last executing test programs: 2.987095762s ago: executing program 2 (id=932): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) 2.703036498s ago: executing program 2 (id=934): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.276519762s ago: executing program 2 (id=938): r0 = socket(0x11, 0x80003, 0x402) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 2.120679901s ago: executing program 2 (id=941): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.861561826s ago: executing program 0 (id=944): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010100, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bf, 0x2, 0x7e, 0x6b}, 0x3c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.818360408s ago: executing program 3 (id=946): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x7f, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 1.702072385s ago: executing program 0 (id=947): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 1.620709849s ago: executing program 3 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x40000) 1.524067745s ago: executing program 3 (id=950): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}}, 0x40010) 1.43544447s ago: executing program 0 (id=952): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 1.325705366s ago: executing program 3 (id=954): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018170000", @ANYRES32=r0, @ANYBLOB="00000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r2, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}, 0x10) 1.289291568s ago: executing program 0 (id=955): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x5) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 1.132539187s ago: executing program 2 (id=957): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.132178027s ago: executing program 3 (id=958): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@fat=@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_mixed}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@uni_xlateno}]}, 0x29, 0x339, &(0x7f00000011c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 973.488916ms ago: executing program 1 (id=959): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) 818.596025ms ago: executing program 1 (id=960): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20880) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0xf) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 716.95642ms ago: executing program 1 (id=961): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 655.337713ms ago: executing program 3 (id=962): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 480.623314ms ago: executing program 1 (id=963): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 423.240397ms ago: executing program 1 (id=964): r0 = memfd_create(&(0x7f0000000440)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.h\xfc\x14\x05\x00\xfd\xa4\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k2Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\x04\x87\xe1$a\xcd\xaf\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%u\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\xf7\xa9\xa4\x1c\x15+\x84\x04\xce#\xf6\xda\xaa\xeb|\xb9\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:l\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\xf73\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xb2\xc9\xe4\x14A\x92P\x83o\xdb\x1d{E\xe8\xec\x85\xd4\xd2\x19\x18\xfd\xfcc~Y\x8f\xb3\x1d<\x91O\xe7\x04\x11\x1f\xbdz\xf1J\xc2\xb2\xdfH\xa7\xa7\xb80I\xc7P\xe9\n\xc8\xd6\x82\xc0\x1d\x82\x83$ky\xea\x9c5\xf3kF\xf5\xf3\xb2\xf4\r\xe3\xfe\xe0\xef8@|\xf9UGNI\xd2\xd1\xda\xcf:\x94Y\xb0\x80\xc4N\x95\xec\x90{\x19\\\f\x8b\xe1L\x06\xf42\x0e\xd1\xa9i)?\x7f;\xee\xfe\xc2\x10)\x1dQ\xcac\x14\xe8L\x16\x12!\x8120\x8e\xc9--\x96\xe3\x82\x8dT\x9b,\xc6\x83\xcb\x9bW\xa81\x9b\x88\xce\xaa\x01\xe0\x8cfVu\xdc\xf6\'\xc10a\x11\x98\xd6\x9cGp\xfeQ 1 [ 87.292417][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.301872][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.310016][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.318880][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.326349][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.334351][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.336121][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.351436][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.359477][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.367877][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.375194][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.380855][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.390176][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.397747][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.411272][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.425743][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.427608][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.455900][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.463743][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.472169][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.479777][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.494287][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.501966][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.120999][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.177489][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.303704][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 88.382800][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.391980][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.400001][ T5774] bridge_slave_0: entered allmulticast mode [ 88.408205][ T5774] bridge_slave_0: entered promiscuous mode [ 88.428379][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.436139][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.443414][ T5776] bridge_slave_0: entered allmulticast mode [ 88.450950][ T5776] bridge_slave_0: entered promiscuous mode [ 88.463450][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.471294][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.479146][ T5776] bridge_slave_1: entered allmulticast mode [ 88.486565][ T5776] bridge_slave_1: entered promiscuous mode [ 88.493897][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.501294][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.510561][ T5774] bridge_slave_1: entered allmulticast mode [ 88.517986][ T5774] bridge_slave_1: entered promiscuous mode [ 88.536853][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.617495][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.650013][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.662805][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.675898][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.685304][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.692556][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.700501][ T5777] bridge_slave_0: entered allmulticast mode [ 88.707993][ T5777] bridge_slave_0: entered promiscuous mode [ 88.716939][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.724107][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.731926][ T5777] bridge_slave_1: entered allmulticast mode [ 88.740012][ T5777] bridge_slave_1: entered promiscuous mode [ 88.825198][ T5774] team0: Port device team_slave_0 added [ 88.851223][ T5776] team0: Port device team_slave_0 added [ 88.860658][ T5776] team0: Port device team_slave_1 added [ 88.869021][ T5774] team0: Port device team_slave_1 added [ 88.889591][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.903276][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.947902][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.955054][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.981344][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.029452][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.037192][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.045536][ T5775] bridge_slave_0: entered allmulticast mode [ 89.054055][ T5775] bridge_slave_0: entered promiscuous mode [ 89.072919][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.080363][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.106894][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.130733][ T5777] team0: Port device team_slave_0 added [ 89.140199][ T5777] team0: Port device team_slave_1 added [ 89.147823][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.155159][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.162367][ T5775] bridge_slave_1: entered allmulticast mode [ 89.170805][ T5775] bridge_slave_1: entered promiscuous mode [ 89.179168][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.186492][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.212932][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.275773][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.282764][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.309413][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.339888][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.347088][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.373436][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.413527][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.423608][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.434033][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.460369][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.475319][ T5784] Bluetooth: hci2: command tx timeout [ 89.504718][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.529397][ T5776] hsr_slave_0: entered promiscuous mode [ 89.536162][ T5776] hsr_slave_1: entered promiscuous mode [ 89.548589][ T5774] hsr_slave_0: entered promiscuous mode [ 89.555227][ T5784] Bluetooth: hci3: command tx timeout [ 89.562167][ T5774] hsr_slave_1: entered promiscuous mode [ 89.565152][ T51] Bluetooth: hci0: command tx timeout [ 89.573126][ T5784] Bluetooth: hci1: command tx timeout [ 89.579641][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.588611][ T5774] Cannot create hsr debugfs directory [ 89.666515][ T5777] hsr_slave_0: entered promiscuous mode [ 89.673516][ T5777] hsr_slave_1: entered promiscuous mode [ 89.683074][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.690872][ T5777] Cannot create hsr debugfs directory [ 89.726559][ T5775] team0: Port device team_slave_0 added [ 89.777875][ T5775] team0: Port device team_slave_1 added [ 89.839657][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.846793][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.877263][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.920862][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.928152][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.957481][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.169504][ T5775] hsr_slave_0: entered promiscuous mode [ 90.176795][ T5775] hsr_slave_1: entered promiscuous mode [ 90.183640][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.191530][ T5775] Cannot create hsr debugfs directory [ 90.348929][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.366283][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.398117][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.409044][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.508854][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.531105][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.546305][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.560075][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.678928][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.691412][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.703146][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.714454][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.839239][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.850689][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.862979][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.880079][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.933285][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.978341][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.997374][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.041925][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.049405][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.079807][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.087254][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.101817][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.146382][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.153641][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.164117][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.171386][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.271010][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.359228][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.377033][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.402684][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.409927][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.457793][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.465064][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.513265][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.555257][ T5784] Bluetooth: hci2: command tx timeout [ 91.587987][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.595213][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.633602][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.640963][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.649262][ T5784] Bluetooth: hci1: command tx timeout [ 91.655053][ T5784] Bluetooth: hci3: command tx timeout [ 91.661117][ T5784] Bluetooth: hci0: command tx timeout [ 91.910681][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.982346][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.060565][ T5774] veth0_vlan: entered promiscuous mode [ 92.119593][ T5774] veth1_vlan: entered promiscuous mode [ 92.208266][ T23] cfg80211: failed to load regulatory.db [ 92.221131][ T5776] veth0_vlan: entered promiscuous mode [ 92.250605][ T5774] veth0_macvtap: entered promiscuous mode [ 92.281531][ T5776] veth1_vlan: entered promiscuous mode [ 92.289716][ T5774] veth1_macvtap: entered promiscuous mode [ 92.342226][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.380530][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.401814][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.415513][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.440687][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.449809][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.459282][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.468350][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.487189][ T5776] veth0_macvtap: entered promiscuous mode [ 92.503435][ T5776] veth1_macvtap: entered promiscuous mode [ 92.569640][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.582088][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.597565][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.609918][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.620818][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.633387][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.670145][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.679322][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.690071][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.699921][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.779410][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.800101][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.811095][ T5777] veth0_vlan: entered promiscuous mode [ 92.879181][ T5775] veth0_vlan: entered promiscuous mode [ 92.903673][ T5777] veth1_vlan: entered promiscuous mode [ 92.918855][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.933275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.968599][ T5775] veth1_vlan: entered promiscuous mode [ 93.035647][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.051548][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.132217][ T5777] veth0_macvtap: entered promiscuous mode [ 93.178518][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.192980][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.211712][ T5777] veth1_macvtap: entered promiscuous mode [ 93.269070][ T5775] veth0_macvtap: entered promiscuous mode [ 93.326921][ T5775] veth1_macvtap: entered promiscuous mode [ 93.365035][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.394348][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.415304][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.448157][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.478829][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.506037][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.518923][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.531734][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.542672][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.557196][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.579658][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.601000][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.615548][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.628201][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.638581][ T51] Bluetooth: hci2: command tx timeout [ 93.665478][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.683336][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.698231][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.713500][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.723716][ T51] Bluetooth: hci0: command tx timeout [ 93.723759][ T51] Bluetooth: hci3: command tx timeout [ 93.735809][ T5784] Bluetooth: hci1: command tx timeout [ 93.745284][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.760458][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.773116][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.810949][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.823039][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.833520][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.844448][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.855059][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.867082][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.905072][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.933492][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.946540][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.958796][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.968938][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.182664][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.202312][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.251365][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.276059][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.392181][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.411597][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.503527][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.564810][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.932516][ T5890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.972941][ T5892] syz.3.14[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.057868][ T5895] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 95.063385][ T5892] loop3: detected capacity change from 0 to 2048 [ 95.167200][ T5892] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 95.222220][ T5892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.715476][ T5792] Bluetooth: hci2: command tx timeout [ 95.795038][ T5784] Bluetooth: hci0: command tx timeout [ 95.795599][ T51] Bluetooth: hci1: command tx timeout [ 95.800907][ T5792] Bluetooth: hci3: command tx timeout [ 95.975563][ T5917] loop1: detected capacity change from 0 to 256 [ 96.011175][ T5917] ======================================================= [ 96.011175][ T5917] WARNING: The mand mount option has been deprecated and [ 96.011175][ T5917] and is ignored by this kernel. Remove the mand [ 96.011175][ T5917] option from the mount to silence this warning. [ 96.011175][ T5917] ======================================================= [ 96.059669][ T28] audit: type=1326 audit(1770860569.869:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5911 comm="syz.3.22" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd075b9bf79 code=0x0 [ 96.898962][ T5943] loop3: detected capacity change from 0 to 16 [ 96.954513][ T5943] erofs: (device loop3): mounted with root inode @ nid 36. [ 97.035839][ T5943] syz.3.31: attempt to access beyond end of device [ 97.035839][ T5943] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 97.102102][ T5943] syz.3.31: attempt to access beyond end of device [ 97.102102][ T5943] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 97.175719][ T5943] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 97.217689][ T28] audit: type=1800 audit(1770860571.079:3): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.31" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 97.293919][ T5943] syz.3.31 (5943) used greatest stack depth: 18480 bytes left [ 97.952727][ T5960] loop1: detected capacity change from 0 to 128 [ 98.005853][ T5938] loop2: detected capacity change from 0 to 40427 [ 98.026242][ T5960] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 98.064142][ T5960] hpfs: filesystem error: improperly stopped [ 98.070669][ T5960] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 98.095297][ T5960] hpfs: You really don't want any checks? You are crazy... [ 98.116850][ T5938] F2FS-fs (loop2): invalid crc value [ 98.141420][ T5960] hpfs: hpfs_map_sector(): read error [ 98.153576][ T5960] hpfs: code page support is disabled [ 98.161259][ T5960] hpfs: hpfs_map_4sectors(): unaligned read [ 98.178654][ T5960] hpfs: hpfs_map_4sectors(): unaligned read [ 98.189889][ T5960] hpfs: filesystem error: unable to find root dir [ 98.210864][ T5938] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.317297][ T5960] hpfs: hpfs_map_4sectors(): unaligned read [ 98.341685][ T5960] hpfs: hpfs_map_sector(): read error [ 98.483851][ T5938] F2FS-fs (loop2): Start checkpoint disabled! [ 98.587497][ T5938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 98.869739][ T5934] loop0: detected capacity change from 0 to 65536 [ 98.979121][ T5934] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 99.190681][ T12] kworker/u4:1: attempt to access beyond end of device [ 99.190681][ T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 99.207924][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 99.220692][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 99.242210][ T5934] XFS (loop0): Ending clean mount [ 99.614302][ T5774] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 99.956113][ T6005] syz.1.49 (6005) used obsolete PPPIOCDETACH ioctl [ 100.368069][ T6011] loop1: detected capacity change from 0 to 4096 [ 100.488517][ T6016] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.642792][ T28] audit: type=1800 audit(1770860574.499:4): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 100.996902][ T6026] loop1: detected capacity change from 0 to 1024 [ 101.267077][ T6026] hfsplus: bad catalog entry type [ 101.350775][ T33] hfsplus: b-tree write err: -5, ino 4 [ 101.644769][ T6035] loop1: detected capacity change from 0 to 4096 [ 102.088263][ T6035] ntfs3: loop1: failed to convert name for inode 1e. [ 102.156979][ T6032] loop2: detected capacity change from 0 to 32768 [ 102.479083][ T6045] loop3: detected capacity change from 0 to 64 [ 102.620272][ T6045] syz.3.67: attempt to access beyond end of device [ 102.620272][ T6045] loop3: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 102.657041][ T6045] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 102.673260][ T6045] syz.3.67: attempt to access beyond end of device [ 102.673260][ T6045] loop3: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 102.726029][ T6045] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 102.756138][ T6045] syz.3.67: attempt to access beyond end of device [ 102.756138][ T6045] loop3: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 102.784271][ T6045] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 102.822199][ T6045] syz.3.67: attempt to access beyond end of device [ 102.822199][ T6045] loop3: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 102.921924][ T6045] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 102.950963][ T6045] syz.3.67: attempt to access beyond end of device [ 102.950963][ T6045] loop3: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 102.992788][ T6045] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 103.011824][ T6045] syz.3.67: attempt to access beyond end of device [ 103.011824][ T6045] loop3: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 103.048897][ T6045] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 103.076147][ T6045] syz.3.67: attempt to access beyond end of device [ 103.076147][ T6045] loop3: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 103.092515][ T6045] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 103.100230][ T2180] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.103971][ T6045] syz.3.67: attempt to access beyond end of device [ 103.103971][ T6045] loop3: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 103.158539][ T6045] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 103.168359][ T6045] syz.3.67: attempt to access beyond end of device [ 103.168359][ T6045] loop3: rw=2049, sector=78, nr_sectors = 95 limit=64 [ 103.344470][ T2180] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 103.374413][ T2180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.420616][ T2180] usb 1-1: config 0 descriptor?? [ 103.467283][ T2180] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 103.632767][ T6052] loop2: detected capacity change from 0 to 32768 [ 103.806416][ T6052] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.982521][ T6073] netlink: 264 bytes leftover after parsing attributes in process `syz.3.77'. [ 104.024791][ T6073] netlink: 48 bytes leftover after parsing attributes in process `syz.3.77'. [ 104.081043][ T2180] gspca_cpia1: usb_control_msg 01, error -71 [ 104.088795][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 104.106802][ T2180] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 104.180131][ T2180] usb 1-1: USB disconnect, device number 2 [ 104.318873][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 104.343704][ T6075] loop1: detected capacity change from 0 to 4096 [ 104.360601][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 104.529203][ T28] audit: type=1326 audit(1770860578.389:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2b19bf79 code=0x7ffc0000 [ 104.561421][ T28] audit: type=1326 audit(1770860578.409:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2b19bf79 code=0x7ffc0000 [ 104.589042][ T28] audit: type=1326 audit(1770860578.419:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fcf2b19bf79 code=0x7ffc0000 [ 104.636638][ T28] audit: type=1326 audit(1770860578.479:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2b19bf79 code=0x7ffc0000 [ 104.688874][ T28] audit: type=1326 audit(1770860578.479:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6081 comm="syz.2.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2b19bf79 code=0x7ffc0000 [ 104.940605][ T6089] loop2: detected capacity change from 0 to 8 [ 105.548581][ T6105] loop3: detected capacity change from 0 to 8192 [ 105.595141][ T6105] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.704781][ T6105] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 105.765553][ T6105] REISERFS (device loop3): using ordered data mode [ 105.782125][ T6105] reiserfs: using flush barriers [ 105.827843][ T6105] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.886726][ T6105] REISERFS (device loop3): checking transaction log (loop3) [ 105.922196][ T6105] REISERFS (device loop3): Using r5 hash to sort names [ 105.951534][ T6105] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 106.023307][ T6105] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 106.588280][ T5863] IPVS: starting estimator thread 0... [ 106.694531][ T6140] IPVS: using max 19 ests per chain, 45600 per kthread [ 107.747388][ T28] audit: type=1326 audit(1770860581.609:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd075b9bf79 code=0x0 [ 108.021645][ T6186] autofs4:pid:6186:autofs_fill_super: called with bogus options [ 108.258295][ T28] audit: type=1800 audit(1770860582.119:11): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.129" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 108.428450][ T6202] mmap: syz.1.133 (6202) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.556135][ T2180] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.679013][ T6209] loop3: detected capacity change from 0 to 64 [ 108.767361][ T2180] usb 3-1: Using ep0 maxpacket: 32 [ 108.786505][ T2180] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 108.812309][ T2180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.829805][ T2180] usb 3-1: Product: syz [ 108.854237][ T2180] usb 3-1: Manufacturer: syz [ 108.859019][ T2180] usb 3-1: SerialNumber: syz [ 108.872735][ T2180] usb 3-1: config 0 descriptor?? [ 109.057734][ T6215] loop1: detected capacity change from 0 to 2048 [ 109.070769][ T6215] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.169413][ T2180] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 002 [ 109.398355][ T6220] loop3: detected capacity change from 0 to 1024 [ 109.412154][ T2180] usb 3-1: USB disconnect, device number 2 [ 109.418190][ T6222] block nbd0: Unsupported socket: should be TCP or UNIX. [ 109.431968][ T6220] EXT4-fs: Ignoring removed oldalloc option [ 109.461471][ T6220] EXT4-fs: Ignoring removed bh option [ 109.533703][ T6220] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.588405][ T6220] EXT4-fs (loop3): invalid inodes per group: 204800 [ 109.588405][ T6220] [ 109.623015][ T6227] loop7: detected capacity change from 0 to 7 [ 109.647071][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.656747][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.666807][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.676222][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.686121][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.695527][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.754211][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.763506][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.774732][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.784006][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.799257][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.808673][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.816907][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.826307][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.834777][ T6227] ldm_validate_partition_table(): Disk read failed. [ 109.846403][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.855700][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.886912][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.896268][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.909501][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.918813][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.944503][ T6227] Dev loop7: unable to read RDB block 0 [ 109.971966][ T6227] loop7: unable to read partition table [ 109.978440][ T6227] loop7: partition table beyond EOD, truncated [ 109.991755][ T6227] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 110.247503][ T6237] loop0: detected capacity change from 0 to 16 [ 110.273396][ T6237] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 110.580492][ T6244] loop3: detected capacity change from 0 to 2048 [ 110.658447][ T6244] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.670496][ T6242] loop2: detected capacity change from 0 to 8192 [ 110.689054][ T6242] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.711730][ T6242] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 110.721373][ T6242] REISERFS (device loop2): using ordered data mode [ 110.728469][ T6242] reiserfs: using flush barriers [ 110.742553][ T6242] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.759921][ T6242] REISERFS (device loop2): checking transaction log (loop2) [ 110.779945][ T6244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.045264][ T6242] REISERFS (device loop2): Using tea hash to sort names [ 111.083801][ T6242] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 111.154337][ T28] audit: type=1800 audit(1770860585.009:12): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.151" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 111.317325][ T6258] loop1: detected capacity change from 0 to 64 [ 111.370771][ T6260] Attempt to restore checkpoint with obsolete wellknown handles [ 111.757496][ T6269] loop1: detected capacity change from 0 to 1024 [ 111.797892][ T6269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.889935][ T6269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.267791][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.015361][ T6283] loop0: detected capacity change from 0 to 32768 [ 113.160393][ T6301] warning: `syz.1.175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.520925][ T6305] netlink: 76 bytes leftover after parsing attributes in process `syz.0.176'. [ 113.546763][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 113.761762][ T6292] loop3: detected capacity change from 0 to 40427 [ 113.803414][ T6292] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 113.834880][ T6292] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 113.854263][ T6292] F2FS-fs (loop3): Image doesn't support compression [ 113.876455][ T6292] F2FS-fs (loop3): invalid crc value [ 113.907067][ T6292] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.967393][ T6311] loop0: detected capacity change from 0 to 2048 [ 113.976340][ T6313] netlink: 27 bytes leftover after parsing attributes in process `syz.1.181'. [ 114.047277][ T6311] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.099850][ T6299] loop2: detected capacity change from 0 to 32768 [ 114.117156][ T6292] F2FS-fs (loop3): Start checkpoint disabled! [ 114.153051][ T6292] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 114.194658][ T6299] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.218226][ T6292] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 114.227811][ T6320] UDF-fs: bad mount option "#! [ 114.227811][ T6320] s" or missing value [ 114.326742][ T6299] XFS (loop2): Ending clean mount [ 114.403046][ T6299] XFS (loop2): Quotacheck needed: Please wait. [ 114.511923][ T6299] XFS (loop2): Quotacheck: Done. [ 114.688079][ T6327] input: syz1 as /devices/virtual/input/input7 [ 114.818856][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.264490][ T1190] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.451902][ T1190] usb 2-1: Using ep0 maxpacket: 8 [ 116.477964][ T1190] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 116.504296][ T1190] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.538730][ T1190] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.564257][ T1190] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.595126][ T1190] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.629571][ T1190] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.639075][ T1190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.669034][ T6359] loop2: detected capacity change from 0 to 40427 [ 116.683305][ T6359] F2FS-fs (loop2): Invalid log blocks per segment (83886089) [ 116.693652][ T6359] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 116.706585][ T6359] F2FS-fs (loop2): invalid crc value [ 116.737956][ T6359] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.858972][ T6359] F2FS-fs (loop2): Start checkpoint disabled! [ 116.871988][ T6359] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 116.883328][ T6359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 116.893037][ T1190] usb 2-1: GET_CAPABILITIES returned 0 [ 116.908818][ T1190] usbtmc 2-1:16.0: can't read capabilities [ 117.170139][ T2180] usb 2-1: USB disconnect, device number 2 [ 117.229982][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 117.271007][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 117.280967][ T6382] Zero length message leads to an empty skb [ 117.303154][ T12] kworker/u4:1: attempt to access beyond end of device [ 117.303154][ T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 117.322058][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 117.330932][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 118.143043][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'. [ 118.169639][ T6407] netlink: 3 bytes leftover after parsing attributes in process `syz.3.218'. [ 118.503883][ T6423] dccp_invalid_packet: pskb_may_pull failed [ 119.109801][ T6438] loop2: detected capacity change from 0 to 128 [ 119.352753][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.362565][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.659372][ T6449] netlink: 64 bytes leftover after parsing attributes in process `syz.2.234'. [ 120.141226][ T6464] loop3: detected capacity change from 0 to 2048 [ 120.183250][ T6464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.241749][ T6468] loop2: detected capacity change from 0 to 128 [ 120.288904][ T6464] capability: warning: `syz.3.242' uses 32-bit capabilities (legacy support in use) [ 120.300407][ T6468] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 120.366694][ T6468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.999580][ T6460] loop1: detected capacity change from 0 to 32768 [ 121.138430][ T6460] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.281889][ T6504] loop0: detected capacity change from 0 to 512 [ 121.342827][ T6504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.376511][ T6460] XFS (loop1): Ending clean mount [ 121.419237][ T6460] XFS (loop1): Quotacheck needed: Please wait. [ 121.573572][ T6460] XFS (loop1): Quotacheck: Done. [ 121.595353][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.651554][ T6512] loop3: detected capacity change from 0 to 256 [ 121.685117][ T6512] exfat: Deprecated parameter 'utf8' [ 121.765272][ T6512] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 121.955884][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.055660][ T6518] capability: warning: `syz.3.261' uses deprecated v2 capabilities in a way that may be insecure [ 122.103720][ T6520] loop0: detected capacity change from 0 to 256 [ 122.161238][ T6520] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 122.841743][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 123.074994][ T2180] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.102313][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 123.274554][ T2180] usb 1-1: Using ep0 maxpacket: 16 [ 123.288834][ T2180] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 123.310453][ T2180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.329256][ T2180] usb 1-1: Product: syz [ 123.335437][ T2180] usb 1-1: Manufacturer: syz [ 123.340121][ T2180] usb 1-1: SerialNumber: syz [ 123.346197][ T6558] IPv6: addrconf: prefix option has invalid lifetime [ 123.364409][ T2180] usb 1-1: config 0 descriptor?? [ 123.378116][ T2180] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 123.600777][ T6567] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 123.618746][ T2180] usb 1-1: USB disconnect, device number 3 [ 123.632609][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.641633][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.970083][ T6580] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.352538][ T788] kernel write not supported for file /vcsa (pid: 788 comm: kworker/1:2) [ 125.363923][ T6607] loop3: detected capacity change from 0 to 4096 [ 125.431293][ T6607] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 125.452593][ T6607] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 125.490934][ T6607] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 125.528431][ T6607] ntfs: volume version 3.1. [ 125.605406][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 125.692007][ T5777] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 126.044713][ T6621] loop3: detected capacity change from 0 to 64 [ 126.142493][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 126.368683][ T6629] macvlan0: entered promiscuous mode [ 126.391075][ T6629] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 126.408939][ T6629] netlink: 'syz.0.311': attribute type 2 has an invalid length. [ 126.977071][ T6653] loop2: detected capacity change from 0 to 128 [ 127.472213][ T6665] loop2: detected capacity change from 0 to 1024 [ 128.634670][ T6710] loop2: detected capacity change from 0 to 128 [ 129.068188][ T6719] fuse: Bad value for 'fd' [ 129.192298][ T6708] loop3: detected capacity change from 0 to 32768 [ 129.224759][ T6722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.272355][ T6708] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 129.291116][ T6708] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.408233][ T6708] XFS (loop3): Ending clean mount [ 129.421790][ T6708] XFS (loop3): Quotacheck needed: Please wait. [ 129.458385][ T12] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 129.512098][ T12] XFS (loop3): Unmount and run xfs_repair [ 129.519493][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 129.528915][ T2180] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.542636][ T12] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 129.553050][ T12] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 129.562917][ T12] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 129.572333][ T12] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 129.588646][ T12] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 129.601996][ T12] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 129.612559][ T12] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.622768][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 129.638497][ T12] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 129.653509][ T6741] syz.0.359 uses obsolete (PF_INET,SOCK_PACKET) [ 129.663975][ T6708] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 129.724337][ T2180] usb 3-1: Using ep0 maxpacket: 16 [ 129.736847][ T2180] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.754257][ T2180] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.764131][ T2180] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.770223][ T28] audit: type=1800 audit(1770860603.629:13): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 129.774600][ T2180] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 129.795051][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.864422][ T28] audit: type=1800 audit(1770860603.689:14): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 129.869938][ T2180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.923998][ T2180] usb 3-1: config 0 descriptor?? [ 129.985052][ T6743] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 130.004205][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.409747][ T2180] hid (null): report_id 3323596431 is invalid [ 130.436062][ T2180] hid (null): unknown global tag 0xe [ 130.449405][ T2180] hid (null): unknown global tag 0xe [ 130.463406][ T2180] hid (null): unknown global tag 0xe [ 130.473542][ T2180] hid (null): unknown global tag 0x63 [ 130.481902][ T2180] hid (null): unknown global tag 0xd [ 130.613163][ T6758] loop0: detected capacity change from 0 to 2048 [ 130.641144][ T6758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.692155][ T2180] usb 3-1: USB disconnect, device number 3 [ 130.794693][ T6762] netlink: 48 bytes leftover after parsing attributes in process `syz.1.369'. [ 130.836473][ T6762] netlink: 48 bytes leftover after parsing attributes in process `syz.1.369'. [ 130.904729][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 131.059420][ T6770] Set syz1 is full, maxelem 14 reached [ 131.176802][ T6772] loop0: detected capacity change from 0 to 512 [ 131.237386][ T6772] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.301321][ T6772] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.375782][ T6772] EXT4-fs (loop0): 1 orphan inode deleted [ 131.390536][ T6772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.657629][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.801012][ T6784] loop2: detected capacity change from 0 to 1024 [ 131.845859][ T6784] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.915367][ T6784] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.380: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 132.012407][ T6784] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.380: Bad quota inode: 3, type: 0 [ 132.054802][ T6784] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 132.076969][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.094739][ T6784] EXT4-fs (loop2): mount failed [ 132.103834][ T6793] program syz.0.383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.116893][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.164051][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164339][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.180888][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.183109][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.250518][ T6827] macsec1: entered promiscuous mode [ 133.264301][ T6827] macvlan1: entered promiscuous mode [ 133.277390][ T6827] macvlan1: left promiscuous mode [ 133.814500][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.068984][ T6825] loop2: detected capacity change from 0 to 40427 [ 134.125445][ T6825] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 134.152549][ T6825] F2FS-fs (loop2): invalid crc value [ 134.162082][ T6825] F2FS-fs (loop2): Found nat_bits in checkpoint [ 134.194539][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.242491][ T6825] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 134.434702][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.544058][ T5776] syz-executor: attempt to access beyond end of device [ 134.544058][ T5776] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.578209][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 134.880666][ T6863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.413'. [ 135.208611][ T6871] netem: change failed [ 135.239330][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.246968][ T6906] pimreg: tun_chr_ioctl cmd 1074025677 [ 136.264601][ T6906] pimreg: linktype set to 823 [ 136.274916][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.283116][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.307124][ T6879] loop2: detected capacity change from 0 to 40427 [ 136.320507][ T6879] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 136.331384][ T6879] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 136.351093][ T6879] F2FS-fs (loop2): Image doesn't support compression [ 136.363243][ T6879] F2FS-fs (loop2): invalid crc value [ 136.371014][ T6879] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.471774][ T6879] F2FS-fs (loop2): Start checkpoint disabled! [ 136.481803][ T6879] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 136.678871][ T6917] program syz.3.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.862428][ T12] kworker/u4:1: attempt to access beyond end of device [ 136.862428][ T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 136.891447][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.913655][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.958284][ T28] audit: type=1326 audit(1770860866.816:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.0.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd04199bf79 code=0x0 [ 137.251291][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.314544][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.467729][ T788] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 137.486710][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.507948][ T788] usb 4-1: config 0 descriptor?? [ 137.527178][ T788] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 137.609494][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 137.625831][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 138.044715][ T788] gspca_sn9c2028: read1 error -110 [ 138.059104][ T788] gspca_sn9c2028: read1 error -32 [ 138.119412][ T6943] overlayfs: invalid origin (0000005e40a88832162e012d21233a2c2826000000ca8a0000000000) [ 138.155999][ T6946] loop2: detected capacity change from 0 to 8 [ 138.225054][ T6946] SQUASHFS error: Unable to read directory block [629:fe] [ 138.326990][ T8] usb 4-1: USB disconnect, device number 2 [ 138.354832][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.314534][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.354595][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.395152][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.465039][ T6980] loop3: detected capacity change from 0 to 256 [ 139.556244][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 139.567308][ T5863] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.604233][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.641618][ T5863] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 139.674410][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.694990][ T5863] usb 1-1: config 0 descriptor?? [ 139.856572][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.471'. [ 139.872382][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 140.179350][ T5863] aquacomputer_d5next 0003:0C70:F00E.0002: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 140.434761][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.612515][ T2180] usb 1-1: USB disconnect, device number 4 [ 140.759523][ T6996] loop3: detected capacity change from 0 to 32768 [ 140.789447][ T6996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.473 (6996) [ 140.846988][ T6996] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.859318][ T6996] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 140.869894][ T6996] BTRFS info (device loop3): using free space tree [ 140.927713][ T6999] loop2: detected capacity change from 0 to 32768 [ 141.034427][ T6996] BTRFS info (device loop3): enabling ssd optimizations [ 141.036968][ T28] audit: type=1800 audit(1770860870.896:16): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.474" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 141.041633][ T6996] BTRFS info (device loop3): auto enabling async discard [ 141.079005][ T6999] ialloc: diAlloc returned -5! [ 141.423795][ T7024] loop0: detected capacity change from 0 to 512 [ 141.455326][ T7024] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.474694][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.582302][ T7024] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 141.683160][ T7024] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.478: attempt to clear invalid blocks 2 len 1 [ 141.742000][ T7024] EXT4-fs (loop0): Remounting filesystem read-only [ 141.758916][ T7024] EXT4-fs (loop0): 1 truncate cleaned up [ 141.783846][ T7024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.880531][ T7033] loop2: detected capacity change from 0 to 2048 [ 141.898098][ T5777] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.940152][ T7033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.967840][ T7024] EXT4-fs: Ignoring removed orlov option [ 141.975788][ T7024] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 142.016453][ T7024] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 142.090066][ T7035] netlink: 'syz.1.482': attribute type 6 has an invalid length. [ 142.205735][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.368566][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.515750][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.601707][ T7046] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 143.074100][ T28] audit: type=1326 audit(1770860872.926:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.3.495" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd075b9bf79 code=0x0 [ 143.380847][ T7069] loop0: detected capacity change from 0 to 4096 [ 143.557200][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.598709][ T7069] ntfs3: loop0: failed to convert name for inode 1e. [ 143.902814][ T7085] loop0: detected capacity change from 0 to 4096 [ 143.997935][ T7085] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 144.034508][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.232711][ T7089] loop2: detected capacity change from 0 to 4096 [ 144.290853][ T7089] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 144.315241][ T7093] loop0: detected capacity change from 0 to 256 [ 144.321718][ T7089] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 144.342961][ T7093] exfat: Deprecated parameter 'namecase' [ 144.349478][ T7089] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 144.379356][ T7095] loop3: detected capacity change from 0 to 512 [ 144.396305][ T7093] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 144.405052][ T7089] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 144.438258][ T7095] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 144.472044][ T7095] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 144.534431][ T7095] System zones: 0-1, 15-15, 18-18, 34-34 [ 144.542419][ T7093] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 144.558140][ T7089] ntfs: volume version 3.1. [ 144.564059][ T7095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.600717][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.616078][ T7095] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 144.633062][ T7095] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.685196][ T7095] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 144.724912][ T7095] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.511: bg 0: block 40: padding at end of block bitmap is not set [ 144.776715][ T7095] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 144.794676][ T7089] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp852. You might want to try to use the mount option nls=utf8. [ 144.824667][ T7095] EXT4-fs (loop3): 1 truncate cleaned up [ 144.837385][ T7095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.878767][ T7089] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 144.947506][ T7089] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp852. You might want to try to use the mount option nls=utf8. [ 144.977142][ T7089] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 144.986531][ T7095] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.511: bad symlink. [ 145.003185][ T7095] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.511: bad symlink. [ 145.078809][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.277725][ T7111] loop2: detected capacity change from 0 to 64 [ 145.407780][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.619242][ T7119] loop2: detected capacity change from 0 to 8192 [ 145.641227][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.658336][ T7119] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 145.727738][ T7119] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 145.760596][ T7119] REISERFS (device loop2): using ordered data mode [ 145.768594][ T7119] reiserfs: using flush barriers [ 145.789683][ T7119] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.817462][ T7119] REISERFS (device loop2): checking transaction log (loop2) [ 145.826815][ T7119] REISERFS (device loop2): Using r5 hash to sort names [ 145.834511][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 145.845456][ T7119] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 145.860390][ T7119] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 145.901878][ T7128] ip6gretap0: entered promiscuous mode [ 145.938117][ T7128] ip6gretap0: left promiscuous mode [ 146.061367][ T7132] loop0: detected capacity change from 0 to 16 [ 146.087600][ T7132] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 146.401466][ T7140] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.531'. [ 146.598032][ T7146] loop0: detected capacity change from 0 to 256 [ 146.674595][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.684442][ T7146] FAT-fs (loop0): Directory bread(block 64) failed [ 146.692092][ T7146] FAT-fs (loop0): Directory bread(block 65) failed [ 146.714416][ T7146] FAT-fs (loop0): Directory bread(block 66) failed [ 146.721046][ T7146] FAT-fs (loop0): Directory bread(block 67) failed [ 146.774420][ T7146] FAT-fs (loop0): Directory bread(block 68) failed [ 146.781029][ T7146] FAT-fs (loop0): Directory bread(block 69) failed [ 146.825706][ T7146] FAT-fs (loop0): Directory bread(block 70) failed [ 146.867633][ T7146] FAT-fs (loop0): Directory bread(block 71) failed [ 146.889001][ T7146] FAT-fs (loop0): Directory bread(block 72) failed [ 146.908870][ T7146] FAT-fs (loop0): Directory bread(block 73) failed [ 147.140325][ T7136] loop3: detected capacity change from 0 to 32768 [ 147.226244][ T7136] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.401742][ T7136] XFS (loop3): Ending clean mount [ 147.435446][ T7136] XFS (loop3): Quotacheck needed: Please wait. [ 147.576103][ T7136] XFS (loop3): Quotacheck: Done. [ 147.715557][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.782104][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.442729][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.774345][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.015380][ T7177] loop2: detected capacity change from 0 to 8192 [ 149.107806][ T7177] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.166611][ T7177] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 149.176123][ T7177] REISERFS (device loop2): using ordered data mode [ 149.182683][ T7177] reiserfs: using flush barriers [ 149.200755][ T7177] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.230890][ T7177] REISERFS (device loop2): checking transaction log (loop2) [ 149.277139][ T7177] REISERFS (device loop2): Using r5 hash to sort names [ 149.304371][ T7177] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 149.620718][ T7187] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 149.788615][ T7190] Bluetooth: MGMT ver 1.22 [ 149.824388][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.955684][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 149.965065][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 149.977462][ T7197] macvlan0: entered allmulticast mode [ 149.987994][ T7197] veth1_vlan: entered allmulticast mode [ 150.835743][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.951853][ T7227] loop0: detected capacity change from 0 to 64 [ 151.072880][ T7227] Trying to free block not in datazone [ 151.081102][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.114338][ T7227] Trying to free block not in datazone [ 151.138227][ T7227] Trying to free block not in datazone [ 151.205080][ T7232] Trying to free block not in datazone [ 151.211446][ T7232] minix_free_inode: bit 5 already cleared [ 151.273850][ T7234] netlink: 'syz.3.571': attribute type 2 has an invalid length. [ 151.299476][ T7234] netlink: 14 bytes leftover after parsing attributes in process `syz.3.571'. [ 151.435047][ T51] block nbd0: Receive control failed (result -32) [ 151.484398][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.741263][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.750975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.877094][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.306021][ T7256] loop3: detected capacity change from 0 to 512 [ 152.914597][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.171174][ T7282] loop0: detected capacity change from 0 to 128 [ 153.187328][ T7282] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.383543][ T62] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.844289][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 153.887478][ T7278] loop2: detected capacity change from 0 to 40427 [ 153.909169][ T7278] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 153.918436][ T7278] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 153.954566][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.966890][ T7278] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.067144][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.073864][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 154.117565][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.142938][ T9] usb 4-1: config 0 descriptor?? [ 154.168667][ T7278] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 154.194453][ T7278] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.514703][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.611929][ T9] playstation 0003:054C:09CC.0003: hidraw0: USB HID v0.00 Device [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 154.802706][ T9] playstation 0003:054C:09CC.0003: Invalid byte count transferred, expected 16 got 0 [ 154.836281][ T9] playstation 0003:054C:09CC.0003: Failed to retrieve DualShock4 pairing info: -22 [ 154.875352][ T9] playstation 0003:054C:09CC.0003: Failed to get MAC address from DualShock4 [ 154.904368][ T9] playstation 0003:054C:09CC.0003: Failed to create dualshock4. [ 154.940348][ T9] playstation: probe of 0003:054C:09CC.0003 failed with error -22 [ 154.999931][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.097060][ T9] usb 4-1: USB disconnect, device number 3 [ 155.300665][ T7320] loop0: detected capacity change from 0 to 1024 [ 155.405191][ T62] hfsplus: b-tree write err: -5, ino 4 [ 155.438749][ T7322] loop2: detected capacity change from 0 to 2048 [ 155.457149][ T7322] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 155.517886][ T5787] udevd[5787]: incorrect nilfs2 checksum on /dev/loop2 [ 155.531734][ T7323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.861886][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 155.897169][ T7336] UHID_CREATE from different security context by process 282 (syz.3.614), this is not allowed. [ 156.036036][ T2180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.208318][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.343393][ T7348] loop0: detected capacity change from 0 to 1024 [ 156.389492][ T7348] EXT4-fs: Ignoring removed nobh option [ 156.405336][ T7348] EXT4-fs: Ignoring removed bh option [ 156.425888][ T7348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.473706][ T7348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.839688][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.020839][ T7370] loop0: detected capacity change from 0 to 256 [ 157.074554][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.111929][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 157.111944][ T28] audit: type=1800 audit(1770860886.966:22): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.628" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 157.162414][ T7370] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 157.211771][ T7370] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.336855][ T7375] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 157.383319][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'. [ 157.462260][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 157.494431][ T7384] block nbd1: Unsupported socket: should be TCP or UNIX. [ 157.959386][ T7398] loop0: detected capacity change from 0 to 1024 [ 158.060865][ T7398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.135947][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.215885][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.569841][ T7419] block nbd1: not configured, cannot reconfigure [ 158.615275][ T7421] vcan0: tx address claim with dlc 0 [ 158.643654][ T7423] loop3: detected capacity change from 0 to 128 [ 158.659594][ T7423] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 158.841799][ T7428] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 158.913936][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.655'. [ 159.154800][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.235201][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.373350][ T7440] loop2: detected capacity change from 0 to 256 [ 159.395671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.431413][ T7426] loop0: detected capacity change from 0 to 32768 [ 159.460415][ T7426] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.654 (7426) [ 159.500195][ T7426] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.521521][ T7426] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 159.564423][ T7426] BTRFS info (device loop0): enabling disk space caching [ 159.573199][ T7426] BTRFS info (device loop0): force clearing of disk cache [ 159.606190][ T7426] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 159.654598][ T7426] BTRFS info (device loop0): use zstd compression, level 3 [ 159.663065][ T7426] BTRFS info (device loop0): disk space caching is enabled [ 159.904435][ T7426] BTRFS info (device loop0): enabling ssd optimizations [ 159.924533][ T7426] BTRFS info (device loop0): auto enabling async discard [ 159.937177][ T7426] BTRFS info (device loop0): rebuilding free space tree [ 160.041830][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.107501][ T7426] BTRFS info (device loop0): disabling free space tree [ 160.125441][ T7426] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.151315][ T7426] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.184277][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.198890][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.392971][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 160.410695][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 160.452440][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.484535][ T9] usb 4-1: Product: syz [ 160.488813][ T9] usb 4-1: Manufacturer: syz [ 160.493460][ T9] usb 4-1: SerialNumber: syz [ 160.535190][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 160.768895][ T5774] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 160.866638][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.987034][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 161.009101][ T9] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 161.100614][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 161.119364][ T8] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 161.144287][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 161.164529][ T8] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 161.205518][ T8] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 161.237105][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.244398][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.303921][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 161.320972][ T8] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 161.346524][ T7485] loop0: detected capacity change from 0 to 16 [ 161.370004][ T8] usb 3-1: Product: syz [ 161.375779][ T8] usb 3-1: Manufacturer: syz [ 161.390786][ T8] usb 3-1: SerialNumber: syz [ 161.400335][ T7485] erofs: (device loop0): mounted with root inode @ nid 36. [ 161.417404][ T8] usb 3-1: config 0 descriptor?? [ 161.440603][ T8] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 161.460705][ T28] audit: type=1800 audit(1770860891.316:23): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.672" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 161.499706][ T8] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 161.731229][ T8] usb 3-1: USB disconnect, device number 4 [ 161.752816][ T8] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 162.274475][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.282767][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.782186][ T7501] loop3: detected capacity change from 0 to 32768 [ 162.801461][ T7501] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.679 (7501) [ 162.871506][ T7511] netlink: 'syz.2.683': attribute type 13 has an invalid length. [ 162.882577][ T7501] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.913835][ T7501] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 162.938618][ T7501] BTRFS info (device loop3): force clearing of disk cache [ 162.961102][ T7501] BTRFS info (device loop3): enabling auto defrag [ 162.981555][ T7501] BTRFS info (device loop3): enabling ssd optimizations [ 162.996695][ T7501] BTRFS info (device loop3): max_inline at 0 [ 163.039142][ T7501] BTRFS info (device loop3): enabling disk space caching [ 163.056886][ T7501] BTRFS info (device loop3): disk space caching is enabled [ 163.168069][ T7501] BTRFS info (device loop3): rebuilding free space tree [ 163.238574][ T7501] BTRFS info (device loop3): disabling free space tree [ 163.284614][ T7501] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.305552][ T7501] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.315458][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.426745][ T7506] loop0: detected capacity change from 0 to 32768 [ 163.444758][ T7506] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.681 (7506) [ 163.594427][ T28] audit: type=1800 audit(1770860893.436:24): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.679" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 163.711686][ T5795] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5795) [ 163.743715][ T5777] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.861935][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.869826][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.395576][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.808199][ T7537] loop0: detected capacity change from 0 to 512 [ 165.017920][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.117751][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.341574][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.406127][ T7544] loop0: detected capacity change from 0 to 8192 [ 165.494304][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.758513][ T7511] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.767645][ T7511] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.778970][ T7511] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.788293][ T7511] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.477731][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.514852][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.232587][ T7601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.715'. [ 167.559334][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.082335][ T7630] Bluetooth: MGMT ver 1.22 [ 168.292076][ T7613] loop0: detected capacity change from 0 to 32768 [ 168.354455][ T7613] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.721 (7613) [ 168.407180][ T7613] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 168.437949][ T7613] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 168.488245][ T7613] BTRFS info (device loop0): using free space tree [ 168.595741][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.635136][ T7613] BTRFS info (device loop0): enabling ssd optimizations [ 168.642238][ T7613] BTRFS info (device loop0): auto enabling async discard [ 169.256974][ T5774] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 169.555771][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.634525][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.642710][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.277022][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.414680][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 170.604397][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 170.611871][ T27] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 170.623755][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.643990][ T27] usb 3-1: config 0 descriptor?? [ 170.664060][ T27] as10x_usb: device has been detected [ 170.676346][ T7706] loop0: detected capacity change from 0 to 4096 [ 170.683756][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.686276][ T7706] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 170.701393][ T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 170.759962][ T27] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 170.830508][ T27] as10x_usb: error during firmware upload part1 [ 170.844970][ T27] Registered device nBox DVB-T Dongle [ 170.870680][ T28] audit: type=1800 audit(1770860900.726:25): pid=7706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.756" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 170.917316][ T7706] ntfs3: loop0: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 170.976707][ T5834] usb 3-1: USB disconnect, device number 5 [ 170.994562][ T7693] as102_open: can't find device for minor 0 [ 171.047659][ T5834] Unregistered device nBox DVB-T Dongle [ 171.049406][ T5834] as10x_usb: device has been disconnected [ 171.266155][ T7716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.275243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.314667][ T7716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.070715][ T7712] loop3: detected capacity change from 0 to 40427 [ 172.107935][ T7712] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 172.141094][ T7712] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 172.156683][ T7712] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 172.180874][ T7712] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 172.201209][ T7712] F2FS-fs (loop3): Image doesn't support compression [ 172.224019][ T7712] F2FS-fs (loop3): invalid crc value [ 172.241829][ T7712] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.410389][ T7712] F2FS-fs (loop3): Start checkpoint disabled! [ 172.466800][ T7712] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 172.473938][ T7712] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 172.596104][ T5834] net_ratelimit: 2046 callbacks suppressed [ 172.596122][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.770862][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.807623][ T62] kworker/u4:5: attempt to access beyond end of device [ 172.807623][ T62] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 172.822212][ T62] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 172.832980][ T62] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.253871][ T7758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'. [ 173.284736][ T5845] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 173.315441][ T7756] loop0: detected capacity change from 0 to 4096 [ 173.499561][ T5845] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 173.515228][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.554279][ T5845] usb 3-1: Product: syz [ 173.559026][ T5845] usb 3-1: Manufacturer: syz [ 173.563911][ T5845] usb 3-1: SerialNumber: syz [ 173.609380][ T5845] usb 3-1: config 0 descriptor?? [ 173.631099][ T5845] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 173.804607][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.001319][ T7772] loop0: detected capacity change from 0 to 2048 [ 174.025946][ T7772] EXT4-fs: Ignoring removed i_version option [ 174.085279][ T7772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.114434][ T7772] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.194384][ T51] Bluetooth: hci1: command tx timeout [ 174.280900][ T7768] loop3: detected capacity change from 0 to 32768 [ 174.357842][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.392178][ T7768] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 174.468556][ T5845] gspca_stk1135: reg_w 0x5 err -71 [ 174.477473][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 174.486679][ T5845] gspca_stk1135: Sensor write failed [ 174.492126][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 174.505714][ T5845] gspca_stk1135: Sensor write failed [ 174.511292][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 174.521009][ T5845] gspca_stk1135: Sensor read failed [ 174.526696][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 174.533236][ T5845] gspca_stk1135: Sensor read failed [ 174.539540][ T5845] gspca_stk1135: Detected sensor type unknown (0x0) [ 174.548239][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 174.566767][ T5845] gspca_stk1135: Sensor read failed [ 174.578940][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 174.605583][ T5845] gspca_stk1135: Sensor read failed [ 174.611038][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 174.624238][ T5845] gspca_stk1135: Sensor write failed [ 174.629730][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 174.649488][ T5845] gspca_stk1135: Sensor write failed [ 174.670626][ T5845] stk1135: probe of 3-1:0.0 failed with error -71 [ 174.680877][ T5845] usb 3-1: USB disconnect, device number 6 [ 174.765771][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 174.834746][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.277787][ T7793] loop3: detected capacity change from 0 to 4096 [ 175.634624][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.790003][ T7791] loop0: detected capacity change from 0 to 32768 [ 175.809681][ T7791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.793 (7791) [ 175.874587][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.894233][ T7791] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.926971][ T7791] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 175.954258][ T7791] BTRFS info (device loop0): setting nodatacow, compression disabled [ 175.962483][ T7791] BTRFS info (device loop0): enabling auto defrag [ 175.994310][ T7791] BTRFS info (device loop0): max_inline at 0 [ 176.001385][ T7791] BTRFS info (device loop0): using free space tree [ 176.204423][ T7791] BTRFS info (device loop0): auto enabling async discard [ 176.425067][ T7826] loop3: detected capacity change from 0 to 2048 [ 176.462048][ T7826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.560365][ T28] audit: type=1800 audit(1770860906.416:26): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.802" name="file3" dev="loop3" ino=1347 res=0 errno=0 [ 176.921337][ T5774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.931899][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.218954][ T7845] misc userio: Begin command sent, but we're already running [ 177.380553][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 177.855203][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 177.954644][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.076420][ T7865] vivid-000: disconnect [ 178.098287][ T7861] vivid-000: reconnect [ 178.110020][ T7860] loop0: detected capacity change from 0 to 4096 [ 178.145260][ T7860] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 178.200048][ T7860] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 178.316204][ T28] audit: type=1800 audit(1770860908.176:27): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.818" name="file1" dev="loop0" ino=29 res=0 errno=0 [ 178.674701][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.854253][ T788] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 178.994519][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.009479][ T7884] loop2: detected capacity change from 0 to 512 [ 179.067630][ T7884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.094217][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 179.106470][ T788] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 179.124574][ T7884] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.135646][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.153144][ T788] usb 1-1: config 0 descriptor?? [ 179.204326][ T28] audit: type=1800 audit(1770860909.056:28): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.829" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 179.224629][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.237953][ T788] as10x_usb: device has been detected [ 179.260356][ T788] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 179.274463][ T28] audit: type=1800 audit(1770860909.116:29): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.829" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 179.332740][ T788] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 179.356497][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.372402][ T788] as10x_usb: error during firmware upload part1 [ 179.413453][ T788] Registered device nBox DVB-T Dongle [ 179.424713][ T788] usb 1-1: USB disconnect, device number 5 [ 179.555807][ T788] Unregistered device nBox DVB-T Dongle [ 179.575063][ T788] as10x_usb: device has been disconnected [ 179.877138][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.034618][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.751302][ T7924] loop3: detected capacity change from 0 to 128 [ 181.074458][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.318696][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.848'. [ 181.541470][ T7930] loop2: detected capacity change from 0 to 32768 [ 181.550574][ T7928] loop0: detected capacity change from 0 to 32768 [ 181.593930][ T7924] loop3: detected capacity change from 0 to 32768 [ 181.597759][ T7930] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.846 (7930) [ 181.663491][ T7928] add_index: next_index = 0. Resetting! [ 181.682076][ T7924] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.844 (7924) [ 181.694724][ T7928] find_entry called with index >= next_index [ 181.706783][ T7928] find_entry called with index >= next_index [ 181.712875][ T7928] find_entry called with index >= next_index [ 181.727199][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.774358][ T7924] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 181.788179][ T7930] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 181.801877][ T7928] find_entry called with index >= next_index [ 181.824743][ T7924] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 181.835685][ T28] audit: type=1800 audit(1770860911.676:30): pid=7928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.853" name=01 dev="loop0" ino=7 res=0 errno=0 [ 181.857528][ T7930] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 181.895629][ T7930] BTRFS info (device loop2): using free space tree [ 181.904923][ T7941] netlink: 'syz.1.850': attribute type 4 has an invalid length. [ 181.905104][ T7924] BTRFS info (device loop3): turning on sync discard [ 181.942887][ T7924] BTRFS info (device loop3): turning on async discard [ 181.963524][ T7924] BTRFS info (device loop3): using free space tree [ 181.980332][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'. [ 182.114414][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.192912][ T7930] BTRFS info (device loop2): enabling ssd optimizations [ 182.208739][ T7924] BTRFS info (device loop3): enabling ssd optimizations [ 182.240459][ T7930] BTRFS info (device loop2): auto enabling async discard [ 182.479859][ T5777] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 182.682809][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.857'. [ 182.701731][ T5776] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 183.174377][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.205328][ T7997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.619960][ T8009] ip6tnl1: entered allmulticast mode [ 183.719882][ T5846] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 183.950754][ T5846] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 183.964826][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.981652][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.008091][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.027180][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.044325][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.066499][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.102015][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.138746][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.165493][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.202460][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.215061][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.226699][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.265220][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.273462][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.288068][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.320565][ T8025] loop3: detected capacity change from 0 to 128 [ 184.329669][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.361568][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.382800][ T8025] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.394822][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.394866][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.398131][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.422449][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.433869][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.445014][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.453993][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.465166][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.474799][ T5846] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 184.483905][ T5846] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 184.489231][ T8029] macvlan0: entered allmulticast mode [ 184.492604][ T5846] usb 3-1: Product: syz [ 184.501971][ T5846] usb 3-1: Manufacturer: syz [ 184.506996][ T5846] usb 3-1: SerialNumber: syz [ 184.514337][ T5846] usb 3-1: config 0 descriptor?? [ 184.527214][ T5846] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 184.544547][ T8025] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.750522][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.760518][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.879427][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 184.899256][ T5863] usb 3-1: USB disconnect, device number 7 [ 184.912369][ T5863] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 184.918898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.235210][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.954278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.284560][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.994263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.314509][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.839051][ T8129] loop3: detected capacity change from 0 to 512 [ 187.948931][ T8129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.026046][ T8129] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.098585][ T8129] EXT4-fs (loop3): shut down requested (2) [ 188.159419][ T8125] loop0: detected capacity change from 0 to 32768 [ 188.173441][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.219795][ T8125] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.235097][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 188.355265][ T8125] XFS (loop0): Ending clean mount [ 188.397513][ T8125] XFS (loop0): Quotacheck needed: Please wait. [ 188.544539][ T8125] XFS (loop0): Quotacheck: Done. [ 188.590478][ T8149] loop3: detected capacity change from 0 to 32768 [ 188.608482][ T5845] net_ratelimit: 1 callbacks suppressed [ 188.608498][ T5845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.706224][ T8149] JBD2: Ignoring recovery information on journal [ 188.763689][ T8149] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 188.792338][ T8149] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 188.809479][ T8149] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 188.820105][ T8149] OCFS2: File system is now read-only. [ 188.825742][ T8149] (syz.3.912,8149,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 188.836440][ T8149] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 188.853171][ T8149] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 188.863237][ T8149] (syz.3.912,8149,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 188.871204][ T8149] (syz.3.912,8149,1):ocfs2_mknod:502 ERROR: status = -30 [ 188.878378][ T8149] (syz.3.912,8149,1):ocfs2_create:676 ERROR: status = -30 [ 188.973846][ T5774] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.099045][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 189.479236][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.634629][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.650964][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 189.786363][ T8175] netlink: 'syz.3.925': attribute type 2 has an invalid length. [ 189.795008][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.925'. [ 190.514334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.560621][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 190.592258][ T8191] netlink: 'syz.3.931': attribute type 21 has an invalid length. [ 190.674778][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.834541][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.858448][ T8200] process 'syz.3.935' launched './file1' with NULL argv: empty string added [ 191.554294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.650557][ T8224] team_slave_0: entered promiscuous mode [ 191.656936][ T8224] team_slave_1: entered promiscuous mode [ 191.714614][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.824291][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.969836][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 191.982951][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 192.348061][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 192.352909][ T8251] loop3: detected capacity change from 0 to 256 [ 192.427228][ T8251] FAT-fs (loop3): Directory bread(block 64) failed [ 192.427307][ T8251] FAT-fs (loop3): Directory bread(block 65) failed [ 192.427406][ T8251] FAT-fs (loop3): Directory bread(block 66) failed [ 192.427469][ T8251] FAT-fs (loop3): Directory bread(block 67) failed [ 192.427569][ T8251] FAT-fs (loop3): Directory bread(block 68) failed [ 192.427596][ T8251] FAT-fs (loop3): Directory bread(block 69) failed [ 192.427729][ T8251] FAT-fs (loop3): Directory bread(block 70) failed [ 192.427758][ T8251] FAT-fs (loop3): Directory bread(block 71) failed [ 192.427909][ T8251] FAT-fs (loop3): Directory bread(block 72) failed [ 192.427938][ T8251] FAT-fs (loop3): Directory bread(block 73) failed [ 192.596980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.648900][ T8255] 9pnet_fd: Insufficient options for proto=fd [ 192.983687][ T8246] loop2: detected capacity change from 0 to 32768 [ 193.154962][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.168392][ T8246] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 193.168392][ T8246] [ 193.226528][ T8246] ERROR: (device loop2): remounting filesystem as read-only [ 193.233968][ T8246] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 193.233968][ T8246] [ 193.370705][ T5776] ------------[ cut here ]------------ [ 193.377293][ T5776] kernel BUG at fs/jfs/inode.c:175! [ 193.394561][ T5776] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 193.400736][ T5776] CPU: 0 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 193.408327][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 193.409546][ T27] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 193.418423][ T5776] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 193.418462][ T5776] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 e9 e8 df fe e9 16 fe ff ff e8 ef bf 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 193.448547][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.452687][ T5776] RSP: 0018:ffffc900045bfac0 EFLAGS: 00010293 [ 193.452711][ T5776] RAX: ffffffff82ff53b1 RBX: ffff888076fe3bb0 RCX: ffff888079353c00 [ 193.474865][ T5776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888076fe3bb0 [ 193.477411][ T27] usb 4-1: Product: syz [ 193.482858][ T5776] RBP: 0000000000000001 R08: ffffffff911bf62f R09: 1ffffffff2237ec5 [ 193.482875][ T5776] R10: dffffc0000000000 R11: fffffbfff2237ec6 R12: dffffc0000000000 [ 193.482891][ T5776] R13: dffffc0000000000 R14: ffff888076fe3838 R15: ffff888076fe3be8 [ 193.500480][ T27] usb 4-1: Manufacturer: syz [ 193.503078][ T5776] FS: 000055555e11e500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 193.503099][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.523524][ T27] usb 4-1: SerialNumber: syz [ 193.524654][ T5776] CR2: 00007f46e8e0ced0 CR3: 0000000061489000 CR4: 00000000003506f0 [ 193.524675][ T5776] Call Trace: [ 193.524700][ T5776] [ 193.550257][ T5776] ? evict+0x4c4/0x8d0 [ 193.554382][ T5776] ? jfs_write_inode+0x220/0x220 [ 193.559387][ T5776] evict+0x4ca/0x8d0 [ 193.561203][ T27] usb 4-1: config 0 descriptor?? [ 193.563327][ T5776] ? proc_nr_inodes+0x230/0x230 [ 193.563356][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 193.578430][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 193.583694][ T5776] evict_inodes+0x606/0x6a0 [ 193.588260][ T5776] ? clear_inode+0x150/0x150 [ 193.592914][ T5776] generic_shutdown_super+0x97/0x2b0 [ 193.592961][ T27] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 193.598234][ T5776] kill_block_super+0x44/0x90 [ 193.598257][ T5776] deactivate_locked_super+0x97/0x100 [ 193.598277][ T5776] cleanup_mnt+0x43b/0x4d0 [ 193.618908][ T5776] task_work_run+0x1d4/0x260 [ 193.623564][ T5776] ? task_work_cancel+0x220/0x220 [ 193.628822][ T5776] ? exit_to_user_mode_loop+0x3b/0x110 [ 193.634337][ T5776] exit_to_user_mode_loop+0xe6/0x110 [ 193.639684][ T5776] exit_to_user_mode_prepare+0xee/0x180 [ 193.645277][ T5776] syscall_exit_to_user_mode+0x1a/0x50 [ 193.650784][ T5776] do_syscall_64+0x61/0xa0 [ 193.655261][ T5776] ? clear_bhb_loop+0x40/0x90 [ 193.660071][ T5776] ? clear_bhb_loop+0x40/0x90 [ 193.664790][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.670759][ T5776] RIP: 0033:0x7fcf2b19d1d7 [ 193.675229][ T5776] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 193.694884][ T5776] RSP: 002b:00007ffe19202c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 193.703344][ T5776] RAX: 0000000000000000 RBX: 00007fcf2b231c3b RCX: 00007fcf2b19d1d7 [ 193.711358][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe19202ce0 [ 193.719376][ T5776] RBP: 00007ffe19202ce0 R08: 00007ffe19203ce0 R09: 00000000ffffffff [ 193.727394][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe19203d70 [ 193.735416][ T5776] R13: 00007fcf2b231c3b R14: 000000000002f2fb R15: 00007ffe19203db0 [ 193.743441][ T5776] [ 193.746497][ T5776] Modules linked in: [ 193.751158][ C0] net_ratelimit: 1 callbacks suppressed [ 193.751173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.775395][ T5776] ---[ end trace 0000000000000000 ]--- [ 193.780945][ T5776] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 193.788171][ T5776] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 e9 e8 df fe e9 16 fe ff ff e8 ef bf 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 193.809580][ T5776] RSP: 0018:ffffc900045bfac0 EFLAGS: 00010293 [ 193.815142][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.816205][ T5776] RAX: ffffffff82ff53b1 RBX: ffff888076fe3bb0 RCX: ffff888079353c00 [ 193.844253][ T5776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888076fe3bb0 [ 193.852326][ T5776] RBP: 0000000000000001 R08: ffffffff911bf62f R09: 1ffffffff2237ec5 [ 193.874576][ T1190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.883806][ T5776] R10: dffffc0000000000 R11: fffffbfff2237ec6 R12: dffffc0000000000 [ 193.892882][ T5776] R13: dffffc0000000000 R14: ffff888076fe3838 R15: ffff888076fe3be8 [ 193.901691][ T5776] FS: 000055555e11e500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 193.911247][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.918456][ T5776] CR2: 00007f46e8de7198 CR3: 0000000061489000 CR4: 00000000003506e0 [ 193.926905][ T5776] Kernel panic - not syncing: Fatal exception [ 193.933170][ T5776] Kernel Offset: disabled [ 193.937520][ T5776] Rebooting in 86400 seconds..