gLbaEdtIP20B46QkfoBJ2gM3SGJEiCrtAVukE36A7doQf0gJ7QE3pBb+gNL8PL8Aq8Av2hthwAA2EgDIJBMASGwlB4DYbD6/A6vAEpMBJGwZvwJrwFY+AMjIVxMB7GQ3U5ESbBZCA5FVIhFabBNJgO02EGzISZMBvSYA7MhbkwD+bDfPgQFsJH8BEshsWwFNIhHTJgGWRCJiyHs5AFK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22AafwWewE3bCbtgNe2EvfA6fwxfwBaRANmTDQTgIh+AQHIbDkAM5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+HFhG+b7S21IUXIK7TUMo/MI2NkjIyVsTJOxsn8Mr+MyIiMl/GygCwgC8qCsrAsLBNkgiwmi0mUKEmGsrgsHiOEkCVlSZkoE2VpWVo66WQ5WU6Wl+VlBVlBVpR3ykryLllZVpEdXDVZTVaXHV0NWVPWkrVkbVlH1pX1ZD1ZX9aXDWQD2VA2lI1kI9lYPiybyAEwBB6VVybTXI6EFnIUtJStZGvZRr4FT8p2cgy0lx1kR/m0HAdjobNs55Lks7KrnATd5PNyMrwge8ip0FO+JHvJ3rKPfFn2le1dP9lfzoABcqCcDYPkYDlEDpXzoI68MrG68g2ZIkfKUfJNuRTekmPk23KsHCfHy3fkBDlRTpKT5RQ5VabKd+U0+Z6cLt+XM+RMOUvOlmlyjpwrP5Dz5Hy5QH4oF8qP5CK5WC6RS2W6/FhmyGUyU34il8tPZZZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/EzukDvlLrlb7pF75T75udwvv5AH5JcyW34lD8q/yUPya3lYfiNz5LfyiPxOHpXfy2PyB3lc/ihPyJPylPxJnpY/yzPyrDwnz8sL8hd5UV6Sl6WXQoGSSimtApVH5VUxKp+KVdepOHW9yq9uUBF1o4pXN6kC6mZVUBVShVURlaCKqmLKKFRWkQpVcVVCRdUtqqS6VSWqUqq0KqOcKqvKqdtUeXW7qqDuUBXVnaqSuktVVlVUVVVN3a2qq3tUDVVT1VL3qtqqjqqr6qn7VH11v2qgHlAN1YOqkXpINVYPqybqEdVUPaqaqcdUc/W4aqGeUC1VK9VatVFt1ZOqnXpKtVcdVEf1tOqknlGdVReVpJ5VXdVzqpt6XnVXL6ge6kXVU72keqneqo+6pC4rr/qp/ipZDVAD1atqkBqshqihaph6TQ1Xr6sR6g2VokaqUepNNVq9pcaot9VYNU6NV++oCWqimqQmqylqqkpV76pp6j01Xb2vZqiZapaardLUHDXkt0oL/il/wG9X3X/Mf+9f5I/49d23qe3qM7VD7VS71G61R+1V+9Q+tV/tVwfUAZWtstVBdVAdUofUYXVY5agcdUQdUUfVUXVMHVPH1XF1Qp1U59VP6rT6WZ1RZ9VZdV5dUBfUxd++BkKDllpprQOdR+fVMTqfjtXX6Th9vc6vb9ARfaOO1zfpAvpmXVAX0oV1EZ2gi+pi2mjUVpMOdXFdQkf1LbqkvlUn6lK6tC6jnS6ry+nb/nT+H/XXVrfV7XQ73V631x11R91Jd9KddWedpJN0V91Vd9PddHfdXffQPXRP3VP30r10H91H99V9dT/dTyfrZD1Qv6oH6cF6iB6qh+nX9HA9XI/QI3SKTtGj9Cg9Wo/WY/QYPVaP1eP1eD1BT9CT9CQ9RU/RqTpVT9PT9HQ9Xc/QM/QsPUun6TQ9V8/V8/Q8vUAv0Av1Qr1IL9JL9BKdrtN1hs7QmTpTL9fLdZZeoVfoVXqVXqPX6HV6nd6gN+hNepPeorfoLL1db9c79A69S+/Se/QevU/v0/v1fn1AH9DZOlsf1Af1IX1IH9aHdY7O0Uf0EX1UH9XH9LEBx/VxfUKf0Kf0KX1an9Zn9Bl9Tp/TF/QFfVFf1Jf15Su3fYEMZKADHeQJ8gQxQUwQG8QGcUFckD/IH0SCSBAfxAcFgpuDgkGhoHBQJEgIigbFAhNgYAMKwqB4UCKIBrcEJYNbg8SgVFA6KBO4oGxQLrgtKB/cHlQI7ggqBncGlYK7gspBlaBqUC24O6ge3BPUCGoGtYJ7g9pBnaBuUC+4L6gf3B80CB4IGgYPBo2Ch4LGwcNBk+CRoGnwaNAseCxoHjwetAieCFoGrYLWQZug7V9a3/szhZ5y/Ux/k2wGmIHmVTPIDDZDzFAzzLxmhpvXzQjzhkkxI80o86YZbd4yY8zbZqwZZ8abd8wEM9FMMpPNFDPVpBpqOZPeM9PN+2aGmWlmmdkmzcwxc80HZp6ZbxaYD81C85FZZBabJWapSTcfmwyzzGSaT8xy86nJMivMSrPKrDZrzt8ohFlvNpiNZpPZbLaYrWab2W4+MzvMTrPL7DZ7zF6zz3xu9psvzAHzpck2X5mD5m/mkPnaHDbfmBzzrTlivjNHzffmmPnBHDc/mhPmpDllfjKnzc/mjDlrzpnz5oL5xVw0l8xl46/c3F+5vKNGjXkwD8ZgDMZiLMZhHObH/BjBCMZjPBbAAlgQC2JhLIwJmIDFsBheQUhYHItjFKNYEktiIiZiaSyNDh2Ww3JYHstjBayAFbEiVsJKWBkrY1Wsinfj3XgP3oM1sSbei/diHayD9bAe1sf62AAbYENsiI2wETbGxtgEm2BTbIrNsBk2x+bYAltgS2yJrbE1tsW22A7bYXtsjx2xI3bCTtgZO2MSJmFX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/sh8mYjANxIA7CQTgEh+AwHIbDcTiOwBGYgik4CkfhaByNY3AMjsVxOB7fwQk4ESfhZJyCUzEVU3EaTsPpOB1n4AychbMwDdNwLs7FeTgPF+ACXIgLcREuwiW4BNMxHTMwAzMxE5fjcszCLFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsBszMaDeBAP4SE8jIcxB3PwCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsML+AtexEt4GT3GWCli7XU2zl5v89sbbIzNZ/8xLmyL2ARb1Bazxha0hf5djNbaRFvKlrZlrLNlbTl72+/iyraKrWqr2bttdXuPrfG7uL693zawD9iG9kFbz973W5z317iRfcg2to/bJvYJ29S2ss1sG9vcPm5b2CdsS9vKtrZtbCf7jO1su9gk+6ztap/7XZxhl9n1doPdaDfZ/fYLe86et0ft9/aC/cX2s/3tMPuaHW5ftyPsGzbFjvxdPN6+YyfYiXaSnWyn2Km/i2fZ2TbNzrFz7Qd2np3/uzjdfmwX2ky7yC62S+zSX+MrPWXaT+xy+6nNsivsSrvKrrZr7Fq77n/3uspusVvtNrvPfm532J12l91t99i9v8ZXzuOA/dJm26/sEfudPWS/toftMZtjv/01vnJ+x+wP9rj90Z6wJ+0p+5M9bX+2Z+zZX8//yrn/ZC/Zy9ZbQUCSFGkKKA/lpRjKR7F0HcXR9ZSfbqAI3UjxdBMVoJupIBWiwlSEEqgoFSNDSJaIQipOJShKt1BJupUSqRSVpjLkqCyVo9uoPN1OFegOqkh3UiW6iypTFapK1ehuqk73UA2qSbXoXqpNdagu1aP7qD7dTw3oAWpID1Ijeoga08PUhB6hpvQoNaPHqDk9Ti3oCWpJrag1taG29CS1o6eoPXWgjvQ0daJnqDN1oSR6lrrSc9SNnqfu9AL1oBepJ71Evag39aGXqS+9Qv2oPyXTABpIr9IgGkxDaCgNo9doOL1OI+gNSqGRNIrepNH0Fo2ht2ksjaPx9A5NoIk0iSbTFJpKqfQunU3vUvjKvd4MmkmzaDal0RyaSx/QPJpPC+hDWkgf0SJaTEtoKaXTx5RByyiTPqHl9Cll0QpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTZ7SDdtIu2k17aC/to89pP31BB+hLyqav6CD9jQ7R13SYvqEc+paO0Hd0lL6nY/QDHacf6QSdpFP0E52mn+kMnaVzdJ4u0C90kS7RZfIkQghlqEIdBmGeMG8YE+YLY8Prwrjw+jB/eEMYCW8M48ObwgLhzWHBsFBYOCwSJoRFw2KhCTG0IYVhWDwsEUbDW8KS4a1hYlgqLB2WCV1YNiwX3haWD28PK4R3hBXDO8NK4V1h5bBK+PiD1cK7w+rhPWGNsGZYK7w3rB3WCeuG9cL7wvrh/WGD8IGwYfhgWCF8KGwcPhw2CR8Jm4aPhs3Cx8Lm4eNhi/CJsGXYKmwdtgnbhk+G7cKnwvZhh7Bj+HTYKXwm7Bx2CZPCZ8Ou4XN/eDw5HBAODF8NXw29f0AtiS6Npkc/jmZEl0Uzo59El0c/jWZFV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+XVzhw0imnXeDyuLwuxuVzse46F+eud/ndDS7ibnTx7iZXwN3sCrpCrrAr4hJcUVfMGYfOOnKhK+5KuKi7xZV0t7pEV8qVdmWcc2VdOdfGtXVtXTv3lGvvOriO7mn3tHvGPeO6uC7uWdfVPee6ueddd/eC6+FedC+6l1wv19v1cS+7vu4V18/1d8ku2Q10A90gN8gNcUPcMDfMDXfD3Qg3wqW4FDfKjXKj3Wg3xo1xY91YN96NdxPcBDfJTXJT3BSX6lLdNDfNTXfT3Qw3w81ys1yaS3Nz3Vw3z81zC9wCtzBxoVvkFrklbolLd+kuw2W4TJfplrvlLstluZVupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrsdbofb5Xa5PW6P2+f2uf1uvzvgDrhsl+0OuoPukDvkDrtvXI771h1x37mj7nt3zP3gjrsf3Ql30p1yP7nT7md3xp1159x5d8H94i66S+6y8y418m5kWuS9yPTI+5EZkZmRWZHZkbTInMjcyAeReZH5kQWRDyMLIx9FFkUWR5ZElkbSIx9HMiLLIpmRTyLLI59GsiIrIisjqyKrI2si3hfdEfrivoSP+lt8SX+rT/SlfGlfxjtf9renPu0r+Dt8RX+nr+Tv8pV9FV/VP+Fb+la+tW/j2/onfTv/lG/vO/iO/mnfyT/jO/suPsk/67v653w3/7zv7l/wPfyLvqd/yffyvX0f/7Lv61/x/Xx/n+wH+IH+VT/ID/ZD/FA/zL/mh/vX/Qj/hk/xI/0o/6Yf7d/yY/zbfqwf58f7d/wEP9FP8pP9FD/Vp/p3/TT/np/u3/cz/Ew/y8/2aX6On+s/8PP8fL/Af+gX+o/8Ir/YL/FLfbr/2Gf4ZT7Tf+KX+099ll/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/zO/wO/0uv9vv8Xv9Pv+53++/8Af8lz7bf+UP+r/5Q/5rf9h/43P8t/6I/84f9d/7Y/4Hf9z/6E/4k/6U/8mf9j/7M/6sP+fP+wv+F3/RX/KX+XfWGGOMMcb+j6g/OD7gX/yf/G1dMVAIcf3OIjn/XHNzwb/vB8uEThEhxLP9ez76b6t27eTk5N9em6VEUGKxECJyNT+PuBqvEB3FMyJJdBDl/2V/g2XvC/QH9aN3ChF7tfKvYsU/17/9P6j/5NPjMyqF5+L/k/qLhUgscTUnn7gaX61f4T+oX6jdH/Sf7+tUIdr/Q06cuBpfrV9OPCWeE0n/7pWMMcYYY4wxxtjfDZZVu//R8/OV5/MEfTUnr7ga/9HzOWOMMcYYY4wxxq69F3r36fJkUlKH7rz5E5sa/z3a4A1v/rLNtf7JxBhjjDHGGPurXb3pv9adMMYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjudf/jz8ndq3PkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvW/lcAAAD//5GrMz4=") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) creat(&(0x7f00000000c0)='./file1\x00', 0x31) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.018183336s ago: executing program 4 (id=813): set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x3) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x2) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[], 0x32600) 861.69818ms ago: executing program 4 (id=814): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208480, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_int(r0, &(0x7f0000000180)=0x8, 0x5) 831.97047ms ago: executing program 0 (id=815): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x87, 0x0, 0x6}, {0x6, 0x4, 0x60, 0x7}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x801, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100, @val=0x80}}}}}}}, 0x0) 592.468506ms ago: executing program 4 (id=816): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 589.368096ms ago: executing program 0 (id=817): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3d2bf7eea3"}]}]}, 0x3c}}, 0x0) 547.701937ms ago: executing program 1 (id=818): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000004c0)=0x84) 446.59754ms ago: executing program 4 (id=819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 364.516842ms ago: executing program 4 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x70, 0x6b]}}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@userxattr}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 364.348011ms ago: executing program 0 (id=821): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) 196.215026ms ago: executing program 0 (id=822): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x48}}, 0x20000000) 196.129506ms ago: executing program 1 (id=823): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000140), 0x0, 0x2) 55.209159ms ago: executing program 4 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xe88, 0x10000, 0x2, r2, 0xcead591d4d31e499}) 0s ago: executing program 1 (id=825): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080100000000776cd0f0"], 0x108}}], 0x2, 0x4000080) kernel console output (not intermixed with test programs): 0: renamed from eth0 [ 68.233950][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.263933][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.273634][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.316218][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.331504][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.346515][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.356209][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.364830][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.373664][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.384758][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.410001][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.422681][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.435824][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.447555][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.456705][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.466853][ T1510] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.474097][ T1510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.482519][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.491811][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.500605][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.507833][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.515878][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.524971][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.540170][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.574316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.585595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.595661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.620832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.631736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.641103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.667830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.676521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.721975][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.730816][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.741452][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.780988][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.816970][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.835035][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.845179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.855736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.868192][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.891898][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.906337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.919765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.929754][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.936862][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.946543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.954790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.962574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.972640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.981410][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.988521][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.997452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.006495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.015065][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.022346][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.030422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.039156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.062851][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.083488][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.093277][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.103540][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.110668][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.126508][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.136019][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.145664][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.155192][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.164052][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.174844][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.183588][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.212740][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.224669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.234061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.243531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.251992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.260193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.269298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.280358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.290172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.298581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.316511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.326160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.335969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.344812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.357538][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.368793][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.392149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.401000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.409583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.419877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.428805][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.435925][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.444458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.452274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.460751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.469407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.478432][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.485547][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.493465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.502314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.511981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.520918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.531855][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.546248][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.563143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.572168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.586049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.616445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.625487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.633928][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.641016][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.655436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.664186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.680716][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.687854][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.703583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.712726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.727446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.736981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.749307][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.781280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.790709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.800921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.812791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.822661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.832245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.841935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.845094][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 69.853649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.864945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.869700][ T4244] Bluetooth: hci0: command 0x041b tx timeout [ 69.881161][ T4244] Bluetooth: hci1: command 0x041b tx timeout [ 69.886293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.896001][ T4244] Bluetooth: hci4: command 0x041b tx timeout [ 69.902300][ T4244] Bluetooth: hci3: command 0x041b tx timeout [ 69.906402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.921655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.941869][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.953040][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.974523][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.985880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.996720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.005962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.017053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.025977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.063904][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.089186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.100180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.118731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.131966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.141968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.190438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.210468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.221101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.231976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.256685][ T4197] device veth0_vlan entered promiscuous mode [ 70.272290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.280664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.300239][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.319371][ T4197] device veth1_vlan entered promiscuous mode [ 70.351462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.360471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.385992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.441838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.450571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.458983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.468619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.478802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.497825][ T4186] device veth0_vlan entered promiscuous mode [ 70.515024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.522744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.537989][ T4197] device veth0_macvtap entered promiscuous mode [ 70.550948][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.558907][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.566867][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.575673][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.584163][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.596305][ T4186] device veth1_vlan entered promiscuous mode [ 70.614451][ T4197] device veth1_macvtap entered promiscuous mode [ 70.623931][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.633243][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.647859][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.659402][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.672463][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.683554][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.698671][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.709118][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.719969][ T4195] device veth0_vlan entered promiscuous mode [ 70.747671][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.756409][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.778342][ T4186] device veth0_macvtap entered promiscuous mode [ 70.791220][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.803118][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.817786][ T4195] device veth1_vlan entered promiscuous mode [ 70.825617][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.835993][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.844884][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.853414][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.862812][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.875584][ T4186] device veth1_macvtap entered promiscuous mode [ 70.899960][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.915438][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.924101][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.935122][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.943166][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.953209][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.981024][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.992655][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.006640][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.017975][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.027927][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.037202][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.045956][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.058842][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.068023][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.079772][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.088646][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.103175][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.114563][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.123433][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.130933][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.132184][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.158955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.170031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.179643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.191253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.228448][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.237663][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.246909][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.256823][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.285015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.299458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.308660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.318506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.327773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.335944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.356357][ T4195] device veth0_macvtap entered promiscuous mode [ 71.378589][ T4187] device veth0_vlan entered promiscuous mode [ 71.394002][ T4187] device veth1_vlan entered promiscuous mode [ 71.408047][ T4188] device veth0_vlan entered promiscuous mode [ 71.421780][ T4188] device veth1_vlan entered promiscuous mode [ 71.464342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.472559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.491000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.499894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.509069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.520643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.530993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.539075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.552629][ T4195] device veth1_macvtap entered promiscuous mode [ 71.585540][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.593559][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.603672][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.614948][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.642297][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.653004][ T4187] device veth0_macvtap entered promiscuous mode [ 71.664423][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.695961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.704083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.720189][ T4187] device veth1_macvtap entered promiscuous mode [ 71.743361][ T4188] device veth0_macvtap entered promiscuous mode [ 71.756540][ T4188] device veth1_macvtap entered promiscuous mode [ 71.776442][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.784738][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.793506][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.803537][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.833331][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.844820][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.849715][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.852656][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.863055][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.880720][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.892521][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.902665][ T1510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.913382][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.924079][ T1510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.932143][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 71.938495][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 71.942054][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.951724][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 71.960722][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 71.965003][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.977865][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.990120][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.001861][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.005566][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 72.025152][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.032538][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.040688][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.049845][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.058642][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.067342][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.076057][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.085731][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.106125][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.116906][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.126961][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.138292][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.148373][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.160087][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.170115][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.180821][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.192850][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.200827][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.211386][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.221632][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.232294][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.244133][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.255590][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.271135][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.281353][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.292654][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.302789][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.313270][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.325729][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.345073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.360003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.369424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.384710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.395779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.404593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.415770][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.428875][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.439065][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.449808][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.459965][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.470675][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.484137][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.495102][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.506843][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.516928][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.525882][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.535473][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.544184][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.562304][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.571401][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.580488][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.592421][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.607403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.622538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.645026][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.653772][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.671181][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.680302][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.714409][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.722268][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.769751][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.954408][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.973466][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.006546][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.028332][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.044663][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.067523][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.097953][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.113198][ T4273] loop2: detected capacity change from 0 to 8192 [ 73.128554][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.150267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.188689][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.222340][ T4273] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 73.233471][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.259695][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.265417][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.273616][ T4273] REISERFS (device loop2): using ordered data mode [ 73.281305][ T4273] reiserfs: using flush barriers [ 73.291187][ T4273] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.308137][ T4273] REISERFS (device loop2): checking transaction log (loop2) [ 73.317779][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.325770][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.333650][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.335771][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.351174][ T4273] REISERFS (device loop2): Using r5 hash to sort names [ 73.361505][ T4273] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 73.402376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.567355][ T4285] loop1: detected capacity change from 0 to 4096 [ 73.715499][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 73.772321][ T4299] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.934044][ T4285] NILFS (loop1): nilfs_sufile_do_free: segment 5 is already clean [ 73.964165][ T4285] NILFS (loop1): nilfs_sufile_do_free: segment 14 is already clean [ 74.005630][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 74.012071][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 74.078512][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 74.114720][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 74.135281][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 74.164877][ T4313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 74.334519][ T4321] loop0: detected capacity change from 0 to 16 [ 74.383770][ T4321] ======================================================= [ 74.383770][ T4321] WARNING: The mand mount option has been deprecated and [ 74.383770][ T4321] and is ignored by this kernel. Remove the mand [ 74.383770][ T4321] option from the mount to silence this warning. [ 74.383770][ T4321] ======================================================= [ 74.435525][ T4327] loop4: detected capacity change from 0 to 512 [ 74.473477][ T4321] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.542468][ T26] audit: type=1800 audit(1784766194.785:2): pid=4321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 74.705997][ T4327] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.765274][ T4327] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.271995][ T4371] loop1: detected capacity change from 0 to 64 [ 75.549080][ T4384] capability: warning: `syz.0.52' uses deprecated v2 capabilities in a way that may be insecure [ 75.717314][ T4393] netem: change failed [ 75.728289][ T4396] loop0: detected capacity change from 0 to 256 [ 75.879189][ T4404] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.61'. [ 76.000917][ T4404] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 76.061682][ T4416] 0xfffffffffffffffd-0x00000001ff01 : "" [ 76.077128][ T4413] loop4: detected capacity change from 0 to 1024 [ 76.083711][ T4416] mtd: partition "" is out of reach -- disabled [ 76.180409][ T4416] ftl_cs: FTL header not found. [ 76.491261][ T162] hfsplus: b-tree write err: -5, ino 3 [ 76.617703][ T4428] loop1: detected capacity change from 0 to 164 [ 76.903718][ T4434] netlink: 256 bytes leftover after parsing attributes in process `syz.1.75'. [ 76.930943][ T4434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.75'. [ 77.166469][ T4418] loop0: detected capacity change from 0 to 32768 [ 77.310849][ T4448] capability: warning: `syz.2.80' uses 32-bit capabilities (legacy support in use) [ 77.380877][ T4418] XFS (loop0): Mounting V5 Filesystem [ 77.630539][ T4431] loop4: detected capacity change from 0 to 32768 [ 77.657487][ T4418] XFS (loop0): Ending clean mount [ 77.707223][ T4418] XFS (loop0): Quotacheck needed: Please wait. [ 77.878656][ T4418] XFS (loop0): Quotacheck: Done. [ 77.899447][ T4473] netlink: 'syz.1.90': attribute type 41 has an invalid length. [ 78.134480][ T4187] XFS (loop0): Unmounting Filesystem [ 78.306687][ T4485] loop1: detected capacity change from 0 to 128 [ 78.411586][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.422457][ T4485] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.512318][ T4493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 78.688974][ T4497] process 'syz.1.100' launched '/dev/loop1' with NULL argv: empty string added [ 78.843092][ T4501] netlink: 'syz.1.103': attribute type 3 has an invalid length. [ 78.872260][ T4501] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 78.896806][ T4501] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.103'. [ 79.129256][ T4513] netem: change failed [ 79.177736][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 79.580427][ T4538] MPTCP: kernel_bind error, err=-22 [ 79.585255][ T4539] loop4: detected capacity change from 0 to 128 [ 79.709757][ T4539] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nolazytime,mb_optimize_scan=0x0000000000000000,grpjquota=,errors=remount-ro,dioread_lock,barrier,errors=continue,. Quota mode: none. [ 79.749603][ T4539] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.797257][ T4546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.123'. [ 80.244610][ T4554] loop4: detected capacity change from 0 to 64 [ 80.409348][ T4564] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.132'. [ 80.959326][ T4584] loop1: detected capacity change from 0 to 1024 [ 81.009079][ T4586] loop2: detected capacity change from 0 to 128 [ 81.029792][ T4582] loop3: detected capacity change from 0 to 4096 [ 81.057762][ T4584] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000010,delalloc,sysvgroups,delalloc,resuid=0x0000000000000000,nouid32,inode_readahead_blks=0x0000000000020000,noauto_da_alloc,norecovery,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 81.084180][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.103429][ T4542] loop0: detected capacity change from 0 to 32768 [ 81.136515][ T4582] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 81.257516][ T4586] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.328674][ T4586] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.442148][ T4582] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 81.480043][ T4582] ntfs3: loop3: Inode r=b is not in use! [ 81.491627][ T4582] ntfs3: loop3: Failed to load $Extend. [ 81.559887][ T4542] JBD2: Ignoring recovery information on journal [ 81.770513][ T4595] loop1: detected capacity change from 0 to 4096 [ 81.836069][ T4542] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 81.941797][ T4595] ntfs3: loop1: failed to convert "0080" to cp852 [ 82.003478][ T4595] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 82.083108][ T4595] ntfs3: loop1: failed to convert name for inode 1e. [ 82.142539][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.166790][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.179023][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.194320][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.211989][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.232277][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.242368][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.262610][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.290152][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.313946][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.324202][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.331904][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.355868][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.371403][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.379302][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.387307][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.395187][ T13] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 82.460656][ T13] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 82.510378][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 82.591924][ T4604] fido_id[4604]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.882847][ T4614] loop3: detected capacity change from 0 to 512 [ 82.986903][ T4614] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 83.021618][ T4614] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 83.079617][ T4614] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters [ 83.130089][ T4614] EXT4-fs (loop3): Remounting filesystem read-only [ 83.150589][ T4614] EXT4-fs (loop3): 1 orphan inode deleted [ 83.163158][ T4614] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,lazytime,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,mblk_io_submit,barrier,quota,. Quota mode: writeback. [ 83.185249][ T4614] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.354959][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.553244][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 83.651163][ T4615] loop4: detected capacity change from 0 to 32768 [ 83.745239][ T23] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 83.789944][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.851866][ T23] usb 2-1: config 0 descriptor?? [ 83.890204][ T4615] XFS (loop4): Mounting V5 Filesystem [ 83.922498][ T23] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 83.999391][ T4615] XFS (loop4): Ending clean mount [ 84.039741][ T4618] loop2: detected capacity change from 0 to 32768 [ 84.101308][ T4643] loop0: detected capacity change from 0 to 2048 [ 84.111115][ T4188] XFS (loop4): Unmounting Filesystem [ 84.142437][ T23] gp8psk: usb in 128 operation failed. [ 84.178090][ T4645] loop3: detected capacity change from 0 to 64 [ 84.218659][ T4643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.271830][ T4645] attempt to access beyond end of device [ 84.271830][ T4645] loop3: rw=0, want=1026, limit=64 [ 84.315450][ T4645] Buffer I/O error on dev loop3, logical block 512, async page read [ 84.337615][ T4645] attempt to access beyond end of device [ 84.337615][ T4645] loop3: rw=0, want=113154, limit=64 [ 84.408154][ T4643] UDF-fs: bad mount option "utf8=1" or missing value [ 84.415854][ T23] gp8psk: usb in 137 operation failed. [ 84.437021][ T4645] Buffer I/O error on dev loop3, logical block 56576, async page read [ 84.437321][ T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 84.503504][ T23] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 84.542823][ T23] usb 2-1: USB disconnect, device number 2 [ 84.582465][ T4233] kernel write not supported for file /input/event0 (pid: 4233 comm: kworker/1:3) [ 84.941111][ T4662] loop3: detected capacity change from 0 to 256 [ 84.952092][ T4653] loop2: detected capacity change from 0 to 8192 [ 84.953081][ T4662] exfat: Deprecated parameter 'utf8' [ 84.965474][ T4662] exfat: Deprecated parameter 'namecase' [ 84.971250][ T4662] exfat: Deprecated parameter 'namecase' [ 84.978947][ T4662] exfat: Deprecated parameter 'utf8' [ 85.002459][ T4662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 85.114694][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.354601][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 85.575615][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.634649][ T23] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 85.645192][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 85.655172][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.663196][ T23] usb 5-1: Product: syz [ 85.684363][ T23] usb 5-1: Manufacturer: syz [ 85.689073][ T23] usb 5-1: SerialNumber: syz [ 85.733729][ T23] usb 5-1: config 0 descriptor?? [ 85.761430][ T4684] loop3: detected capacity change from 0 to 4096 [ 85.786567][ T23] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 85.799840][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 85.812794][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 85.849437][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 85.856870][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 85.882981][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.914781][ T23] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 85.923031][ T23] usb 5-1: media controller created [ 85.943336][ T4684] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 85.971501][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.985319][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 86.003717][ T4658] dvb-usb: bulk message failed: -22 (7/0) [ 86.031498][ T4234] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 86.044437][ T4658] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 86.094373][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 86.114508][ T4658] ttusb2: i2c transfer failed. [ 86.143897][ T4234] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 86.202354][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.270349][ T4195] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 86.347112][ T4234] usb 2-1: config 0 descriptor?? [ 86.404499][ T4234] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 86.410929][ T4234] hdpvr: probe of 2-1:0.0 failed with error -12 [ 86.489414][ T7] cfg80211: failed to load regulatory.db [ 86.734415][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.776167][ T4234] usb 2-1: USB disconnect, device number 3 [ 86.896912][ T4692] loop0: detected capacity change from 0 to 131072 [ 86.944622][ T23] usb 5-1: selecting invalid altsetting 3 [ 86.950424][ T23] ttusb2: set interface to alts=3 failed [ 86.980645][ T4692] F2FS-fs (loop0): invalid crc value [ 87.012022][ T4707] netlink: 'syz.4.191': attribute type 13 has an invalid length. [ 87.033860][ T4692] F2FS-fs (loop0): SIT is corrupted node# 5 vs 7 [ 87.040983][ T4692] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 87.062513][ T4707] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.191'. [ 87.132722][ T23] DVB: Unable to find symbol tda10086_attach() [ 87.141825][ T23] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 87.154567][ T7] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.195741][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.202403][ T7] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 87.205086][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 87.253838][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 87.284832][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.297244][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 87.303051][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 87.329844][ T4717] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 87.352942][ T7] usb 4-1: config 0 descriptor?? [ 87.355262][ T23] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 87.422575][ T23] usb 5-1: USB disconnect, device number 2 [ 87.565488][ T4725] loop4: detected capacity change from 0 to 1024 [ 87.574143][ T23] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 87.587114][ T4729] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.772485][ T4731] loop1: detected capacity change from 0 to 2048 [ 87.809524][ T4735] netlink: 104 bytes leftover after parsing attributes in process `syz.0.202'. [ 87.855289][ T4736] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.889613][ T7] wacom 0003:056A:003F.0002: unknown main item tag 0x7 [ 87.985243][ T7] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.3-1/input0 [ 88.085918][ T4742] Zero length message leads to an empty skb [ 88.164621][ T4233] usb 4-1: USB disconnect, device number 2 [ 88.295118][ T4743] fido_id[4743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 88.606183][ T4757] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,errors=remount-ro,delalloc,journal_dev=0x0000000000000004,dioread_lock,. Quota mode: none. [ 88.625316][ T4755] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 88.693935][ T4755] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.757314][ T4757] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.818046][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 89.221973][ T4782] set_capacity_and_notify: 2 callbacks suppressed [ 89.221989][ T4782] loop3: detected capacity change from 0 to 4096 [ 89.314681][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.338253][ T4791] device dummy0 entered promiscuous mode [ 89.605258][ T4782] EXT4-fs (loop3): Test dummy encryption mode enabled [ 89.612118][ T4782] EXT4-fs (loop3): Ignoring removed oldalloc option [ 89.640880][ T4782] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 89.674572][ T23] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 89.683689][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.696502][ T4782] System zones: 0-5 [ 89.723042][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 89.739996][ T4806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.749346][ T4806] IPv6: NLM_F_CREATE should be set when creating new route [ 89.756647][ T4806] IPv6: NLM_F_CREATE should be set when creating new route [ 89.763904][ T4806] IPv6: NLM_F_CREATE should be set when creating new route [ 89.821208][ T23] usb 1-1: config 0 descriptor?? [ 90.111076][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 90.213121][ T4830] loop1: detected capacity change from 0 to 512 [ 90.270451][ T4834] loop3: detected capacity change from 0 to 256 [ 90.327942][ T23] samsung 0003:0419:0001.0003: hidraw0: USB HID vf0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 90.350322][ T4834] FAT-fs (loop3): Directory bread(block 64) failed [ 90.365084][ T4834] FAT-fs (loop3): Directory bread(block 65) failed [ 90.371868][ T4834] FAT-fs (loop3): Directory bread(block 66) failed [ 90.379512][ T4834] FAT-fs (loop3): Directory bread(block 67) failed [ 90.389547][ T4834] FAT-fs (loop3): Directory bread(block 68) failed [ 90.396703][ T4834] FAT-fs (loop3): Directory bread(block 69) failed [ 90.403527][ T4834] FAT-fs (loop3): Directory bread(block 70) failed [ 90.417559][ T4834] FAT-fs (loop3): Directory bread(block 71) failed [ 90.424189][ T4834] FAT-fs (loop3): Directory bread(block 72) failed [ 90.431147][ T4834] FAT-fs (loop3): Directory bread(block 73) failed [ 90.442827][ T4830] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 90.464846][ T4841] program syz.4.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.486597][ T4830] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.535314][ T23] usb 1-1: USB disconnect, device number 2 [ 90.906139][ T4860] fido_id[4860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 91.050215][ T4869] program syz.3.259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.156225][ T4874] netlink: 48 bytes leftover after parsing attributes in process `syz.0.261'. [ 91.254827][ T4882] loop2: detected capacity change from 0 to 64 [ 91.513474][ T4893] netlink: 76 bytes leftover after parsing attributes in process `syz.4.269'. [ 91.558845][ T4898] loop3: detected capacity change from 0 to 64 [ 92.104018][ T4880] loop1: detected capacity change from 0 to 40427 [ 92.136868][ T4918] loop0: detected capacity change from 0 to 4096 [ 92.183852][ T4918] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 92.198745][ T4880] F2FS-fs (loop1): invalid crc value [ 92.222190][ T4880] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.279756][ T4234] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.287429][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.336283][ T4918] ntfs3: loop0: failed to convert "c46c" to iso8859-13 [ 92.399484][ T4880] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.536824][ T4197] attempt to access beyond end of device [ 92.536824][ T4197] loop1: rw=2049, want=45104, limit=40427 [ 92.584388][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 92.598049][ T4920] loop3: detected capacity change from 0 to 32768 [ 92.723656][ T4920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.283 (4920) [ 92.744789][ T4234] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.755957][ T7] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 92.777388][ T7] usb 5-1: config 0 interface 0 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.794794][ T4234] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 92.824551][ T4234] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.844266][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.854525][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.00 [ 92.863589][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.878849][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.887615][ T4234] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 92.899378][ T7] usb 5-1: config 0 descriptor?? [ 92.904606][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.915339][ T4234] usb 3-1: config 0 descriptor?? [ 92.934947][ T4917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.958117][ T7] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 92.999561][ T4920] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.014657][ T4920] BTRFS info (device loop3): turning on flush-on-commit [ 93.021679][ T4920] BTRFS info (device loop3): using free space tree [ 93.044335][ T4920] BTRFS info (device loop3): has skinny extents [ 93.174516][ T3543] bcm5974 5-1:0.0: could not read from device [ 93.235965][ T7] usb 5-1: USB disconnect, device number 3 [ 93.387216][ T4234] uclogic 0003:28BD:0074.0004: interface is invalid, ignoring [ 93.603254][ T4853] usb 3-1: USB disconnect, device number 2 [ 93.710963][ T4973] loop1: detected capacity change from 0 to 65 [ 93.738783][ T4300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4300) [ 93.843684][ T4973] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 94.366622][ T4999] loop3: detected capacity change from 0 to 512 [ 94.476167][ T4997] loop4: detected capacity change from 0 to 8192 [ 94.548840][ T4999] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 94.594761][ T4999] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.611957][ T5014] loop0: detected capacity change from 0 to 128 [ 94.644460][ T4234] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 94.677317][ T5014] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.709268][ T5014] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.740626][ T5014] EXT4-fs (loop0): shut down requested (1) [ 94.749833][ T5020] loop2: detected capacity change from 0 to 512 [ 94.881884][ T5022] overlayfs: upper fs does not support tmpfile. [ 94.910383][ T5020] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.317: error while reading EA inode 32 err=-116 [ 94.930797][ T5020] EXT4-fs (loop2): Remounting filesystem read-only [ 94.939233][ T5020] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.955148][ T5020] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.317: error while reading EA inode 32 err=-116 [ 94.970708][ T5020] EXT4-fs (loop2): Remounting filesystem read-only [ 94.979137][ T5020] EXT4-fs (loop2): 1 orphan inode deleted [ 94.985277][ T5020] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,stripe=0x0000000000000004,noauto_da_alloc,bsddf,jqfmt=vfsv1,debug_want_extra_isize=0x000000000000005c,. Quota mode: none. [ 95.054640][ T4234] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 95.062962][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.099089][ T4234] usb 2-1: config 0 has no interface number 0 [ 95.114417][ T4234] usb 2-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.330986][ T4234] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 95.350514][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.373451][ T4234] usb 2-1: Product: syz [ 95.409653][ T4234] usb 2-1: Manufacturer: syz [ 95.424286][ T4234] usb 2-1: SerialNumber: syz [ 95.471730][ T4234] usb 2-1: config 0 descriptor?? [ 95.540805][ T4234] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input9 [ 95.759640][ T4234] usb 2-1: USB disconnect, device number 4 [ 95.874740][ T5063] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.001895][ T5071] loop2: detected capacity change from 0 to 128 [ 96.101444][ T5071] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 96.126356][ T5071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.142072][ T5076] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.151893][ T5076] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.161145][ T5076] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.169928][ T5076] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.278191][ T5078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 96.433906][ T5088] loop2: detected capacity change from 0 to 256 [ 96.623862][ T5093] loop2: detected capacity change from 0 to 1024 [ 96.708794][ T5093] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.349: lblock 2 mapped to illegal pblock 2 (length 1) [ 96.825355][ T5093] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 96.833521][ T5093] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.349: lblock 0 mapped to illegal pblock 48 (length 1) [ 96.889703][ T5093] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 96.910726][ T5093] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.349: Failed to acquire dquot type 0 [ 96.923725][ T5093] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 96.976804][ T5093] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.349: mark_inode_dirty error [ 96.981119][ T5093] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 96.981210][ T5093] EXT4-fs (loop2): 1 orphan inode deleted [ 96.981250][ T5093] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 97.000894][ T5109] loop1: detected capacity change from 0 to 128 [ 97.020787][ T154] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.023269][ T154] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 97.023305][ T154] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 97.053531][ T5111] loop0: detected capacity change from 0 to 8 [ 97.225484][ T154] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.292874][ T154] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 97.292912][ T154] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 97.314796][ T4186] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 97.321119][ T4186] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 97.321323][ T4186] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 97.365522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.450063][ T5085] loop3: detected capacity change from 0 to 32768 [ 97.947287][ T5130] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.014363][ T5130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.057668][ T5130] EXT4-fs (loop4): 1 truncate cleaned up [ 98.063372][ T5130] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 98.129103][ T5138] mmap: syz.1.358 (5138) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 98.204574][ T4982] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.499071][ T5151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 98.505945][ T5151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.529760][ T5151] vhci_hcd vhci_hcd.0: Device attached [ 98.641056][ T4982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.661806][ T4982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.673895][ T4982] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 98.691939][ T4982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.703474][ T4982] usb 1-1: config 0 descriptor?? [ 98.794531][ T4236] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.795676][ T4234] vhci_hcd: vhci_device speed not set [ 98.825165][ T5166] netlink: 'syz.1.379': attribute type 29 has an invalid length. [ 98.833299][ T5166] netlink: 'syz.1.379': attribute type 29 has an invalid length. [ 98.848657][ T5166] netlink: 'syz.1.379': attribute type 29 has an invalid length. [ 98.895361][ T4234] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 99.042590][ T5174] program syz.1.383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.051875][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 99.084760][ T4853] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.107116][ T26] audit: type=1326 audit(1784766219.355:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea1644e99 code=0x7fc00000 [ 99.133217][ T26] audit: type=1326 audit(1784766219.355:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ea1644e99 code=0x7fc00000 [ 99.164608][ T4236] usb 3-1: config 0 has no interfaces? [ 99.182636][ T26] audit: type=1326 audit(1784766219.355:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea1644e99 code=0x7fc00000 [ 99.218990][ T4982] konepure 0003:1E7D:2DBE.0005: item fetching failed at offset 5/7 [ 99.227598][ T4982] konepure 0003:1E7D:2DBE.0005: parse failed [ 99.233801][ T4982] konepure: probe of 0003:1E7D:2DBE.0005 failed with error -22 [ 99.246058][ T26] audit: type=1326 audit(1784766219.355:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea1644e99 code=0x7fc00000 [ 99.280062][ T26] audit: type=1326 audit(1784766219.355:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea1644e99 code=0x7fc00000 [ 99.305115][ T26] audit: type=1326 audit(1784766219.355:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea1644e99 code=0x7fc00000 [ 99.325120][ T4236] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 99.361091][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.382280][ T4236] usb 3-1: Product: syz [ 99.410503][ T4236] usb 3-1: Manufacturer: syz [ 99.416303][ T4236] usb 3-1: SerialNumber: syz [ 99.432017][ T4236] usb 3-1: config 0 descriptor?? [ 99.438288][ T4982] usb 1-1: USB disconnect, device number 3 [ 99.456150][ T4853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.477510][ T4853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.488763][ T4853] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.498312][ T4853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.535977][ T4853] usb 4-1: config 0 descriptor?? [ 99.705687][ T4982] usb 3-1: USB disconnect, device number 3 [ 99.724785][ T5152] vhci_hcd: connection closed [ 99.727201][ T4230] vhci_hcd: stop threads [ 99.764349][ T4230] vhci_hcd: release socket [ 99.779910][ T4234] vhci_hcd: vhci_device speed not set [ 99.799477][ T4230] vhci_hcd: disconnect device [ 99.840949][ T5197] program syz.4.394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.899179][ T4853] usbhid 4-1:0.0: can't add hid device: -71 [ 99.906416][ T4853] usbhid: probe of 4-1:0.0 failed with error -71 [ 99.951961][ T4853] usb 4-1: USB disconnect, device number 3 [ 99.987259][ T5201] set_capacity_and_notify: 2 callbacks suppressed [ 99.987275][ T5201] loop4: detected capacity change from 0 to 4096 [ 100.094977][ T5209] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.124044][ T5201] NILFS (loop4): nilfs_sufile_do_free: segment 5 is already clean [ 100.143484][ T5210] loop0: detected capacity change from 0 to 16 [ 100.159973][ T5201] NILFS (loop4): nilfs_sufile_do_free: segment 14 is already clean [ 100.230081][ T5210] erofs: (device loop0): mounted with root inode @ nid 36. [ 100.303440][ T5214] loop1: detected capacity change from 0 to 2048 [ 100.310681][ T5210] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 100.453497][ T5222] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.499549][ T5214] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 100.604063][ T5214] Remounting filesystem read-only [ 100.715959][ T5227] kvm [5226]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x4 [ 101.089933][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 101.303550][ T5261] tipc: Started in network mode [ 101.353608][ T5261] tipc: Node identity ffffffffffff00000000000000000001, cluster identity 4711 [ 101.380911][ T5261] tipc: Enabling of bearer rejected, failed to enable media [ 101.404458][ T4853] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.644350][ T4853] usb 5-1: Using ep0 maxpacket: 8 [ 101.839571][ T4234] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.909567][ T5244] loop1: detected capacity change from 0 to 32768 [ 101.944639][ T4853] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 101.957407][ T4853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.994953][ T5244] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.004096][ T4853] usb 5-1: Product: syz [ 102.009165][ T4853] usb 5-1: Manufacturer: syz [ 102.015190][ T4853] usb 5-1: SerialNumber: syz [ 102.023485][ T4853] usb 5-1: config 0 descriptor?? [ 102.029181][ T5244] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.073461][ T5244] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 102.089124][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.097071][ T4234] usb 1-1: Using ep0 maxpacket: 32 [ 102.102508][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.170890][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms [ 102.183747][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.191885][ T5244] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.224522][ T4234] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 102.234845][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.249485][ T4234] usb 1-1: config 0 descriptor?? [ 102.294506][ T4853] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 102.434920][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 102.514684][ T5244] gfs2: fsid=syz:syz.0: found 1 quota changes [ 102.514825][ T4234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 102.546905][ T4234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.600396][ T4234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 102.611812][ T4234] usb 1-1: media controller created [ 102.632836][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.663164][ T5244] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0 [ 102.672652][ T5244] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 102.682126][ T5244] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 102.691890][ T5244] gfs2: fsid=syz:syz.0: R: n:18 f:a0000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 102.702972][ T5244] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 102.725055][ T4234] az6027: usb out operation failed. (-71) [ 102.744425][ T4853] usb write operation failed. (-71) [ 102.753489][ T4853] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.754850][ T4234] az6027: usb out operation failed. (-71) [ 102.774821][ T4234] stb0899_attach: Driver disabled by Kconfig [ 102.780890][ T4234] az6027: no front-end attached [ 102.780890][ T4234] [ 102.793780][ T4853] dvbdev: DVB: registering new adapter (Terratec H7) [ 102.802467][ T4853] usb 5-1: media controller created [ 102.829913][ T4853] usb read operation failed. (-71) [ 102.850676][ T4234] az6027: usb out operation failed. (-71) [ 102.857314][ T4234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 102.864694][ T4853] usb write operation failed. (-71) [ 102.876758][ T4853] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 102.888772][ T4197] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 102.910748][ T4234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 102.925138][ T4853] usb 5-1: USB disconnect, device number 4 [ 102.925674][ T4197] CPU: 0 PID: 4197 Comm: syz-executor Not tainted syzkaller #0 [ 102.938576][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 102.948684][ T4197] Call Trace: [ 102.951992][ T4197] [ 102.954955][ T4197] dump_stack_lvl+0x188/0x250 [ 102.959720][ T4197] ? show_regs_print_info+0x20/0x20 [ 102.964962][ T4197] ? load_image+0x410/0x410 [ 102.969511][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 102.974747][ T4197] gfs2_assert_warn_i+0x187/0x2c0 [ 102.979813][ T4197] gfs2_quota_cleanup+0x48c/0x670 [ 102.984895][ T4197] gfs2_make_fs_ro+0x523/0x620 [ 102.989910][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 102.995144][ T4197] ? gfs2_dinode_out+0xb00/0xb00 [ 103.000126][ T4197] ? __lock_acquire+0x7b50/0x7b50 [ 103.005184][ T4197] ? do_raw_spin_lock+0x128/0x2f0 [ 103.010245][ T4197] ? __rwlock_init+0x140/0x140 [ 103.015057][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 103.020288][ T4197] gfs2_put_super+0x1d2/0x7c0 [ 103.025013][ T4197] ? gfs2_evict_inode+0x1340/0x1340 [ 103.030279][ T4197] generic_shutdown_super+0x130/0x300 [ 103.035687][ T4197] kill_block_super+0x7c/0xe0 [ 103.040397][ T4197] deactivate_locked_super+0x93/0xf0 [ 103.045714][ T4197] cleanup_mnt+0x426/0x4d0 [ 103.050166][ T4197] task_work_run+0x125/0x1a0 [ 103.054799][ T4197] exit_to_user_mode_loop+0x10f/0x130 [ 103.060204][ T4197] exit_to_user_mode_prepare+0xee/0x180 [ 103.065786][ T4197] syscall_exit_to_user_mode+0x16/0x40 [ 103.071280][ T4197] do_syscall_64+0x58/0xa0 [ 103.075729][ T4197] ? clear_bhb_loop+0x30/0x80 [ 103.080448][ T4197] ? clear_bhb_loop+0x30/0x80 [ 103.085158][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.091096][ T4197] RIP: 0033:0x7fdca2ffe0d7 [ 103.095535][ T4197] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 103.115168][ T4197] RSP: 002b:00007fff59d9d6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.123612][ T4197] RAX: 0000000000000000 RBX: 00007fdca309230a RCX: 00007fdca2ffe0d7 [ 103.131609][ T4197] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff59d9d780 [ 103.139608][ T4197] RBP: 00007fff59d9d780 R08: 00007fff59d9e780 R09: 00000000ffffffff [ 103.147614][ T4197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff59d9e810 [ 103.155608][ T4197] R13: 00007fdca309230a R14: 0000000000019135 R15: 00007fff59d9e850 [ 103.163624][ T4197] [ 103.166677][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.221340][ T4234] dvb-usb: schedule remote query interval to 400 msecs. [ 103.228813][ T4234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 103.252754][ T4234] usb 1-1: USB disconnect, device number 4 [ 103.355082][ T4234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 104.239317][ T5307] loop2: detected capacity change from 0 to 32768 [ 104.527376][ T5307] XFS (loop2): Mounting V5 Filesystem [ 104.726499][ T5307] XFS (loop2): Ending clean mount [ 104.728577][ T5307] XFS (loop2): Quotacheck needed: Please wait. [ 104.781812][ T5307] XFS (loop2): Quotacheck: Done. [ 104.934882][ T4186] XFS (loop2): Unmounting Filesystem [ 105.118185][ T5336] loop4: detected capacity change from 0 to 32768 [ 105.189685][ T5336] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.189734][ T5336] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.199597][ T5336] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 105.201981][ T4234] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 105.218660][ T4234] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 105.300226][ T5349] loop1: detected capacity change from 0 to 32768 [ 105.377702][ T5349] JBD2: Ignoring recovery information on journal [ 105.407073][ T4234] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 188ms [ 105.410248][ T4234] gfs2: fsid=syz:syz.0: jid=0: Done [ 105.410287][ T5336] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 105.490348][ T5349] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.604763][ T5358] loop3: detected capacity change from 0 to 4096 [ 105.662290][ T5358] NILFS (loop3): invalid segment: Checksum error in segment payload [ 105.662406][ T5358] NILFS (loop3): trying rollback from an earlier position [ 105.761133][ T5358] NILFS (loop3): recovery complete [ 105.789663][ T5361] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.896049][ T4197] ocfs2: Unmounting device (7,1) on (node local) [ 105.984091][ T5336] gfs2: fsid=syz:syz.0: found 1 quota changes [ 106.216055][ T5336] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0 [ 106.216583][ T5336] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 106.216626][ T5336] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 106.216641][ T5336] gfs2: fsid=syz:syz.0: R: n:18 f:a0000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 106.216692][ T5336] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 106.366153][ T4188] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 106.366180][ T4188] CPU: 1 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 106.366201][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.366213][ T4188] Call Trace: [ 106.366220][ T4188] [ 106.366229][ T4188] dump_stack_lvl+0x188/0x250 [ 106.366258][ T4188] ? show_regs_print_info+0x20/0x20 [ 106.366282][ T4188] ? load_image+0x410/0x410 [ 106.366310][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 106.366336][ T4188] gfs2_assert_warn_i+0x187/0x2c0 [ 106.366363][ T4188] gfs2_quota_cleanup+0x48c/0x670 [ 106.366393][ T4188] gfs2_make_fs_ro+0x523/0x620 [ 106.366415][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 106.366436][ T4188] ? gfs2_dinode_out+0xb00/0xb00 [ 106.366462][ T4188] ? __lock_acquire+0x7b50/0x7b50 [ 106.366484][ T4188] ? do_raw_spin_lock+0x128/0x2f0 [ 106.366507][ T4188] ? __rwlock_init+0x140/0x140 [ 106.366531][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 106.366556][ T4188] gfs2_put_super+0x1d2/0x7c0 [ 106.366583][ T4188] ? gfs2_evict_inode+0x1340/0x1340 [ 106.366606][ T4188] generic_shutdown_super+0x130/0x300 [ 106.366632][ T4188] kill_block_super+0x7c/0xe0 [ 106.366656][ T4188] deactivate_locked_super+0x93/0xf0 [ 106.366679][ T4188] cleanup_mnt+0x426/0x4d0 [ 106.366705][ T4188] task_work_run+0x125/0x1a0 [ 106.366732][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 106.366753][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 106.366774][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 106.366806][ T4188] do_syscall_64+0x58/0xa0 [ 106.366839][ T4188] ? clear_bhb_loop+0x30/0x80 [ 106.366858][ T4188] ? clear_bhb_loop+0x30/0x80 [ 106.366899][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.366918][ T4188] RIP: 0033:0x7f8ea16460d7 [ 106.366935][ T4188] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 106.366951][ T4188] RSP: 002b:00007ffe0fad38e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.366973][ T4188] RAX: 0000000000000000 RBX: 00007f8ea16da30a RCX: 00007f8ea16460d7 [ 106.366987][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0fad39a0 [ 106.366999][ T4188] RBP: 00007ffe0fad39a0 R08: 00007ffe0fad49a0 R09: 00000000ffffffff [ 106.367013][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0fad4a30 [ 106.367025][ T4188] R13: 00007f8ea16da30a R14: 0000000000019ee9 R15: 00007ffe0fad4a70 [ 106.367053][ T4188] [ 106.493103][ T5385] input: syz1 as /devices/virtual/input/input11 [ 106.712492][ T5393] program syz.2.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.888800][ T5400] loop3: detected capacity change from 0 to 512 [ 107.090240][ T5403] loop4: detected capacity change from 0 to 128 [ 107.112770][ T5400] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.139822][ T5407] loop2: detected capacity change from 0 to 164 [ 107.148672][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.148777][ T5403] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.151136][ T5400] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.478: invalid indirect mapped block 256 (level 2) [ 107.361747][ T5400] EXT4-fs (loop3): 2 truncates cleaned up [ 107.361775][ T5400] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 107.470822][ T5400] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.478: bg 0: block 5: invalid block bitmap [ 107.493389][ T5400] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.545104][ T5400] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.545104][ T5400] [ 107.545129][ T5400] EXT4-fs (loop3): Total free blocks count 0 [ 107.574375][ T5400] EXT4-fs (loop3): Free/Dirty block details [ 107.574447][ T5400] EXT4-fs (loop3): free_blocks=0 [ 107.574502][ T5400] EXT4-fs (loop3): dirty_blocks=2 [ 107.574516][ T5400] EXT4-fs (loop3): Block reservation details [ 107.574529][ T5400] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 107.653334][ T4230] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 28 [ 107.653427][ T4230] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.653427][ T4230] [ 107.730670][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.784878][ T5425] loop3: detected capacity change from 0 to 1024 [ 107.799746][ T5423] MPTCP: kernel_bind error, err=-22 [ 107.800057][ T5425] EXT4-fs (loop3): Ignoring removed orlov option [ 107.830419][ T5425] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 107.968638][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 108.051667][ T5439] loop3: detected capacity change from 0 to 128 [ 108.084537][ T23] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 108.099543][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.125192][ T23] usb 3-1: config 0 descriptor?? [ 108.169478][ T5439] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nolazytime,mb_optimize_scan=0x0000000000000000,grpjquota=,errors=remount-ro,dioread_lock,barrier,errors=continue,. Quota mode: none. [ 108.274538][ T5439] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.306387][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.364195][ T5449] loop4: detected capacity change from 0 to 512 [ 108.394788][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 108.411150][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.457308][ T5453] loop0: detected capacity change from 0 to 2048 [ 108.463180][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 108.477130][ T23] usb 3-1: media controller created [ 108.497967][ T5449] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.526219][ T5453] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 108.541322][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.545875][ T5449] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.497: invalid indirect mapped block 256 (level 2) [ 108.585218][ T5449] EXT4-fs (loop4): 2 truncates cleaned up [ 108.590994][ T5449] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 108.624522][ T23] az6027: usb out operation failed. (-71) [ 108.644520][ T23] az6027: usb out operation failed. (-71) [ 108.652586][ T23] stb0899_attach: Driver disabled by Kconfig [ 108.664497][ T5449] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.497: bg 0: block 5: invalid block bitmap [ 108.666773][ T5453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.682319][ T23] az6027: no front-end attached [ 108.682319][ T23] [ 108.700197][ T5449] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.712632][ T23] az6027: usb out operation failed. (-71) [ 108.740976][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 108.754401][ T5449] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.754401][ T5449] [ 108.786592][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 108.832328][ T5449] EXT4-fs (loop4): Total free blocks count 0 [ 108.838764][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 108.864358][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 108.882344][ T5449] EXT4-fs (loop4): Free/Dirty block details [ 108.903508][ T23] usb 3-1: USB disconnect, device number 4 [ 108.909629][ T5449] EXT4-fs (loop4): free_blocks=0 [ 108.924365][ T5449] EXT4-fs (loop4): dirty_blocks=2 [ 108.971766][ T5449] EXT4-fs (loop4): Block reservation details [ 109.004013][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 109.014374][ T5449] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 109.109390][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 28 [ 109.164461][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.164461][ T144] [ 109.552964][ T5459] JBD2: Ignoring recovery information on journal [ 109.577411][ T5477] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.676398][ T5477] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.522: invalid indirect mapped block 256 (level 2) [ 109.712251][ T5477] EXT4-fs (loop2): 2 truncates cleaned up [ 109.736478][ T5461] XFS (loop3): Mounting V5 Filesystem [ 109.742258][ T5459] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 109.752293][ T5477] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 109.770111][ T5485] netem: change failed [ 109.811821][ T5477] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.522: bg 0: block 5: invalid block bitmap [ 109.826412][ T5477] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 109.856139][ T5477] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.856139][ T5477] [ 109.869214][ T5477] EXT4-fs (loop2): Total free blocks count 0 [ 109.877534][ T5477] EXT4-fs (loop2): Free/Dirty block details [ 109.883589][ T5477] EXT4-fs (loop2): free_blocks=0 [ 109.888767][ T5477] EXT4-fs (loop2): dirty_blocks=2 [ 109.893929][ T5477] EXT4-fs (loop2): Block reservation details [ 109.900128][ T5477] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 109.937555][ T4197] ocfs2: Unmounting device (7,1) on (node local) [ 109.956602][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 28 [ 110.012635][ T5461] XFS (loop3): Ending clean mount [ 110.018267][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 110.018267][ T5457] [ 110.108078][ T5461] XFS (loop3): Quotacheck needed: Please wait. [ 110.254993][ T5461] XFS (loop3): Quotacheck: Done. [ 110.451075][ T4195] XFS (loop3): Unmounting Filesystem [ 110.457590][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 110.585875][ T5511] set_capacity_and_notify: 3 callbacks suppressed [ 110.585890][ T5511] loop2: detected capacity change from 0 to 2048 [ 110.652463][ T5511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.733130][ T5515] loop1: detected capacity change from 0 to 64 [ 110.814342][ T5511] UDF-fs: bad mount option "utf8=1" or missing value [ 110.840766][ T5517] loop4: detected capacity change from 0 to 4096 [ 110.899014][ T5515] attempt to access beyond end of device [ 110.899014][ T5515] loop1: rw=0, want=1026, limit=64 [ 110.920888][ T5515] Buffer I/O error on dev loop1, logical block 512, async page read [ 110.974559][ T5515] attempt to access beyond end of device [ 110.974559][ T5515] loop1: rw=0, want=113154, limit=64 [ 110.976351][ T5517] NILFS (loop4): invalid segment: Checksum error in segment payload [ 110.996638][ T5517] NILFS (loop4): trying rollback from an earlier position [ 111.004520][ T5515] Buffer I/O error on dev loop1, logical block 56576, async page read [ 111.059102][ T5517] NILFS (loop4): recovery complete [ 111.084092][ T5518] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.253137][ T5525] loop1: detected capacity change from 0 to 512 [ 111.333543][ T5525] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.409163][ T5525] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.527: invalid indirect mapped block 256 (level 2) [ 111.456087][ T5525] EXT4-fs (loop1): 2 truncates cleaned up [ 111.461910][ T5525] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 111.624617][ T5525] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.527: bg 0: block 5: invalid block bitmap [ 111.684441][ T5525] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 111.724400][ T5525] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.724400][ T5525] [ 111.764371][ T5525] EXT4-fs (loop1): Total free blocks count 0 [ 111.785067][ T5509] loop0: detected capacity change from 0 to 32768 [ 111.794484][ T5525] EXT4-fs (loop1): Free/Dirty block details [ 111.800438][ T5525] EXT4-fs (loop1): free_blocks=0 [ 111.826325][ T5525] EXT4-fs (loop1): dirty_blocks=2 [ 111.847388][ T5525] EXT4-fs (loop1): Block reservation details [ 111.862385][ T5525] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 111.881355][ T5509] XFS (loop0): Mounting V5 Filesystem [ 111.924134][ T4251] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 28 [ 112.007869][ T4251] EXT4-fs (loop1): This should not happen!! Data will be lost [ 112.007869][ T4251] [ 112.061503][ T5523] loop3: detected capacity change from 0 to 32768 [ 112.100757][ T5533] loop4: detected capacity change from 0 to 32768 [ 112.140855][ T5533] (syz.4.533,5533,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.161106][ T5509] XFS (loop0): Ending clean mount [ 112.177007][ T5533] (syz.4.533,5533,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.231093][ T5509] XFS (loop0): Quotacheck needed: Please wait. [ 112.280642][ T5533] JBD2: Ignoring recovery information on journal [ 112.304801][ T5509] XFS (loop0): Quotacheck: Done. [ 112.451497][ T5533] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 112.619031][ T4187] XFS (loop0): Unmounting Filesystem [ 112.922500][ T5559] netlink: 'syz.3.540': attribute type 3 has an invalid length. [ 113.051182][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 113.813378][ T5585] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 114.067419][ T5567] loop2: detected capacity change from 0 to 32768 [ 114.091200][ T5570] loop0: detected capacity change from 0 to 32768 [ 114.148244][ T5570] XFS (loop0): Mounting V5 Filesystem [ 114.204546][ T4234] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.266663][ T5570] XFS (loop0): Ending clean mount [ 114.280495][ T5570] XFS (loop0): Quotacheck needed: Please wait. [ 114.334427][ T4236] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 114.362030][ T5570] XFS (loop0): Quotacheck: Done. [ 114.426798][ T4187] XFS (loop0): Unmounting Filesystem [ 114.597046][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.617074][ T4234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 114.632418][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 114.645984][ T4234] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 114.660144][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.694536][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 114.723897][ T4234] usb 5-1: config 0 descriptor?? [ 114.757868][ T4236] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 114.780593][ T4234] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 114.800420][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.803614][ T4234] hdpvr: probe of 5-1:0.0 failed with error -12 [ 114.875658][ T4236] usb 2-1: config 0 descriptor?? [ 114.894567][ T5595] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 114.971483][ T5619] loop3: detected capacity change from 0 to 2048 [ 115.006119][ T4234] usb 5-1: USB disconnect, device number 5 [ 115.105800][ T5623] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.356453][ T4236] elecom 0003:056E:010C.0006: unknown main item tag 0x4 [ 115.369985][ T4236] elecom 0003:056E:010C.0006: unknown main item tag 0xd [ 115.381829][ T4236] elecom 0003:056E:010C.0006: hidraw0: USB HID v0.82 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 115.611209][ T5643] netlink: 'syz.4.571': attribute type 2 has an invalid length. [ 115.642666][ T5595] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 115.689496][ T4234] usb 2-1: USB disconnect, device number 5 [ 116.162250][ T5641] set_capacity_and_notify: 1 callbacks suppressed [ 116.162264][ T5641] loop2: detected capacity change from 0 to 32768 [ 116.223411][ T5636] loop3: detected capacity change from 0 to 32768 [ 116.271578][ T5641] JBD2: Ignoring recovery information on journal [ 116.404261][ T5641] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.473766][ T5645] loop4: detected capacity change from 0 to 32768 [ 116.609559][ T5645] XFS (loop4): Mounting V5 Filesystem [ 116.734063][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 116.800218][ T5645] XFS (loop4): Ending clean mount [ 116.837456][ T5645] XFS (loop4): Quotacheck needed: Please wait. [ 116.974204][ T5645] XFS (loop4): Quotacheck: Done. [ 117.108351][ T4188] XFS (loop4): Unmounting Filesystem [ 117.241736][ T5670] loop2: detected capacity change from 0 to 512 [ 117.386829][ T5670] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 117.428922][ T5670] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.682594][ T5686] netlink: 'syz.2.585': attribute type 2 has an invalid length. [ 117.869149][ T5691] loop0: detected capacity change from 0 to 2048 [ 117.970373][ T5701] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.156437][ T5709] loop2: detected capacity change from 0 to 1024 [ 118.381755][ T154] hfsplus: b-tree write err: -5, ino 25 [ 118.400626][ T154] hfsplus: b-tree write err: -5, ino 4 [ 118.434493][ T154] hfsplus: b-tree write err: -5, ino 2 [ 118.472211][ T5726] loop3: detected capacity change from 0 to 1024 [ 118.552845][ T5732] loop0: detected capacity change from 0 to 256 [ 118.679052][ T5732] FAT-fs (loop0): Directory bread(block 64) failed [ 118.692898][ T5735] loop4: detected capacity change from 0 to 2048 [ 118.700411][ T5732] FAT-fs (loop0): Directory bread(block 65) failed [ 118.763073][ T5732] FAT-fs (loop0): Directory bread(block 66) failed [ 118.776850][ T5732] FAT-fs (loop0): Directory bread(block 67) failed [ 118.795677][ T5732] FAT-fs (loop0): Directory bread(block 68) failed [ 118.802390][ T5732] FAT-fs (loop0): Directory bread(block 69) failed [ 118.830305][ T5740] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.851417][ T5732] FAT-fs (loop0): Directory bread(block 70) failed [ 118.864538][ T5732] FAT-fs (loop0): Directory bread(block 71) failed [ 118.881526][ T5732] FAT-fs (loop0): Directory bread(block 72) failed [ 118.894442][ T5732] FAT-fs (loop0): Directory bread(block 73) failed [ 118.986248][ T5746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.993551][ T5746] IPv6: NLM_F_CREATE should be set when creating new route [ 119.000869][ T5746] IPv6: NLM_F_CREATE should be set when creating new route [ 119.008195][ T5746] IPv6: NLM_F_CREATE should be set when creating new route [ 119.325427][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 119.384540][ T4236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.536042][ T5766] loop2: detected capacity change from 0 to 4096 [ 119.624335][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 119.654385][ T5777] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.768877][ T5772] EXT4-fs (loop4): Test dummy encryption mode enabled [ 119.799040][ T4230] hfsplus: b-tree write err: -5, ino 25 [ 119.806455][ T5772] EXT4-fs (loop4): Ignoring removed oldalloc option [ 119.823533][ T4230] hfsplus: b-tree write err: -5, ino 4 [ 119.841647][ T4230] hfsplus: b-tree write err: -5, ino 2 [ 119.861374][ T5772] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 119.904629][ T4236] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 119.918348][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 119.929921][ T5772] System zones: 0-5 [ 119.944361][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.987485][ T5772] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 120.051292][ T5779] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 120.051318][ T4236] usb 2-1: Product: syz [ 120.071864][ T5779] REISERFS (device loop0): using ordered data mode [ 120.078867][ T4236] usb 2-1: Manufacturer: syz [ 120.083509][ T4236] usb 2-1: SerialNumber: syz [ 120.091259][ T4236] usb 2-1: config 0 descriptor?? [ 120.099108][ T5779] reiserfs: using flush barriers [ 120.136351][ T4236] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 120.154368][ T4236] dvb-usb: bulk message failed: -22 (4/0) [ 120.160165][ T4236] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.181430][ T4236] dvb-usb: bulk message failed: -22 (5/0) [ 120.187353][ T4236] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.244904][ T4236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.271345][ T5779] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.298031][ T4236] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 120.344781][ T5754] dvb-usb: bulk message failed: -22 (7/0) [ 120.351301][ T4236] usb 2-1: media controller created [ 120.359604][ T5754] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 120.370235][ T5779] REISERFS (device loop0): checking transaction log (loop0) [ 120.388958][ T5779] REISERFS (device loop0): Using r5 hash to sort names [ 120.397986][ T5754] ttusb2: i2c transfer failed. [ 120.406193][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.415444][ T5779] REISERFS warning (device loop0): super-2030 reiserfs_fill_super: This file system claims to use 23297 bitmap blocks in its super block, but requires 131072. Clearing to zero. [ 120.451641][ T4236] usb 2-1: selecting invalid altsetting 3 [ 120.457596][ T5779] REISERFS (device loop0): using 3.5.x disk format [ 120.465368][ T4236] ttusb2: set interface to alts=3 failed [ 120.471706][ T5779] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 120.570927][ T4236] DVB: Unable to find symbol tda10086_attach() [ 120.593728][ T4236] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 120.654516][ T4236] dvb-usb: bulk message failed: -22 (4/0) [ 120.660294][ T4236] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.714375][ T4236] dvb-usb: bulk message failed: -22 (5/0) [ 120.725964][ T4236] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 120.765578][ T4236] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 120.791422][ T5807] program syz.3.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.810402][ T4236] usb 2-1: USB disconnect, device number 6 [ 120.934970][ T4236] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 121.296426][ T5827] netlink: 76 bytes leftover after parsing attributes in process `syz.1.644'. [ 121.568850][ T5834] set_capacity_and_notify: 3 callbacks suppressed [ 121.568866][ T5834] loop1: detected capacity change from 0 to 4096 [ 121.657507][ T5848] loop4: detected capacity change from 0 to 512 [ 121.684371][ T5834] ntfs3: loop1: ino=3, Correct links count -> 2. [ 121.754841][ T5847] loop0: detected capacity change from 0 to 4096 [ 121.796364][ T5847] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.867243][ T5847] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 121.918863][ T5847] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 121.940582][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.074913][ T5847] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 122.254066][ T5840] loop3: detected capacity change from 0 to 40427 [ 122.271067][ T5855] loop4: detected capacity change from 0 to 64 [ 122.325849][ T5840] F2FS-fs (loop3): invalid crc value [ 122.334013][ T5847] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c098, mo2=0003] [ 122.383067][ T5847] System zones: 0-5 [ 122.392676][ T5840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.402983][ T5847] EXT4-fs (loop0): re-mounted. Opts: auto_da_alloc=0x00000000000000a3,journal_ioprio=0x0000000000000006,block_validity,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 122.495139][ T5864] netlink: 'syz.1.661': attribute type 5 has an invalid length. [ 122.574193][ T5866] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 122.682170][ T5840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.906321][ T4195] attempt to access beyond end of device [ 122.906321][ T4195] loop3: rw=2049, want=45104, limit=40427 [ 123.064916][ T5882] loop1: detected capacity change from 0 to 1024 [ 123.140028][ T5884] loop4: detected capacity change from 0 to 512 [ 123.190840][ T162] hfsplus: b-tree write err: -5, ino 25 [ 123.210764][ T162] hfsplus: b-tree write err: -5, ino 4 [ 123.244768][ T162] hfsplus: b-tree write err: -5, ino 2 [ 123.277275][ T5867] loop2: detected capacity change from 0 to 32768 [ 123.289910][ T5884] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 123.331615][ T5884] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.358212][ T5867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.662 (5867) [ 123.480510][ T5867] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 123.534412][ T5867] BTRFS info (device loop2): setting nodatasum [ 123.540635][ T5867] BTRFS info (device loop2): force zlib compression, level 3 [ 123.604803][ T5867] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 123.634410][ T5867] BTRFS info (device loop2): use lzo compression, level 0 [ 123.641590][ T5867] BTRFS info (device loop2): turning on flush-on-commit [ 123.698915][ T5896] loop1: detected capacity change from 0 to 4096 [ 123.722081][ T5867] BTRFS info (device loop2): enabling auto defrag [ 123.740082][ T5867] BTRFS info (device loop2): max_inline at 4096 [ 123.753931][ T5896] EXT4-fs (loop1): Test dummy encryption mode enabled [ 123.783924][ T5867] BTRFS info (device loop2): using free space tree [ 123.819620][ T5896] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 123.872099][ T5867] BTRFS info (device loop2): has skinny extents [ 123.904181][ T5904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.679'. [ 123.931053][ T5896] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 124.055301][ T5918] loop0: detected capacity change from 0 to 1024 [ 124.077040][ T5896] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 124.112179][ T5896] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c098, mo2=0003] [ 124.123216][ T5896] System zones: 0-5 [ 124.130803][ T5918] EXT4-fs (loop0): Ignoring removed bh option [ 124.140159][ T5896] EXT4-fs (loop1): re-mounted. Opts: auto_da_alloc=0x00000000000000a3,journal_ioprio=0x0000000000000006,block_validity,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 124.158294][ T5867] BTRFS info (device loop2): enabling ssd optimizations [ 124.263606][ T5918] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,dioread_lock,barrier=0x0000000000000404,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,i_version,bh,init_itable,. Quota mode: none. [ 124.463555][ T5936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.594841][ T4300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4300) [ 125.371031][ T5964] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 125.389987][ T5964] REISERFS (device loop2): using ordered data mode [ 125.444653][ T5964] reiserfs: using flush barriers [ 125.484848][ T5964] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.617272][ T5964] REISERFS (device loop2): checking transaction log (loop2) [ 125.653831][ T5964] REISERFS (device loop2): Using r5 hash to sort names [ 125.684668][ T5964] reiserfs: enabling write barrier flush mode [ 125.694397][ T4981] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.732104][ T5964] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 125.790082][ T5964] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 125.811284][ T5964] REISERFS (device loop2): Remounting filesystem read-only [ 125.821410][ T5964] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 125.904651][ T5964] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 125.990008][ T5964] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 126.014275][ T5964] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 126.038070][ T5964] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 126.112940][ T5964] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 126.133150][ T5964] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 126.157796][ T5964] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 126.181299][ T4981] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.203077][ T4981] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.239428][ T4981] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.248973][ T5964] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 126.275598][ T4981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.283790][ T5964] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 126.314485][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 126.324410][ T5964] REISERFS (device loop2): Remounting filesystem read-only [ 126.335048][ T5975] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.377230][ T6007] overlayfs: upper fs does not support tmpfile. [ 126.388228][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 126.541420][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 126.551686][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 126.646947][ T6017] set_capacity_and_notify: 3 callbacks suppressed [ 126.646962][ T6017] loop4: detected capacity change from 0 to 128 [ 126.770361][ T6017] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.822548][ T6017] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.872135][ T6017] EXT4-fs (loop4): shut down requested (1) [ 126.996636][ T6041] loop1: detected capacity change from 0 to 128 [ 127.013723][ T6037] loop4: detected capacity change from 0 to 1024 [ 127.054242][ T6041] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.125947][ T6041] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.167671][ T6037] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.209573][ T6037] EXT4-fs error (device loop4): __ext4_new_inode:1082: comm syz.4.720: reserved inode found cleared - inode=1 [ 127.326091][ T6053] loop3: detected capacity change from 0 to 8192 [ 127.445153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.874449][ T4981] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.028512][ T13] usb 1-1: USB disconnect, device number 5 [ 128.174488][ T4981] usb 5-1: Using ep0 maxpacket: 16 [ 128.314494][ T4981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.329280][ T4981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.339125][ T4981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.352121][ T4981] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.361256][ T4981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.371012][ T4981] usb 5-1: config 0 descriptor?? [ 128.641406][ T6080] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 128.894913][ T4981] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 128.924945][ T4981] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 128.942947][ T4981] microsoft 0003:045E:07DA.0007: no inputs found [ 128.950795][ T4981] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 128.960182][ T6096] netlink: 'syz.0.747': attribute type 2 has an invalid length. [ 128.970194][ T6096] netlink: 164 bytes leftover after parsing attributes in process `syz.0.747'. [ 129.102105][ T4981] usb 5-1: USB disconnect, device number 6 [ 129.178346][ T6099] fido_id[6099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 129.249156][ T6109] loop0: detected capacity change from 0 to 512 [ 129.340668][ T6109] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.752: missing EA_INODE flag [ 129.386491][ T6109] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.752: error while reading EA inode 2 err=-117 [ 129.454952][ T6109] EXT4-fs (loop0): 1 orphan inode deleted [ 129.461269][ T6109] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 129.535534][ T6109] syz.0.752 (pid 6109) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 129.712536][ T6123] loop4: detected capacity change from 0 to 64 [ 129.783135][ T6127] loop2: detected capacity change from 0 to 8 [ 129.890862][ T6127] SQUASHFS error: lzo decompression failed, data probably corrupt [ 129.910055][ T6127] SQUASHFS error: Failed to read block 0x1dd: -5 [ 129.916952][ T6127] SQUASHFS error: Unable to read metadata cache entry [1db] [ 129.925050][ T6127] SQUASHFS error: Unable to read inode 0xa7 [ 129.936468][ T6114] loop3: detected capacity change from 0 to 32768 [ 129.996325][ T6114] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.754 (6114) [ 130.118823][ T6114] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 130.164347][ T6114] BTRFS info (device loop3): using free space tree [ 130.174518][ T6114] BTRFS info (device loop3): has skinny extents [ 130.411345][ T6114] BTRFS info (device loop3): enabling ssd optimizations [ 130.438539][ T6159] loop0: detected capacity change from 0 to 64 [ 130.471287][ T6169] loop1: detected capacity change from 0 to 256 [ 130.481059][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 130.481074][ T26] audit: type=1800 audit(1784766250.725:29): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.754" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 130.485003][ T5954] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 130.529223][ T6159] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 130.584441][ T5951] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.648924][ T6169] FAT-fs (loop1): Directory bread(block 64) failed [ 130.686543][ T6169] FAT-fs (loop1): Directory bread(block 65) failed [ 130.696181][ T6169] FAT-fs (loop1): Directory bread(block 66) failed [ 130.702752][ T6169] FAT-fs (loop1): Directory bread(block 67) failed [ 130.745660][ T6169] FAT-fs (loop1): Directory bread(block 68) failed [ 130.752288][ T6169] FAT-fs (loop1): Directory bread(block 69) failed [ 130.767316][ T6169] FAT-fs (loop1): Directory bread(block 70) failed [ 130.800907][ T6169] FAT-fs (loop1): Directory bread(block 71) failed [ 130.829010][ T6169] FAT-fs (loop1): Directory bread(block 72) failed [ 130.849436][ T6169] FAT-fs (loop1): Directory bread(block 73) failed [ 130.857526][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 130.976680][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.999426][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 131.050716][ T6175] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 131.084643][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.091340][ T5954] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 131.124596][ T5951] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 131.133689][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.148488][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.197826][ T5954] usb 3-1: config 0 descriptor?? [ 131.206348][ T5951] usb 5-1: config 0 descriptor?? [ 131.632451][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 131.659075][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 131.678161][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x1 [ 131.688408][ T5951] sony 0003:1345:3008.0009: unexpected long global item [ 131.706105][ T5951] sony 0003:1345:3008.0009: parse failed [ 131.711836][ T5951] sony: probe of 0003:1345:3008.0009 failed with error -22 [ 131.728480][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x5 [ 131.748264][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x6 [ 131.778502][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 131.799029][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 131.806212][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 131.830008][ T6209] input: syz1 as /devices/virtual/input/input15 [ 131.849631][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 131.857607][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 131.865065][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 131.887489][ T5954] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 131.905732][ T5961] usb 5-1: USB disconnect, device number 7 [ 132.060289][ T6215] set_capacity_and_notify: 1 callbacks suppressed [ 132.060302][ T6215] loop3: detected capacity change from 0 to 2048 [ 132.154621][ T5954] hid-led: probe of 0003:0FC5:B080.0008 failed with error -71 [ 132.163710][ T6215] loop3: detected capacity change from 0 to 2048 [ 132.174343][ T5951] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.189183][ T5954] usb 3-1: USB disconnect, device number 5 [ 132.232380][ T6215] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.264952][ T6215] NILFS (loop3): Invalid checkpoint (checkpoint number=2) [ 132.275031][ T6215] NILFS (loop3): error -22 while loading last checkpoint (checkpoint number=2) [ 132.308494][ T6215] overlayfs: unrecognized mount option "/õ÷ÚgãÕ±+/ÍÞœ›ŸZX˜šlŒÏ´¯ÍNNÝóv[«Áê4n¾vkòúõ…Æ™çÎnÚ|{à½þ'Ž\" or missing value [ 132.414310][ T5951] usb 1-1: Using ep0 maxpacket: 32 [ 132.534551][ T5951] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 132.560531][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.566942][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.663487][ T6230] openvswitch: netlink: Actions may not be safe on all matching packets [ 132.744519][ T5951] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 132.753789][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.790784][ T6238] syz.3.796[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.790942][ T6238] syz.3.796[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.797748][ T6237] netlink: 104 bytes leftover after parsing attributes in process `syz.1.797'. [ 132.824611][ T5951] usb 1-1: Product: syz [ 132.828815][ T5951] usb 1-1: Manufacturer: syz [ 132.865200][ T5951] usb 1-1: SerialNumber: syz [ 132.875394][ T5951] usb 1-1: config 0 descriptor?? [ 132.916449][ T5951] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 132.938787][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 132.983547][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.035883][ T5951] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 133.043956][ T5951] usb 1-1: media controller created [ 133.118910][ T6208] dvb-usb: bulk message failed: -22 (3/0) [ 133.135597][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.185992][ T5951] usb 1-1: selecting invalid altsetting 7 [ 133.212151][ T5951] cxusb: set interface failed [ 133.217545][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 133.331184][ T5951] DVB: Unable to find symbol lgdt330x_attach() [ 133.344682][ T5951] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 133.414547][ T5961] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.532010][ T6270] loop1: detected capacity change from 0 to 256 [ 133.554372][ T5951] rc_core: IR keymap rc-dvico-portable not found [ 133.561097][ T5951] Registered IR keymap rc-empty [ 133.576056][ T5951] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 133.612740][ T6270] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 133.618515][ T5951] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input17 [ 133.664353][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 133.672320][ T5951] dvb-usb: schedule remote query interval to 100 msecs. [ 133.680520][ T26] audit: type=1800 audit(1784766509.930:30): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.812" name="file1" dev="loop1" ino=1048645 res=0 errno=0 [ 133.705247][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 133.730244][ T6273] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 133.757703][ T5951] usb 1-1: USB disconnect, device number 6 [ 133.772523][ T6273] exFAT-fs (loop1): Filesystem has been set read-only [ 133.808322][ T6270] exFAT-fs (loop1): hint_cluster is invalid (1) [ 133.844102][ T6277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.868247][ T6270] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 133.897767][ T6255] loop3: detected capacity change from 0 to 32768 [ 133.924804][ T6270] exFAT-fs (loop1): error, failed to bmap (inode : ffff888074e71b60 iblock : 9, err : -5) [ 133.954596][ T5961] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 133.963690][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.975551][ T6270] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 133.992169][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 134.001969][ T6270] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 134.015448][ T6255] JBD2: Ignoring recovery information on journal [ 134.076749][ T5961] usb 3-1: Product: syz [ 134.080970][ T5961] usb 3-1: Manufacturer: syz [ 134.156179][ T5961] usb 3-1: SerialNumber: syz [ 134.204896][ T5961] usb 3-1: config 0 descriptor?? [ 134.230132][ T6255] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 134.246302][ T5961] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 134.256725][ T6290] tmpfs: Bad value for 'size' [ 134.268269][ T6284] syz.1.818 (6284) used greatest stack depth: 20704 bytes left [ 134.288775][ T5961] dvb-usb: bulk message failed: -22 (4/0) [ 134.297692][ T6290] overlayfs: unrecognized mount option "verity=on" or missing value [ 134.307252][ T5961] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 134.373590][ T5961] dvb-usb: bulk message failed: -22 (5/0) [ 134.405047][ T5961] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 134.455069][ T6250] dvb-usb: bulk message failed: -22 (7/0) [ 134.460850][ T6250] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 134.486822][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.552055][ T6250] ttusb2: i2c transfer failed. [ 134.563084][ T5961] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 134.579253][ T6293] [ 134.581630][ T6293] ====================================================== [ 134.588953][ T6293] WARNING: possible circular locking dependency detected [ 134.596008][ T6293] syzkaller #0 Not tainted [ 134.600448][ T6293] ------------------------------------------------------ [ 134.607481][ T6293] syz.3.805/6293 is trying to acquire lock: [ 134.613397][ T6293] ffff88807a676990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270 [ 134.623042][ T6293] [ 134.623042][ T6293] but task is already holding lock: [ 134.630435][ T6293] ffff8880637354e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 134.640751][ T6293] [ 134.640751][ T6293] which lock already depends on the new lock. [ 134.640751][ T6293] [ 134.651175][ T6293] [ 134.651175][ T6293] the existing dependency chain (in reverse order) is: [ 134.660214][ T6293] [ 134.660214][ T6293] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 134.668765][ T6293] down_read+0x44/0x2e0 [ 134.673479][ T6293] ocfs2_start_trans+0x3a6/0x6f0 [ 134.678968][ T6293] ocfs2_shutdown_local_alloc+0x1f3/0xac0 [ 134.685242][ T6293] ocfs2_dismount_volume+0x1e1/0x890 [ 134.691083][ T6293] generic_shutdown_super+0x130/0x300 [ 134.697008][ T6293] kill_block_super+0x7c/0xe0 [ 134.702244][ T6293] deactivate_locked_super+0x93/0xf0 [ 134.706190][ T6255] syz.3.805 (6255) used greatest stack depth: 20416 bytes left [ 134.708110][ T6293] cleanup_mnt+0x426/0x4d0 [ 134.720621][ T6293] task_work_run+0x125/0x1a0 [ 134.725769][ T6293] exit_to_user_mode_loop+0x10f/0x130 [ 134.731778][ T6293] exit_to_user_mode_prepare+0xee/0x180 [ 134.737879][ T6293] syscall_exit_to_user_mode+0x16/0x40 [ 134.743897][ T6293] do_syscall_64+0x58/0xa0 [ 134.748852][ T6293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.755285][ T6293] [ 134.755285][ T6293] -> #4 (sb_internal#3){.+.+}-{0:0}: [ 134.762775][ T6293] ocfs2_start_trans+0x2a7/0x6f0 [ 134.768248][ T6293] ocfs2_acquire_dquot+0x6c0/0xb30 [ 134.773920][ T6293] dqget+0x713/0xbb0 [ 134.778350][ T6293] dquot_set_dqblk+0x27/0xfb0 [ 134.783559][ T6293] quota_setquota+0x4d6/0x590 [ 134.788767][ T6293] __se_sys_quotactl+0x28b/0x6f0 [ 134.794236][ T6293] do_syscall_64+0x4c/0xa0 [ 134.799183][ T6293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.805604][ T6293] [ 134.805604][ T6293] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 134.814474][ T6293] down_write+0x38/0x60 [ 134.819164][ T6293] ocfs2_create_local_dquot+0x199/0x18d0 [ 134.825330][ T6293] ocfs2_acquire_dquot+0x822/0xb30 [ 134.830972][ T6293] dqget+0x713/0xbb0 [ 134.835399][ T6293] dquot_set_dqblk+0x27/0xfb0 [ 134.840608][ T6293] quota_setquota+0x4d6/0x590 [ 134.845820][ T6293] __se_sys_quotactl+0x28b/0x6f0 [ 134.851291][ T6293] do_syscall_64+0x4c/0xa0 [ 134.856240][ T6293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.862675][ T6293] [ 134.862675][ T6293] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 134.870418][ T6293] __mutex_lock_common+0x1e5/0x2400 [ 134.876148][ T6293] mutex_lock_nested+0x17/0x20 [ 134.881555][ T6293] dquot_commit+0x5a/0x410 [ 134.886617][ T6293] ext4_write_dquot+0x1f0/0x360 [ 134.892021][ T6293] mark_all_dquot_dirty+0xf9/0x400 [ 134.897670][ T6293] __dquot_alloc_space+0x5cb/0xe10 [ 134.903315][ T6293] ext4_mb_new_blocks+0xf80/0x47c0 [ 134.908963][ T6293] ext4_ext_map_blocks+0x17d1/0x63d0 [ 134.914803][ T6293] ext4_map_blocks+0x97f/0x1a50 [ 134.920185][ T6293] _ext4_get_block+0x1e7/0x540 [ 134.925601][ T6293] ext4_block_write_begin+0x5ff/0x1200 [ 134.931611][ T6293] ext4_write_begin+0x6c8/0x15d0 [ 134.937092][ T6293] ext4_da_write_begin+0x442/0xb20 [ 134.942741][ T6293] generic_perform_write+0x2b6/0x550 [ 134.948668][ T6293] ext4_buffered_write_iter+0x24e/0x3a0 [ 134.954761][ T6293] ext4_file_write_iter+0x73f/0x1720 [ 134.960603][ T6293] vfs_write+0x748/0xd70 [ 134.965388][ T6293] ksys_write+0x153/0x260 [ 134.970250][ T6293] do_syscall_64+0x4c/0xa0 [ 134.975237][ T6293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.981678][ T6293] [ 134.981678][ T6293] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 134.989340][ T6293] down_read+0x44/0x2e0 [ 134.994031][ T6293] ext4_map_blocks+0x350/0x1a50 [ 134.999411][ T6293] ext4_append+0x22d/0x560 [ 135.004373][ T6293] ext4_init_new_dir+0x2a7/0x910 [ 135.009839][ T6293] ext4_mkdir+0x4c3/0xc90 [ 135.014699][ T6293] vfs_mkdir+0x386/0x570 [ 135.019493][ T6293] do_mkdirat+0x1dd/0x5c0 [ 135.024498][ T6293] __x64_sys_mkdir+0x6a/0x80 [ 135.029634][ T6293] do_syscall_64+0x4c/0xa0 [ 135.034596][ T6293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.041034][ T6293] [ 135.041034][ T6293] -> #0 (jbd2_handle){++++}-{0:0}: [ 135.048357][ T6293] __lock_acquire+0x2c66/0x7b50 [ 135.053748][ T6293] lock_acquire+0x19e/0x400 [ 135.058782][ T6293] wait_transaction_locked+0x1bb/0x270 [ 135.064773][ T6293] add_transaction_credits+0x104/0xcb0 [ 135.070759][ T6293] start_this_handle+0x723/0x1560 [ 135.076310][ T6293] jbd2__journal_restart+0x233/0x630 [ 135.082132][ T6293] ocfs2_extend_trans+0x2bb/0x6f0 [ 135.087773][ T6293] ocfs2_truncate_rec+0x882/0x1ec0 [ 135.093414][ T6293] ocfs2_remove_extent+0xe3e/0x1ff0 [ 135.099137][ T6293] ocfs2_remove_btree_range+0xf08/0x15e0 [ 135.105299][ T6293] ocfs2_commit_truncate+0xb62/0x1d30 [ 135.111198][ T6293] ocfs2_truncate_file+0xd89/0x1540 [ 135.116929][ T6293] ocfs2_setattr+0x1545/0x1b40 [ 135.122222][ T6293] notify_change+0xbc6/0xee0 [ 135.127343][ T6293] do_truncate+0x1ac/0x240 [ 135.132291][ T6293] path_openat+0x293b/0x2fb0 [ 135.137408][ T6293] do_filp_open+0x1df/0x400 [ 135.142440][ T6293] do_sys_openat2+0x14b/0x500 [ 135.147641][ T6293] __x64_sys_open+0x11b/0x140 [ 135.152851][ T6293] do_syscall_64+0x4c/0xa0 [ 135.157815][ T6293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.164239][ T6293] [ 135.164239][ T6293] other info that might help us debug this: [ 135.164239][ T6293] [ 135.174489][ T6293] Chain exists of: [ 135.174489][ T6293] jbd2_handle --> sb_internal#3 --> &journal->j_trans_barrier [ 135.174489][ T6293] [ 135.187967][ T6293] Possible unsafe locking scenario: [ 135.187967][ T6293] [ 135.195421][ T6293] CPU0 CPU1 [ 135.200791][ T6293] ---- ---- [ 135.206161][ T6293] lock(&journal->j_trans_barrier); [ 135.211456][ T6293] lock(sb_internal#3); [ 135.218227][ T6293] lock(&journal->j_trans_barrier); [ 135.226040][ T6293] lock(jbd2_handle); [ 135.230116][ T6293] [ 135.230116][ T6293] *** DEADLOCK *** [ 135.230116][ T6293] [ 135.238258][ T6293] 6 locks held by syz.3.805/6293: [ 135.243288][ T6293] #0: ffff888078972460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 135.252528][ T6293] #1: ffff88805fb5df48 (&sb->s_type->i_mutex_key#34){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 135.262896][ T6293] #2: ffff88805fb5dbe0 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_truncate_file+0x335/0x1540 [ 135.273174][ T6293] #3: ffff88805fb5d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_remove_btree_range+0x64f/0x15e0 [ 135.286583][ T6293] #4: ffff888078972650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_remove_btree_range+0x812/0x15e0 [ 135.296980][ T6293] #5: ffff8880637354e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 135.307694][ T6293] [ 135.307694][ T6293] stack backtrace: [ 135.313587][ T6293] CPU: 1 PID: 6293 Comm: syz.3.805 Not tainted syzkaller #0 [ 135.320874][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.330936][ T6293] Call Trace: [ 135.334230][ T6293] [ 135.337176][ T6293] dump_stack_lvl+0x188/0x250 [ 135.341869][ T6293] ? load_image+0x410/0x410 [ 135.346380][ T6293] ? show_regs_print_info+0x20/0x20 [ 135.351605][ T6293] ? print_circular_bug+0x12b/0x1a0 [ 135.356829][ T6293] check_noncircular+0x296/0x330 [ 135.361785][ T6293] ? add_chain_block+0x9b0/0x9b0 [ 135.366737][ T6293] ? lockdep_lock+0xf1/0x1f0 [ 135.371350][ T6293] ? mark_lock+0x94/0x320 [ 135.375689][ T6293] ? _find_first_zero_bit+0xd1/0xf0 [ 135.380899][ T6293] __lock_acquire+0x2c66/0x7b50 [ 135.385773][ T6293] ? verify_lock_unused+0x140/0x140 [ 135.390993][ T6293] ? mark_lock+0x94/0x320 [ 135.395341][ T6293] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.401345][ T6293] lock_acquire+0x19e/0x400 [ 135.405861][ T6293] ? wait_transaction_locked+0x19f/0x270 [ 135.411503][ T6293] ? wait_transaction_locked+0x17c/0x270 [ 135.417146][ T6293] ? __lock_acquire+0x7b50/0x7b50 [ 135.422181][ T6293] ? read_lock_is_recursive+0x10/0x10 [ 135.427583][ T6293] ? mark_lock+0x94/0x320 [ 135.431928][ T6293] wait_transaction_locked+0x1bb/0x270 [ 135.437397][ T6293] ? wait_transaction_locked+0x19f/0x270 [ 135.443070][ T6293] ? add_transaction_credits+0xcb0/0xcb0 [ 135.448711][ T6293] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 135.454444][ T6293] ? init_wait_entry+0xd0/0xd0 [ 135.459217][ T6293] ? lockdep_hardirqs_on+0x94/0x140 [ 135.464423][ T6293] ? asm_common_interrupt+0x22/0x40 [ 135.469636][ T6293] add_transaction_credits+0x104/0xcb0 [ 135.475105][ T6293] ? lock_acquire+0x208/0x400 [ 135.479798][ T6293] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 135.486484][ T6293] ? rcu_is_watching+0x11/0xa0 [ 135.491254][ T6293] ? read_lock_is_recursive+0x10/0x10 [ 135.496771][ T6293] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 135.502512][ T6293] ? asm_common_interrupt+0x22/0x40 [ 135.507735][ T6293] ? lockdep_hardirqs_on+0x94/0x140 [ 135.512958][ T6293] ? asm_common_interrupt+0x22/0x40 [ 135.518178][ T6293] start_this_handle+0x723/0x1560 [ 135.523343][ T6293] ? jbd2__journal_start+0x5a0/0x5a0 [ 135.528646][ T6293] ? do_raw_write_lock+0x11a/0x260 [ 135.533781][ T6293] ? do_raw_read_unlock+0x70/0x70 [ 135.538844][ T6293] ? jbd2_log_start_commit+0x1c1/0x300 [ 135.544324][ T6293] jbd2__journal_restart+0x233/0x630 [ 135.549630][ T6293] ocfs2_extend_trans+0x2bb/0x6f0 [ 135.555107][ T6293] ? ocfs2_commit_trans+0x240/0x240 [ 135.560328][ T6293] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 135.566239][ T6293] ? _raw_spin_unlock+0x40/0x40 [ 135.571100][ T6293] ? stack_trace_save+0xa6/0xf0 [ 135.575958][ T6293] ocfs2_truncate_rec+0x882/0x1ec0 [ 135.581086][ T6293] ? path_openat+0x293b/0x2fb0 [ 135.585862][ T6293] ? ocfs2_remove_extent+0x1ff0/0x1ff0 [ 135.591326][ T6293] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.597407][ T6293] ? __ocfs2_find_path+0x47e/0x860 [ 135.602529][ T6293] ? __ocfs2_find_path+0x860/0x860 [ 135.607670][ T6293] ? ocfs2_find_path+0x100/0x100 [ 135.612620][ T6293] ocfs2_remove_extent+0xe3e/0x1ff0 [ 135.617843][ T6293] ? ocfs2_mark_extent_written+0x570/0x570 [ 135.623663][ T6293] ? __lock_acquire+0x7b50/0x7b50 [ 135.628702][ T6293] ? jbd2_write_access_granted+0x2b4/0x2d0 [ 135.634520][ T6293] ? do_raw_spin_unlock+0x11d/0x230 [ 135.639726][ T6293] ? _raw_spin_unlock+0x24/0x40 [ 135.644591][ T6293] ? __dquot_free_space+0x80b/0xb80 [ 135.649799][ T6293] ? ocfs2_journal_access_di+0x40/0x40 [ 135.655273][ T6293] ? ocfs2_recovery_exit+0x50/0x50 [ 135.660397][ T6293] ocfs2_remove_btree_range+0xf08/0x15e0 [ 135.666048][ T6293] ? ocfs2_truncate_rec+0x1ec0/0x1ec0 [ 135.671430][ T6293] ? kasan_quarantine_put+0xd4/0x210 [ 135.676722][ T6293] ? lockdep_hardirqs_on+0x94/0x140 [ 135.681928][ T6293] ? slab_free_freelist_hook+0xec/0x170 [ 135.687486][ T6293] ? ocfs2_extent_map_trunc+0x56a/0x5e0 [ 135.693044][ T6293] ? kfree+0xef/0x2a0 [ 135.697054][ T6293] ? __ocfs2_find_path+0x47e/0x860 [ 135.702177][ T6293] ? ocfs2_extent_map_trunc+0x583/0x5e0 [ 135.707733][ T6293] ? __ocfs2_find_path+0x860/0x860 [ 135.712848][ T6293] ? ocfs2_find_path+0x100/0x100 [ 135.717793][ T6293] ? ocfs2_extent_map_init+0x90/0x90 [ 135.723112][ T6293] ocfs2_commit_truncate+0xb62/0x1d30 [ 135.728499][ T6293] ? ocfs2_inode_sector_count+0x100/0x100 [ 135.734229][ T6293] ? truncate_inode_pages_range+0xc16/0xf90 [ 135.740139][ T6293] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 135.746133][ T6293] ? rwsem_write_trylock+0x135/0x1c0 [ 135.751458][ T6293] ocfs2_truncate_file+0xd89/0x1540 [ 135.756679][ T6293] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 135.762429][ T6293] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 135.768164][ T6293] ? do_raw_spin_unlock+0x11d/0x230 [ 135.773387][ T6293] ? _raw_spin_unlock+0x24/0x40 [ 135.778259][ T6293] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 135.783993][ T6293] ? ocfs2_inode_lock_atime+0x530/0x530 [ 135.789546][ T6293] ? ocfs2_rw_lock+0x134/0x250 [ 135.794321][ T6293] ? dquot_initialize+0x20/0x20 [ 135.799184][ T6293] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 135.805259][ T6293] ? setattr_prepare+0x1ed/0xd30 [ 135.810205][ T6293] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 135.816911][ T6293] ocfs2_setattr+0x1545/0x1b40 [ 135.821703][ T6293] ? ocfs2_extend_allocation+0x1830/0x1830 [ 135.827519][ T6293] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 135.833359][ T6293] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 135.839613][ T6293] ? ocfs2_xattr_get+0x147/0x260 [ 135.844569][ T6293] ? ktime_get_coarse_real_ts64+0x106/0x120 [ 135.850478][ T6293] ? current_time+0x1ad/0x2c0 [ 135.855169][ T6293] ? atime_needs_update+0x770/0x770 [ 135.860380][ T6293] ? bpf_lsm_inode_setattr+0x5/0x10 [ 135.865585][ T6293] ? try_break_deleg+0x79/0x120 [ 135.870446][ T6293] ? ocfs2_extend_allocation+0x1830/0x1830 [ 135.876275][ T6293] notify_change+0xbc6/0xee0 [ 135.880899][ T6293] do_truncate+0x1ac/0x240 [ 135.885327][ T6293] ? rcu_lock_release+0x20/0x20 [ 135.890197][ T6293] ? ima_bprm_check+0x200/0x200 [ 135.895060][ T6293] ? vfs_open+0x2b/0x80 [ 135.899229][ T6293] ? bpf_lsm_path_truncate+0x5/0x10 [ 135.904458][ T6293] path_openat+0x293b/0x2fb0 [ 135.909073][ T6293] ? do_filp_open+0x400/0x400 [ 135.913773][ T6293] do_filp_open+0x1df/0x400 [ 135.918294][ T6293] ? vfs_tmpfile+0x300/0x300 [ 135.922901][ T6293] ? _raw_spin_unlock+0x24/0x40 [ 135.927761][ T6293] ? alloc_fd+0x59e/0x650 [ 135.932143][ T6293] do_sys_openat2+0x14b/0x500 [ 135.936836][ T6293] ? do_sys_open+0xe0/0xe0 [ 135.941276][ T6293] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.947377][ T6293] ? lock_chain_count+0x20/0x20 [ 135.952259][ T6293] __x64_sys_open+0x11b/0x140 [ 135.956989][ T6293] do_syscall_64+0x4c/0xa0 [ 135.961430][ T6293] ? clear_bhb_loop+0x30/0x80 [ 135.966130][ T6293] ? clear_bhb_loop+0x30/0x80 [ 135.970912][ T6293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.976957][ T6293] RIP: 0033:0x7fb787b2ee99 [ 135.981395][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.001016][ T6293] RSP: 002b:00007fb785d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 136.009449][ T6293] RAX: ffffffffffffffda RBX: 00007fb787db7090 RCX: 00007fb787b2ee99 [ 136.017449][ T6293] RDX: 0000000000000006 RSI: 000000000014b27e RDI: 0000200000000340 [ 136.025438][ T6293] RBP: 00007fb787bc4eaf R08: 0000000000000000 R09: 0000000000000000 [ 136.033430][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.041449][ T6293] R13: 00007fb787db7128 R14: 00007fb787db7090 R15: 00007ffdde8097d8 [ 136.049451][ T6293] [ 136.086607][ T5961] usb 3-1: media controller created [ 136.101184][ T6293] syz.3.805 (6293) used greatest stack depth: 20304 bytes left [ 136.122494][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.162161][ T5961] usb 3-1: selecting invalid altsetting 3 [ 136.168805][ T5961] ttusb2: set interface to alts=3 failed [ 136.211734][ T5961] DVB: Unable to find symbol tda10086_attach() [ 136.218798][ T5961] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 136.232611][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 136.264369][ T5961] dvb-usb: bulk message failed: -22 (4/0) [ 136.270108][ T5961] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 136.281876][ T5961] dvb-usb: bulk message failed: -22 (5/0) [ 136.288205][ T5961] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 136.298485][ T5961] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 136.328494][ T5961] usb 3-1: USB disconnect, device number 6 [ 136.365364][ T5961] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.