last executing test programs: 1m34.671483214s ago: executing program 2 (id=4052): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 1m34.305557685s ago: executing program 2 (id=4057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 1m34.073825829s ago: executing program 0 (id=4062): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 1m34.057304896s ago: executing program 2 (id=4063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) 1m33.877798859s ago: executing program 2 (id=4065): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) 1m33.766662178s ago: executing program 0 (id=4069): syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[], 0xfa, 0x155, &(0x7f0000000340)="$eJzskT9LQlEYxp/jvV41Mg0MKiiChsQwb1dsa9BIcrADhUtToCcSNEUh3LLmhj6AS0uTOERjQ9FkeSHsMzS6BUGLce4faW1/f8u953mf87zvOWd324wiDCiw2alV6w3RbIrSygHPZw/vHx5npO5THQOq9YY0l+zVUxo4lV8VGF3a8kvQA6AiNoq1SkkDkAaiADIyo+yFDts7JbWIHyflith0tOgqPp1WwnA1DdDmYPmSjraoApmQrek/wPgWWJN5s5jkfQFodbzO3PHY3ZKSdk/R6qz3uq/7g34uHlsW10Z2wbqBgpDzMln/SPTj74led2gOxhc8z82kYWwldUXXU0P+Nsil2jdQ96bPgSMGBP7kaTKjAFwxoMOArpU3enZ7c3/IFwkAnrMwwGSFBWXP9jevuu+gWJXi8byXudsmPwRBEARBEARBEATxX34DAAD//4EIV14=") r0 = open(&(0x7f0000000100)='.\x00', 0x8000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m33.700301866s ago: executing program 4 (id=4070): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3) 1m33.61891474s ago: executing program 2 (id=4071): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCSETA(r0, 0x8924, 0x0) 1m33.449414667s ago: executing program 0 (id=4074): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x7, 0x4) getsockopt$MRT(r0, 0x0, 0xcd, 0x0, 0x0) 1m33.337216978s ago: executing program 4 (id=4076): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000580)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000780)=0x7f) 1m33.275143972s ago: executing program 1 (id=4077): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$eJzs3U9sHNd9B/DfG5Hi0m4rxnYUJ42LTVuksmK5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLupYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUMZvatuKRJmzb/iLI+H5v67s68N/PezHJGIvjmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ8QcvXTl7Lt3vVgAAh+na6NfOnnf/B4CHynX//gcAAAAAAAAAAAAAgKMuRRGPR4q5a2tpvHrfVrva6r1zd2xoePtq/amqeawqX37Vzp2/cPHLzw1e6uTV1swH1N9vn4tXRq9fqb84e3tufmphYWqyPjbTmpidnNr1FvZaf6vT1QGo3371zuTNmwv1889e2LT67sB7fY+eHLg8+PSZpzplx4aGh0c3itS6y/d87Ia07TTC43gUcSZSPPO9n6ZmRBSx92NRO9xzv1V/1YnTVSfGhoarjky3mjOL5cqRzoEoIupdlRqdY7T9uYie3kPtw84aEUtl88sGny67NzrXnG/emJ6qjzTnF1uLrdmZkdRubdmfehRxKUUsR8Rq3/s31xtF9ESK75xYSzci4ljnOHypGhi8czuKA+zjLpTtrPdGLBcPwDk7wvqiiJcjxc/ePhUT+TpTXWu+GPFymT+IeLPMFyJS+cG4GPHuNp8jHkw9UcRfluf/8lqarK4HnevK1a/Xvzpzc7arbOe68hHvD++7Utyn+0P/ljwcR/zaVIsimtUVfy19/L/sAAAAAAAAAAAAAAAAALDf+qOIz0aKl/7jT6pxxVGNSz9xefAPB361e8z4kx+ynbLssxGxVOxuTO7xPDBwJI2kdJ/HEj/MalHEn+bxf2/c78YAAAAAAAAAAAAAAAAAAAA81Ir4SaR4/p1TaTm65xRvzdyqX2/emG7PCtuZ+7czZ/r6+vp6PbWzkXM851LO5ZwrOVdzRpHr52zkHM+5lHM550rO1ZxxLNfP2cg5nnMp53LOlZyrOaMn18/ZyDmecynncs6VnKs544jM3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ElSRBG/iBTf/uZaihQRjYjxaOdK3/1uHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6ktFfD9S1P+ocW9ZT0Sk6v+2U+UfF6NxvMzHojFY5gvRuJKzWWVP44370H72pjcV8eNI0Vd7K1JPe1k+/73td/c+BvHmtzbefS6XPdZZOfBe36MnT1weHP6NJ3d6nbZrwOmrrZk7d+tjQ8PDo12Le/LeH+taNpD3W+xT34lYeO31V5vT01PzH/9F+RHYQ/UH6EX5DXIEmuHFYb2IniPRjPvTdx4C5f3/3Ujxu+/8Z+eG377/1+JX2u/u3eHj53+2cf9/fuuGdnn/79laL9//y3v6dvf/x7uWPZ//NtLbE1FbvD3XezKitvDa62dat5u3pm5NzVw8e/Yrg4NfuXC293hE7WZreqrr1b4cLgAAAAAAAAAAAAAAAIDDk4r4/UjR/PFaqkfE3Wq81sDlwafPPHUsjlXjrTaN235l9PqV+ouzt+fmpxYWpibrYzOtidnJqd3urlYN9xobGj6Qznyo/gNuf3/txdm51+Zbt/54cdv1j9Su3FhYnG9ObL86+qOIaHQvOV01eGxouGr0dKs5U1Ud2XYw/UfXm4r4r0gxcbGevpCX5fH/W0f4bxr/v7R1Qwc0/v9TXcvKfaZUxM8jxe/81ZPxhaqdj8T7jlku93eR4vSlz+dycbws12nDY9VDBNojA8uy/xcp/ukXm8t2xkO2xyBWZc/t/sg+GMrzfyJSfP8vvhu/mZdtfv7D9uf/ka0bOqDz/0TXskc2Pa9gz10nn/8zkeKFx9+K38rLPuj5H51nb5zKhe89n+OAzv+nu5YN5P3+9v50HQAAAAAAAAAA4IHWm4r4+0jxw+Ge9Fxetpvf/5vcuqED+v2vz3Qtm9yf+Yo+9MWeDyoAAAAAHBG9qYifRIpbi2/dG0O9efx31/jP39sY/zmUtqytfs73a9VzA/bz53/dBvJ+x/febQAAAAAAAAAAAAAAAAAAADhSUiriuTyf+ng1nn9yx/nUVyLFS//zTC6XTpblOvPAD1R/1q7Nzpy5Mj09O9FcbN6YnqqPzjUnpsq6T0SKtb/9fK5bVPOrd+abb8/xvjEX+3ykGP6HTtn2XOyducmf2Ch7riz7qUjx3/+Yy66vV2U781h/eqPs+bLs30SKb/zL5u12yp7cKHuhLPvdSPGjb9Q7ZR8py3aej/qZjbLPTswWB3BWAAAAAAAAAAAAAAAAAAAAeNj0piL+PFL87+3le2P58/z/vV1vK29+q2u+/y3uVvP8D1Tz/+/0+uPM/189V2Bpp70CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnU4oiXo8Uc9fW0kpf+b6tdrU1c+fu2NDw9tX6U1XzWFW+/KqdO3/h4pefG7zUyQ+uv98+G6+MXr9Sf3H29tz81MLC1GR9bKY1MTs5test7LX+VqerA1C//eqdyZs3F+rnn72wafXdgff6Hj05cHnw6TNPdcqODQ0Pj3aV6en9qDt9Y8c1aYflx6OIv44Uz3zvp+mHfRFF7P1YbPvZ6dt9L/aov+rE6aoTY0PDVUemW82ZxXLlSOdAFBH1rkqNzjHat3NxQBoRS2XzywafLrs3Otecb96YnqqPNOcXW4ut2ZmR1G5t2Z96FHEpRSxHxOo256A3ing1UnznxFr6176IY53j8KVro187e37ndhQH2MddKNtZ741YLh6Ac3aE9UUR/xwpfvb2qfi3voieaH/FFyNeLvMHEW9G+3yn8oNxMeLdw/te5oD1RBH/X57/y2vp7b7yetC5rlz9ev2rMzdnu8p2risHcn84PP2Hurcjfm2qRRE/qq74a+nffV8DAAAAAAAAAAAAAAAAHCFF/HqkeP6dU6kaH3xvTHFr5lb9evPGdHtYX2fsX2fM9Pr6+no9tbORczznUs7lnCs5V3NGkevnbJRZW18fz++Xci7nXMm5mjOO5fo5GznHcy7lXM65knM1Z/Tk+jkbOcdzLuVczrmSczVnHJGxewAAAAAAAAAAAAAAAAAAwCdLUf2X4tvfXEvrfe35pcejnSvmA/3E+2UAAAD//xtt+zc=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4081, 0xff1) 1m33.22557488s ago: executing program 0 (id=4078): syz_mount_image$squashfs(&(0x7f0000000400), &(0x7f0000000200)='./file0\x00', 0x4000000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0x1, 0x1a4, &(0x7f0000000440)="$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") r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="e000000013000100"], 0xe0}}, 0x0) 1m32.913925407s ago: executing program 0 (id=4080): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0xb7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) 1m32.432025776s ago: executing program 1 (id=4082): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0), 0xc) 1m32.201155754s ago: executing program 4 (id=4084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000500000008000100"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 1m32.136567689s ago: executing program 1 (id=4085): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000500)={[{@gid}, {@barrier}, {@umask={'umask', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "04c22302"}}, {@nls={'nls', 0x3d, 'iso8859-7'}}, {@gid}, {@gid}, {@type={'type', 0x3d, "5361c9e5"}}]}, 0xff, 0x5de, &(0x7f0000000d40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m31.969096521s ago: executing program 1 (id=4086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1m31.820062541s ago: executing program 1 (id=4087): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x2000002, &(0x7f0000000000)=ANY=[], 0x11, 0x5fdf, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) 1m31.587369363s ago: executing program 0 (id=4088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000100000000000002000000180100002020703600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004f000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m31.503420971s ago: executing program 4 (id=4090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xffffff19, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x140}]}]}, 0x38}}, 0x0) 1m31.181334143s ago: executing program 4 (id=4091): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x120081e, &(0x7f0000000540)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@lazytime}, {@nombcache}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) 1m31.137896502s ago: executing program 2 (id=4092): io_setup(0x2, &(0x7f0000000300)=0x0) r1 = eventfd(0x9) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x42, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r1, 0x0, 0x0, 0x1c, 0x0, 0x3, r1}]) 1m30.721727525s ago: executing program 4 (id=4095): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01"], 0x30) 1m29.82415135s ago: executing program 1 (id=4097): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) 1m16.274224881s ago: executing program 32 (id=4088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000100000000000002000000180100002020703600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004f000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m15.722697184s ago: executing program 33 (id=4092): io_setup(0x2, &(0x7f0000000300)=0x0) r1 = eventfd(0x9) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x42, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r1, 0x0, 0x0, 0x1c, 0x0, 0x3, r1}]) 1m15.555946959s ago: executing program 34 (id=4095): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01"], 0x30) 1m14.338100833s ago: executing program 35 (id=4097): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) 5.061986451s ago: executing program 3 (id=4358): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001f00)=""/4100, 0x1004}, {&(0x7f0000000bc0)=""/209, 0xd1}, {&(0x7f0000001500)=""/208, 0xd0}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f00000016c0)=""/220, 0xdc}, {&(0x7f0000001600)=""/172, 0xac}, {&(0x7f0000000280)=""/124, 0x7c}], 0x9}, 0x102) 4.754262619s ago: executing program 3 (id=4362): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x21, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 3.741517174s ago: executing program 3 (id=4378): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./bus\x00', 0x3010846, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@discard}, {@errors_remount}, {@errors_remount}, {@uid}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x24, 0x62d7, &(0x7f0000021240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.216880264s ago: executing program 5 (id=4386): r0 = syz_open_procfs(0x0, &(0x7f0000003680)='net/tcp\x00') lseek(r0, 0xfffd, 0x0) pread64(r0, &(0x7f0000000180)=""/55, 0x37, 0x39c0) 2.980492781s ago: executing program 7 (id=4389): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x107) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) 2.864239931s ago: executing program 5 (id=4390): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYRESHEX=0x0, @ANYBLOB='Amap=acorn,iocharset=macgaelic,session=0x0000000000000058,mode=0xffffffffffffffff,map=off,check=strict,uid>', @ANYRESDEC=0x0, @ANYBLOB=',cont%|t=user_u,\b'], 0xfa, 0x6bb, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4a0000000100000020"], 0x80002) 2.725751813s ago: executing program 7 (id=4392): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x120083, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5416, &(0x7f0000000000)) 2.651142579s ago: executing program 5 (id=4393): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0xb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x100002e) 2.530990364s ago: executing program 8 (id=4394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.46995199s ago: executing program 5 (id=4395): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) sendmmsg$sock(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0xb10381ca06fc1319, {0x4e20, 0x1}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)="1cae7d", 0x3}], 0x1}}], 0x1, 0x0) 2.337785096s ago: executing program 7 (id=4396): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbcc, &(0x7f0000002380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) 2.325890399s ago: executing program 6 (id=4397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000100095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.28962584s ago: executing program 3 (id=4398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000044c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c000080040001800800034000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.237707849s ago: executing program 5 (id=4399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 2.088290727s ago: executing program 6 (id=4400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x0, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) 2.08763014s ago: executing program 8 (id=4401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.933191325s ago: executing program 6 (id=4402): r0 = open(&(0x7f0000000100)='./bus\x00', 0x642c0, 0x46) truncate(&(0x7f00000000c0)='./bus\x00', 0x9) finit_module(r0, 0x0, 0x0) 1.927713992s ago: executing program 5 (id=4403): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0x3000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)=0xfffffffffffffeab) 1.8753963s ago: executing program 3 (id=4404): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r1, 0x1, 0x6, @remote}, 0x10) 1.769646044s ago: executing program 8 (id=4405): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") setpriority(0x0, 0x0, 0x3) 1.59206323s ago: executing program 7 (id=4406): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 1.570616082s ago: executing program 6 (id=4407): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 1.530289228s ago: executing program 3 (id=4408): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 1.391207444s ago: executing program 8 (id=4409): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) open(&(0x7f00000000c0)='./file0\x00', 0x9c41, 0x0) 1.263703139s ago: executing program 6 (id=4410): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x81009431, 0x0) 1.049636934s ago: executing program 8 (id=4411): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 1.048603916s ago: executing program 7 (id=4412): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000300)) 908.571812ms ago: executing program 6 (id=4413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 877.726947ms ago: executing program 8 (id=4414): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f000001f940)) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 0s ago: executing program 7 (id=4415): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004010, &(0x7f0000000340)=ANY=[], 0x1, 0x1f5, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) kernel console output (not intermixed with test programs): xfat: Deprecated parameter 'utf8' [ 399.221214][T13846] exfat: Deprecated parameter 'utf8' [ 399.221292][T13846] exfat: Deprecated parameter 'utf8' [ 399.321401][T13848] loop3: detected capacity change from 0 to 2048 [ 399.382137][T13846] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 399.481983][ T821] team_slave_0: entered promiscuous mode [ 399.482044][ T821] team_slave_1: entered promiscuous mode [ 399.516467][T13848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.989501][T13064] veth0_vlan: entered promiscuous mode [ 400.022678][T13064] veth1_vlan: entered promiscuous mode [ 400.429549][T13064] veth0_macvtap: entered promiscuous mode [ 400.643534][T13064] veth1_macvtap: entered promiscuous mode [ 400.808850][T13064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.985764][T13064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.190849][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.192019][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.192567][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.192607][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.331433][T13890] loop4: detected capacity change from 0 to 128 [ 401.455944][T13890] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.818161][T13900] loop3: detected capacity change from 0 to 256 [ 401.819188][T13900] exfat: Deprecated parameter 'utf8' [ 401.819242][T13900] exfat: Deprecated parameter 'utf8' [ 401.935970][T13900] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 402.663460][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.663479][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.133477][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.133495][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.190738][T13948] loop1: detected capacity change from 0 to 128 [ 404.218550][T13948] EXT4-fs (loop1): Test dummy encryption mode enabled [ 404.221106][T13948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 404.221223][T13948] System zones: 1-3, 19-19, 35-36 [ 404.260916][T13948] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 404.267168][T13948] ext4 filesystem being mounted at /705/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.360223][T13948] EXT4-fs: Ignoring removed orlov option [ 404.360349][T13948] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 404.377912][T13924] loop3: detected capacity change from 0 to 32768 [ 404.456152][T13948] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.489577][T13924] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 404.623345][T13924] XFS (loop3): Ending clean mount [ 404.648631][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.824021][ T5832] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 404.853812][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3439'. [ 404.853833][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 404.853857][T13973] netlink: 'syz.0.3439': attribute type 14 has an invalid length. [ 404.853870][T13973] netlink: 'syz.0.3439': attribute type 12 has an invalid length. [ 405.327493][ T821] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 405.360794][T13986] loop2: detected capacity change from 0 to 8 [ 405.384031][T13986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3444'. [ 405.404929][T13987] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3443'. [ 405.495547][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 405.498669][ T821] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 405.498695][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.498715][ T821] usb 5-1: config 0 has no interface number 0 [ 405.501459][ T821] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 405.501486][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.501506][ T821] usb 5-1: Product: syz [ 405.501519][ T821] usb 5-1: Manufacturer: syz [ 405.501534][ T821] usb 5-1: SerialNumber: syz [ 405.580927][ T821] usb 5-1: config 0 descriptor?? [ 405.791318][ T821] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 405.791354][ T821] uvcvideo 5-1:0.105: No valid video chain found. [ 406.043786][ T821] usb 5-1: USB disconnect, device number 20 [ 406.101294][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3451'. [ 406.795071][T14030] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 407.035352][ T5925] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 407.195771][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 407.203661][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.203745][ T5925] usb 5-1: config 0 has no interface number 0 [ 407.204125][ T5925] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.234286][ T5925] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.234334][ T5925] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 407.234359][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.282773][ T5925] usb 5-1: config 0 descriptor?? [ 407.946709][ T5925] uclogic 0003:28BD:0094.001F: failed retrieving string descriptor #100: -71 [ 407.946786][ T5925] uclogic 0003:28BD:0094.001F: failed retrieving pen parameters: -71 [ 407.946804][ T5925] uclogic 0003:28BD:0094.001F: pen probing failed: -71 [ 407.946821][ T5925] uclogic 0003:28BD:0094.001F: failed probing parameters: -71 [ 407.946921][ T5925] uclogic 0003:28BD:0094.001F: probe with driver uclogic failed with error -71 [ 408.028474][T14062] loop1: detected capacity change from 0 to 64 [ 408.039481][ T5925] usb 5-1: USB disconnect, device number 21 [ 408.385726][T14070] loop1: detected capacity change from 0 to 64 [ 409.182465][T14097] loop2: detected capacity change from 0 to 24 [ 409.757308][T14111] loop4: detected capacity change from 0 to 128 [ 409.832063][T14111] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.857360][T14111] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.204439][T14121] loop1: detected capacity change from 0 to 128 [ 410.245250][T14121] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 410.245304][T14121] hpfs: filesystem error: improperly stopped [ 410.245319][T14121] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 410.245331][T14121] hpfs: You really don't want any checks? You are crazy... [ 410.245733][T14121] hpfs: hpfs_map_sector(): read error [ 410.245743][T14121] hpfs: code page support is disabled [ 410.251971][T14121] hpfs: hpfs_map_4sectors(): unaligned read [ 410.252079][T14121] hpfs: hpfs_map_4sectors(): unaligned read [ 410.252089][T14121] hpfs: filesystem error: unable to find root dir [ 410.362189][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 410.362225][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'. [ 410.362232][T14123] nbd: socks must be embedded in a SOCK_ITEM attr [ 410.609866][ T820] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 410.758537][ T820] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 410.758565][ T820] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 410.758584][ T820] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 410.758603][ T820] usb 5-1: config 220 has no interface number 2 [ 410.758670][ T820] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 410.758696][ T820] usb 5-1: config 220 interface 0 has no altsetting 0 [ 410.758714][ T820] usb 5-1: config 220 interface 76 has no altsetting 0 [ 410.758731][ T820] usb 5-1: config 220 interface 1 has no altsetting 0 [ 410.762643][ T820] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 410.762670][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.762689][ T820] usb 5-1: Product: syz [ 410.762704][ T820] usb 5-1: Manufacturer: syz [ 410.762719][ T820] usb 5-1: SerialNumber: syz [ 410.943440][T14132] netlink: 'syz.1.3509': attribute type 1 has an invalid length. [ 411.017440][ T820] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 411.017473][ T820] uvcvideo 5-1:220.0: No valid video chain found. [ 411.017530][ T820] usb 5-1: selecting invalid altsetting 0 [ 411.154273][ T820] usb 5-1: selecting invalid altsetting 0 [ 411.154295][ T820] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 411.253579][ T820] usb 5-1: USB disconnect, device number 22 [ 411.300753][ T37] audit: type=1326 audit(1777047300.401:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.300890][ T37] audit: type=1326 audit(1777047300.401:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.301073][ T37] audit: type=1326 audit(1777047300.401:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.302153][ T37] audit: type=1326 audit(1777047300.401:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.305859][ T37] audit: type=1326 audit(1777047300.411:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.305903][ T37] audit: type=1326 audit(1777047300.411:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.305943][ T37] audit: type=1326 audit(1777047300.411:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.305982][ T37] audit: type=1326 audit(1777047300.411:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.436830][ T37] audit: type=1326 audit(1777047300.411:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 411.437000][ T37] audit: type=1326 audit(1777047300.541:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 412.166031][T14161] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3523'. [ 412.345627][T14164] loop1: detected capacity change from 0 to 128 [ 412.368846][T14164] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.369868][T14164] ext4 filesystem being mounted at /726/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 412.510446][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.704686][T14179] loop1: detected capacity change from 0 to 256 [ 413.117141][T14179] FAT-fs (loop1): Directory bread(block 64) failed [ 413.117172][T14179] FAT-fs (loop1): Directory bread(block 65) failed [ 413.117268][T14179] FAT-fs (loop1): Directory bread(block 66) failed [ 413.117289][T14179] FAT-fs (loop1): Directory bread(block 67) failed [ 413.117384][T14179] FAT-fs (loop1): Directory bread(block 68) failed [ 413.117405][T14179] FAT-fs (loop1): Directory bread(block 69) failed [ 413.117499][T14179] FAT-fs (loop1): Directory bread(block 70) failed [ 413.117519][T14179] FAT-fs (loop1): Directory bread(block 71) failed [ 413.117615][T14179] FAT-fs (loop1): Directory bread(block 72) failed [ 413.117636][T14179] FAT-fs (loop1): Directory bread(block 73) failed [ 413.492907][T14193] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 413.492907][T14193] program syz.3.3538 not setting count and/or reply_len properly [ 414.005397][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 414.031222][T14149] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 414.352747][T14213] loop1: detected capacity change from 0 to 32768 [ 414.629556][T14149] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 414.839186][T14149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.840817][T14149] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 414.968594][T14149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 414.972874][T14149] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 415.141204][T14149] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 415.141285][T14149] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 415.236698][T14149] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 415.617815][ T5925] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 415.618959][ T5561] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 415.775329][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 415.777405][ T5925] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 415.777430][ T5925] usb 3-1: config 0 has no interface number 0 [ 415.780193][ T5925] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 415.780219][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.780239][ T5925] usb 3-1: Product: syz [ 415.780252][ T5925] usb 3-1: Manufacturer: syz [ 415.780266][ T5925] usb 3-1: SerialNumber: syz [ 415.785463][ T5561] usb 4-1: Using ep0 maxpacket: 16 [ 415.799431][ T5561] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 415.799453][ T5561] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.799474][ T5561] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.815667][ T5561] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.815695][ T5561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.815716][ T5561] usb 4-1: Product: syz [ 415.815730][ T5561] usb 4-1: Manufacturer: syz [ 415.815750][ T5561] usb 4-1: SerialNumber: syz [ 415.934288][ T5925] usb 3-1: config 0 descriptor?? [ 415.958418][ T5925] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 416.041507][ T5561] usb 4-1: 0:2 : does not exist [ 416.085360][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 416.231284][ T5925] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 416.288821][T14262] loop1: detected capacity change from 0 to 1764 [ 416.369752][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 416.447293][ T5925] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 416.633604][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 416.661689][ T5955] usb 3-1: USB disconnect, device number 18 [ 416.705956][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 416.751237][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 416.752293][ T5955] quatech2 3-1:0.51: device disconnected [ 416.870448][ T5561] usb 4-1: USB disconnect, device number 19 [ 416.886091][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 417.049451][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 417.136442][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'. [ 417.207819][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 417.257765][T14280] vivid-004: disconnect [ 417.258178][T14279] vivid-004: reconnect [ 417.310143][T14283] loop1: detected capacity change from 0 to 1024 [ 417.759350][T14297] netlink: 'syz.0.3585': attribute type 1 has an invalid length. [ 418.400809][T14320] loop3: detected capacity change from 0 to 512 [ 418.428830][T14320] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 418.447524][T14320] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3596: Invalid inode bitmap blk 4 in block_group 0 [ 418.447558][T14320] loop3: lost filesystem error report for type 5 error -117 [ 418.575156][ C0] EXT4-fs (loop3): initial error at time 1777047307: ext4_read_inode_bitmap:139 [ 418.575185][ C0] EXT4-fs (loop3): last error at time 1777047307: ext4_read_inode_bitmap:139 [ 418.655968][T14320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.699056][T14326] loop1: detected capacity change from 0 to 512 [ 418.701614][T14326] EXT4-fs: Ignoring removed nobh option [ 418.701676][T14326] EXT4-fs: Ignoring removed orlov option [ 418.745972][T14328] netlink: 'syz.4.3600': attribute type 12 has an invalid length. [ 418.745993][T14328] netlink: 'syz.4.3600': attribute type 29 has an invalid length. [ 418.746007][T14328] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3600'. [ 418.751681][T14326] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.3599: invalid block [ 418.751715][T14326] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 418.755284][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 418.755303][ C1] EXT4-fs (loop1): initial error at time 1777047307: __ext4_iget:5481: inode 11: block 1 [ 418.755334][ C1] EXT4-fs (loop1): last error at time 1777047307: __ext4_iget:5481: inode 11: block 1 [ 418.758784][T14326] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3599: couldn't read orphan inode 11 (err -117) [ 418.758813][T14326] loop1: lost filesystem error report for type 5 error -117 [ 418.773506][T14326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.965925][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 419.040836][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.127341][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 419.145378][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.225596][T14337] loop1: detected capacity change from 0 to 2048 [ 419.270014][T14337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.285975][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 419.543640][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3607'. [ 419.558193][ T32] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 419.616984][T14350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3610'. [ 419.667584][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3610'. [ 419.681440][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3610'. [ 419.708596][ T32] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.708628][ T32] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 419.708655][ T32] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 419.708682][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.708713][ T32] usb 1-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 419.708736][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.761351][ T32] usb 1-1: config 0 descriptor?? [ 419.764515][T14342] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 420.227153][ T32] hid_parser_main: 65 callbacks suppressed [ 420.227176][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227208][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227236][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227262][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227288][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227314][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227352][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227378][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227404][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.227431][ T32] topre 0003:0853:0146.0020: unknown main item tag 0x0 [ 420.250980][ T32] topre 0003:0853:0146.0020: hidraw0: USB HID v0.08 Device [HID 0853:0146] on usb-dummy_hcd.0-1/input0 [ 420.375283][ T5925] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 420.420071][ T5955] usb 1-1: USB disconnect, device number 21 [ 420.583432][ T5925] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 420.583462][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.664689][ T5925] usb 4-1: config 0 descriptor?? [ 420.695408][ T5925] cp210x 4-1:0.0: cp210x converter detected [ 420.876377][T14377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3622'. [ 421.092004][T14385] loop4: detected capacity change from 0 to 256 [ 421.093042][T14385] exfat: Deprecated parameter 'utf8' [ 421.093080][T14385] exfat: Deprecated parameter 'utf8' [ 421.113162][ T5925] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 421.113189][ T5925] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 421.122912][T14385] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 421.154767][ T5925] usb 4-1: cp210x converter now attached to ttyUSB0 [ 421.365307][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 421.439885][ T820] usb 4-1: USB disconnect, device number 20 [ 421.539150][ T820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 421.557398][ T820] cp210x 4-1:0.0: device disconnected [ 421.609046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.818705][T14409] loop4: detected capacity change from 0 to 512 [ 421.865837][T14409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.865977][T14409] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.919850][T14409] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 421.992153][T14409] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 422.067551][T14418] loop2: detected capacity change from 0 to 64 [ 422.144524][ T37] audit: type=1326 audit(1777047311.241:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.159462][ T37] audit: type=1326 audit(1777047311.261:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.159754][ T37] audit: type=1326 audit(1777047311.261:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.179876][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.223621][ T37] audit: type=1326 audit(1777047311.241:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.223680][ T37] audit: type=1326 audit(1777047311.291:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.223717][ T37] audit: type=1326 audit(1777047311.291:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.223751][ T37] audit: type=1326 audit(1777047311.291:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.244645][ T37] audit: type=1326 audit(1777047311.341:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.291452][ T37] audit: type=1326 audit(1777047311.341:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.291500][ T37] audit: type=1326 audit(1777047311.341:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.3.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 422.592829][ T820] kernel write not supported for file /dsp1 (pid: 820 comm: kworker/1:2) [ 422.645412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.651623][T14433] loop1: detected capacity change from 0 to 512 [ 422.889252][T14433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.889401][T14433] ext4 filesystem being mounted at /753/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.932188][T14440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3650'. [ 422.978300][T14433] EXT4-fs: Ignoring sb option on remount [ 422.978410][T14433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.020029][T14433] EXT4-fs (loop1): can't disable delalloc during remount [ 423.129956][T14448] loop2: detected capacity change from 0 to 1024 [ 423.141315][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.427838][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 423.433633][T14458] netlink: 'syz.0.3658': attribute type 13 has an invalid length. [ 423.433652][T14458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3658'. [ 423.445686][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 423.603340][T14465] loop4: detected capacity change from 0 to 512 [ 423.605767][ T32] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 423.625864][T14465] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 423.693423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.772742][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 423.799769][ T32] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 423.799790][ T32] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 423.799801][ T32] usb 2-1: Product: syz [ 423.799809][ T32] usb 2-1: Manufacturer: syz [ 423.799816][ T32] usb 2-1: SerialNumber: syz [ 423.821849][ T32] usb 2-1: config 0 descriptor?? [ 423.901403][T14465] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 423.902082][T14465] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3660: Failed to acquire dquot type 1 [ 423.902098][T14465] loop4: lost filesystem error report for type 5 error -28 [ 423.905209][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 423.905228][ C1] EXT4-fs (loop4): initial error at time 1777047313: ext4_mb_generate_buddy:1317 [ 423.905248][ C1] EXT4-fs (loop4): last error at time 1777047313: ext4_acquire_dquot:7034 [ 423.909744][T14465] EXT4-fs (loop4): 1 truncate cleaned up [ 423.956702][T14465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.128106][T14465] EXT4-fs error (device loop4): __ext4_remount:6837: comm syz.4.3660: Abort forced by user [ 424.170090][T14465] EXT4-fs (loop4): Remounting filesystem read-only [ 424.170112][T14465] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 424.318811][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.321025][T14480] loop3: detected capacity change from 0 to 128 [ 424.418459][T14480] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 424.418509][T14480] hpfs: filesystem error: improperly stopped [ 424.418523][T14480] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 424.418536][T14480] hpfs: You really don't want any checks? You are crazy... [ 424.418967][T14480] hpfs: hpfs_map_sector(): read error [ 424.418977][T14480] hpfs: code page support is disabled [ 424.419297][T14480] hpfs: hpfs_map_4sectors(): unaligned read [ 424.419381][T14480] hpfs: hpfs_map_4sectors(): unaligned read [ 424.419391][T14480] hpfs: filesystem error: unable to find root dir [ 424.475258][ T5925] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 424.648973][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.649028][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 424.649067][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.649089][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.649130][ T5925] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 424.649152][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.691172][ T32] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 424.725451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.762177][ T5925] usb 1-1: config 0 descriptor?? [ 424.864166][T14493] loop3: detected capacity change from 0 to 64 [ 424.959183][ T32] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 424.959209][ T32] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 425.326510][ T5925] hid-u2fzero 0003:10C4:8ACF.0021: unbalanced delimiter at end of report description [ 425.327234][ T5925] hid-u2fzero 0003:10C4:8ACF.0021: probe with driver hid-u2fzero failed with error -22 [ 425.418369][ T5925] usb 1-1: USB disconnect, device number 22 [ 425.630455][T14497] sch_tbf: burst 3 is lower than device tunl0 mtu (1480) ! [ 425.700719][ T32] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 425.743011][ T32] usb 2-1: USB disconnect, device number 20 [ 425.765960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.919873][T14508] loop1: detected capacity change from 0 to 1024 [ 426.302314][T14508] hfsplus: cannot replace xattr [ 426.472170][T14527] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 426.472198][T14527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.505508][T14527] vhci_hcd vhci_hcd.0: Device attached [ 426.594955][T14524] IPVS: Error connecting to the multicast addr [ 426.767185][ T5561] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 426.786037][ T5925] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 426.809893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.915250][ T5561] usb 2-1: Using ep0 maxpacket: 8 [ 426.917082][ T5561] usb 2-1: config 0 has no interfaces? [ 426.917110][ T5561] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 426.917132][ T5561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.972461][ T5561] usb 2-1: config 0 descriptor?? [ 426.990046][T14542] loop4: detected capacity change from 0 to 512 [ 427.064042][T14542] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 427.091191][T14542] EXT4-fs (loop4): 1 orphan inode deleted [ 427.091215][T14542] EXT4-fs (loop4): 1 truncate cleaned up [ 427.116731][T14542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.194460][ T5909] usb 2-1: USB disconnect, device number 21 [ 427.222121][T14529] vhci_hcd: connection closed [ 427.298554][T14549] loop3: detected capacity change from 0 to 256 [ 427.301013][T14549] exfat: Deprecated parameter 'utf8' [ 427.302565][ T1455] vhci_hcd vhci_hcd.1: stop threads [ 427.302585][ T1455] vhci_hcd vhci_hcd.1: release socket [ 427.348942][ T5925] usb 35-1: device descriptor read/64, error -71 [ 427.374718][T14549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 427.410958][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.461141][ T1455] vhci_hcd vhci_hcd.1: disconnect device [ 427.517880][T14553] loop4: detected capacity change from 0 to 64 [ 427.535254][ T5561] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 427.556742][ T5925] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 427.689873][ T5561] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 427.691253][ T5561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.723809][ T5561] usb 1-1: config 0 descriptor?? [ 427.738841][ T5561] cp210x 1-1:0.0: cp210x converter detected [ 427.814596][T14556] loop3: detected capacity change from 0 to 128 [ 427.845450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.216018][ T5561] usb 1-1: cp210x converter now attached to ttyUSB0 [ 428.219969][T14564] loop3: detected capacity change from 0 to 64 [ 428.304535][T14564] hfs: request for non-existent node 131072 in B*Tree [ 428.304554][T14564] hfs: request for non-existent node 131072 in B*Tree [ 428.392459][ T5561] usb 1-1: USB disconnect, device number 23 [ 428.521347][ T5561] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 428.604641][T14570] loop4: detected capacity change from 0 to 2048 [ 428.659642][T14570] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.686041][ T5561] cp210x 1-1:0.0: device disconnected [ 428.885448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.217568][T14584] loop3: detected capacity change from 0 to 2048 [ 429.322423][T14591] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.925426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.329176][T14625] loop2: detected capacity change from 0 to 2048 [ 430.403211][T14631] loop4: detected capacity change from 0 to 128 [ 430.516494][T14634] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.538571][T14631] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.539149][T14631] ext4 filesystem being mounted at /752/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.797831][ T5831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.971559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.010496][T14634] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 431.010527][T14634] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 431.011988][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3740'. [ 431.061333][T14634] Remounting filesystem read-only [ 431.061996][ T5827] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 431.242515][T14650] loop3: detected capacity change from 0 to 64 [ 431.399619][T14656] netlink: 'syz.1.3745': attribute type 3 has an invalid length. [ 431.399640][T14656] netlink: 'syz.1.3745': attribute type 1 has an invalid length. [ 431.399653][T14656] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3745'. [ 431.845718][T14667] MPI: mpi too large (111752 bits) [ 432.005599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.132176][T14673] 9p: Unknown Cache mode or invalid value n [ 433.049634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.214265][T14718] loop4: detected capacity change from 0 to 64 [ 433.359032][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 433.359051][ T37] audit: type=1326 audit(1777047322.451:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 433.359481][ T37] audit: type=1326 audit(1777047322.461:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 433.370682][ T37] audit: type=1326 audit(1777047322.481:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 433.370901][ T37] audit: type=1326 audit(1777047322.481:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14720 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 433.996105][ T5831] hfs: node 4:3 still has 1 user(s)! [ 434.023699][T14736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3783'. [ 434.085446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.694026][T14756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3791'. [ 434.719866][T14758] loop1: detected capacity change from 0 to 16 [ 434.755063][T14758] erofs (device loop1): mounted with root inode @ nid 36. [ 435.125424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.194461][T14779] loop4: detected capacity change from 0 to 512 [ 435.203887][T14779] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 435.311600][T14779] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 435.330784][ C1] EXT4-fs (loop4): initial error at time 1777047324: ext4_mb_generate_buddy:1317 [ 435.330813][ C1] EXT4-fs (loop4): last error at time 1777047324: ext4_mb_generate_buddy:1317 [ 435.341372][T14779] Quota error (device loop4): write_blk: dquota write failed [ 435.341393][T14779] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 435.341500][T14779] Quota error (device loop4): write_blk: dquota write failed [ 435.341648][T14779] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 435.341701][T14779] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3803: Failed to acquire dquot type 1 [ 435.341723][T14779] loop4: lost filesystem error report for type 5 error -28 [ 435.343566][T14779] EXT4-fs (loop4): 1 truncate cleaned up [ 435.370320][T14779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.718768][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.165457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.675671][T14823] tipc: Enabling of bearer rejected, failed to enable media [ 436.898395][T14834] Invalid source name [ 437.161256][T14845] loop4: detected capacity change from 0 to 256 [ 437.205416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.686453][T14856] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 437.994990][T14862] netlink: 'syz.0.3836': attribute type 16 has an invalid length. [ 437.995011][T14862] netlink: 'syz.0.3836': attribute type 17 has an invalid length. [ 438.153862][T14861] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.245462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.331556][T14861] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.395755][T14847] loop2: detected capacity change from 0 to 32768 [ 438.743838][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.800222][T14862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.912132][T14862] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.912314][T14862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.285522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.394331][T14886] loop3: detected capacity change from 0 to 512 [ 439.414352][T14886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 439.446922][T14886] EXT4-fs (loop3): 1 truncate cleaned up [ 439.463294][T14886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.931551][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.050942][T14905] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.3856' resets device [ 440.192089][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.325548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.478202][ T37] audit: type=1326 audit(1777047329.571:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.479029][ T37] audit: type=1326 audit(1777047329.581:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.551437][ T37] audit: type=1326 audit(1777047329.651:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.551731][ T37] audit: type=1326 audit(1777047329.651:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.554122][ T37] audit: type=1326 audit(1777047329.651:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.554166][ T37] audit: type=1326 audit(1777047329.651:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.579198][ T37] audit: type=1326 audit(1777047329.671:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.579254][ T37] audit: type=1326 audit(1777047329.671:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.596688][ T37] audit: type=1326 audit(1777047329.701:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.596736][ T37] audit: type=1326 audit(1777047329.701:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.3.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f64afc4cdd9 code=0x7ffc0000 [ 440.953966][T14926] loop2: detected capacity change from 0 to 1024 [ 441.253060][T14937] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3867'. [ 441.365468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.026076][T14955] tipc: Enabled bearer , priority 9 [ 442.183093][T14962] netlink: 'syz.2.3881': attribute type 16 has an invalid length. [ 442.183122][T14962] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.3881'. [ 442.323492][T14968] loop3: detected capacity change from 0 to 256 [ 442.336131][T14968] exfat: Deprecated parameter 'utf8' [ 442.336152][T14968] exfat: Deprecated parameter 'utf8' [ 442.397813][T14968] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 442.405315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.090339][ T5836] tipc: Node number set to 4294246401 [ 443.103531][T14990] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3894'. [ 443.103688][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'. [ 443.204816][T14993] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3893'. [ 443.449156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.452132][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 443.452152][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 444.368771][T15026] loop2: detected capacity change from 0 to 512 [ 444.485454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.580904][T15026] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 444.580942][T15026] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 444.585058][T15026] EXT4-fs (loop2): 1 truncate cleaned up [ 444.651144][T15026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.719750][T15026] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.3910: path /795/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 444.759576][T15026] EXT4-fs (loop2): Remounting filesystem read-only [ 444.931086][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.133794][T15045] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3918'. [ 445.247024][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3920'. [ 445.248335][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3920'. [ 445.525974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.664010][T15070] loop4: detected capacity change from 0 to 256 [ 445.675505][T15070] exfat: Deprecated parameter 'utf8' [ 445.791683][T15070] exFAT-fs (loop4): error, data size is invalid(34359738378) [ 445.791704][T15070] exFAT-fs (loop4): Filesystem has been set read-only [ 445.945862][T15070] exFAT-fs (loop4): error, data size is invalid(34359738378) [ 446.289033][T15083] vivid-004: disconnect [ 446.342227][T15080] vivid-004: reconnect [ 446.404592][T15086] loop3: detected capacity change from 0 to 64 [ 446.522829][T15090] loop4: detected capacity change from 0 to 256 [ 446.565647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.651901][T15090] FAT-fs (loop4): Directory bread(block 64) failed [ 446.651933][T15090] FAT-fs (loop4): Directory bread(block 65) failed [ 446.652025][T15090] FAT-fs (loop4): Directory bread(block 66) failed [ 446.652047][T15090] FAT-fs (loop4): Directory bread(block 67) failed [ 446.652154][T15090] FAT-fs (loop4): Directory bread(block 68) failed [ 446.652176][T15090] FAT-fs (loop4): Directory bread(block 69) failed [ 446.652268][T15090] FAT-fs (loop4): Directory bread(block 70) failed [ 446.652290][T15090] FAT-fs (loop4): Directory bread(block 71) failed [ 446.652403][T15090] FAT-fs (loop4): Directory bread(block 72) failed [ 446.652424][T15090] FAT-fs (loop4): Directory bread(block 73) failed [ 447.152715][T15103] loop3: detected capacity change from 0 to 256 [ 447.153841][T15103] exfat: Deprecated parameter 'utf8' [ 447.169123][T15103] exfat: Deprecated parameter 'utf8' [ 447.268740][T15103] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 447.290117][T15107] loop2: detected capacity change from 0 to 2048 [ 447.350551][T15107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.605506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.645587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.817150][T15142] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3960'. [ 448.817215][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3960'. [ 449.166249][T15152] loop2: detected capacity change from 0 to 1024 [ 449.413051][T15161] loop3: detected capacity change from 0 to 512 [ 449.423434][T15161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 449.428499][T15161] EXT4-fs (loop3): orphan cleanup on readonly fs [ 449.429348][T15161] EXT4-fs (loop3): 1 truncate cleaned up [ 449.434563][T15161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 449.685431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.828873][T15161] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 449.908021][T15177] loop1: detected capacity change from 0 to 512 [ 449.959406][T15177] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 449.959429][T15177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 449.959520][T15177] System zones: 0-1, 15-15, 18-18, 34-34 [ 449.959886][T15177] EXT4-fs (loop1): orphan cleanup on readonly fs [ 449.959986][T15177] __quota_error: 3 callbacks suppressed [ 449.959998][T15177] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 449.960088][T15177] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 449.960117][T15177] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 450.030220][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.137772][T15177] EXT4-fs (loop1): 1 truncate cleaned up [ 450.154687][T15177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.205925][T15177] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 450.361132][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.619846][T15199] loop2: detected capacity change from 0 to 2048 [ 450.728211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.777913][T15199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.905527][ T37] audit: type=1326 audit(1777047340.011:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 450.906493][ T37] audit: type=1326 audit(1777047340.011:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 450.907360][ T37] audit: type=1326 audit(1777047340.011:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 450.908104][ T37] audit: type=1326 audit(1777047340.011:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 450.909180][ T37] audit: type=1326 audit(1777047340.011:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37910cdd9 code=0x7ffc0000 [ 450.934937][T15199] EXT4-fs: can't change dax mount option while remounting [ 451.150145][T15212] loop1: detected capacity change from 0 to 8192 [ 451.157890][T15212] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.216802][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.741750][T15227] loop1: detected capacity change from 0 to 1024 [ 451.767400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.921223][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 451.967070][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 451.967278][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 451.967441][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 451.967542][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.342585][T15235] loop4: detected capacity change from 0 to 256 [ 452.362857][T15235] exfat: Deprecated parameter 'namecase' [ 452.615209][T15231] net_ratelimit: 1669 callbacks suppressed [ 452.615227][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.615373][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.615520][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.615669][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.615824][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.615978][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.616135][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.616279][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.616419][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.616562][T15231] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 452.869275][T15235] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 453.644257][T15237] smbdirect: ib_dev[syz1] removed [ 453.703392][T15251] loop3: detected capacity change from 0 to 8 [ 453.788112][T15250] loop1: detected capacity change from 0 to 2048 [ 453.815493][T15250] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 453.902750][T15250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.332653][T15271] loop1: detected capacity change from 0 to 2048 [ 454.449201][T15271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.932253][T15292] netlink: 'syz.2.4025': attribute type 10 has an invalid length. [ 455.485468][ T5883] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 455.566132][T15305] loop1: detected capacity change from 0 to 1764 [ 455.645297][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 455.648463][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.648494][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.648532][ T5883] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 455.648552][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.698584][ T5883] usb 3-1: config 0 descriptor?? [ 456.082311][T15305] syz.1.4031: attempt to access beyond end of device [ 456.082311][T15305] loop1: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 456.082352][T15305] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 456.164992][ T5883] konepure 0003:1E7D:2DB4.0022: unknown global tag 0xc [ 456.165017][ T5883] konepure 0003:1E7D:2DB4.0022: item 0 0 1 12 parsing failed [ 456.182245][ T5883] konepure 0003:1E7D:2DB4.0022: parse failed [ 456.182321][ T5883] konepure 0003:1E7D:2DB4.0022: probe with driver konepure failed with error -22 [ 456.269612][T15305] syz.1.4031: attempt to access beyond end of device [ 456.269612][T15305] loop1: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 456.269653][T15305] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 456.269965][ T37] audit: type=1800 audit(1777047345.371:196): pid=15305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4031" name="file0" dev="loop1" ino=1923 res=0 errno=0 [ 456.367605][ T5883] usb 3-1: USB disconnect, device number 19 [ 456.507432][T15298] loop3: detected capacity change from 0 to 32768 [ 456.600171][T15303] loop4: detected capacity change from 0 to 32768 [ 456.680940][T15298] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.775033][T15298] XFS (loop3): Ending clean mount [ 456.971264][ T5832] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 457.727397][T15345] loop1: detected capacity change from 0 to 128 [ 458.165552][ C1] net_ratelimit: 1393 callbacks suppressed [ 458.165570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.265333][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4053'. [ 459.211113][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.490720][T15397] can0: slcan on ttyprintk. [ 459.718802][T15410] loop1: detected capacity change from 0 to 2048 [ 460.104474][T15410] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.245655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.720621][T15439] loop1: detected capacity change from 0 to 1024 [ 460.744075][T15439] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 461.164131][T15432] tipc: Cannot configure node identity twice [ 461.292537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.357206][T15393] can0 (unregistered): slcan off ttyprintk. [ 461.444123][T15454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4090'. [ 461.731486][T15460] loop4: detected capacity change from 0 to 512 [ 461.747304][T15460] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 461.778601][T15460] EXT4-fs (loop4): 1 truncate cleaned up [ 461.827020][T15460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.879723][T15460] EXT4-fs error (device loop4): ext4_get_parent:1836: comm syz.4.4091: inode #2: comm syz.4.4091: iget: illegal inode # [ 462.240415][T15470] loop3: detected capacity change from 0 to 16 [ 462.403608][T15470] erofs (device loop3): mounted with root inode @ nid 36. [ 462.767060][T15445] loop1: detected capacity change from 0 to 32768 [ 476.588863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.709581][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.637680][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 477.687046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.700722][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 477.707259][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.708960][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 477.710875][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 478.573192][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 478.610943][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.669972][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 478.673552][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 478.680873][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 478.699375][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 478.725978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.776150][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.858217][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.860267][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.898282][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.703430][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.752313][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.755306][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.769130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.780192][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.789832][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 479.925695][ T5829] Bluetooth: hci5: command tx timeout [ 480.809095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.083965][T15524] loop3: detected capacity change from 0 to 128 [ 481.231808][ T5829] Bluetooth: hci6: command tx timeout [ 481.269955][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.445719][ T5829] Bluetooth: hci3: command tx timeout [ 481.845914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.935425][ T5829] Bluetooth: hci0: command tx timeout [ 481.963304][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.005276][ T5829] Bluetooth: hci5: command tx timeout [ 482.324087][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.834875][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.885511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.285333][ T5829] Bluetooth: hci6: command tx timeout [ 483.530489][ T5829] Bluetooth: hci3: command tx timeout [ 483.676490][T15488] chnl_net:caif_netlink_parms(): no params data found [ 483.925867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.005367][ T5829] Bluetooth: hci0: command tx timeout [ 484.089232][ T5829] Bluetooth: hci5: command tx timeout [ 484.261184][T15497] chnl_net:caif_netlink_parms(): no params data found [ 484.314271][T15577] loop3: detected capacity change from 0 to 128 [ 484.522597][T15583] loop3: detected capacity change from 0 to 2048 [ 484.528660][T15583] EXT4-fs: Ignoring removed oldalloc option [ 484.550750][T15583] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c018, mo2=0002] [ 484.556541][T15583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.637526][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.817465][ T12] bridge_slave_1: left allmulticast mode [ 484.817497][ T12] bridge_slave_1: left promiscuous mode [ 484.817770][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.918473][ T12] bridge_slave_0: left allmulticast mode [ 484.918494][ T12] bridge_slave_0: left promiscuous mode [ 484.918643][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.966162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.375414][ T5829] Bluetooth: hci6: command tx timeout [ 485.605268][ T5829] Bluetooth: hci3: command tx timeout [ 485.885786][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.966080][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.987228][ T12] bond0 (unregistering): Released all slaves [ 486.011601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.026758][T15504] chnl_net:caif_netlink_parms(): no params data found [ 486.050485][T15498] chnl_net:caif_netlink_parms(): no params data found [ 486.105229][ T5829] Bluetooth: hci0: command tx timeout [ 486.169679][ T5829] Bluetooth: hci5: command tx timeout [ 486.327916][T15488] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.328505][T15488] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.328763][T15488] bridge_slave_0: entered allmulticast mode [ 486.331947][T15488] bridge_slave_0: entered promiscuous mode [ 486.424436][T15488] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.424630][T15488] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.424823][T15488] bridge_slave_1: entered allmulticast mode [ 486.428145][T15488] bridge_slave_1: entered promiscuous mode [ 486.491394][ T12] IPVS: stopping master sync thread 14030 ... [ 487.047752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.101804][T15488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.144035][T15497] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.144206][T15497] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.144375][T15497] bridge_slave_0: entered allmulticast mode [ 487.152588][T15497] bridge_slave_0: entered promiscuous mode [ 487.186391][T15488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.445377][ T5829] Bluetooth: hci6: command tx timeout [ 487.496399][T15497] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.500690][T15497] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.501042][T15497] bridge_slave_1: entered allmulticast mode [ 487.529070][T15497] bridge_slave_1: entered promiscuous mode [ 487.596286][T15504] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.597350][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.597635][T15504] bridge_slave_0: entered allmulticast mode [ 487.601188][T15504] bridge_slave_0: entered promiscuous mode [ 487.685263][ T5829] Bluetooth: hci3: command tx timeout [ 487.739625][T15498] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.739923][T15498] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.740200][T15498] bridge_slave_0: entered allmulticast mode [ 487.743369][T15498] bridge_slave_0: entered promiscuous mode [ 487.838673][T15504] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.839008][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.839282][T15504] bridge_slave_1: entered allmulticast mode [ 487.868264][T15504] bridge_slave_1: entered promiscuous mode [ 487.908291][T15498] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.908604][T15498] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.908872][T15498] bridge_slave_1: entered allmulticast mode [ 487.910715][T15498] bridge_slave_1: entered promiscuous mode [ 487.914960][T15488] team0: Port device team_slave_0 added [ 487.990248][T15497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.034856][T15488] team0: Port device team_slave_1 added [ 488.085820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.165458][ T5829] Bluetooth: hci0: command tx timeout [ 488.188319][T15626] Bluetooth: MGMT ver 1.23 [ 488.205335][ T12] hsr_slave_0: left promiscuous mode [ 488.245325][ T12] hsr_slave_1: left promiscuous mode [ 488.246350][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.246367][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.291509][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.291536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.400917][ T12] veth1_macvtap: left promiscuous mode [ 488.400977][ T12] veth0_macvtap: left promiscuous mode [ 488.403555][ T12] veth1_vlan: left promiscuous mode [ 488.403734][ T12] veth0_vlan: left promiscuous mode [ 489.111669][ T12] team0 (unregistering): Port device team_slave_1 removed [ 489.125405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.167742][ T12] team0 (unregistering): Port device team_slave_0 removed [ 489.374045][T15497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.395324][ T820] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 489.447907][T15504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.545346][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 489.546974][ T820] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 489.547004][ T820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 489.547028][ T820] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 489.547040][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.550375][ T820] usb 4-1: config 0 descriptor?? [ 489.668307][T15498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.701553][T15504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.738274][T15498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.740285][T15488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.740294][T15488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.740315][T15488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.817979][T15497] team0: Port device team_slave_0 added [ 489.844457][T15488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.844466][T15488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.844481][T15488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.032897][T15497] team0: Port device team_slave_1 added [ 490.053489][ T820] hid_parser_main: 30 callbacks suppressed [ 490.053511][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053540][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053567][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053593][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053619][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053645][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053672][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053698][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053724][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.053750][ T820] greenasia 0003:0E8F:0012.0023: unknown main item tag 0x0 [ 490.116356][ T820] greenasia 0003:0E8F:0012.0023: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 490.116390][ T820] greenasia 0003:0E8F:0012.0023: no inputs found [ 490.170139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.193722][T15504] team0: Port device team_slave_0 added [ 490.234164][ T5925] usb 4-1: USB disconnect, device number 21 [ 490.260495][T15498] team0: Port device team_slave_0 added [ 490.272644][T15504] team0: Port device team_slave_1 added [ 490.310937][T15498] team0: Port device team_slave_1 added [ 490.334999][T15497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.335009][T15497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.335024][T15497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.458911][T15497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.458925][T15497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.458943][T15497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.481149][T15504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.481164][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.481188][T15504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.577885][T15498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.577895][T15498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.577910][T15498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.581181][T15504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.581189][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.581204][T15504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.596564][T15488] hsr_slave_0: entered promiscuous mode [ 490.598493][T15488] hsr_slave_1: entered promiscuous mode [ 490.600074][T15488] debugfs: 'hsr0' already exists in 'hsr' [ 490.600096][T15488] Cannot create hsr debugfs directory [ 490.926585][T15498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.926596][T15498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.926611][T15498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.029147][T15637] bridge0: port 3(vlan3) entered blocking state [ 491.029395][T15637] bridge0: port 3(vlan3) entered disabled state [ 491.029657][T15637] vlan3: entered allmulticast mode [ 491.029667][T15637] bridge0: entered allmulticast mode [ 491.060586][T15637] vlan3: left allmulticast mode [ 491.060605][T15637] bridge0: left allmulticast mode [ 491.205554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.396217][T15497] hsr_slave_0: entered promiscuous mode [ 491.401955][T15497] hsr_slave_1: entered promiscuous mode [ 491.403720][T15497] debugfs: 'hsr0' already exists in 'hsr' [ 491.403744][T15497] Cannot create hsr debugfs directory [ 491.534822][T15644] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4155'. [ 491.617759][T15504] hsr_slave_0: entered promiscuous mode [ 491.621256][T15504] hsr_slave_1: entered promiscuous mode [ 491.630714][T15504] debugfs: 'hsr0' already exists in 'hsr' [ 491.630737][T15504] Cannot create hsr debugfs directory [ 491.711820][T15498] hsr_slave_0: entered promiscuous mode [ 491.714032][T15498] hsr_slave_1: entered promiscuous mode [ 491.727398][T15498] debugfs: 'hsr0' already exists in 'hsr' [ 491.727421][T15498] Cannot create hsr debugfs directory [ 492.245804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.273552][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 492.568510][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.871479][T15674] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 492.871479][T15674] program syz.3.4164 not setting count and/or reply_len properly [ 492.931799][T15676] binder: 15675:15676 ioctl 541b 0 returned -22 [ 493.112018][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.286865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.384518][T15684] loop3: detected capacity change from 0 to 1024 [ 493.673140][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.945473][ T820] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 494.138820][ T820] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 494.138849][ T820] usb 4-1: config 0 has no interface number 0 [ 494.138886][ T820] usb 4-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 494.138901][ T820] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 494.138915][ T820] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 494.140457][ T820] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 494.140488][ T820] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 494.140499][ T820] usb 4-1: Manufacturer: syz [ 494.140507][ T820] usb 4-1: SerialNumber: syz [ 494.144775][ T820] usb 4-1: config 0 descriptor?? [ 494.219298][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 494.325954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.371001][ T820] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 494.371274][ T820] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 494.382469][ T820] usb 4-1: USB disconnect, device number 22 [ 494.471306][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.900390][T15488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 495.051250][T15488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.098761][T15488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 495.149273][T15702] loop3: detected capacity change from 0 to 512 [ 495.189268][T15488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.214137][T15488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 495.216879][T15702] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 495.217269][T15702] EXT4-fs (loop3): orphan cleanup on readonly fs [ 495.298397][T15488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.367534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.432788][T15702] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.4173: corrupted inode contents [ 495.432823][T15702] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 495.434895][T15702] EXT4-fs (loop3): Remounting filesystem read-only [ 495.435219][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 495.435279][ C0] EXT4-fs (loop3): initial error at time 1777047384: ext4_do_update_inode:5690: inode 16 [ 495.435307][ C0] EXT4-fs (loop3): last error at time 1777047384: ext4_do_update_inode:5690: inode 16 [ 495.496196][T15702] EXT4-fs (loop3): 1 truncate cleaned up [ 495.565411][ T39] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 495.565438][ T39] Quota error (device loop3): write_blk: dquota write failed [ 495.565451][ T39] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 495.565467][ T39] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 495.565484][ T39] Quota error (device loop3): write_blk: dquota write failed [ 495.565496][ T39] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 495.565586][ T39] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 495.565605][ T39] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 495.565758][ T39] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 495.568634][T15702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 495.773088][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.900744][T15488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 495.982092][T15488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.984968][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 496.207188][ T5909] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 496.389486][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 496.393135][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.393166][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.393188][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 496.393227][ T5909] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 496.393257][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.402945][ T5909] usb 4-1: config 0 descriptor?? [ 496.408924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.853754][ T5909] hid_parser_main: 28 callbacks suppressed [ 496.853770][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x4 [ 496.853788][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x6 [ 496.853804][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x5 [ 496.853818][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x0 [ 496.853833][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x0 [ 496.853848][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x0 [ 496.853862][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x0 [ 496.853877][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x0 [ 496.853891][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x0 [ 496.853906][ T5909] elecom 0003:056E:00FE.0024: unknown main item tag 0x0 [ 496.876867][ T5909] elecom 0003:056E:00FE.0024: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 497.044323][ T5561] usb 4-1: USB disconnect, device number 23 [ 497.113819][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.184116][T15497] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.216249][T15497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.230873][T15497] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.276651][T15497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.296889][T15497] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 497.332861][T15497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.450329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.473287][T15497] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 497.488685][T15497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.642593][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.852331][T15733] loop3: detected capacity change from 0 to 128 [ 498.148923][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.359110][ T5955] kernel read not supported for file /sysvipc/msg (pid: 5955 comm: kworker/0:7) [ 498.490170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.759638][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.804767][T15504] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 498.896231][T15504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.940299][T15504] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 499.066713][T15504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.082514][T15504] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 499.124482][T15504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.140944][T15504] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 499.189148][T15504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.291385][T15753] loop3: detected capacity change from 0 to 256 [ 499.310743][T15753] exfat: Deprecated parameter 'utf8' [ 499.344449][T15753] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 499.526355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.570507][T15757] loop3: detected capacity change from 0 to 256 [ 499.709021][T15757] FAT-fs (loop3): Directory bread(block 64) failed [ 499.709051][T15757] FAT-fs (loop3): Directory bread(block 65) failed [ 499.709132][T15757] FAT-fs (loop3): Directory bread(block 66) failed [ 499.709151][T15757] FAT-fs (loop3): Directory bread(block 67) failed [ 499.709234][T15757] FAT-fs (loop3): Directory bread(block 68) failed [ 499.709252][T15757] FAT-fs (loop3): Directory bread(block 69) failed [ 499.709324][T15757] FAT-fs (loop3): Directory bread(block 70) failed [ 499.709343][T15757] FAT-fs (loop3): Directory bread(block 71) failed [ 499.709414][T15757] FAT-fs (loop3): Directory bread(block 72) failed [ 499.709432][T15757] FAT-fs (loop3): Directory bread(block 73) failed [ 500.463025][T15772] loop3: detected capacity change from 0 to 64 [ 500.495259][T15772] minix: block size(59136) > page size(4096) not supported by filesystem [ 500.566866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.802964][T15498] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 500.902384][T15498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.087170][T15498] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.147920][T15498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.163620][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 501.167053][T15498] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 501.190317][T15785] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4192'. [ 501.237200][T15498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.373122][T15488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.373403][T15498] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.386034][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.425082][T15498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.606870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.693411][T15488] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.083702][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.306045][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.306226][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.385669][T15497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.405368][ T5883] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 502.571501][ T5883] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 502.571525][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.577787][ T5883] usb 4-1: config 0 descriptor?? [ 502.603238][ T5883] cp210x 4-1:0.0: cp210x converter detected [ 502.646671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.670851][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.777107][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.777337][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.051219][ T5883] usb 4-1: cp210x converter now attached to ttyUSB0 [ 503.231748][ T5561] usb 4-1: USB disconnect, device number 24 [ 503.284553][ T5561] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 503.353013][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.415615][ T5561] cp210x 4-1:0.0: device disconnected [ 503.443594][T15497] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.685675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.712379][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.791244][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4 [ 503.805176][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.805455][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.956853][T15504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.982691][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.982890][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.135511][T15504] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.418347][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.418570][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.567603][T15833] loop3: detected capacity change from 0 to 2048 [ 504.620956][T15498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.699029][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.699118][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.725586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.731870][T15833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.731978][T15833] ext4 filesystem being mounted at /910/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.026740][T15833] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4202: bg 0: block 345: padding at end of block bitmap is not set [ 505.060810][T15833] EXT4-fs (loop3): Remounting filesystem read-only [ 505.203001][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.399859][T15498] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.765591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.320179][T15854] loop3: detected capacity change from 0 to 131072 [ 506.351805][T15854] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 506.446831][T15854] XFS (loop3): Starting recovery (logdev: internal) [ 506.526809][T15854] XFS (loop3): Metadata CRC error detected at xfs_agi_read_verify+0x142/0x210, xfs_agi block 0x10002 [ 506.526855][T15854] XFS (loop3): Unmount and run xfs_repair [ 506.526868][T15854] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 506.526885][T15854] 00000000: 58 41 47 49 00 00 00 01 00 00 00 02 00 00 20 00 XAGI.......... . [ 506.526900][T15854] 00000010: 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 00 ................ [ 506.526915][T15854] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 506.526925][T15854] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 506.526932][T15854] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 506.526940][T15854] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 506.526946][T15854] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 506.526954][T15854] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 506.527123][T15854] XFS (loop3): metadata I/O error in "xfs_read_agi+0x270/0x5c0" at daddr 0x10002 len 1 error 74 [ 506.527241][T15854] loop3: lost filesystem error report for type 5 error -117 [ 506.530682][T15854] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 506.805745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.165891][ T12] bridge0: port 3(batadv0) entered disabled state [ 507.209587][T15867] loop3: detected capacity change from 0 to 16 [ 507.276958][ T12] bridge_slave_1: left allmulticast mode [ 507.276989][ T12] bridge_slave_1: left promiscuous mode [ 507.277232][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.386792][ T12] bridge_slave_0: left allmulticast mode [ 507.386823][ T12] bridge_slave_0: left promiscuous mode [ 507.387065][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.610197][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4207'. [ 507.845565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.897753][ T12] bridge0: port 3(batadv0) entered disabled state [ 507.976239][ T12] bridge_slave_1: left allmulticast mode [ 507.976261][ T12] bridge_slave_1: left promiscuous mode [ 507.976429][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.038649][ T12] bridge_slave_0: left promiscuous mode [ 508.038826][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.375720][ T12] bridge_slave_1: left allmulticast mode [ 508.375744][ T12] bridge_slave_1: left promiscuous mode [ 508.375909][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.436260][ T12] bridge_slave_0: left allmulticast mode [ 508.436282][ T12] bridge_slave_0: left promiscuous mode [ 508.436430][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.075400][ T821] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 509.235314][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 509.242809][ T821] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 509.262878][ T821] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 509.262903][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.262913][ T821] usb 4-1: Product: syz [ 509.262921][ T821] usb 4-1: Manufacturer: syz [ 509.262943][ T821] usb 4-1: SerialNumber: syz [ 509.275428][ T821] usb 4-1: config 0 descriptor?? [ 509.324383][ T821] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 509.324421][ T821] usb 4-1: setting power ON [ 509.324434][ T821] dvb-usb: bulk message failed: -22 (2/0) [ 509.364024][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.366131][ T821] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 509.366181][ T821] usb 4-1: media controller created [ 509.433277][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.462440][ T821] usb 4-1: selecting invalid altsetting 6 [ 509.462462][ T821] usb 4-1: digital interface selection failed (-22) [ 509.462476][ T821] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 509.464284][ T821] usb 4-1: setting power OFF [ 509.464297][ T821] dvb-usb: bulk message failed: -22 (2/0) [ 509.464306][ T821] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 509.464313][ T821] (NULL device *): no alternate interface [ 509.517892][T15881] dvb-usb: bulk message failed: -22 (3/0) [ 509.517915][T15881] dvb-usb: bulk message failed: -22 (3/0) [ 509.583188][ T821] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 509.639041][ T821] usb 4-1: USB disconnect, device number 25 [ 510.279263][T15885] loop3: detected capacity change from 0 to 256 [ 510.328143][T15885] FAT-fs (loop3): Directory bread(block 64) failed [ 510.328174][T15885] FAT-fs (loop3): Directory bread(block 65) failed [ 510.329775][T15885] FAT-fs (loop3): Directory bread(block 66) failed [ 510.329803][T15885] FAT-fs (loop3): Directory bread(block 67) failed [ 510.330011][T15885] FAT-fs (loop3): Directory bread(block 68) failed [ 510.330033][T15885] FAT-fs (loop3): Directory bread(block 69) failed [ 510.330126][T15885] FAT-fs (loop3): Directory bread(block 70) failed [ 510.330147][T15885] FAT-fs (loop3): Directory bread(block 71) failed [ 510.330240][T15885] FAT-fs (loop3): Directory bread(block 72) failed [ 510.330262][T15885] FAT-fs (loop3): Directory bread(block 73) failed [ 510.536272][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.617828][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.657940][ T12] bond0 (unregistering): Released all slaves [ 510.664393][ T12] bond1 (unregistering): Released all slaves [ 511.275740][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.355717][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.380318][ T12] bond0 (unregistering): Released all slaves [ 512.337229][ T12] team0: Port device bridge1 removed [ 512.495696][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.577627][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.597177][ T12] bond0 (unregistering): Released all slaves [ 512.642781][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5 [ 512.699121][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.715452][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.907577][T15887] vlan3: entered promiscuous mode [ 512.907590][T15887] macvtap0: entered promiscuous mode [ 513.029304][ T12] tipc: Disabling bearer [ 513.031679][ T12] tipc: Left network mode [ 513.097221][T15488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.136413][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.136542][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.231431][T15896] loop3: detected capacity change from 0 to 512 [ 513.249256][T15896] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.4216: invalid block [ 513.249288][T15896] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 513.252266][T15896] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4216: couldn't read orphan inode 11 (err -117) [ 513.252299][T15896] loop3: lost filesystem error report for type 5 error -117 [ 513.322842][T15896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.367031][ T12] tipc: Disabling bearer [ 513.441176][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.455785][ T12] tipc: Left network mode [ 513.677584][ T12] tipc: Disabling bearer [ 513.782761][ T12] tipc: Left network mode [ 513.836912][T15497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.659767][T15913] loop3: detected capacity change from 0 to 32768 [ 514.775460][T15913] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 515.031058][T15913] XFS (loop3): Ending clean mount [ 515.135924][ T5832] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 515.615522][T15504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.811507][T15488] veth0_vlan: entered promiscuous mode [ 515.911087][T15949] Bluetooth: MGMT ver 1.23 [ 516.647548][ T5490] 8021q: adding VLAN 0 to HW filter on device eth6 [ 516.847368][T15488] veth1_vlan: entered promiscuous mode [ 516.939931][T15498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.027006][T15497] veth0_vlan: entered promiscuous mode [ 517.574699][T15497] veth1_vlan: entered promiscuous mode [ 517.707237][T15488] veth0_macvtap: entered promiscuous mode [ 517.840055][T15488] veth1_macvtap: entered promiscuous mode [ 517.895341][ T5561] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 518.054949][ T5561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 518.054977][ T5561] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 518.055001][ T5561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 518.055013][ T5561] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 518.099830][ T5561] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 518.099856][ T5561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.099866][ T5561] usb 4-1: Product: syz [ 518.099873][ T5561] usb 4-1: Manufacturer: syz [ 518.099880][ T5561] usb 4-1: SerialNumber: syz [ 518.103138][ T5561] usb 4-1: config 0 descriptor?? [ 518.158596][ T5561] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 518.317652][ T5561] scsi host1: usb-storage 4-1:0.0 [ 518.522211][T15960] usb 4-1: USB disconnect, device number 26 [ 518.823460][T15504] veth0_vlan: entered promiscuous mode [ 518.862550][T15488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.986941][T15497] veth0_macvtap: entered promiscuous mode [ 519.014315][T15488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.036003][T15504] veth1_vlan: entered promiscuous mode [ 519.422051][T15497] veth1_macvtap: entered promiscuous mode [ 519.503206][T15498] veth0_vlan: entered promiscuous mode [ 519.522934][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.595686][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.681526][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.697842][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.758676][T15498] veth1_vlan: entered promiscuous mode [ 519.945279][ T12] hsr_slave_0: left promiscuous mode [ 519.985318][ T12] hsr_slave_1: left promiscuous mode [ 519.986216][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.986235][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.006392][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.006413][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.195271][ T12] hsr_slave_0: left promiscuous mode [ 520.215350][ T12] hsr_slave_1: left promiscuous mode [ 520.216434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.216457][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.257037][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.257053][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.395278][ T12] hsr_slave_0: left promiscuous mode [ 520.415518][ T12] hsr_slave_1: left promiscuous mode [ 520.416270][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.416286][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.456015][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.456039][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.589316][ T12] veth1_macvtap: left promiscuous mode [ 520.589384][ T12] veth0_macvtap: left promiscuous mode [ 520.589575][ T12] veth1_vlan: left promiscuous mode [ 520.589677][ T12] veth0_vlan: left promiscuous mode [ 520.705443][ T12] veth1_macvtap: left promiscuous mode [ 520.705499][ T12] veth0_macvtap: left promiscuous mode [ 520.715604][ T12] veth1_vlan: left promiscuous mode [ 520.715803][ T12] veth0_vlan: left promiscuous mode [ 520.835591][ T12] veth1_macvtap: left promiscuous mode [ 520.835649][ T12] veth0_macvtap: left promiscuous mode [ 520.835806][ T12] veth1_vlan: left promiscuous mode [ 520.835905][ T12] veth0_vlan: left promiscuous mode [ 521.785889][ T12] team0 (unregistering): Port device team_slave_1 removed [ 521.825836][ T12] team0 (unregistering): Port device team_slave_0 removed [ 522.455984][ T12] team0 (unregistering): Port device team_slave_1 removed [ 522.505811][ T12] team0 (unregistering): Port device team_slave_0 removed [ 523.086921][ T12] team0 (unregistering): Port device team_slave_1 removed [ 523.185661][ T12] team0 (unregistering): Port device team_slave_0 removed [ 523.544117][ T5490] 8021q: adding VLAN 0 to HW filter on device eth7 [ 523.678597][T15497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.753564][T15497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.979317][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.012017][T15504] veth0_macvtap: entered promiscuous mode [ 524.038698][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.065271][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.317002][ T3540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.438907][T15504] veth1_macvtap: entered promiscuous mode [ 524.781907][T16014] syz.3.4234 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 524.831951][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.831970][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.920345][T15498] veth0_macvtap: entered promiscuous mode [ 525.293087][T15498] veth1_macvtap: entered promiscuous mode [ 525.423536][T15504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.558958][T15504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.561464][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.561480][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.721889][T15498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.083581][T16025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4238'. [ 526.143749][ T1455] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.239087][T15498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.241567][ T1455] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.282023][ T2192] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.330249][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.330268][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.369843][ T2192] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.459199][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.581246][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.584379][T16031] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4240'. [ 526.607978][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.639824][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.640295][T16031] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4240'. [ 527.754959][T16052] loop3: detected capacity change from 0 to 256 [ 527.836347][T16052] exfat: Deprecated parameter 'utf8' [ 527.839398][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.839415][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.883614][T16052] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 528.910139][ T5490] 8021q: adding VLAN 0 to HW filter on device eth8 [ 528.930945][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.930960][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.350332][T16050] loop5: detected capacity change from 0 to 32768 [ 529.512774][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.512795][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.002483][T16050] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 530.207015][T16058] loop3: detected capacity change from 0 to 32768 [ 530.269978][T16058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4246 (16058) [ 530.558007][T16050] XFS (loop5): Ending clean mount [ 530.628955][T16058] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 530.628986][T16058] BTRFS info (device loop3): using crc32c checksum algorithm [ 530.641376][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4099'. [ 530.730275][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.730293][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.803529][T15488] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 531.130042][T16087] 9p: Bad value for 'rfdno' [ 531.403252][T16058] BTRFS info (device loop3): enabling ssd optimizations [ 531.403277][T16058] BTRFS info (device loop3): turning on flush-on-commit [ 531.403293][T16058] BTRFS info (device loop3): enabling free space tree [ 531.403309][T16058] BTRFS info (device loop3): enabling auto defrag [ 531.403337][T16058] BTRFS info (device loop3): use lzo compression, level 1 [ 531.403357][T16058] BTRFS info (device loop3): max_inline set to 4096 [ 531.405371][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.405386][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.026299][ T5832] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 532.917395][T16102] nvme_fabrics: missing parameter 'transport=%s' [ 532.917411][T16102] nvme_fabrics: missing parameter 'nqn=%s' [ 533.563880][T16113] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 533.599141][T16113] bond1 (unregistering): Released all slaves [ 534.036725][ T5490] 8021q: adding VLAN 0 to HW filter on device eth9 [ 534.722851][T16138] netlink: 'syz.7.4259': attribute type 2 has an invalid length. [ 534.722870][T16138] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4259'. [ 534.722887][T16138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.574946][ T12] IPVS: stop unused estimator thread 0... [ 535.663303][ T12] IPVS: stop unused estimator thread 0... [ 535.913853][T16160] loop3: detected capacity change from 0 to 4096 [ 535.963791][T16160] EXT4-fs: inline encryption not supported [ 536.145653][T16160] EXT4-fs (loop3): Test dummy encryption mode enabled [ 536.243307][T16160] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 536.243440][T16160] System zones: 0-5 [ 536.326473][T16160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.182622][T16195] netlink: 552 bytes leftover after parsing attributes in process `syz.6.4280'. [ 537.437180][T16160] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 537.522507][ T5490] 8021q: adding VLAN 0 to HW filter on device eth10 [ 538.081695][ T37] audit: type=1326 audit(1777047427.181:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.6.4288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4adc99cdd9 code=0x0 [ 538.329602][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.896362][ T5916] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 539.060076][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.060130][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 539.060164][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 539.060190][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 539.060213][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 539.064652][ T5916] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 539.064680][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 539.064701][ T5916] usb 4-1: Product: syz [ 539.064716][ T5916] usb 4-1: Manufacturer: syz [ 539.064730][ T5916] usb 4-1: SerialNumber: syz [ 539.156883][T16233] loop6: detected capacity change from 0 to 512 [ 539.162580][T16233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.166231][ T5916] usb 4-1: config 0 descriptor?? [ 539.182806][T16233] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 539.404938][T16200] loop8: detected capacity change from 0 to 32768 [ 539.424951][ T5916] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 539.424976][ T5916] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 539.486175][T16233] EXT4-fs (loop6): 1 truncate cleaned up [ 539.509641][T16233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.606210][ T5916] radio-si470x 4-1:0.0: software version 128, hardware version 83 [ 539.606237][ T5916] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 539.734925][T16200] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 539.813816][ T5916] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 539.813882][ T5916] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 539.814298][ T5916] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 539.814608][ T5916] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 539.849061][ T5916] usb 4-1: USB disconnect, device number 27 [ 539.870450][T16249] loop7: detected capacity change from 0 to 256 [ 539.871332][T16249] exfat: Deprecated parameter 'utf8' [ 539.871441][T16249] exfat: Deprecated parameter 'utf8' [ 540.080697][T16200] XFS (loop8): Ending clean mount [ 540.127687][T15497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.307555][T16249] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 540.343828][T15504] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 540.363307][T16259] [U] „ [ 540.400707][T16261] loop6: detected capacity change from 0 to 64 [ 541.157186][T16282] loop6: detected capacity change from 0 to 512 [ 541.159781][T16282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 541.159846][T16282] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.182871][T16282] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 541.182901][T16282] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 541.184436][T16282] EXT4-fs (loop6): 1 truncate cleaned up [ 541.271876][T16282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.279816][T16282] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.4301: lblock 0 mapped to illegal pblock 4 (length 1) [ 541.324052][T16282] EXT4-fs (loop6): Remounting filesystem read-only [ 541.552261][T15497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.574730][T16287] loop5: detected capacity change from 0 to 4096 [ 541.716223][T16287] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 541.911448][ T5829] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 541.911496][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 541.911525][ T5829] Tainted: [L]=SOFTLOCKUP [ 541.911532][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 541.911545][ T5829] Workqueue: hci3 hci_rx_work [ 541.911584][ T5829] Call Trace: [ 541.911595][ T5829] [ 541.911604][ T5829] dump_stack_lvl+0xe8/0x150 [ 541.911633][ T5829] sysfs_create_dir_ns+0x271/0x2a0 [ 541.911660][ T5829] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 541.911687][ T5829] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 541.911716][ T5829] ? rt_spin_unlock+0x160/0x200 [ 541.911744][ T5829] kobject_add_internal+0x631/0xd10 [ 541.911776][ T5829] kobject_add+0x163/0x240 [ 541.911802][ T5829] ? __pfx_kobject_add+0x10/0x10 [ 541.911831][ T5829] ? get_device_parent+0x370/0x3a0 [ 541.911864][ T5829] device_add+0x408/0xbb0 [ 541.911896][ T5829] hci_conn_add_sysfs+0xd5/0x210 [ 541.911930][ T5829] le_conn_complete_evt+0x10e6/0x16b0 [ 541.911970][ T5829] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 541.911995][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 541.912026][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 541.912059][ T5829] ? skb_pull_data+0xfb/0x200 [ 541.912086][ T5829] hci_le_conn_complete_evt+0x187/0x470 [ 541.912117][ T5829] hci_event_packet+0x659/0xef0 [ 541.912154][ T5829] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 541.912176][ T5829] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 541.912196][ T5829] ? __pfx_hci_event_packet+0x10/0x10 [ 541.912226][ T5829] ? rt_spin_unlock+0x14f/0x200 [ 541.912259][ T5829] ? hci_send_to_monitor+0xe2/0x590 [ 541.912288][ T5829] hci_rx_work+0x3ee/0x1040 [ 541.912329][ T5829] ? process_one_work+0x8b7/0x1710 [ 541.912351][ T5829] process_one_work+0x9a3/0x1710 [ 541.912395][ T5829] ? __pfx_process_one_work+0x10/0x10 [ 541.912414][ T5829] ? do_raw_spin_lock+0x12b/0x2f0 [ 541.912455][ T5829] worker_thread+0xba8/0x11e0 [ 541.912488][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 541.912520][ T5829] ? __kthread_parkme+0x7a/0x1f0 [ 541.912545][ T5829] ? __kthread_parkme+0x19c/0x1f0 [ 541.912576][ T5829] kthread+0x388/0x470 [ 541.912604][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 541.912625][ T5829] ? __pfx_kthread+0x10/0x10 [ 541.912654][ T5829] ret_from_fork+0x514/0xb70 [ 541.912684][ T5829] ? __pfx_ret_from_fork+0x10/0x10 [ 541.912707][ T5829] ? __switch_to+0xc79/0x1410 [ 541.912743][ T5829] ? __pfx_kthread+0x10/0x10 [ 541.912772][ T5829] ret_from_fork_asm+0x1a/0x30 [ 541.912815][ T5829] [ 541.914158][ T5829] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 541.914199][ T5829] Bluetooth: hci3: failed to register connection device [ 541.963624][T16299] Dead loop on virtual device ip6_vti0 (net 281), fix it urgently! [ 542.045513][T16287] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 542.046180][T16287] ntfs3(loop5): ino=1a, mi_enum_attr [ 542.046364][T16287] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 542.310954][T16309] netlink: 'syz.6.4310': attribute type 3 has an invalid length. [ 542.623818][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4312'. [ 542.623841][T16316] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4312'. [ 542.760171][ T5490] 8021q: adding VLAN 0 to HW filter on device eth11 [ 542.941703][T16321] loop5: detected capacity change from 0 to 1024 [ 543.138964][T16331] loop6: detected capacity change from 0 to 512 [ 543.190897][T16321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.758224][T15488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.294489][T16333] loop7: detected capacity change from 0 to 32768 [ 545.203799][T16373] loop8: detected capacity change from 0 to 128 [ 545.338138][ T5490] 8021q: adding VLAN 0 to HW filter on device eth12 [ 545.400745][T16380] loop7: detected capacity change from 0 to 1024 [ 546.075082][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4342'. [ 546.075268][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4342'. [ 546.281480][ T37] audit: type=1326 audit(1777047435.381:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16404 comm="syz.7.4344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f086d2fcdd9 code=0x0 [ 546.469233][T16411] loop5: detected capacity change from 0 to 4096 [ 546.641162][T16411] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 546.905072][T16421] loop3: detected capacity change from 0 to 4096 [ 546.913203][T16421] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 547.331166][T16421] ntfs3(loop3): ino=19, mi_enum_attr [ 547.331196][T16421] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 547.368835][T16430] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4353'. [ 547.493076][T16421] ntfs3(loop3): failed to convert "c46c" to iso8859-13 [ 547.633729][T16421] ntfs3(loop3): ino=20, mi_enum_attr [ 547.877792][ T5490] 8021q: adding VLAN 0 to HW filter on device eth13 [ 547.976830][T16446] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4358'. [ 547.978474][T16446] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4358'. [ 550.037134][T16525] loop5: detected capacity change from 0 to 164 [ 550.076884][T16525] isofs: Unable to find the ".." directory for NFS. [ 550.089048][ T5835] Bluetooth: hci0: command tx timeout [ 550.270786][T16493] loop3: detected capacity change from 0 to 32768 [ 550.677672][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4398'. [ 550.677697][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4398'. [ 550.800835][T16539] loop7: detected capacity change from 0 to 4096 [ 550.816502][T16552] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4400'. [ 550.991755][T16539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.067205][T16561] ipvlan1: entered promiscuous mode [ 551.067697][T16560] ipvlan1: left promiscuous mode [ 551.072340][T16562] Invalid ELF header len 9 [ 551.139207][T16564] loop8: detected capacity change from 0 to 512 [ 551.140205][T16564] EXT4-fs: Ignoring removed nobh option [ 551.143855][T16564] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 551.215955][T16564] EXT4-fs (loop8): 1 truncate cleaned up [ 551.220956][T16564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.259467][T15498] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.423417][T15504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.600982][T16574] ieee802154 phy0 wpan0: encryption failed: -22 [ 551.693324][T16580] loop6: detected capacity change from 0 to 256 [ 551.707349][T16580] exfat: Deprecated parameter 'namecase' [ 551.707387][T16580] exfat: Deprecated parameter 'namecase' [ 551.753067][T16580] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 551.769411][T15808] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 551.915265][T15808] usb 4-1: Using ep0 maxpacket: 16 [ 551.922192][T15808] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 551.922218][T15808] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.922243][T15808] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.922269][T15808] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 551.922297][T15808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.992690][T15808] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 551.992719][T15808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.992737][T15808] usb 4-1: Product: syz [ 551.992751][T15808] usb 4-1: Manufacturer: syz [ 551.992765][T15808] usb 4-1: SerialNumber: syz [ 552.050889][T15808] usb 4-1: config 0 descriptor?? [ 552.051774][T16572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.104147][T16588] loop8: detected capacity change from 0 to 512 [ 552.120276][T16588] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 552.134716][T16588] EXT4-fs (loop8): orphan cleanup on readonly fs [ 552.136157][T16588] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.4414: Block bitmap for bg 0 marked uninitialized [ 552.136184][T16588] loop8: lost filesystem error report for type 5 error -117 [ 552.195154][ C1] EXT4-fs (loop8): initial error at time 1777047441: ext4_read_block_bitmap_nowait:517 [ 552.195181][ C1] EXT4-fs (loop8): last error at time 1777047441: ext4_read_block_bitmap_nowait:517 [ 552.259997][T16572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.274031][T15808] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 552.722013][T16588] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 552.722037][T16588] loop8: lost filesystem error report for type 5 error -117 [ 552.855592][T16588] EXT4-fs (loop8): 1 orphan inode deleted [ 552.881519][T16588] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 657.295128][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 657.295149][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16592 [ 657.295165][ C1] rcu: (detected by 1, t=10502 jiffies, g=66825, q=1312 ncpus=2) [ 657.295179][ C1] task:syz.6.4413 state:R running task stack:25880 pid:16592 tgid:16591 ppid:15497 task_flags:0x400140 flags:0x00080000 [ 657.295210][ C1] Call Trace: [ 657.295215][ C1] [ 657.295222][ C1] sched_show_task+0x4aa/0x5f0 [ 657.295241][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 657.295250][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 657.295265][ C1] ? wq_watchdog_touch+0x100/0x160 [ 657.295281][ C1] print_other_cpu_stall+0xfca/0x1380 [ 657.295299][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 657.295311][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 657.295332][ C1] rcu_sched_clock_irq+0x939/0x1050 [ 657.295349][ C1] update_process_times+0x234/0x2d0 [ 657.295364][ C1] tick_nohz_handler+0x42b/0x770 [ 657.295380][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 657.295396][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 657.295408][ C1] __hrtimer_run_queues+0x3bc/0xb10 [ 657.295427][ C1] hrtimer_interrupt+0x455/0x950 [ 657.295448][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 657.295462][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 657.295477][ C1] [ 657.295481][ C1] [ 657.295484][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.295496][ C1] RIP: 0010:__local_bh_enable_ip+0x1c2/0x2b0 [ 657.295508][ C1] Code: f7 89 df e8 60 01 00 00 41 f7 c4 00 02 00 00 74 05 e8 12 fc 44 00 9c 58 a9 00 02 00 00 75 23 41 f7 c4 00 02 00 00 74 01 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 66 fe [ 657.295516][ C1] RSP: 0018:ffffc9000461f8d0 EFLAGS: 00000206 [ 657.295524][ C1] RAX: 0000000000000006 RBX: ffff88802e5218a8 RCX: 0000000000000046 [ 657.295531][ C1] RDX: 0000000000000000 RSI: ffffffff8d6548df RDI: ffffffff8ba85ee0 [ 657.295537][ C1] RBP: 1ffff11005ca417c R08: ffffffff8f8d60f7 R09: 1ffffffff1f1ac1e [ 657.295544][ C1] R10: dffffc0000000000 R11: fffffbfff1f1ac1f R12: 0000000000000286 [ 657.295551][ C1] R13: dffffc0000000000 R14: ffff88802e520be4 R15: 0000000000000001 [ 657.295565][ C1] ? bpf_test_run+0x1d1/0x830 [ 657.295579][ C1] bpf_test_run+0x3a8/0x830 [ 657.295593][ C1] ? __pfx_trim_netdev_trace+0x10/0x10 [ 657.295604][ C1] ? stack_trace_save+0xa9/0x100 [ 657.295623][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 657.295644][ C1] ? eth_type_trans+0x796/0x7e0 [ 657.295657][ C1] ? skb_dst_set+0x72/0x140 [ 657.295671][ C1] bpf_prog_test_run_skb+0xe2c/0x2260 [ 657.295694][ C1] ? __fget_files+0x3a6/0x420 [ 657.295706][ C1] ? __fget_files+0x2a/0x420 [ 657.295720][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 657.295734][ C1] bpf_prog_test_run+0x2cd/0x340 [ 657.295748][ C1] __sys_bpf+0x643/0x950 [ 657.295760][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 657.295770][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 657.295792][ C1] ? rcu_is_watching+0x15/0xb0 [ 657.295808][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.295823][ C1] __x64_sys_bpf+0x7c/0x90 [ 657.295833][ C1] do_syscall_64+0x15f/0xf80 [ 657.295847][ C1] ? trace_irq_disable+0x3b/0x140 [ 657.295857][ C1] ? clear_bhb_loop+0x40/0x90 [ 657.295869][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.295879][ C1] RIP: 0033:0x7f4adc99cdd9 [ 657.295895][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.295903][ C1] RSP: 002b:00007f4adabee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.295912][ C1] RAX: ffffffffffffffda RBX: 00007f4adcc15fa0 RCX: 00007f4adc99cdd9 [ 657.295919][ C1] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 657.295925][ C1] RBP: 00007f4adca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 657.295930][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.295936][ C1] R13: 00007f4adcc16038 R14: 00007f4adcc15fa0 R15: 00007fffbf213b58 [ 657.295950][ C1] [ 657.295957][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10450 jiffies! g66825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 657.295968][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=47442 [ 657.295973][ C1] rcu: rcu_preempt kthread starved for 10451 jiffies! g66825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 657.295983][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 657.295988][ C1] rcu: RCU grace-period kthread stack dump: [ 657.295991][ C1] task:rcu_preempt state:I stack:27032 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 657.296017][ C1] Call Trace: [ 657.296020][ C1] [ 657.296025][ C1] __schedule+0x169e/0x54f0 [ 657.296052][ C1] ? __pfx___schedule+0x10/0x10 [ 657.296068][ C1] ? schedule+0x90/0x360 [ 657.296081][ C1] schedule+0x164/0x360 [ 657.296095][ C1] schedule_timeout+0x158/0x2c0 [ 657.296108][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 657.296121][ C1] ? __pfx_process_timeout+0x10/0x10 [ 657.296134][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 657.296147][ C1] ? prepare_to_swait_event+0x340/0x370 [ 657.296161][ C1] rcu_gp_fqs_loop+0x312/0x11b0 [ 657.296174][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 657.296188][ C1] ? rcu_gp_init+0x136b/0x1610 [ 657.296201][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 657.296214][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 657.296224][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 657.296240][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.296255][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 657.296268][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 657.296279][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.296292][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 657.296303][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 657.296317][ C1] kthread+0x388/0x470 [ 657.296328][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 657.296339][ C1] ? __pfx_kthread+0x10/0x10 [ 657.296352][ C1] ret_from_fork+0x514/0xb70 [ 657.296364][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 657.296374][ C1] ? __switch_to+0xc79/0x1410 [ 657.296388][ C1] ? __pfx_kthread+0x10/0x10 [ 657.296401][ C1] ret_from_fork_asm+0x1a/0x30 [ 657.296420][ C1] [ 657.296423][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 657.296435][ C1] CPU: 1 UID: 0 PID: 16592 Comm: syz.6.4413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 657.296460][ C1] Tainted: [L]=SOFTLOCKUP [ 657.296467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 657.296478][ C1] RIP: 0010:__local_bh_enable_ip+0x1c2/0x2b0 [ 657.296499][ C1] Code: f7 89 df e8 60 01 00 00 41 f7 c4 00 02 00 00 74 05 e8 12 fc 44 00 9c 58 a9 00 02 00 00 75 23 41 f7 c4 00 02 00 00 74 01 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 66 fe [ 657.296516][ C1] RSP: 0018:ffffc9000461f8d0 EFLAGS: 00000206 [ 657.296533][ C1] RAX: 0000000000000006 RBX: ffff88802e5218a8 RCX: 0000000000000046 [ 657.296546][ C1] RDX: 0000000000000000 RSI: ffffffff8d6548df RDI: ffffffff8ba85ee0 [ 657.296560][ C1] RBP: 1ffff11005ca417c R08: ffffffff8f8d60f7 R09: 1ffffffff1f1ac1e [ 657.296576][ C1] R10: dffffc0000000000 R11: fffffbfff1f1ac1f R12: 0000000000000286 [ 657.296591][ C1] R13: dffffc0000000000 R14: ffff88802e520be4 R15: 0000000000000001 [ 657.296605][ C1] FS: 00007f4adabee6c0(0000) GS:ffff888125fb0000(0000) knlGS:0000000000000000 [ 657.296623][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.296637][ C1] CR2: 00007ffed1473048 CR3: 0000000035010000 CR4: 00000000003526f0 [ 657.296654][ C1] Call Trace: [ 657.296658][ C1] [ 657.296662][ C1] ? bpf_test_run+0x1d1/0x830 [ 657.296674][ C1] bpf_test_run+0x3a8/0x830 [ 657.296687][ C1] ? __pfx_trim_netdev_trace+0x10/0x10 [ 657.296697][ C1] ? stack_trace_save+0xa9/0x100 [ 657.296715][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 657.296735][ C1] ? eth_type_trans+0x796/0x7e0 [ 657.296747][ C1] ? skb_dst_set+0x72/0x140 [ 657.296761][ C1] bpf_prog_test_run_skb+0xe2c/0x2260 [ 657.296783][ C1] ? __fget_files+0x3a6/0x420 [ 657.296794][ C1] ? __fget_files+0x2a/0x420 [ 657.296807][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 657.296826][ C1] bpf_prog_test_run+0x2cd/0x340 [ 657.296840][ C1] __sys_bpf+0x643/0x950 [ 657.296851][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 657.296861][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 657.296880][ C1] ? rcu_is_watching+0x15/0xb0 [ 657.296896][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.296905][ C1] __x64_sys_bpf+0x7c/0x90 [ 657.296915][ C1] do_syscall_64+0x15f/0xf80 [ 657.296928][ C1] ? trace_irq_disable+0x3b/0x140 [ 657.296938][ C1] ? clear_bhb_loop+0x40/0x90 [ 657.296949][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.296958][ C1] RIP: 0033:0x7f4adc99cdd9 [ 657.296965][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.296973][ C1] RSP: 002b:00007f4adabee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.296981][ C1] RAX: ffffffffffffffda RBX: 00007f4adcc15fa0 RCX: 00007f4adc99cdd9 [ 657.296988][ C1] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 657.296993][ C1] RBP: 00007f4adca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 657.296999][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.297004][ C1] R13: 00007f4adcc16038 R14: 00007f4adcc15fa0 R15: 00007fffbf213b58 [ 657.297018][ C1] [ 688.789457][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.022685][ T5195] udevd[5195]: worker [16029] /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12/event4 is taking a long time [ 689.234506][ T5909] usb 4-1: USB disconnect, device number 28 [ 689.234550][ C0] synaptics_usb 4-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 689.337014][T16588] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 689.596706][ T5490] 8021q: adding VLAN 0 to HW filter on device eth14 [ 690.109175][T16588] EXT4-fs: error -4 creating inode table initialization thread [ 690.109194][T16588] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. SYZFAIL: failed to send rpc fd=3 want=27944 sent=0 n=-1 (errno 32: Broken pipe) [ 691.207483][T16599] Bluetooth: hci5: command 0x0406 tx timeout [ 691.207514][T16599] Bluetooth: hci0: command 0x0406 tx timeout [ 691.365223][T16597] Bluetooth: hci3: command 0x0406 tx timeout [ 691.449038][T16597] Bluetooth: hci6: command 0x0406 tx timeout [ 691.774165][T15504] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.380514][ T5490] 8021q: adding VLAN 0 to HW filter on device eth15 [ 695.612488][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.612510][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.103208][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.103244][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.194830][ T5490] 8021q: adding VLAN 0 to HW filter on device eth16 [ 696.401876][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.401898][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.680699][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.680720][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.697299][ T13] bridge_slave_1: left allmulticast mode [ 697.697333][ T13] bridge_slave_1: left promiscuous mode [ 697.697616][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.777345][ T13] bridge_slave_0: left allmulticast mode [ 697.777368][ T13] bridge_slave_0: left promiscuous mode [ 697.777547][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.726780][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.807122][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.865763][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 698.910183][ T13] bond0 (unregistering): Released all slaves