last executing test programs: 8.093924456s ago: executing program 2 (id=6738): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000002c0)={0x0, 0xae, 0x80000000}) 7.82921427s ago: executing program 0 (id=6743): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000bc0)={0x0, 0x0, 0x2, {0xffffffffffffff14}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.828484152s ago: executing program 2 (id=6744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x4c}}, 0x0) 7.592149877s ago: executing program 2 (id=6748): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x6180, &(0x7f0000000340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.334447858s ago: executing program 2 (id=6766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="000000006200001f050021000000000008000d"], 0x30}}, 0x0) 5.861444498s ago: executing program 2 (id=6773): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2b, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque="9d"}}}}}, 0x0) 5.716063218s ago: executing program 2 (id=6776): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) 4.850775354s ago: executing program 0 (id=6778): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x28}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 4.282271804s ago: executing program 0 (id=6791): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.115395137s ago: executing program 0 (id=6780): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, 0x0, 0x20000007) 3.858001641s ago: executing program 0 (id=6781): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, 0x0) 3.269258055s ago: executing program 3 (id=6787): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x5) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.822936016s ago: executing program 1 (id=6793): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/319], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.655461468s ago: executing program 4 (id=6795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.615065286s ago: executing program 1 (id=6796): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3fc, 0x65, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x2}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x80000000}, @TCA_U32_HASH={0x8, 0x2, 0x6b5b}, @TCA_U32_MARK={0x10, 0xa, {0x4}}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x36c, 0x2, [@TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_skbedit={0x78, 0x13, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xdc, 0x4, 0x0, 0xfffffff7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb3e, 0x7, 0x8, 0x4, 0xd046}}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x174, 0x10, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9630, 0x2, 0x101, 0x13}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x10000000, 0x3, 0x6}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2ea8bd8, 0xd37, 0x6, 0x3, 0xb8cc}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbff, 0x7fff, 0x6, 0x7, 0xfffffff6}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x7, 0x4, 0x8}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x10000000, 0x4, 0xece}, 0x49}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x5, 0x0, 0x4}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x8, 0x5, 0x2}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6d, 0x6, 0x5, 0x3, 0x9}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x6, 0xffffffffffffffff, 0x0, 0x8001}, 0x18}}]}, {0x2d, 0x6, "61af579bda80f1f6a0f9ca6016be7f12e57847a1d33ad22c84ea2fb56918b8988b4e0f419ea2559699"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_ACT={0xc4, 0x6, [@m_connmark={0xc0, 0x3fff, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_nat={0xa8, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xffffff00}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x2e, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684f"}, {0xc}, {0xc}}}]}]}}]}, 0x3fc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.394225253s ago: executing program 1 (id=6798): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) r3 = memfd_create(&(0x7f0000000300)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\x0e\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_\x95\x00\x00\x00j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7-\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0x6) fchown(r3, r1, r2) 2.299604914s ago: executing program 3 (id=6799): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.275534595s ago: executing program 4 (id=6800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}]}, 0x3c}}, 0x0) 2.186904824s ago: executing program 1 (id=6802): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x40, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.045083978s ago: executing program 4 (id=6803): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x80047456, 0x2000000a) 1.70439943s ago: executing program 1 (id=6806): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setregid(0x0, 0x0) 1.699086765s ago: executing program 4 (id=6807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 1.608774728s ago: executing program 0 (id=6808): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 1.544210533s ago: executing program 5 (id=6809): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439e73c82bad769c1516d4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2f068d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6322d4d3e89d8d8fb5d51ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e"}}) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000a00)={0xc, 0x9, 0x5, 0x800}) 1.54401053s ago: executing program 3 (id=6810): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 1.408279023s ago: executing program 4 (id=6811): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}}, 0x0) 1.312583571s ago: executing program 5 (id=6812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}]}, {0xffffffffffffffbf}]}]}, 0x30}}, 0x0) 1.2449167s ago: executing program 4 (id=6813): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.154925184s ago: executing program 5 (id=6814): r0 = io_uring_setup(0x7d5, &(0x7f0000000500)) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xf97, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.043918549s ago: executing program 3 (id=6815): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x3}]}, 0x4c}}, 0x0) 819.101882ms ago: executing program 5 (id=6816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 665.297741ms ago: executing program 3 (id=6817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x200400c0) 543.826415ms ago: executing program 5 (id=6818): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x200d54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x9) 379.118543ms ago: executing program 3 (id=6819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 272.395472ms ago: executing program 5 (id=6820): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 0s ago: executing program 1 (id=6821): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) kernel console output (not intermixed with test programs): t 6081 - 0 [ 747.288122][T20172] F2FS-fs (loop2): invalid crc value [ 747.318044][T20172] F2FS-fs (loop2): Found nat_bits in checkpoint [ 747.622260][T20172] F2FS-fs (loop2): Start checkpoint disabled! [ 747.646831][T20172] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 747.677849][T20172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 747.689959][ T2576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.729076][ T2576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.745153][ T29] audit: type=1800 audit(2000000511.442:359): pid=20172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5629" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 747.758328][T20172] syz.2.5629: attempt to access beyond end of device [ 747.758328][T20172] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 747.895103][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.922373][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.387889][ T35] kworker/u8:2: attempt to access beyond end of device [ 748.387889][ T35] loop2: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 748.442389][ T35] kworker/u8:2: attempt to access beyond end of device [ 748.442389][ T35] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 748.515915][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 748.530370][T20244] netlink: 'syz.4.5664': attribute type 1 has an invalid length. [ 748.543806][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 748.550842][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 748.553177][T20244] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.5664'. [ 748.590272][ T5290] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 748.598363][T20244] netlink: 'syz.4.5664': attribute type 2 has an invalid length. [ 748.607578][ T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 748.640568][T20244] netlink: 'syz.4.5664': attribute type 1 has an invalid length. [ 748.838483][ T5290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.874795][ T5290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 748.925993][ T5290] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 748.964503][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 748.991742][ T5290] usb 2-1: SerialNumber: syz [ 749.231442][ T5290] usb 2-1: 0:2 : does not exist [ 749.336416][ T5290] usb 2-1: USB disconnect, device number 44 [ 750.220513][T20246] loop3: detected capacity change from 0 to 32768 [ 750.289355][T20272] netlink: 'syz.1.5674': attribute type 1 has an invalid length. [ 750.309796][T20246] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 750.334424][T20272] netlink: 'syz.1.5674': attribute type 2 has an invalid length. [ 750.526608][T20246] XFS (loop3): Ending clean mount [ 750.700672][T20285] batadv0: entered promiscuous mode [ 750.725488][T20285] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 750.857653][T19713] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 751.050860][ T5289] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 751.246932][ T5289] usb 6-1: Using ep0 maxpacket: 16 [ 751.254476][ T5289] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 751.279356][ T5289] usb 6-1: config 0 has no interface number 0 [ 751.299189][ T5289] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 751.344407][ T5289] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 751.372409][ T5289] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 751.386628][T20303] bridge0: port 3(hsr0) entered disabled state [ 751.393176][T20303] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.404401][ T5289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.406980][T20305] loop2: detected capacity change from 0 to 512 [ 751.426058][ T5289] usb 6-1: Product: syz [ 751.430297][ T5289] usb 6-1: Manufacturer: syz [ 751.456106][ T5289] usb 6-1: SerialNumber: syz [ 751.483320][ T5289] usb 6-1: config 0 descriptor?? [ 751.489816][T20290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 751.497208][T20290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 751.501311][T20305] EXT4-fs (loop2): Unsupported encryption level 9 [ 751.745326][T20290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 751.777323][T20290] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 752.018790][T20317] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 752.396266][ T5289] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 752.500402][ T5289] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 752.557521][ T5289] asix 6-1:0.251: probe with driver asix failed with error -71 [ 752.594955][ T5289] usb 6-1: USB disconnect, device number 46 [ 752.857416][T20305] loop2: detected capacity change from 0 to 32768 [ 752.886889][T20305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5688 (20305) [ 752.962560][T20305] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 752.990667][T20305] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 753.024331][T20305] BTRFS info (device loop2): using free-space-tree [ 753.453305][T20305] BTRFS error (device loop2): target device ί ρΥΧε²°ΊΜ£νμωId ΅πΫΪO₯ΫQl0ιmь%Ϋ£΅Δֈh΅πB{[+ ύ is invalid! [ 753.455936][T20361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5707'. [ 753.563090][T15729] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 753.633290][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5706'. [ 753.965683][T20325] loop1: detected capacity change from 0 to 40427 [ 754.003860][T20325] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 754.043559][T20325] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 754.071819][T20325] F2FS-fs (loop1): invalid crc value [ 754.133653][T20325] F2FS-fs (loop1): Found nat_bits in checkpoint [ 754.350122][T20375] loop5: detected capacity change from 0 to 4096 [ 754.391134][T20325] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 754.414448][T20325] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 754.462265][T20381] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 754.498390][ T29] audit: type=1800 audit(2000000518.695:360): pid=20325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5698" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 754.551571][T20383] bridge_slave_1: left allmulticast mode [ 754.567551][T20383] bridge_slave_1: left promiscuous mode [ 754.573507][T20383] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.634148][ T5290] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 754.728083][T20383] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 754.866254][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.891294][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.931792][ T5290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 754.988441][ T5290] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 755.010826][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.047509][ T5290] usb 3-1: config 0 descriptor?? [ 755.534924][ T5290] glorious 0003:258A:0036.0079: unknown main item tag 0x0 [ 755.581969][ T5290] glorious 0003:258A:0036.0079: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.2-1/input0 [ 755.767778][ T5290] usb 3-1: USB disconnect, device number 36 [ 755.830312][T20417] IPv6: Can't replace route, no match found [ 755.929813][T20419] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5732'. [ 756.026355][T20419] Κό: entered promiscuous mode [ 756.189905][T20427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5735'. [ 756.723021][T20452] loop0: detected capacity change from 0 to 1024 [ 756.756567][T20449] loop5: detected capacity change from 0 to 512 [ 756.836261][T20449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 756.865296][T20449] System zones: 1-12 [ 756.888587][T20449] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #11: comm syz.5.5746: iget: bogus i_mode (0) [ 756.982216][T20449] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5746: couldn't read orphan inode 11 (err -117) [ 757.008611][T20449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.281812][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5753'. [ 757.351016][ T9358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.474003][T20467] netpci0: tun_chr_ioctl cmd 1074025677 [ 757.479910][T20467] netpci0: linktype set to 0 [ 757.888349][T20480] loop0: detected capacity change from 0 to 2048 [ 757.909232][T20445] loop2: detected capacity change from 0 to 32768 [ 757.922092][T20483] loop3: detected capacity change from 0 to 8 [ 757.964936][T20445] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 757.973233][T20480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.024256][T20480] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.077766][ T29] audit: type=1800 audit(2000000522.525:361): pid=20480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5759" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 758.153514][T20445] XFS (loop2): Ending clean mount [ 758.229966][T18921] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.259747][T20445] XFS (loop2): User initiated shutdown received. [ 758.281101][T20445] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 758.307669][T20445] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 758.624225][T15729] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 758.705233][T20504] loop5: detected capacity change from 0 to 4096 [ 759.524571][T20528] loop2: detected capacity change from 0 to 1024 [ 759.534286][T20530] loop3: detected capacity change from 0 to 1024 [ 759.636343][T20527] team0: Port device macvlan2 added [ 759.686326][T20528] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 759.733699][T20528] hfsplus: xattr search failed [ 759.743545][ T935] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 759.767286][ T35] hfsplus: b-tree write err: -5, ino 4 [ 759.943540][ T935] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 759.953425][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5782'. [ 759.967115][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.006140][ T935] usb 6-1: config 0 descriptor?? [ 760.035103][ T935] cp210x 6-1:0.0: cp210x converter detected [ 760.102082][T20541] loop2: detected capacity change from 0 to 1024 [ 760.156070][T20541] hfsplus: walked past end of dir [ 760.169307][T20543] hugetlbfs: syz.3.5784 (20543): Using mlock ulimits for SHM_HUGETLB is obsolete [ 760.269872][T20547] sch_fq: defrate 9 ignored. [ 760.337962][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5789'. [ 760.423991][ T935] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 760.443957][ T935] cp210x 6-1:0.0: GPIO initialisation failed: -524 [ 760.489212][ T935] usb 6-1: cp210x converter now attached to ttyUSB0 [ 760.636676][ T935] usb 6-1: USB disconnect, device number 47 [ 760.664016][ T935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 760.687305][ T935] cp210x 6-1:0.0: device disconnected [ 760.839687][T20569] loop3: detected capacity change from 0 to 512 [ 760.937866][T20569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.955214][T20569] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 761.267764][T19713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.305324][T20586] loop0: detected capacity change from 0 to 16 [ 761.360475][T20586] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 761.653736][T20592] loop3: detected capacity change from 0 to 4096 [ 761.712703][T20598] loop2: detected capacity change from 0 to 128 [ 761.770102][T20601] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 761.778454][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 761.801475][T20598] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.836123][ T5381] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 761.863167][T20598] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 761.895313][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.917261][T20604] loop0: detected capacity change from 0 to 128 [ 761.978062][T20604] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.001673][T20604] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.025210][T20598] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 762.062153][ T5381] usb 2-1: Using ep0 maxpacket: 16 [ 762.083610][ T5381] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.134765][ T5381] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 762.158348][ T5381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.169314][T18921] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.178841][ T5381] usb 2-1: Product: syz [ 762.178877][ T5381] usb 2-1: Manufacturer: syz [ 762.178900][ T5381] usb 2-1: SerialNumber: syz [ 762.195175][T15729] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.257101][ T5381] usb 2-1: config 0 descriptor?? [ 762.519579][ T5381] usb 2-1: Not enough endpoints found in device, aborting! [ 762.694068][T20614] loop0: detected capacity change from 0 to 4096 [ 762.720690][ T5381] usb 2-1: USB disconnect, device number 45 [ 762.760940][ T938] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 762.981319][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 762.999120][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.027770][ T938] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 763.077943][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.133882][ T938] usb 4-1: config 0 descriptor?? [ 763.365916][ T938] usb 4-1: USB disconnect, device number 45 [ 763.617332][T20643] loop5: detected capacity change from 0 to 256 [ 763.702879][T20643] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 763.822208][T20651] Process accounting resumed [ 763.828160][T20645] [U]  [ 763.973943][T20643] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 764.038195][T20652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 764.073917][T20660] loop1: detected capacity change from 0 to 16 [ 764.123586][T20660] erofs: (device loop1): mounted with root inode @ nid 36. [ 764.243058][T20660] overlayfs: failed to get metacopy (-117) [ 765.452981][T20701] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5857'. [ 765.761855][T20709] loop2: detected capacity change from 0 to 512 [ 765.806248][T20709] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 765.870231][T20709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.964226][T20709] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.440605][T20717] loop0: detected capacity change from 0 to 2048 [ 766.450370][T20698] loop5: detected capacity change from 0 to 32768 [ 766.509434][T20717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.545748][T15729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.601133][T20717] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.619856][T20698] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 766.888583][T18921] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.995948][T20698] XFS (loop5): Ending clean mount [ 767.014986][T20705] loop1: detected capacity change from 0 to 32768 [ 767.044372][T20698] XFS (loop5): Quotacheck needed: Please wait. [ 767.086632][T20705] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 767.218137][T20705] XFS (loop1): Ending clean mount [ 767.317497][T20705] XFS (loop1): Quotacheck needed: Please wait. [ 767.366097][T20698] XFS (loop5): Quotacheck: Done. [ 767.514000][T20705] XFS (loop1): Quotacheck: Done. [ 767.640477][ T9358] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 767.663027][T20758] loop2: detected capacity change from 0 to 64 [ 767.694394][T19778] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 767.976952][T20761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5876'. [ 768.026939][T20763] netlink: 'syz.4.5877': attribute type 1 has an invalid length. [ 768.501295][T20771] loop3: detected capacity change from 0 to 4096 [ 768.514197][T20771] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 768.725051][T20771] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 768.836610][T20782] program syz.0.5886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.570290][T20765] loop2: detected capacity change from 0 to 32768 [ 769.698741][T20765] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 769.698741][T20765] [ 769.736533][T20765] ERROR: (device loop2): remounting filesystem as read-only [ 769.800492][T20808] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 769.800492][T20808] [ 770.000979][ T112] blkno = 5002c, nblocks = 1 [ 770.005686][ T112] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 770.005686][ T112] [ 771.131918][T20814] loop3: detected capacity change from 0 to 32768 [ 771.183810][T20814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5897 (20814) [ 771.229273][T20839] loop0: detected capacity change from 0 to 64 [ 771.299300][T20814] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 771.321178][T20814] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 771.363995][T20814] BTRFS info (device loop3): using free-space-tree [ 772.016092][T19713] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 772.132351][T20841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 772.227355][T20841] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 772.467004][T20841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.509281][T20841] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 773.527096][T20905] openvswitch: netlink: Missing key (keys=20040, expected=80) [ 773.577059][T20863] loop0: detected capacity change from 0 to 32768 [ 773.605056][T20909] loop3: detected capacity change from 0 to 128 [ 773.689275][T20909] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 773.760562][T20909] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 773.803852][T20920] loop5: detected capacity change from 0 to 2048 [ 773.825899][T20863] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 773.874182][T20909] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 773.996897][T20926] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 774.030365][T19713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 774.087691][T20926] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 774.103322][T20863] XFS (loop0): Ending clean mount [ 774.142448][T20841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 774.176499][T20926] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 774.185205][T20841] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 774.205896][T20863] XFS (loop0): Quotacheck needed: Please wait. [ 774.281228][T20926] Remounting filesystem read-only [ 774.315538][ T70] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 774.332678][ T70] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 774.357970][ T70] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 774.409614][ T70] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 774.462189][ T70] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 774.525615][T20841] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 774.537064][ T70] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 774.546606][T20841] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 774.547004][T20863] XFS (loop0): Quotacheck: Done. [ 774.560058][ T70] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 774.560095][ T70] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 774.560125][ T70] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 774.560153][ T70] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 774.560298][T20920] NILFS (loop5): mounting fs with errors [ 774.565193][T20920] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 774.616774][T20920] Remounting filesystem read-only [ 774.622161][T20920] NILFS (loop5): error -5 reading inode: ino=18 [ 774.628812][T20920] NILFS (loop5): cannot mark inode dirty (ino=18): error -5 loading inode block [ 774.703530][T20932] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 774.715866][T18921] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 774.887359][ T9358] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 774.919797][ T9358] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 774.956338][ T9358] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 774.987471][ T9358] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 775.006881][ T9358] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 775.047657][ T9358] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 775.076781][ T9358] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 775.104287][ T9358] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 775.138943][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.198139][T20841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 775.206521][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.215816][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.226647][ T9358] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 775.237749][T20841] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 775.301914][ T9358] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 775.360214][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.399818][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.414896][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.454340][T20841] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 775.460379][T20841] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 775.475897][ T9358] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 775.494739][ T9358] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 775.511547][ T9358] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 775.533652][ T9358] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 775.550440][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.565064][ T9358] NILFS (loop5): discard dirty page: offset=196608, ino=3 [ 775.580651][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.627516][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 775.658545][ T9358] NILFS (loop5): discard dirty block: blocknr=49, size=1024 [ 775.665945][ T9358] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 777.316779][ T5292] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 777.481791][T21008] loop2: detected capacity change from 0 to 2048 [ 777.541289][ T5292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.552910][ T5292] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 777.571955][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.602542][ T5292] usb 6-1: config 0 descriptor?? [ 777.643874][T21016] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 777.909153][T21016] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 777.956095][T21016] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 778.015119][T21016] Remounting filesystem read-only [ 778.032991][ T5292] ath6kl: Unsupported hardware version: 0x0 [ 778.045819][T15729] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 778.052534][T15729] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 778.080875][ T5292] ath6kl: Failed to init ath6kl core: -22 [ 778.087240][T15729] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 778.118830][ T5292] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 778.122998][T21035] fuse: Bad value for 'fd' [ 778.136151][T15729] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 778.168781][T15729] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 778.221076][T15729] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 778.227845][T15729] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 778.274509][ T5292] usb 6-1: USB disconnect, device number 48 [ 778.290070][T15729] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 778.325712][T15729] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 778.369027][T15729] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 779.433366][T21078] binder: BC_ATTEMPT_ACQUIRE not supported [ 779.480762][T21078] binder: 21077:21078 ioctl c0306201 20000480 returned -22 [ 779.608634][T21033] loop1: detected capacity change from 0 to 32768 [ 780.371737][T21063] loop2: detected capacity change from 0 to 32768 [ 780.429085][T21063] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5971 (21063) [ 780.536233][T21063] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 780.587655][T21063] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 780.596440][T21063] BTRFS info (device loop2): using free-space-tree [ 780.616670][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5987'. [ 780.987826][T21128] xt_bpf: check failed: parse error [ 781.174465][T15729] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 782.374319][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6009'. [ 782.565678][T21179] loop0: detected capacity change from 0 to 4096 [ 782.637927][T21179] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 783.041580][T21203] loop2: detected capacity change from 0 to 512 [ 783.082677][T21203] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 783.126090][T21203] EXT4-fs (loop2): 1 truncate cleaned up [ 783.153536][T21203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.201822][T21209] loop1: detected capacity change from 0 to 256 [ 783.209728][T21209] exfat: Deprecated parameter 'utf8' [ 783.262116][T21209] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 783.272922][T21203] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.6018: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 783.295119][T21209] Process accounting resumed [ 783.333797][T21203] EXT4-fs (loop2): Remounting filesystem read-only [ 783.508898][T15729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.588523][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.961739][ T938] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 783.991105][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6032'. [ 784.159577][ T938] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 784.192584][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.224570][ T938] usb 4-1: config 0 descriptor?? [ 784.245608][ T938] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 784.403409][T21219] loop5: detected capacity change from 0 to 32768 [ 784.444753][T21219] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 784.522950][ T5292] usb 4-1: USB disconnect, device number 46 [ 784.541688][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.601211][T21219] XFS (loop5): Ending clean mount [ 784.785952][ T9358] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 785.229501][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.513574][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.681602][T21278] netlink: 'syz.0.6049': attribute type 10 has an invalid length. [ 785.733126][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.818669][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.825189][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 786.000571][T21260] loop1: detected capacity change from 0 to 32768 [ 786.032372][T21260] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6040 (21260) [ 786.072194][T21260] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 786.088434][T21260] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 786.141885][T21260] BTRFS info (device loop1): using free-space-tree [ 786.186623][T21265] loop2: detected capacity change from 0 to 32768 [ 786.391019][T14934] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 786.489889][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.854081][T19778] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 787.440484][T21318] netlink: 'syz.5.6062': attribute type 32 has an invalid length. [ 787.462607][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.776427][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6064'. [ 787.944165][T21307] loop3: detected capacity change from 0 to 32768 [ 787.993651][T21307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6055 (21307) [ 788.084646][T21307] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 788.118451][T21307] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 788.160027][T21307] BTRFS info (device loop3): using free-space-tree [ 788.418618][T21354] bond0: option lp_interval: invalid value (18446744073709551602) [ 788.438041][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.472986][T21354] bond0: option lp_interval: allowed values 1 - 2147483647 [ 788.566423][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.833304][T19713] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 789.070704][ T5292] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 789.301782][ T5292] usb 3-1: Using ep0 maxpacket: 8 [ 789.331061][ T5292] usb 3-1: config index 0 descriptor too short (expected 7382, got 27) [ 789.339991][ T5292] usb 3-1: config 195 has an invalid descriptor of length 0, skipping remainder of the config [ 789.366299][T21333] loop1: detected capacity change from 0 to 32768 [ 789.410283][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.418738][ T5292] usb 3-1: config 195 has 1 interface, different from the descriptor's value: 23 [ 789.428600][ T5292] usb 3-1: config 195 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.443278][ T5292] usb 3-1: config 195 interface 0 has no altsetting 0 [ 789.444253][T21333] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6067 (21333) [ 789.453844][ T5292] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 789.498170][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.507293][ T5292] usb 3-1: Product: syz [ 789.513228][ T5292] usb 3-1: Manufacturer: syz [ 789.522736][ T5292] usb 3-1: SerialNumber: syz [ 789.545628][T21333] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 789.583270][ T5292] hub 3-1:195.0: bad descriptor, ignoring hub [ 789.590837][T21333] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 789.605414][ T5292] hub 3-1:195.0: probe with driver hub failed with error -5 [ 789.613116][T21333] BTRFS info (device loop1): using free-space-tree [ 789.628414][ T5292] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 789.772826][T21394] loop5: detected capacity change from 0 to 128 [ 789.801938][ T5292] gspca_zc3xx: reg_w_i err -71 [ 789.914237][T21405] loop0: detected capacity change from 0 to 64 [ 790.078072][T19778] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 790.359865][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.412679][ T5292] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 790.434493][ T5292] gspca_zc3xx 3-1:195.0: probe with driver gspca_zc3xx failed with error -71 [ 790.787553][T21427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.809871][T21426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6097'. [ 790.885265][ T5292] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 790.956376][T21434] CIFS mount error: No usable UNC path provided in device string! [ 790.956376][T21434] [ 791.003118][T21434] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 791.339271][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.408824][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.895515][ T5292] usb 3-1: USB disconnect, device number 37 [ 792.304454][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.453789][T21454] loop0: detected capacity change from 0 to 32768 [ 792.480472][T21454] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6108 (21454) [ 792.567249][T21454] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 792.588106][T21454] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 792.627095][T21454] BTRFS info (device loop0): using free-space-tree [ 792.847261][T21454] BTRFS info (device loop0): rebuilding free space tree [ 793.011073][ T29] audit: type=1800 audit(2000000560.002:362): pid=21454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6108" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 793.058329][T21497] loop1: detected capacity change from 0 to 1024 [ 793.107532][T21497] EXT4-fs: Ignoring removed mblk_io_submit option [ 793.222050][T21505] loop5: detected capacity change from 0 to 16 [ 793.269706][T21497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.282836][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.320976][T18921] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 793.329371][T21505] erofs: (device loop5): mounted with root inode @ nid 36. [ 793.652054][T19778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.915129][T21513] loop5: detected capacity change from 0 to 128 [ 793.951629][T21513] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 793.994658][T21513] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 794.128211][T21513] EXT4-fs error (device loop5): __ext4_find_entry:1652: inode #2: comm syz.5.6128: checksumming directory block 0 [ 794.160499][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.240214][ T5332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.251795][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.356376][ T9358] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 794.682962][T21531] netlink: 'syz.3.6134': attribute type 1 has an invalid length. [ 794.964634][T21542] sctp: [Deprecated]: syz.0.6139 (pid 21542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.964634][T21542] Use struct sctp_sack_info instead [ 795.154030][T21547] loop2: detected capacity change from 0 to 1764 [ 795.214701][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.258931][T21547] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 795.314078][T21551] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.6143'. [ 795.875908][T21563] loop1: detected capacity change from 0 to 2048 [ 795.931394][T21563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 796.188806][ T5292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.359176][ T29] audit: type=1326 audit(2000000563.596:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21575 comm="syz.0.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464d79ef9 code=0x7ffc0000 [ 796.442186][ T29] audit: type=1326 audit(2000000563.596:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21575 comm="syz.0.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464d79ef9 code=0x7ffc0000 [ 796.535329][ T29] audit: type=1326 audit(2000000563.596:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21575 comm="syz.0.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f2464d79ef9 code=0x7ffc0000 [ 796.685394][ T29] audit: type=1326 audit(2000000563.596:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21575 comm="syz.0.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2464d79ef9 code=0x7ffc0000 [ 796.688635][T21582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.707794][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.725085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.800332][T21586] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 797.093318][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.768911][T21580] loop2: detected capacity change from 0 to 32768 [ 797.794040][ T5381] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 797.798285][T21580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6156 (21580) [ 797.850442][T21580] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 797.883360][T21580] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 797.914515][T21580] BTRFS info (device loop2): using free-space-tree [ 797.943291][T21610] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6170'. [ 797.967791][T21610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6170'. [ 798.028601][ T5381] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 798.041119][ T5381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.052773][ T5381] usb 4-1: Product: syz [ 798.057121][ T5381] usb 4-1: Manufacturer: syz [ 798.070016][ T5381] usb 4-1: SerialNumber: syz [ 798.080215][ T5381] usb 4-1: config 0 descriptor?? [ 798.111308][ T5290] net_ratelimit: 1 callbacks suppressed [ 798.111332][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.306588][ T5381] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 798.318299][T21618] loop5: detected capacity change from 0 to 8192 [ 798.358278][T21618] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 798.458719][T21641] loop1: detected capacity change from 0 to 16 [ 798.467410][T21641] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 798.612151][T15729] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 798.688808][ T5381] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 798.746638][T21648] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 798.911103][ T5290] usb 4-1: USB disconnect, device number 47 [ 798.989096][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6184'. [ 799.081854][T21653] program syz.5.6185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 799.094327][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.648906][T21667] loop2: detected capacity change from 0 to 4096 [ 799.698305][T21673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 799.705516][T21667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.924743][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.070624][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.110073][T15729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.154486][T21686] tap0: tun_chr_ioctl cmd 1074025677 [ 800.160072][T21686] tap0: linktype set to 6 [ 800.623591][T21699] loop3: detected capacity change from 0 to 1024 [ 800.684636][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6206'. [ 800.726972][T21705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6207'. [ 800.807029][T21705] ip6tnl1: entered promiscuous mode [ 800.832733][T21705] ip6tnl1: entered allmulticast mode [ 800.840101][ T35] hfsplus: b-tree write err: -5, ino 4 [ 801.020046][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.022702][T21713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6212'. [ 801.243741][T21721] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6215'. [ 801.416715][T21729] netlink: 'syz.3.6219': attribute type 12 has an invalid length. [ 801.435124][T21729] netlink: 'syz.3.6219': attribute type 11 has an invalid length. [ 801.465130][T21729] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.6219'. [ 801.522411][T21728] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.6217'. [ 801.542974][T21728] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6217'. [ 801.578441][T21728] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.6217'. [ 801.711766][T21741] loop3: detected capacity change from 0 to 8 [ 801.766554][T21741] SQUASHFS error: lzo decompression failed, data probably corrupt [ 801.793873][T21741] SQUASHFS error: Failed to read block 0x91: -5 [ 801.809150][T21741] SQUASHFS error: Unable to read metadata cache entry [8f] [ 801.830905][T21741] SQUASHFS error: Unable to read inode 0x11f [ 801.998915][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.547412][T21779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.734550][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.866381][T21792] loop2: detected capacity change from 0 to 1024 [ 802.884061][T21792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 802.900661][T21792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 802.933590][T21792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.957708][ T5290] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 802.973075][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.108097][ T5332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.162706][ T5290] usb 6-1: Using ep0 maxpacket: 8 [ 803.183520][ T5290] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 803.226194][ T5290] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 803.259683][ T5290] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 803.283820][ T5290] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.320653][ T5290] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 803.351932][T15729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.353816][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.409532][T21772] loop3: detected capacity change from 0 to 32768 [ 803.439446][T21772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6240 (21772) [ 803.492145][T21772] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 803.523580][T21772] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 803.581251][T21772] BTRFS info (device loop3): using free-space-tree [ 803.605401][T21809] Bluetooth: hci3: too big key_count value 34945 [ 803.637989][ T5290] usb 6-1: GET_CAPABILITIES returned 0 [ 803.643566][ T5290] usbtmc 6-1:16.0: can't read capabilities [ 803.872517][ T5381] usb 6-1: USB disconnect, device number 49 [ 803.931293][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.944161][T21836] program syz.1.6263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 804.123910][T19713] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 804.207711][T21842] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6264'. [ 804.910412][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.966398][T21863] loop1: detected capacity change from 0 to 8 [ 805.568889][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.756274][T21890] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 805.875360][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.060224][T21902] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6294'. [ 806.083259][T21902] netlink: 'syz.2.6294': attribute type 1 has an invalid length. [ 806.741032][ T29] audit: type=1326 audit(2000000574.733:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.2.6306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e9f579ef9 code=0x0 [ 806.834845][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.899729][T21934] mkiss: ax0: crc mode is auto. [ 807.200294][T21917] loop1: detected capacity change from 0 to 32768 [ 807.219165][T21917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6300 (21917) [ 807.254785][T21917] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 807.273839][T21917] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 807.291339][T21917] BTRFS info (device loop1): using free-space-tree [ 807.536884][ T29] audit: type=1800 audit(2000000575.591:368): pid=21917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6300" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 807.621000][T21958] netlink: 'syz.0.6310': attribute type 3 has an invalid length. [ 807.711912][T19778] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 807.814507][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.178021][T21969] netlink: 'syz.0.6317': attribute type 1 has an invalid length. [ 808.222616][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6319'. [ 808.404596][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.452670][T21940] loop5: detected capacity change from 0 to 32768 [ 808.520271][ T29] audit: type=1326 audit(2000000576.642:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.1.6313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b9779ef9 code=0x0 [ 808.633687][T21940] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 808.774535][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.924555][T21940] XFS (loop5): Ending clean mount [ 808.951265][ T5289] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 808.977549][T21940] XFS (loop5): Quotacheck needed: Please wait. [ 809.007734][T22006] syzkaller0: tun_chr_ioctl cmd 35111 [ 809.085969][ T35] bond0: (slave bond_slave_0): interface is now down [ 809.100815][ T35] bond0: (slave bond_slave_1): interface is now down [ 809.127434][ T35] bond0: now running without any active interface! [ 809.133574][ T5289] usb 4-1: Using ep0 maxpacket: 8 [ 809.142571][ T5289] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 809.151683][ T5289] usb 4-1: config 0 has no interface number 1 [ 809.160251][ T5289] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 809.171590][ T5289] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 809.184417][T21940] XFS (loop5): Quotacheck: Done. [ 809.191768][ T5289] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 809.248428][ T5289] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 809.290220][ T5289] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 809.332498][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 809.378892][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 809.409244][ T5289] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 809.436638][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.458275][ T9358] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 809.478500][ T5289] usb 4-1: Product: syz [ 809.509415][ T5289] usb 4-1: Manufacturer: syz [ 809.514075][ T5289] usb 4-1: SerialNumber: syz [ 809.556535][ T5289] usb 4-1: config 0 descriptor?? [ 809.574940][T21995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 809.587424][ T5289] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.625956][ T5289] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.649703][ T5289] usb 4-1: invalid MIDI in EP 0 [ 809.761096][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.819950][ T5289] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 809.826858][T22026] loop2: detected capacity change from 0 to 64 [ 809.889890][ T5289] usb 4-1: USB disconnect, device number 48 [ 810.027045][ T29] audit: type=1326 audit(2000000578.263:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.1.6342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b9779ef9 code=0x0 [ 810.237184][T22037] loop5: detected capacity change from 0 to 1024 [ 810.713397][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.806020][T22063] loop0: detected capacity change from 0 to 256 [ 810.978984][T22070] loop1: detected capacity change from 0 to 1024 [ 811.015628][T22070] EXT4-fs: Ignoring removed orlov option [ 811.034249][T22065] loop2: detected capacity change from 0 to 4096 [ 811.046648][T22070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 811.065948][T22065] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 811.094888][T22070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 811.147431][T22070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 811.169370][T22070] System zones: 0-1, 3-36 [ 811.218143][T22065] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 811.225036][T22065] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 811.235178][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.251460][T22065] UBIFS error (pid: 22065): cannot open "./file0", error -22 [ 811.261186][T22070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.501438][T19778] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 811.568245][T19778] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 811.690100][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.942847][ T5290] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 812.038552][T22063] loop0: detected capacity change from 0 to 32768 [ 812.054450][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.072271][T22063] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6356 (22063) [ 812.156673][T22063] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 812.169030][T19778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.169291][ T5290] usb 6-1: Using ep0 maxpacket: 8 [ 812.192938][T22063] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 812.207394][ T5290] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 812.211150][T22063] BTRFS info (device loop0): using free-space-tree [ 812.230143][ T5290] usb 6-1: config 0 has no interface number 1 [ 812.247375][ T5290] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 812.259436][ T5290] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 812.271514][ T5290] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 812.284172][ T5290] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 812.295291][ T5290] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.324659][ T5290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 812.355890][ T2576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.398919][ T5290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 812.429929][ T5290] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 812.463765][ T5290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.488179][ T5290] usb 6-1: Product: syz [ 812.519580][ T5290] usb 6-1: Manufacturer: syz [ 812.533910][T22063] BTRFS info (device loop0): rebuilding free space tree [ 812.541401][ T5290] usb 6-1: SerialNumber: syz [ 812.577328][ T5290] usb 6-1: config 0 descriptor?? [ 812.607262][T22087] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 812.624950][ T5290] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.651208][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.698553][ T5290] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.715331][ T5290] usb 6-1: invalid MIDI in EP 0 [ 812.779020][T18921] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 812.794496][ T5290] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 812.835894][ T2576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.053997][ T5289] usb 6-1: USB disconnect, device number 50 [ 813.214762][ T2576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.552760][ T2576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.638865][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.727243][T22119] loop0: detected capacity change from 0 to 512 [ 813.785613][T22119] EXT4-fs: Ignoring removed i_version option [ 813.849115][T22119] EXT4-fs (loop0): orphan cleanup on readonly fs [ 813.871018][T22119] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.6373: bad orphan inode 1 [ 813.890118][T22119] EXT4-fs (loop0): Remounting filesystem read-only [ 813.896381][ T4612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 813.898256][T22119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 813.911607][ T4612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 813.931138][ T4612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 813.947568][ T4612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 813.958650][ T4612] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 813.971291][ T4612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 814.034001][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 814.043308][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 814.060179][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 814.076354][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.087150][T22119] EXT4-fs: Ignoring removed mblk_io_submit option [ 814.093637][T22119] EXT4-fs: Ignoring removed nomblk_io_submit option [ 814.105694][T22119] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 814.115806][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 814.125945][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 814.133876][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 814.239886][T18923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 814.254917][T18923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 814.266683][T18923] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 814.282448][T18923] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 814.295262][T18923] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 814.306140][T18923] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 814.483214][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.547143][ T2576] bridge_slave_1: left allmulticast mode [ 814.566052][ T2576] bridge_slave_1: left promiscuous mode [ 814.585904][ T2576] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.606398][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.607506][ T2576] bridge_slave_0: left allmulticast mode [ 814.629052][ T2576] bridge_slave_0: left promiscuous mode [ 814.635187][ T2576] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.823510][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.915228][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.155773][T22131] Falling back ldisc for ptm0. [ 815.319503][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.570581][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.594949][ T2576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.607375][ T2576] bond_slave_0: left promiscuous mode [ 815.622431][ T2576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.634917][ T2576] bond_slave_1: left promiscuous mode [ 815.646420][ T2576] bond0 (unregistering): Released all slaves [ 815.924778][T18921] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.016931][ T2576] mac80211_hwsim hwsim39 wlan1 (unregistering): left allmulticast mode [ 816.080470][T18923] Bluetooth: hci1: command tx timeout [ 816.252850][T18923] Bluetooth: hci6: command tx timeout [ 816.539691][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.589366][T22156] loop3: detected capacity change from 0 to 128 [ 816.616884][T22156] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.651742][T22156] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 816.901262][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.965660][ T2576] hsr_slave_0: left promiscuous mode [ 816.975448][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.995217][T19713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.995359][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 817.014816][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 817.039394][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 817.068818][ T5245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 817.076063][ T2576] hsr_slave_1: left promiscuous mode [ 817.081809][ T5245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 817.100015][T22150] loop5: detected capacity change from 0 to 32768 [ 817.117286][T22150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6391 (22150) [ 817.141672][ T2576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.152344][ T2576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.160967][T22150] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 817.175752][ T2576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.188958][ T2576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.189913][T22150] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 817.244848][T22150] BTRFS info (device loop5): using free-space-tree [ 817.250554][ T2576] batadv0: left promiscuous mode [ 817.259375][ T2576] veth1_macvtap: left promiscuous mode [ 817.266503][ T2576] veth0_macvtap: left promiscuous mode [ 817.272409][ T2576] veth1_vlan: left promiscuous mode [ 817.278717][ T2576] veth0_vlan: left promiscuous mode [ 817.511509][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.596324][ T9358] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 818.020023][T18923] Bluetooth: hci1: command tx timeout [ 818.120103][T22191] loop5: detected capacity change from 0 to 2048 [ 818.151801][T22192] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 818.173259][T18923] Bluetooth: hci6: command tx timeout [ 818.241209][T22191] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 818.303916][T22191] Remounting filesystem read-only [ 818.473524][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.627126][T22196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.707756][T22198] loop5: detected capacity change from 0 to 512 [ 818.785902][T22198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.799932][T22198] ext4 filesystem being mounted at /839/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.881894][ T9358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.898116][ T2576] team0 (unregistering): Port device team_slave_1 removed [ 818.993577][T18923] Bluetooth: hci5: command tx timeout [ 819.066131][ T2576] team0 (unregistering): Port device team_slave_0 removed [ 819.445651][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.545963][T22202] loop5: detected capacity change from 0 to 40427 [ 819.558119][T22202] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 819.565895][T22202] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 819.584250][T22202] F2FS-fs (loop5): invalid crc value [ 819.636902][T22202] F2FS-fs (loop5): Found nat_bits in checkpoint [ 819.723748][T22202] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 819.733178][T22202] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 819.744066][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.957866][T18923] Bluetooth: hci1: command tx timeout [ 820.107152][T18923] Bluetooth: hci6: command tx timeout [ 820.405296][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6406'. [ 820.414767][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.450834][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6406'. [ 820.463416][T22168] tap0: tun_chr_ioctl cmd 1074025677 [ 820.476854][T22168] tap0: linktype set to 270 [ 820.651914][T22123] chnl_net:caif_netlink_parms(): no params data found [ 820.945706][T18923] Bluetooth: hci5: command tx timeout [ 820.957784][T22216] pimreg: entered allmulticast mode [ 821.002223][ T5294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.044747][T22225] ip6gretap0: entered promiscuous mode [ 821.090080][T22225] ip6gretap0: left promiscuous mode [ 821.185093][T22216] pimreg: left allmulticast mode [ 821.363126][T22128] chnl_net:caif_netlink_parms(): no params data found [ 821.389564][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.469712][T22237] loop5: detected capacity change from 0 to 256 [ 821.585803][T22123] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.607415][T22123] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.628305][T22123] bridge_slave_0: entered allmulticast mode [ 821.641947][T22123] bridge_slave_0: entered promiscuous mode [ 821.652618][T22123] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.668761][T22123] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.705514][T22123] bridge_slave_1: entered allmulticast mode [ 821.721765][T22123] bridge_slave_1: entered promiscuous mode [ 821.875783][T22249] loop3: detected capacity change from 0 to 512 [ 821.896682][T18923] Bluetooth: hci1: command tx timeout [ 821.914687][T22249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 821.992549][T22249] EXT4-fs (loop3): 1 orphan inode deleted [ 821.998363][T22249] EXT4-fs (loop3): 1 truncate cleaned up [ 822.006869][T22249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.045777][T18923] Bluetooth: hci6: command tx timeout [ 822.237535][T19713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.276581][T22123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.339233][T22123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.363333][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.479048][T22128] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.501298][T22263] loop3: detected capacity change from 0 to 1024 [ 822.511842][T22128] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.519188][T22128] bridge_slave_0: entered allmulticast mode [ 822.547968][T22128] bridge_slave_0: entered promiscuous mode [ 822.569012][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.748738][ T2576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.856054][T22242] loop5: detected capacity change from 0 to 40427 [ 822.868162][T18923] Bluetooth: hci5: command tx timeout [ 822.884229][T22242] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 822.891223][T22242] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 822.909611][T22242] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1fffff [ 822.969040][T22242] F2FS-fs (loop5): invalid crc value [ 822.994758][T22242] F2FS-fs (loop5): Found nat_bits in checkpoint [ 823.014081][T22163] chnl_net:caif_netlink_parms(): no params data found [ 823.038540][T22128] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.052120][T22128] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.072358][T22128] bridge_slave_1: entered allmulticast mode [ 823.090402][T22128] bridge_slave_1: entered promiscuous mode [ 823.097873][T22242] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 823.108992][T22242] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 823.202574][ T2576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.247539][T22123] team0: Port device team_slave_0 added [ 823.282891][T22123] team0: Port device team_slave_1 added [ 823.323785][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.433165][T22128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.579653][ T2576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.745940][T22128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.829475][T22289] loop5: detected capacity change from 0 to 4096 [ 823.845842][T22289] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 823.907461][ T2576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.939156][T22123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.946289][T22123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.948114][T22289] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 823.982725][T22123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.126665][T22123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.153154][T22123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.188398][T22299] loop3: detected capacity change from 0 to 64 [ 824.196919][T22123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.243053][T22128] team0: Port device team_slave_0 added [ 824.284507][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.471717][T22128] team0: Port device team_slave_1 added [ 824.620291][T22163] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.637203][T22163] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.644657][T22163] bridge_slave_0: entered allmulticast mode [ 824.670472][T22163] bridge_slave_0: entered promiscuous mode [ 824.792765][T22123] hsr_slave_0: entered promiscuous mode [ 824.815226][T18923] Bluetooth: hci5: command tx timeout [ 824.833427][T22123] hsr_slave_1: entered promiscuous mode [ 824.849519][T22123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.858301][T22123] Cannot create hsr debugfs directory [ 824.889381][T22163] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.889433][T22309] loop3: detected capacity change from 0 to 4096 [ 824.896672][T22163] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.919298][T22163] bridge_slave_1: entered allmulticast mode [ 824.927992][T22163] bridge_slave_1: entered promiscuous mode [ 825.001322][T22313] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 825.017865][T22128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.034549][T22128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.062523][T22128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.261555][ T5293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.292342][T22128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.338207][T22128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.401399][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.430179][T22128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.589810][T22163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.627714][T22163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.001077][ T2576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.101560][T22163] team0: Port device team_slave_0 added [ 826.131585][T22163] team0: Port device team_slave_1 added [ 826.159086][T22128] hsr_slave_0: entered promiscuous mode [ 826.192101][T22128] hsr_slave_1: entered promiscuous mode [ 826.222710][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.240288][T22128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.248183][T22128] Cannot create hsr debugfs directory [ 826.282342][T22330] loop3: detected capacity change from 0 to 1764 [ 826.392632][ T2576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.819239][ T2576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.966018][T22163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.976025][T22163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.017322][T22163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.065715][T22163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.078649][T22163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.118183][T22163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.202525][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.222308][ T2576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.025710][T22163] hsr_slave_0: entered promiscuous mode [ 828.052178][T22163] hsr_slave_1: entered promiscuous mode [ 828.082671][T22163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.095869][T22163] Cannot create hsr debugfs directory [ 828.160359][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.237971][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.571083][ T2576] bridge_slave_1: left allmulticast mode [ 828.576800][ T2576] bridge_slave_1: left promiscuous mode [ 828.597875][ T2576] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.662438][ T2576] bridge_slave_0: left allmulticast mode [ 828.678291][ T2576] bridge_slave_0: left promiscuous mode [ 828.678807][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6471'. [ 828.696929][ T2576] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.741395][ T2576] bridge_slave_1: left allmulticast mode [ 828.758225][ T2576] bridge_slave_1: left promiscuous mode [ 828.764110][ T2576] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.841370][ T2576] bridge_slave_0: left allmulticast mode [ 828.847100][ T2576] bridge_slave_0: left promiscuous mode [ 828.868798][ T2576] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.132239][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.342360][T22373] loop3: detected capacity change from 0 to 64 [ 829.949938][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.102824][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.797075][ T2576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.811305][ T2576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.824502][ T2576] bond0 (unregistering): Released all slaves [ 831.077609][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.085788][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.259877][ T2576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.274077][ T2576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.297839][ T2576] bond0 (unregistering): Released all slaves [ 832.039677][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.055863][ T5294] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 832.244834][ T5294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 832.288108][ T5294] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 832.342038][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.375565][ T5294] usb 4-1: config 0 descriptor?? [ 832.395585][ T5294] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 832.647899][ T5294] usb 4-1: USB disconnect, device number 49 [ 833.007025][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.118149][ T2576] hsr_slave_0: left promiscuous mode [ 833.165044][ T2576] hsr_slave_1: left promiscuous mode [ 833.175153][ T2576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.182648][ T2576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.214342][ T2576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.222222][ T2576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.255705][ T2576] hsr_slave_0: left promiscuous mode [ 833.275497][ T2576] hsr_slave_1: left promiscuous mode [ 833.297598][ T2576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.306331][ T2576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.331787][ T2576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.344176][ T2576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.478262][ T2576] veth1_macvtap: left promiscuous mode [ 833.496186][ T2576] veth0_macvtap: left promiscuous mode [ 833.506525][ T2576] veth1_vlan: left promiscuous mode [ 833.518572][ T2576] veth0_vlan: left promiscuous mode [ 833.544444][ T2576] veth1_macvtap: left promiscuous mode [ 833.553573][ T2576] veth0_macvtap: left promiscuous mode [ 833.566332][ T2576] veth1_vlan: left promiscuous mode [ 833.571742][ T2576] veth0_vlan: left promiscuous mode [ 833.905096][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.988292][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.575282][ T5245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 834.621822][ T5245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 834.632802][ T5245] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 834.650639][ T5245] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 834.688082][ T5245] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 834.696819][ T5245] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 834.963122][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.609806][ T2576] team0 (unregistering): Port device team_slave_1 removed [ 835.777404][ T2576] team0 (unregistering): Port device team_slave_0 removed [ 835.941759][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.076298][T22412] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6492'. [ 836.679681][T18923] Bluetooth: hci7: command tx timeout [ 836.740919][ T5289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.888579][ T5290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.097510][ T2576] team0 (unregistering): Port device macvlan2 removed [ 837.805957][ T2576] team0 (unregistering): Port device team_slave_1 removed [ 837.863961][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.916063][ T2576] team0 (unregistering): Port device team_slave_0 removed [ 838.611475][T18923] Bluetooth: hci7: command tx timeout [ 838.806036][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6484'. [ 838.816587][T22392] tipc: Started in network mode [ 838.821530][T22392] tipc: Node identity , cluster identity 8 [ 838.935799][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.944044][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.958940][T22418] vxcan1: tx address claim with dest, not broadcast [ 839.193395][T22128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 839.225606][T22128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 839.299740][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6497'. [ 839.320744][T22422] bridge_slave_1: entered promiscuous mode [ 839.341270][T22128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 839.423308][T22128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 839.577826][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.876018][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6499'. [ 839.943414][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.970640][T22123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 840.033019][T22123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 840.191115][T22128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.207804][T22123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 840.223114][T22123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 840.309369][T22128] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.431758][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.439078][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.524629][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.531922][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.548866][T18923] Bluetooth: hci7: command tx timeout [ 840.634952][T22400] chnl_net:caif_netlink_parms(): no params data found [ 840.912193][ T5381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.182382][T22400] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.191724][T22400] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.199118][T22400] bridge_slave_0: entered allmulticast mode [ 841.211585][T22400] bridge_slave_0: entered promiscuous mode [ 841.223425][T22400] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.230847][T22400] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.238190][T22400] bridge_slave_1: entered allmulticast mode [ 841.246371][T22400] bridge_slave_1: entered promiscuous mode [ 841.468423][ T2576] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.539081][T22455] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 841.560757][T22455] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 841.585536][T22455] Error parsing options; rc = [-22] [ 841.625247][T22400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.733976][ T2576] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.762761][T22400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.790521][T22128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 841.882395][ T5292] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 841.951660][ T2576] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.079924][ T2576] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.101891][ T5292] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 842.120685][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.153784][ T5292] usb 4-1: config 0 descriptor?? [ 842.160127][T22400] team0: Port device team_slave_0 added [ 842.172644][T22400] team0: Port device team_slave_1 added [ 842.184741][ T5292] cp210x 4-1:0.0: cp210x converter detected [ 842.375219][T22163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 842.395846][T22400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.409415][T22400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.476848][T18923] Bluetooth: hci7: command tx timeout [ 842.482488][T22400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.512060][T22123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.528703][T22163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 842.554735][T22163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 842.576553][ T5292] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 842.589404][T22163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 842.600525][ T5292] usb 4-1: cp210x converter now attached to ttyUSB0 [ 842.638431][T22400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.653274][T22400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.680793][T22400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.817960][ T5381] usb 4-1: USB disconnect, device number 50 [ 842.830134][T22128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.832226][ T5381] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 842.876690][ T5381] cp210x 4-1:0.0: device disconnected [ 842.899692][T22400] hsr_slave_0: entered promiscuous mode [ 842.931937][T22400] hsr_slave_1: entered promiscuous mode [ 843.051332][T22123] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.077213][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 843.083895][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 843.114915][ T2576] nicvf0: left allmulticast mode [ 843.121769][ T2576] nicvf0: left promiscuous mode [ 843.126907][ T2576] bridge0: port 2(nicvf0) entered disabled state [ 843.136364][ T2576] bridge_slave_0: left allmulticast mode [ 843.153842][ T2576] bridge_slave_0: left promiscuous mode [ 843.182339][ T2576] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.615537][T22471] netlink: 'syz.4.6515': attribute type 42 has an invalid length. [ 844.120421][ T2576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.133087][ T2576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.147432][ T2576] bond0 (unregistering): Released all slaves [ 844.341946][ T2576] Κό: left promiscuous mode [ 844.405052][T22475] loop3: detected capacity change from 0 to 512 [ 844.431551][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.438798][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.451400][T22475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 844.485909][T22475] EXT4-fs (loop3): 1 truncate cleaned up [ 844.524252][T22475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.566273][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.573536][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.617652][ T2576] tipc: Disabling bearer [ 844.625045][ T2576] tipc: Left network mode [ 844.876809][T19713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.963722][T22128] veth0_vlan: entered promiscuous mode [ 845.268296][T22128] veth1_vlan: entered promiscuous mode [ 845.320567][ T2576] hsr_slave_0: left promiscuous mode [ 845.337214][ T2576] hsr_slave_1: left promiscuous mode [ 845.353135][ T2576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.368228][ T2576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.394940][ T2576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.409718][ T2576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.475611][ T2576] veth1_macvtap: left promiscuous mode [ 845.482538][ T2576] veth0_macvtap: left promiscuous mode [ 845.488355][ T2576] veth1_vlan: left promiscuous mode [ 845.493716][ T2576] veth0_vlan: left promiscuous mode [ 845.524604][T22503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6527'. [ 846.479748][ T2576] team0 (unregistering): Port device team_slave_1 removed [ 846.550734][ T2576] team0 (unregistering): Port device team_slave_0 removed [ 847.553866][T22123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.908503][T22163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.918075][T22511] netlink: 'syz.4.6531': attribute type 3 has an invalid length. [ 847.926341][T22511] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6531'. [ 847.969417][T22128] veth0_macvtap: entered promiscuous mode [ 848.054280][T22511] netlink: 'syz.4.6531': attribute type 3 has an invalid length. [ 848.100631][T22128] veth1_macvtap: entered promiscuous mode [ 848.363242][T22163] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.385044][T22123] veth0_vlan: entered promiscuous mode [ 848.396274][T22128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.440561][T22128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.460360][T22128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.478593][T22128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.499139][T22128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.517178][T22128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.542086][T22128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.600054][ T2576] IPVS: stop unused estimator thread 0... [ 848.639739][T22123] veth1_vlan: entered promiscuous mode [ 848.659044][ T2524] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.666283][ T2524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.687285][T22128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.706401][T22128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.718684][T22128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.741377][T22128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.761551][T22128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.779768][T22128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.799602][T22128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.858046][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.865338][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.913624][T22128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.924655][T22128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.933838][T22128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.946479][T22128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.018079][T22123] veth0_macvtap: entered promiscuous mode [ 849.037735][T22526] netlink: 'syz.3.6538': attribute type 1 has an invalid length. [ 849.057048][T22526] netlink: 9320 bytes leftover after parsing attributes in process `syz.3.6538'. [ 849.085019][T22526] netlink: 'syz.3.6538': attribute type 1 has an invalid length. [ 849.092869][T22526] netlink: 'syz.3.6538': attribute type 2 has an invalid length. [ 849.224727][T22123] veth1_macvtap: entered promiscuous mode [ 849.422825][T22400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 849.458016][T22400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 849.511404][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.532089][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.562372][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.585318][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.604394][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.636009][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.674171][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.690151][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.713328][T22123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.721984][T22400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 849.796330][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.839587][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.858099][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.882443][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.892544][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.911404][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.927614][T22123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.944983][T22123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.957679][T22123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.966107][T22400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 849.989804][ T2576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.002235][ T2576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.069062][T22123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.080734][T22123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.102778][T22123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.124273][T22123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.183955][T22163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.216670][ T2576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.259568][ T2576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.694691][ T2576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.703650][T22163] veth0_vlan: entered promiscuous mode [ 850.723995][T22163] veth1_vlan: entered promiscuous mode [ 850.732851][ T2576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.830009][T22400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.846428][ T5332] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 850.979140][T14934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.995661][T14934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.021973][T22400] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.041403][ T5332] usb 2-1: Using ep0 maxpacket: 32 [ 851.057677][ T5332] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 851.088422][ T5332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.117104][T22163] veth0_macvtap: entered promiscuous mode [ 851.124679][ T5332] usb 2-1: Product: syz [ 851.144006][ T5332] usb 2-1: Manufacturer: syz [ 851.162821][ T5332] usb 2-1: SerialNumber: syz [ 851.170517][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.177790][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.191212][ T5332] usb 2-1: config 0 descriptor?? [ 851.204625][ T5332] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 851.223946][T22559] loop3: detected capacity change from 0 to 512 [ 851.243915][T22163] veth1_macvtap: entered promiscuous mode [ 851.251445][T22559] EXT4-fs: Ignoring removed i_version option [ 851.284373][T22559] EXT4-fs: Ignoring removed nobh option [ 851.298995][T14934] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.306227][T14934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.324597][T22559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 851.375487][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.399053][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.422320][T22559] EXT4-fs (loop3): 1 truncate cleaned up [ 851.429703][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.429732][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.429757][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.429778][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.429836][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.429856][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.429874][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.429894][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.434514][T22163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.524655][T22559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.596151][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.608091][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.619547][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.633725][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.646818][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.669442][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.681807][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.693212][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.703473][T22163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.714825][T22163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.728367][T22163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.744023][T19713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.809239][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6550'. [ 851.902573][T22163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.924426][T22163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.933692][T22163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.944286][T22163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.984577][ T5332] gspca_ov534_9: reg_w failed -71 [ 852.347195][ T5332] gspca_ov534_9: Unknown sensor 0000 [ 852.347320][ T5332] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 852.389009][ T5332] usb 2-1: USB disconnect, device number 46 [ 852.398938][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.439593][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.500944][T22579] loop3: detected capacity change from 0 to 4096 [ 852.512077][T22579] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 852.578974][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.603406][T22579] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 852.626638][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.735064][T22579] ntfs3: loop3: ino=5, "/" directory corrupted [ 852.796550][T22400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.961826][T19713] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 853.075511][T22597] syz.1.6561[22597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 853.075878][T22597] syz.1.6561[22597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 854.440117][T22400] veth0_vlan: entered promiscuous mode [ 854.638008][T22400] veth1_vlan: entered promiscuous mode [ 854.908792][T22400] veth0_macvtap: entered promiscuous mode [ 855.051070][T22400] veth1_macvtap: entered promiscuous mode [ 855.205511][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.263553][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.328834][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.383917][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.441482][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.498225][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.545850][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.597666][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.647203][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.680333][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.715443][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.751996][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.793710][T22400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.978186][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.049823][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.093091][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.152995][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.236035][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.283601][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.335276][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.402813][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.461563][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.520171][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.566370][T22400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.622444][T22400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.705771][T22400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.828090][T22400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.913581][T22400] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.922439][T22400] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.923457][T22624] loop3: detected capacity change from 0 to 262144 [ 856.981461][T22400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.993217][T22624] F2FS-fs (loop3): Found nat_bits in checkpoint [ 857.404811][T22668] mkiss: ax0: crc mode is auto. [ 857.567906][ T2535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.594388][ T2535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.704616][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.736168][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.009066][T22688] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.6601'. [ 858.051203][T22688] netlink: 'syz.4.6601': attribute type 1 has an invalid length. [ 858.077653][T22688] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.6601'. [ 858.386556][T22696] fuse: Bad value for 'fd' [ 858.445964][T22698] binder: 22697:22698 ioctl c018620b 0 returned -14 [ 860.630874][T22754] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 860.650834][T22754] pim6reg0: linktype set to 776 [ 860.675936][ T5292] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 860.885331][ T5292] usb 2-1: Using ep0 maxpacket: 8 [ 860.905230][ T5292] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 860.923649][ T5292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.971377][ T5292] usb 2-1: config 0 has no interface number 0 [ 861.013754][ T5292] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 861.052081][ T5292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 861.098123][ T5292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 861.129446][ T5292] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 861.168126][ T5292] usb 2-1: config 0 interface 52 has no altsetting 0 [ 861.175409][ T5292] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 861.184616][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.214134][ T5292] usb 2-1: config 0 descriptor?? [ 861.417279][T22769] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6636'. [ 861.436772][ T5292] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input69 [ 861.753191][ T938] usb 2-1: USB disconnect, device number 47 [ 861.995670][T22783] netem: unknown loss type 0 [ 862.017449][T22783] netem: change failed [ 862.207816][T22787] netlink: 'syz.5.6645': attribute type 22 has an invalid length. [ 862.800278][T22809] loop5: detected capacity change from 0 to 1024 [ 862.863032][T22809] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 862.949136][T22809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.114679][ T938] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 863.180758][T22824] loop0: detected capacity change from 0 to 256 [ 863.256500][T22828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6663'. [ 863.258009][T22400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.284444][T22829] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 863.304775][ T938] usb 3-1: Using ep0 maxpacket: 16 [ 863.326415][ T938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.345072][ T938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 863.382902][ T938] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 863.411973][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.448064][ T938] usb 3-1: config 0 descriptor?? [ 863.543702][T22833] loop5: detected capacity change from 0 to 512 [ 863.566930][T22833] EXT4-fs error (device loop5): __ext4_iget:4985: inode #15: block 1803188595: comm syz.5.6665: invalid block [ 863.579866][T22833] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.6665: couldn't read orphan inode 15 (err -117) [ 863.612560][T22833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.632787][T22793] loop3: detected capacity change from 0 to 32768 [ 863.680001][T22833] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.6665: invalid indirect mapped block 234881024 (level 0) [ 863.688735][T22793] XFS: noikeep mount option is deprecated. [ 863.738084][T22839] loop0: detected capacity change from 0 to 1024 [ 863.780677][T22793] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 863.839437][T22400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.913544][ T938] usbhid 3-1:0.0: can't add hid device: -71 [ 863.920607][ T938] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 863.957935][T22793] XFS (loop3): Ending clean mount [ 863.991184][T22793] XFS (loop3): Quotacheck needed: Please wait. [ 864.005876][ T938] usb 3-1: USB disconnect, device number 38 [ 864.204440][T22793] XFS (loop3): Quotacheck: Done. [ 864.284849][T22860] loop5: detected capacity change from 0 to 1024 [ 864.367741][T19713] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 864.388645][T22860] hfsplus: xattr search failed [ 864.644127][T22869] loop2: detected capacity change from 0 to 1024 [ 864.725495][T22869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.796652][T22869] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 864.816965][T22869] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 17 with error 28 [ 864.915443][T22869] EXT4-fs (loop2): This should not happen!! Data will be lost [ 864.915443][T22869] [ 864.948249][T22869] EXT4-fs (loop2): Total free blocks count 0 [ 864.956938][T22878] loop5: detected capacity change from 0 to 2048 [ 864.978426][T22869] EXT4-fs (loop2): Free/Dirty block details [ 865.040865][T22882] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 865.059740][T22869] EXT4-fs (loop2): free_blocks=68451041280 [ 865.082815][T22869] EXT4-fs (loop2): dirty_blocks=32 [ 865.098549][T22869] EXT4-fs (loop2): Block reservation details [ 865.104590][T22869] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 865.391873][T22123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.425009][T22890] loop5: detected capacity change from 0 to 256 [ 865.539585][T22895] ax25_connect(): syz.4.6692 uses autobind, please contact jreuter@yaina.de [ 865.717812][T22902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6694'. [ 865.795234][T22905] netlink: 'syz.4.6696': attribute type 8 has an invalid length. [ 865.865484][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6696'. [ 865.984794][T22910] loop3: detected capacity change from 0 to 1764 [ 867.160559][T22960] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6721'. [ 867.201551][T22963] loop2: detected capacity change from 0 to 512 [ 867.218976][T22963] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 867.280606][T22963] EXT4-fs (loop2): 1 truncate cleaned up [ 867.293263][T22963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.377578][T22969] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 867.406002][T22969] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 867.574308][T22123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.661197][T22975] netlink: 'syz.5.6727': attribute type 1 has an invalid length. [ 867.669027][T22975] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6727'. [ 867.708148][T22975] netlink: 'syz.5.6727': attribute type 1 has an invalid length. [ 867.727479][T22975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6727'. [ 867.774905][T22981] loop2: detected capacity change from 0 to 16 [ 867.791917][T22981] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 867.860729][T22979] loop3: detected capacity change from 0 to 1764 [ 867.864975][T22981] cramfs: Error -3 while decompressing! [ 867.894070][T22981] cramfs: ffffffff9505d4e8(27)->ffff88805dfc2000(4096) [ 867.901122][T22981] cramfs: Error -3 while decompressing! [ 867.951380][T22981] cramfs: ffffffff9505d4e8(27)->ffff88805dfc2000(4096) [ 867.992454][ T29] audit: type=1800 audit(2000000640.459:371): pid=22981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6728" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 868.639935][T23006] netlink: 'syz.3.6740': attribute type 7 has an invalid length. [ 868.849477][T23016] netlink: 'syz.4.6747': attribute type 10 has an invalid length. [ 868.860580][T23016] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6747'. [ 869.049120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.335938][T23033] team_slave_1: mtu greater than device maximum [ 869.355702][T23033] team0: Device team_slave_1 failed to change mtu [ 869.499321][T23037] loop3: detected capacity change from 0 to 2048 [ 869.505250][T23039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6755'. [ 869.507807][T23038] tap0: tun_chr_ioctl cmd 2148553947 [ 869.568152][T23037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 869.577403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.868438][T23045] netlink: 'syz.5.6761': attribute type 1 has an invalid length. [ 869.882851][T23019] loop2: detected capacity change from 0 to 32768 [ 869.898887][T23045] netlink: 'syz.5.6761': attribute type 2 has an invalid length. [ 870.810411][ T938] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 870.862557][T23054] orangefs_mount: mount request failed with -4 [ 870.876031][ T5292] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 870.999208][ T938] usb 4-1: config 0 has an invalid interface number: 103 but max is 0 [ 871.014490][ T938] usb 4-1: config 0 has no interface number 0 [ 871.033202][ T938] usb 4-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=de.4d [ 871.046088][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.062036][ T938] usb 4-1: Product: syz [ 871.070622][ T938] usb 4-1: Manufacturer: syz [ 871.083434][ T938] usb 4-1: SerialNumber: syz [ 871.094981][ T5292] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 871.100860][ T938] usb 4-1: config 0 descriptor?? [ 871.124038][ T5292] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 871.163129][ T5292] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 871.192246][ T5292] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 871.223803][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 871.257640][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 871.289448][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 871.324641][ T5292] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 871.330242][ T938] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in warm state. [ 871.370299][ T938] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 871.371632][ T5292] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 871.410935][ T938] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 871.415864][ T5292] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 871.441213][ T938] usb 4-1: media controller created [ 871.455181][ T5292] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 871.484489][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 871.500893][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 871.537381][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 871.584138][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 871.640110][ T5292] usb 2-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 871.658843][ T5292] usb 2-1: config 246 descriptor has 1 excess byte, ignoring [ 871.667427][ T5292] usb 2-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 871.667859][ T938] DVB: Unable to find symbol dib8000_attach() [ 871.730655][ T938] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 871.739792][ T5292] usb 2-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 871.759699][ T938] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 871.780539][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 871.793210][ T938] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 871.822905][ T938] usb 4-1: media controller created [ 871.826585][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 871.863979][ T5292] usb 2-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 871.877210][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 871.912019][ T5292] usb 2-1: string descriptor 0 read error: -22 [ 871.918401][ T5292] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 871.963210][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.031411][ T5292] adutux 2-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 872.090635][ T938] DVB: Unable to find symbol dib8000_attach() [ 872.110331][ T938] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 872.232253][ T5294] usb 2-1: USB disconnect, device number 48 [ 872.314633][ T938] rc_core: IR keymap rc-dib0700-rc5 not found [ 872.333971][ T938] Registered IR keymap rc-empty [ 872.348493][ T938] dvb-usb: could not initialize remote control. [ 872.373171][ T938] dvb-usb: DiBcom STK8096-PVR reference design successfully initialized and connected. [ 872.417687][ T938] usb 4-1: USB disconnect, device number 51 [ 872.501581][ T938] dvb-usb: DiBcom STK8096-PVR reference design successfully deinitialized and disconnected. [ 872.867006][T23096] loop5: detected capacity change from 0 to 1024 [ 872.935204][T23096] hfsplus: bad catalog entry type [ 872.948948][T23099] loop1: detected capacity change from 0 to 2048 [ 873.004754][T23099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 873.058770][T14934] hfsplus: b-tree write err: -5, ino 4 [ 873.215611][T23104] loop5: detected capacity change from 0 to 512 [ 873.245069][T23104] EXT4-fs error (device loop5): ext4_init_orphan_info:586: comm syz.5.6786: inode #0: comm syz.5.6786: iget: illegal inode # [ 873.269743][T23104] EXT4-fs (loop5): get orphan inode failed [ 873.291424][T23104] EXT4-fs (loop5): mount failed [ 873.947916][T23094] loop0: detected capacity change from 0 to 40427 [ 873.978498][T23123] netlink: 'syz.4.6795': attribute type 3 has an invalid length. [ 873.986898][T23094] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 873.995418][T23123] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6795'. [ 874.027988][T23094] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 874.085583][T23094] F2FS-fs (loop0): invalid crc value [ 874.179517][T23094] F2FS-fs (loop0): Found nat_bits in checkpoint [ 874.440917][T23094] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 874.477912][T23094] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 875.072217][T23156] loop3: detected capacity change from 0 to 2048 [ 875.175956][T23156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.361868][T19713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.876981][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 973.884012][ C1] rcu: 0-...!: (1 GPs behind) idle=9bdc/1/0x4000000000000000 softirq=84112/84113 fqs=15 [ 973.898040][ C1] rcu: (detected by 1, t=10506 jiffies, g=129233, q=572 ncpus=2) [ 973.905887][ C1] Sending NMI from CPU 1 to CPUs 0: [ 973.911116][ C0] NMI backtrace for cpu 0 [ 973.911132][ C0] CPU: 0 UID: 0 PID: 22163 Comm: syz-executor Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 973.911160][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 973.911176][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x4/0x40 [ 973.911224][ C0] Code: c6 20 f8 0a 8c e8 1c bf 9e f5 90 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <31> c0 83 3d 2f 08 61 04 00 74 1e 83 3d 96 37 61 04 00 74 15 65 48 [ 973.911245][ C0] RSP: 0018:ffffc90000007c88 EFLAGS: 00000046 [ 973.911268][ C0] RAX: 09031e19c1b27900 RBX: ffff8880628b8036 RCX: 0000000000000001 [ 973.911288][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000007c00 [ 973.911311][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: fffff52000000f80 [ 973.911329][ C0] R10: dffffc0000000000 R11: fffff52000000f80 R12: 0000000000000000 [ 973.911347][ C0] R13: ffffffff89bdb1a0 R14: ffff88802d00c340 R15: ffff88802fe128c8 [ 973.911370][ C0] FS: 000055557cf25500(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 973.911393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 973.911411][ C0] CR2: 0000000020775030 CR3: 000000006f3ca000 CR4: 0000000000350ef0 [ 973.911430][ C0] Call Trace: [ 973.911444][ C0] [ 973.911457][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 973.911489][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 973.911530][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 973.911560][ C0] ? nmi_handle+0x2a/0x5a0 [ 973.911601][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 973.911634][ C0] ? nmi_handle+0x151/0x5a0 [ 973.911658][ C0] ? nmi_handle+0x2a/0x5a0 [ 973.911684][ C0] ? debug_lockdep_rcu_enabled+0x4/0x40 [ 973.911723][ C0] ? default_do_nmi+0x63/0x160 [ 973.911756][ C0] ? exc_nmi+0x123/0x1f0 [ 973.911787][ C0] ? end_repeat_nmi+0xf/0x53 [ 973.911820][ C0] ? __pfx_advance_sched+0x10/0x10 [ 973.911858][ C0] ? debug_lockdep_rcu_enabled+0x4/0x40 [ 973.911898][ C0] ? debug_lockdep_rcu_enabled+0x4/0x40 [ 973.911941][ C0] ? debug_lockdep_rcu_enabled+0x4/0x40 [ 973.911981][ C0] [ 973.911990][ C0] [ 973.911998][ C0] advance_sched+0xb0/0xca0 [ 973.912028][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.912061][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 973.912100][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 973.912146][ C0] ? __pfx_advance_sched+0x10/0x10 [ 973.912174][ C0] __hrtimer_run_queues+0x59d/0xd50 [ 973.912204][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 973.912257][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 973.912294][ C0] hrtimer_interrupt+0x396/0x990 [ 973.912349][ C0] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 973.912394][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 973.912432][ C0] [ 973.912441][ C0] [ 973.912452][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 973.912483][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x10a/0x120 [ 973.912522][ C0] Code: 48 c1 e3 05 48 8d 43 28 4c 39 f8 77 a3 49 ff c4 4c 89 21 4c 89 44 0b 08 4c 89 74 0b 10 48 89 7c 0b 18 4c 89 4c 0b 20 eb 87 5b <41> 5c 41 5e 41 5f e9 46 ae 5c 0a 66 2e 0f 1f 84 00 00 00 00 00 90 [ 973.912542][ C0] RSP: 0018:ffffc90009c7f068 EFLAGS: 00000246 [ 973.912564][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff88802fe11e00 [ 973.912581][ C0] RDX: 0000000000000003 RSI: ffffffff8e7a3df0 RDI: 0000000000000002 [ 973.912597][ C0] RBP: ffffffff90a72eb7 R08: 0000000000000005 R09: ffffffff81413746 [ 973.912616][ C0] R10: 0000000000000003 R11: ffff88802fe11e00 R12: ffffffff90a72eb6 [ 973.912634][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: 1ffff9200138fe2c [ 973.912658][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 973.912708][ C0] unwind_next_frame+0xff6/0x2a00 [ 973.912755][ C0] ? shmem_undo_range+0x6de/0x1df0 [ 973.912794][ C0] ? shmem_undo_range+0x6de/0x1df0 [ 973.912833][ C0] ? __kernel_text_address+0xd/0x40 [ 973.912859][ C0] ? shmem_undo_range+0x6de/0x1df0 [ 973.912897][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 973.912931][ C0] arch_stack_walk+0x151/0x1b0 [ 973.912964][ C0] ? shmem_undo_range+0x6de/0x1df0 [ 973.913006][ C0] stack_trace_save+0x118/0x1d0 [ 973.913041][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 973.913076][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.913118][ C0] save_stack+0xfb/0x1f0 [ 973.913162][ C0] ? __pfx_save_stack+0x10/0x10 [ 973.913199][ C0] ? free_unref_folios+0x103a/0x1b00 [ 973.913233][ C0] ? folios_put_refs+0x76e/0x860 [ 973.913271][ C0] ? shmem_undo_range+0x6de/0x1df0 [ 973.913323][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.913361][ C0] ? page_ext_get+0x20/0x2a0 [ 973.913399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.913436][ C0] __reset_page_owner+0x76/0x430 [ 973.913475][ C0] ? page_ext_get+0x1d6/0x2a0 [ 973.913521][ C0] free_unref_folios+0x103a/0x1b00 [ 973.913571][ C0] folios_put_refs+0x76e/0x860 [ 973.913620][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 973.913658][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 973.913700][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.913733][ C0] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 973.913758][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.913795][ C0] shmem_undo_range+0x6de/0x1df0 [ 973.913835][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.913884][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 973.913976][ C0] ? inode_wait_for_writeback+0x224/0x290 [ 973.914016][ C0] ? __pfx_lock_release+0x10/0x10 [ 973.914050][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 973.914089][ C0] shmem_evict_inode+0x29b/0xa80 [ 973.914127][ C0] ? inode_wait_for_writeback+0x224/0x290 [ 973.914165][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 973.914197][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 973.914238][ C0] ? __pfx_wake_bit_function+0x10/0x10 [ 973.914272][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.914310][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 973.914343][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 973.914377][ C0] evict+0x534/0x950 [ 973.914414][ C0] ? __pfx_evict+0x10/0x10 [ 973.914445][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.914478][ C0] ? _raw_spin_unlock+0x28/0x50 [ 973.914511][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 973.914544][ C0] ? iput+0x6ed/0x930 [ 973.914588][ C0] __dentry_kill+0x20d/0x630 [ 973.914617][ C0] ? dput+0x37/0x2b0 [ 973.914639][ C0] dput+0x19f/0x2b0 [ 973.914663][ C0] __fput+0x5f8/0x8a0 [ 973.914703][ C0] task_work_run+0x251/0x310 [ 973.914735][ C0] ? __pfx_task_work_run+0x10/0x10 [ 973.914766][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 973.914808][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 973.914852][ C0] do_syscall_64+0x100/0x230 [ 973.914882][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.914912][ C0] RIP: 0033:0x7efd67178b8a [ 973.914934][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 13 8c 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 73 8c 02 00 8b 44 24 [ 973.914954][ C0] RSP: 002b:00007fff40837ac0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 973.914978][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007efd67178b8a [ 973.914994][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 973.915010][ C0] RBP: 00007fff40837b0c R08: 0000000000000000 R09: 00007fff40837827 [ 973.915026][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 973.915043][ C0] R13: 00000000000dc9b5 R14: 00000000000dc0d6 R15: 00007fff40837b60 [ 973.915076][ C0] [ 973.915111][ C1] rcu: rcu_preempt kthread starved for 10430 jiffies! g129233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 974.655320][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 974.665302][ C1] rcu: RCU grace-period kthread stack dump: [ 974.671198][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 974.682960][ C1] Call Trace: [ 974.686251][ C1] [ 974.689808][ C1] __schedule+0x1800/0x4a60 [ 974.694373][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.700043][ C1] ? __pfx___schedule+0x10/0x10 [ 974.704932][ C1] ? __pfx_lock_release+0x10/0x10 [ 974.709992][ C1] ? __asan_memset+0x23/0x50 [ 974.714649][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 974.720510][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 974.726888][ C1] ? schedule+0x90/0x320 [ 974.731168][ C1] schedule+0x14b/0x320 [ 974.735360][ C1] schedule_timeout+0x1be/0x310 [ 974.740243][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 974.745648][ C1] ? __pfx_process_timeout+0x10/0x10 [ 974.750976][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.756639][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 974.762230][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 974.767116][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 974.772367][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 974.778470][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 974.783782][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 974.789718][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.796075][ C1] ? finish_swait+0xd4/0x1e0 [ 974.800734][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 974.805412][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.810659][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 974.816595][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 974.822258][ C1] ? __kthread_parkme+0x169/0x1d0 [ 974.827321][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.832549][ C1] kthread+0x2f2/0x390 [ 974.836657][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.841881][ C1] ? __pfx_kthread+0x10/0x10 [ 974.846509][ C1] ret_from_fork+0x4d/0x80 [ 974.850960][ C1] ? __pfx_kthread+0x10/0x10 [ 974.855588][ C1] ret_from_fork_asm+0x1a/0x30 [ 974.860402][ C1] [ 974.863428][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 974.869755][ C1] CPU: 1 UID: 0 PID: 23187 Comm: syz.5.6820 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 974.880526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 974.890599][ C1] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 974.897418][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 39 18 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 e4 13 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 c8 13 [ 974.917058][ C1] RSP: 0018:ffffc900050cf400 EFLAGS: 00000246 [ 974.923173][ C1] RAX: ffffffff81877868 RBX: 1ffff11017248c59 RCX: 0000000000040000 [ 974.931206][ C1] RDX: ffffc9000da63000 RSI: 000000000003ffff RDI: 0000000000040000 [ 974.939212][ C1] RBP: ffffc900050cf5e0 R08: ffffffff81877837 R09: 1ffffffff26e6908 [ 974.947205][ C1] R10: dffffc0000000000 R11: fffffbfff26e6909 R12: dffffc0000000000 [ 974.955193][ C1] R13: ffff8880b92462c8 R14: ffff8880b933fb40 R15: 0000000000000000 [ 974.963181][ C1] FS: 00007f3056cd46c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 974.972125][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.978719][ C1] CR2: 0000001b3411eff8 CR3: 0000000061956000 CR4: 0000000000350ef0 [ 974.986708][ C1] Call Trace: [ 974.989997][ C1] [ 974.992852][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 974.999216][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 975.004869][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.010526][ C1] ? __lock_acquire+0x137a/0x2040 [ 975.015598][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 975.021441][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.027096][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 975.033360][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 975.038757][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.044422][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 975.050079][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.055731][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 975.060944][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.066597][ C1] ? acct_account_cputime+0xd3/0x210 [ 975.071911][ C1] ? update_process_times+0x1ce/0x230 [ 975.077397][ C1] ? tick_nohz_handler+0x37c/0x500 [ 975.082529][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 975.088006][ C1] ? __hrtimer_run_queues+0x553/0xd50 [ 975.093393][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 975.099417][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 975.106026][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.111679][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 975.117782][ C1] ? hrtimer_interrupt+0x396/0x990 [ 975.122937][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 975.129126][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 975.134957][ C1] [ 975.137895][ C1] [ 975.140834][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 975.147016][ C1] ? smp_call_function_many_cond+0x1847/0x29d0 [ 975.153188][ C1] ? smp_call_function_many_cond+0x1878/0x29d0 [ 975.159362][ C1] ? smp_call_function_many_cond+0x1860/0x29d0 [ 975.165540][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 975.171211][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 975.176257][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 975.181938][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.187597][ C1] ? __get_immv32+0x19c/0x350 [ 975.192310][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 975.198659][ C1] ? __pfx___might_resched+0x10/0x10 [ 975.203976][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 975.209026][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 975.214161][ C1] text_poke_bp_batch+0x352/0xb30 [ 975.219224][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 975.224806][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 975.230728][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 975.236393][ C1] text_poke_bp+0xb0/0x100 [ 975.240831][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.246491][ C1] ? __pfx_text_poke_bp+0x10/0x10 [ 975.251564][ C1] ? trace_contention_end+0x3c/0x120 [ 975.256874][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.262527][ C1] ? __mutex_lock+0x2ef/0xd70 [ 975.267221][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 975.272889][ C1] __static_call_transform+0x51a/0x810 [ 975.278368][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 975.284023][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 975.290455][ C1] ? __pfx___static_call_transform+0x10/0x10 [ 975.296481][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 975.302419][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 975.308852][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 975.314602][ C1] arch_static_call_transform+0x141/0x380 [ 975.320353][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 975.326790][ C1] ? __SCT__tp_func_lock_release+0x8/0x8 [ 975.332458][ C1] __static_call_update+0xd8/0x5e0 [ 975.337601][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 975.344044][ C1] ? __pfx___static_call_update+0x10/0x10 [ 975.349793][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.355467][ C1] ? rcu_is_watching+0x15/0xb0 [ 975.360269][ C1] ? tracepoint_add_func+0x2e4/0x9e0 [ 975.365588][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.371243][ C1] ? tracepoint_add_func+0x49a/0x9e0 [ 975.376565][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 975.382998][ C1] tracepoint_add_func+0x918/0x9e0 [ 975.388147][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 975.394583][ C1] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 975.401562][ C1] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 975.409057][ C1] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 975.415494][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.421148][ C1] ? anon_inode_getfile+0xff/0x180 [ 975.426299][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.431978][ C1] ? bpf_probe_register+0x134/0x1f0 [ 975.437233][ C1] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 975.442654][ C1] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 975.448739][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 975.454442][ C1] bpf_raw_tracepoint_open+0x1c2/0x240 [ 975.459952][ C1] __sys_bpf+0x3c0/0x810 [ 975.464231][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 975.469047][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 975.475077][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 975.481457][ C1] ? do_syscall_64+0x100/0x230 [ 975.486253][ C1] __x64_sys_bpf+0x7c/0x90 [ 975.490701][ C1] do_syscall_64+0xf3/0x230 [ 975.495237][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.501160][ C1] RIP: 0033:0x7f3055f79ef9 [ 975.505597][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.525492][ C1] RSP: 002b:00007f3056cd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 975.533941][ C1] RAX: ffffffffffffffda RBX: 00007f3056116058 RCX: 00007f3055f79ef9 [ 975.541931][ C1] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000011 [ 975.549930][ C1] RBP: 00007f3055fe793e R08: 0000000000000000 R09: 0000000000000000 [ 975.557924][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.565911][ C1] R13: 0000000000000000 R14: 00007f3056116058 R15: 00007fff104ad588 [ 975.573925][ C1]