last executing test programs: 24.926676274s ago: executing program 1 (id=1621): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 24.860287276s ago: executing program 1 (id=1622): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r2, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 24.786232119s ago: executing program 1 (id=1624): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) lseek(r2, 0x83b0, 0x1) 24.73339808s ago: executing program 1 (id=1625): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 24.135273979s ago: executing program 1 (id=1631): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x40, 0x23, 0x2, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 21.755387242s ago: executing program 1 (id=1646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002e40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251d00000008001e000400000008001d00090000000800010076ac"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) 21.446256202s ago: executing program 32 (id=1646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002e40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251d00000008001e000400000008001d00090000000800010076ac"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) 10.653999258s ago: executing program 2 (id=1731): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$inet6(r1, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="b91aba1afa37865dda23d7e61ce9b8e5f95cae1645bffb39f4496fe6a6ee19d8a7e6d3bad6578253a2", 0x29}, {&(0x7f0000000b00)="3d82ac17a110f6895f9718972179bd52f848c4ad7d162a", 0x17}], 0x2}}], 0x1, 0x0) 10.526455142s ago: executing program 2 (id=1732): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) ftruncate(r0, 0x96) 10.054529007s ago: executing program 2 (id=1734): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003980)=[{{&(0x7f0000000940)={0xa, 0x4e22, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000980)="15", 0x1}], 0x1}}], 0x1, 0x20004000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0x8) 9.902380242s ago: executing program 2 (id=1736): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 8.536045864s ago: executing program 2 (id=1747): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000003c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) 5.735163761s ago: executing program 2 (id=1764): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x4008, 0x400008, 0x7fffffbf, 0x797a, 0x13, "c2a6400d20000000000000777dbcacf000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000900)=0xd) 5.391956132s ago: executing program 33 (id=1764): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x4008, 0x400008, 0x7fffffbf, 0x797a, 0x13, "c2a6400d20000000000000777dbcacf000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000900)=0xd) 3.733482343s ago: executing program 3 (id=1784): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, &(0x7f0000000080)={@desc={0x40002, 0x0, @desc1}}) 3.688010175s ago: executing program 0 (id=1785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000180)=@svm={0x1, 0x1, 0x1080, {0x200000}, {"2089ca4f365ec75d3e34c26069cb4408c0010c311acf045995e557cc24b964183f4b05667ec9a30034b2b248beca3879c611250c35ca14e53ae0db5ac7980b0dbd1db23ab54f675a1a0dc672c2f066e8390ce0cd09b65ffaa344f2fa8a57c463ab2a61e9d381b407b371be5df1bfbee11d4d5ff3870e68febb63d7305d8423e6e45e225e485348d575cda9bba4fc1ba30caf9311cfdcf7914752e1038a27a6be7720bf84e1ccc8a0bdf13f0f95bf847d2f34e602afa147d371b80d0983f15edbf817dedf1ed99ee204962066384378418de045911414bebbb9be3ace550088d0b5646d5423b02d8d2eada07ee092927abce7c80acbf465c296d2519100daa5939de65329fe5958923c72774d0812f37795fad609f4a8853797217a65c5e877f5fd03cb53a7a99bb7fc6028319fe9be76d5df50e17683f87dd7d3ac572b2c273a194731dfbfbd75c4a9e9ebd18d6b9436b07090bb2cbbdb0e81e338c076356ca3c1b27eecd815b53570c56e5a5dfe3c3f28061c4f9752f819d21c4c76cbc21ac9bb1d9de8aaa51394fc55802b9b3251a7fb12f996bcb4038f77bdb8ebac5b0688ce209986a8109665a3d6befa545e8898d2779d420139f22be8d5fc9b9ae7597dcd1b39b3b8bfdec7a0e3451eaaf009071c07352bf986b382a83a05e9b82cb4cced5eec255ed87425cdac75b6ff800904ef4cd489817bfb5868e24d204408d979d39103a7771c56842ced77b35702643f782b6ded9d8b0d336e25e37412750675c5fc722e4028e55c78b1f6e0add4e754c2881134e8ccf964fc96ff32223ace105bc0f17c82e991acf1c7855b0e255e69b63970cbb901a930ac7f80efa8ab16b5bf7abfc719f4181a424443a18bba3d2ca4cde398bcdc6f4b1bc8919214c2177c8a2e6c9b193b522ccb84640a41043ce1dae12ad3b2be8a4e75d8af48c4a73f0ec5ad4dafe6240e1e9c3d2f7bdb12443f95aeeda33c080b39a996d1485218c234c3336170c4b640a59da732ed5a59c876ca2c0ec1c120be992b7714a2a2cdd7ee663e657d7f425b294f52f5a9e5d3cfc07b8070bb025669bb77afb000dda63f8125aed1b555491bb849a8f1e3e0c88608aeba94b348beefc73d3af6fba4b6dd5d56570a8bc73c6e11c98f8c1bb78bb694560b8d8642fee39e1bb27f4be135a49cb92fdc35e5155a27129d15dfc5b4b58af723cabd71e8ac287e43598536b3b8fb4f0a626f251193e5a323cd88019c23acb09683b46f9e2bb03cbda9098a02af3a306f208b4257946cac43f9307bd238ec5cdb0fe21e11b82a0077dc9036693e55290cc0e9902883333760a93db458ddf07f56697a6ac1329001d5fea5b147b505f1139bc5b9f23d7bfe18f12e468f57ea3adf83f9c2bccf12c1e91dfeb0752284946714b866d5b5bbeeaba3b0d4f475d20060d5213283d1d2e6083da105eb5c9de1150618cc98bc0d9135aa045e653e11f9c2f1d2ee4875048d45438cca3a455323e86d4c73268690ab8258a1ecadbef9648b8203117bbe164bcf7844476c57a3f34230ec5eb724b14b90687fcceb3a94e98db95db0e16dc20a60be59e79e2e891cfbca41d9c86cd815f6f6b0889bf23126bcf700fa3245020b8697e0fe0811e9a922c5c3dd54fba361329e56dd725771c342a409573cbc9103ab761b6b4ae393ac4e5891ccafbdaaf286d3eab595d2f58e99d87aeb39582fb3b75051e8cb0e9d6b3e1d836e83dc75d44577895fef745ad2d5ab57a2283d58448faa05f05e0be218a67b9c3415e99b9726f45f03ec56fd65be3bc777f1232b939ef4675714023a804e0fbb4641a26e10168319b4492bf14cceb84321d7d165a3627efc1d209901455b33b5882eed12abc0329ee593b0107f32a92f6d32c0b107c025fb6fc39c2537ca0902466da40d6941785e17162dd32463fd3243c8729b60fb9145250b6c6043ba430ea7cc99b66bfb439f226ea6dc43b0af1300c990a9120cf19a6665f949883148bf3c68440f9197a14f6bb49d68f437a808c2c0f31656e17e7f8b820e10a19f778a1eb163ce2e188a3cd020d5dab7770bc97978d83bed4b0c0a9d6e9022fff108fe8b7f1ffc52814052ed0c77be34eff38c22993318337d4e018c0f29a5c9f260eeaf3695e99c3dc025d7294a68be288899aded3fe91373b62bc842417f0925a8cbeffa255a8c3cdba8c035058190e9c8797d78d1a4430ebb35616a4f1c04e79471355e52d07d9491c58b750ad3e1c854f6725841affcc9bfe2130717447894eb0f0423edaf5dab71faf0e4969c850dec3c8617408b15a7e27e4a73b40ee92a7ccacbffd604d10affefab641d6623358c31571dd027fcaf880ed968c2cac4b1fd233a865a3c2c6baddd47245e5ed50b355a3afa7f8fde0adbe8bbc35890aa252307bfe7713ea7bf614a6ac617f79e5afd286b8c746e2fed7272dafea9f1d682b9e592e651ed32e3fc94a5909fb6dff7f10231d1812a82ea613e5bfff520e1f9b3d0e11d3d954bd1d42c73e481ece76efcb82a6bc7989413592b70bbbdf7b616b954496a973270e75d6cc09b37d019e29f9405482ad912dc8dc374cfd370c0ad6c36fc5aeea6e9ba981b24d6c421f2b03f379a73b7976028998223975723795c64890b5bf3d8d5f028c2cf6a057c03b35b6301274e804d5113c90ef21e16eb94c8327d288550a199c197c8756500dda26e9da19d657a674f061d10446562c156ea1560452f7be82e4d6da18a7841fd6de06a55fb3862fc51671ca1e3499628df0e7bc8df07e8d05768f3ffe8967cf3a85867d03282d23938048656d7265ab2e169a4f40543df69728c94e081dbeda18595b9af229064f9237d63f99eda27e828b62d6b75e013c12439ccf3f867e95789017591d4339377c9515fae82f4238c5ef81a698e3af6b11f4f294c4595746ec1e033cd21a6857d7cf1fbda50bd37c122e02b1325447d5a532f7bcfeb8d075fb33a8ecf3072212437bc252b4d7b8e14539eef6d305d53d4204e71ab6eff164b02f611764b45074c8c1cf00411ea0ea1ac7e4b5e2682dabc28fad3fe1474ae00b30e46aa4eccc95f5dce2302179269e87214a4fbf46de30ff81492921b18472a164c5c6da2f42c45a7116175b9cff0d6e97de58d42aa950d6d4b57003780cfa4141b9492086a1d8fb3d5b266b3f67fa770722366a73754dd3928b0ea733e498f3e13c0c1c52c3f8ef28065fca24ca09e9fa8d040095ebcd0a701c58858fcaf331d82f127ea04bf1d9d0df5904b88120e7b91c05c0312da53d814bc26c67a927d898763a7defc69e323912a28f5366cf728a772191e0fd9687911978c79079c2fb22512fc944fc767bb918a7bc50c6e0012841bac0dc6bef3f8632f09ad3a63fc100cc95b35c8f1672e4cbe2c6965b62c05563f7c0d7db5eeaaf8dc8b3ce103f14140849388ff95b74aec6ea2d184345c6ce90ba099f5b583f878f2f9c639841a28a9ae17b38bcd0ba97b3729ea3e92a48f9f57b8617aca1d6d6ae1cb7a36d2a4324d7e0cdcc3f7e620375a4a1e4d6b646d4698bc18590cb7514a9d27ccb4d422150d14c0cb219ea3e35638f450d5ffa07a537305f141146edc5f22f074e44a0e7f09fecb786b5b0e37c3a2a9d2ef258e41984ad02fd3d41685900cdd26c87cba66e262f2dfd54c13575f6a934d212c74e62e7b69eabd66dc6fb871ac03e2d8f18ce15694a98208fce6dd0a3666a1efc5e5df9087dda811eba1888582e2ae64f8018815efdfa13d87445812b2fed0c7c1f42b7557952b7a10b7589803c2ddd4780d3824612392fb32e0a5d22d4973a325d26c53a9d80659e8e6c5bc5a30d8e4e896fbb93c13bb19ed3f1da34075544ed8b91817de740760ee591b27a628008a949aa115a3fd68c757395e6ef2b689d87e237daba58fb77f20e1f4356ebecd4d1f72b3f1e789e2b96985744cb5b9369d4636b909082dae3197b876e9530c970016ecd7c116fa1d86bc803dd5dcbf65ba338b649740750e79c9598fc4d92aa19339a9d52b533a4d6388ec38f7c0d4a66fec2d8949092933b2853b0849ddd196b06b87a6ef41952a4c585dd5b414f8a381779a5d225ff36653affeac65623216d40d47d6077a8c9dc5aff89718d00bf5bddf8ac1e51802baf4169b007ed82c914d504958d25453ff0f9ea2e1808e3a2ed4fc1f7f524270fcfb754377324c35e6a2554ae469e8f99f6e157a714081669fd8f66cb1a8c602d1ae11506f26507bd8505fe482734da7666e8e3b1747900bdf2d8febda1e2320b257715015eaabd4b97a19bfa71134a4246ec90d509707f3f32aba097e548adc3e65b1e1786d13ef3e50c6efe5d1bc94fbbada12f09fd3919e3c8fb6448f2391c53af42661094f12920aed800a7174036df59900b4d9e22796050080419244ac4704b4d38a5fc375a8c885fa414a152bc8d796dc73fc9ab2d1362bbffbace182aa9928b87fc629f942b1008198289bca4e748a73a056375258a415a592a7364e61b44b3f04753f9888af23c2ecb4c5ed4ecd4c750594cbf95905337ec4c1bd11b9db7f56148d8471132061de7514fcc579f9e2524dad99ed24ab8835db6b47900b8b109efff32330ca98da7f82a187683f59f36a62222420429a458b5ad90978227725e6d31b0a6ee0573ac80f3b41b61be538172343331f77df4c851251ea3afe0d558fc9aac7e0d7dbc0b6c2ba6746f52ca5ce85b8e3683d160ade07c445c3f4ea13f63996c8d41c33d631cce78d8c581d74529554bfd9ea112d6b2caf002b838ed68e352398b075b578b371281b2666b089281f4019f912efff3e034a77c45c5f900cc5c60932b3e823038011a7ff096719658d5c858fb4763d6419d99ea94417ce1a377980d8e5914eebd1e6e184b1e9a08336c549e60874ddad0cf5def8a0d40854bee26562aac48cda6e0657e85e1238550a288627f28bbabe01d408621829f78eb7b0e0afc132f35f3c56f8e455ba83a7b7d0ff18edaa229c649aa4425c55f5f4e83b4fb56d93e39e5eae2d0888c019076762563942dd76ba1a51ac3eb19128af496f781ac1cc2a30effa4a8aa81488c7d04a1167b8cd48725e89bc39f4077c15f5d534bbb99cfb8c51546bac3283252b3ecaa2a701ab1eb14fef083fe3c96d8a3c4028795303d0d57d6054259a4d9b26253d168bdb30bef608fc055a8b17920196332f584ad9dfe40fbfde737e377280ab9958a86e439e6793a3a26c3afd8d7b6edd6e1799a1f747d58ddd0c9edd1783f41aa117dde512907d1593298865bc2be2fa3af2af8d6e1ef72121a7d037b17c5159953799d68387875089028186cab81b3421c9d9f20c53e79c9f56d7a39c98e5ee023853d7d7850673a45998a0fa881cf76887c8116d0f502a88f210a8cbfa88b434a8bba112a85f1bc0e7e307162d95ebd36959a4bcebcf1617253894e3765de25c9dc54a02059c368a5615b9b387bbf47bdb00934dca14e6f1fc93e871df3719f67756fe2855665acd8e23576af946483883fe3b742eed91a524241be090cd705fa058a089e227679a5232f0dc65d1ed1ded669be681b07042fa8631e518ba799b6c6f54b7e6a85583d35d912dac17746d74db45746a4f202ffa8aae4f22cf2eb65928c70c23f7d6b8609b746c4da68ccb16cd569983b9983bf9da128edc6bfcf34de1aecb72696fe57d07604376425a8b481fbcd904992e5092699aeb5714a0c3d63f1657262c8645e36ea5bed41265c7e8caa2c2a96be8f756433924304d66dd70fca6bf79052f2328c719fd8addee17df6d477c81aeb6031ef91c5c21561b12c6f414"}}) 3.477386662s ago: executing program 0 (id=1788): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.367074255s ago: executing program 0 (id=1789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001800)={r0, &(0x7f0000000700)="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", 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) 2.56870725s ago: executing program 5 (id=1796): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.271403049s ago: executing program 5 (id=1799): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffb, 0x1}, &(0x7f0000000280)=0x90) 2.085032905s ago: executing program 0 (id=1801): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 1.985407278s ago: executing program 5 (id=1802): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.93308076s ago: executing program 0 (id=1804): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080000004e210622080001"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.93140739s ago: executing program 3 (id=1805): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='H', 0xfdef}], 0x1) 1.819383913s ago: executing program 4 (id=1806): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x2) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@ethernet={0x306, @multicast}, 0x80, 0x0, 0x0, &(0x7f0000000700)}, 0x20008000) 1.60953847s ago: executing program 0 (id=1807): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) 1.450259475s ago: executing program 4 (id=1808): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4040040) 1.27313483s ago: executing program 4 (id=1809): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1.033664268s ago: executing program 4 (id=1810): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 890.437692ms ago: executing program 4 (id=1811): r0 = socket$unix(0x1, 0x1, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d02c0d3) 793.570375ms ago: executing program 5 (id=1812): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="00e8b9dc69f0d3e436968487cce32487dcdf83a47adf7166fad1400dc091e25a1d7085f030af2556568a615f9412eb0240139771"], 0x5, 0x1501, &(0x7f0000002a80)="$eJzs3AuYzlW7MPD7Xmv9GdOkp0kOw1rr/vOkwTJJkkOKHJIkSZKcEpImSRISQ0gSkpwPk+QwhOQwjUnjfD7knDR5pUmSkJzC+q7pbW/vu3v3297f2/581577d13rmnXPeu71rDX3zDz/9b+u5/m+x8i6zevVakpE8C/Bv35JAYAYABgCANcBQAAAleIrxeeOF5CY8q89CftzPZJ2tVfAriauf97G9c/buP55G9c/b+P6521c/7yN65+3cf0Zy8u2zyl2Pbe82/j+f17Gr///i+SUn/z1xvI39vxvpHD98zauf97G9c/buP55G9c/b+P6/+9X85+Mcf3zNq4/Y3nZ1b7/zO3qtqv9+8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLG84569QAPBv/au9LsYYY4wxxhhjjP15fP6rvQLGGGOMMcYYY4z9z0MQIEFBAPkgP8RAAYiFayAOroWCcB1E4HqIhxugENwIhaEIFIVikADFoQRoMGCBIISSUAqicBOUhpshEcpAWSgHDspDEtwCFeBWqAi3QSW4HSrDHVAFqkI1qA53Qg24C+6GmlAL7oHaUAfqQj24F+rDfdAA7oeG8AA0ggehMTwETeBhaAqPQDN4FJrDY9ACHoeW0ApaQxto+3+V/zL0gVegL/SDFOgPA+BVGAiDYDC8BkPgdRgKb8AweBOGwwgYCW/BKHgbRsM7MAbGwjgYDxNgIkyCyTAFpkIqvAvT4D2YDu/DDJgJs2A2pMEcmAsfwDyYDwvgQ1gIH8EiWAxLYCmkw8eQAcsgEz6B5fApZMEKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w2ewA3bCLtgNe2Av7IPPYT98AQfgS8iGr/6b+Wf/Q35PBAQUKFChwnyYD2MwBmMxFuMwDgtiQYxgBOMxHgthISyMhbEoFsUETMASWAINGiQkLIklMYpRLI2lMRETsSyWRYcOkzAJK+CtWBErYiWshJWxMlbBqlgVq2N1rIE18G6EKgHUwtpYG+tiXbwX78X7sAE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsZkTMYu2AW7Ylfsht2wO3bHHtgDe2Iv7IUv48v4Cr6C/bC26I8DcAAOxIEHcv8YXsPXcSi+gW/gmzgcR+BIfAvfwrdxNJ7BMTgWx+E4rCEm4iScjCSmYiqm4jSchtNxOs7AmTgTZ2MazsG5OBfn4Xycjx/iQvwIP8LFuBiXYjqmYwYuw0zMxOV4FrNwBa7EVbga1+BqXIfrcR1uxE24EbfgFtyG2/Az/Ax34k7cjbtxL+7Fz/Fz/AK/wOGYjdl4EA/iITyEh/Ew5mAOHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8Cyew3N4AS/gRXwx4dtme8tsGA4ilxJK5BP5RIyIEbEiVsSJOFFQFBQRERHxIl4UEoVEYVFYFBVFRYJIECVECWGEESRCUVKUFFERFaVFaZEoEkVZUVY44USSSBIVRAVRUVQUlcTtorK4Q1QRVUUHV11UFzVER3e3qClqiVqitqgj6op6op6oL+qLBqKBaCgaikaikWgsHhJNRH8cjI+I3Mo0FyOwhRiJLUUr0Vq0EW/jE6KdGI3tRQfRUTwlxuIY7CzauWTxrOgiJmFX8byYjC+I7mIq9hAviZ6il+gtXhZ9RHvXV/QTM7C/GCBm40AxSAwWr4l5WEfkVqyueFMMFyPESPGWWIpvi9HiHTFGjBXjxHgxQUwUk8RkMUVMFaniXTFNvCemi/fFDDFTzBKzRZqYI+aKD8Q8MV8sEB+KheIjsUgsFkvEUpEuPhYZYpnIFJ+I5eJTkSVWiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9guPhM7xE6xS+wWe8ResU98LvaLL8QB8aXIFl+Jg+Iv4pD4WhwW34gc8a04Ir4TR8X34pj4QRwXP4oT4qQ4JX4Sp8XP4ow4K86J8+KC+EVcFJfEZeEFSJRCSqlkIPPJ/DJGFpCx8hoZJ6+VBeV1MiKvl/HyBllI3igLyyKyqCwmE2RxWUJqaaSVJENZUpaSUXmTLC1vlomyjCwry0kny8skeYusIG+VFeVtspK8XVaWd8gqsqqsJqvLO2UNeZe8W9aUteQ9srasI+vKevJeWV/eJxvI+2VD+YBsJB+UjeVDsol8WDaVj8hm8lHZXD4mW8jHZUvZSraWbWRb+YRsJ5+U7WUH2VE+JTvJp2Vn+YxMls/KLvI52VU+L7vJF2R3+aLsIV+SPWUv2Vtekpell31lP5ki+8sB8lU5UA6Sg+Vrcoh8XQ6Vb8hh8k05XI6QI+VbcpR8W46W78gxcqwcJ8fLCXKinCQnyylyqkyV78pp8j05Xb4vZ8iZcpacLdPkHDn4t5kW/Bfy3/sH+cN+ffZtcrv8TO6QO+UuuVvukXvlPrlP7pf75QF5QGbLbHlQHpSH5CF5WB6WOTJHHpFH5FF5VB6Tx+RxeVyekCflefmTPC1/lmfkWXlWnpcX5AV58befAShUQkmlVKDyqfwqRhVQseoaFaeuVQXVdSqirlfx6gZVSN2oCqsiqqgqphJUcVVCaWWUVaRCVVKVUlF1kyqtblaJqowqq8opp8qrJHXLv5z/R+trq9qqdqqdaq/aq46qo+qkOqnOqrNKVsmqi+qiuqquqpvqprqr7qqH6qF6qp6qt+qt+qg+qq/qq1JUihqgXlUD1SA1WL2mhqjX1VA1VA1Tw9RwNVyNVCPVKDVKjVaj1Rg1Ro1T49QENUFNUpPUFDVFpapUNU1NU9PVdDVDzVCz1CyVptLUXDVXzVPz1AK1QC1UC9UitUgtUUtUukpXGSpDZapMtVwtV1lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qistR2tV3tUDvULrVL7VF71D61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Cl1Sp1Wp9UZdUadU+fUBXVBXVQX1WV1OfeyLxCBCFSggnxBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEoAMT2ICCMCgZlAqiwU1B6eDmIDEoE5QNygUuKB8kBbcEFYJbg4rBbUGl4PagcnBHUCWoGlQLqgd3BjWCu4K7g5pBreCeoHZQJ6gb1AvuDeoH9wUNgvuDhsEDQaPgwaBx8FDQJHg4aBo8EjQLHg2aB48FLYLHg5ZBq6B10CZo+6fO7/2ZIk+6vrqfTtH99QD9qh6oB+nB+jU9RL+uh+o39DD9ph6uR+iR+i09Sr+tR+t39Bg9Vo/T4/UEPVFP0pP1FD1Vp+p39TT9np6u39cz9Ew9S8/WaXqOnqs/0PP0fL1Af6gX6o/0Ir1YL9FLdbr+WGfoZTpTf6KX6091ll6hV+pVerVeo9fqdXq93qA36k16s96it+pterv+TO/QO/UuvVvv0Xv1Pv253q+/0Af0lzpbf6UP6r/oQ/prfVh/o3P0t/qI/k4f1d/rY/oHfVz/qE/ok/qU/kmf1j/rM/qsPqfP6wv6F31RX9KXtc+9uM99eTfKKJPP5DMxJsbEmlgTZ+JMQVPQREzExJt4U8gUMoVNYVPUFDUJJsGUMCVMLjJkSpqSJmqiprQpbRJNoilryhpnnEkySaaCqWAqmoqmkqlkKpvKpoqpYqqZauZOc6e5y9xlapqa5h5zj6lj6ph6pp6pb+qbBqaBaWgamkamkWlsGpsmpolpapqaZqaZaW6amxamhWlpWprWprVpa9qadqadaW/am46mo+lkOpnOprNJNsmmi+liupquppvpZrqb7qaH6WF6mp6mt+lt+pg+pq/pa1JMihlgBpiBZqAZbAabIWaIGWqGmmFmmBlfYVPN3JPTKDPKjDajzRgz1owz480EM9FMMpPNFDPVpJpUM81MM9PNdDPDzDCzzCyTZtLMXDPXzDPzzAKzwCw0C80is8gsMUtMukk3GSbDZJpMs9wsN1kmy6w0K81qs9qsNWvNerPebDQbzWaz2Ww1W812s93sMDvMLrPL7DF7zD6zz+w3+80Bc8Bkm+yY3w535rA5bHJMjjlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86ZC+YXc9FcMpeNNzFWQKy9xsbZa21Be52NsQXs38ZFbTGbYIvbElbbwrbI38XGWptoy9iytpx1trxNsrf8Lq5iq9pqtrq909awd9m7fxfXt/fZBvZ+29A+YOvZe/8ubmQftI3tY7aJfdw2ta1sM9vGNreP2Rb2cdvStrKtbRvbyT5tO9tnbLJ91naxz/0uzrDL7Hq7wW60m+x++4U9Z8/bo/Z7e8H+YvvafnaIfd0OtW/YYfZNO9yO+F08zo63E+xEO8lOtlPs1N/Fs+xsm2bn2Ln2AzvPzv9dnG4/tgttpl1kF9sldumvce6aMu0ndrn91GbZFXalXWVX2zV2rV3372tdZbfYrXab3Wc/tzvsTrvL7rZ77N5f49x9HLBf2mz7lT1iv7OH7Nf2sD1mc+y3v8a5+wP4wR63P9oT9qQ9ZX+yp+3P9ow9++v+c/f+k71kL1tvgZAESVIUUD7KTzFUgGLpGoqja6kgXUcRup7i6QYqRDdSYSpCRakYJVBxKkGaDFkiCqkklaIo3USl6WZKpDJUlsqRo/KURLdQBbqVKtJtVIlup8p0B1WhqlSNqtOdVIPuorupJtWie6g21aG6VI/upfp0HzWg+6khPUCN6EFqTA9RE3qYmtIj1Iwepeb0GLWgx6kltaLW1Iba0hPUjp6k9tSBOtJT1Imeps70DCXTs9SFnqOu9Dx1oxeoO71IPegl6km9qDe9TH3oFepL/SiF+tMAepUG0iAaTK/REHqdhtIbNIzepOE0gkbSWzSK3qbR9A6NobE0jsbTBJpIk2gyTaGplErv0jR6j6bT+zSDZtIsmk1pNIfm0gc0j+bTAvqQFtJHtIgW0xJaSun0MWXQMsqkT2g5fUpZtIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+30Ge2gnbSLdtMe2kv76HPaT1/QAfqSsukrOkh/oUP0NR2mbyiHvqUj9B0dpe/pGP1Ax+lHOkEn6RT9RKfpZzpDZ+kcnacL9AtdpEt0mTxBiKEIZajCIMwX5g9jwgJhbHhNGBdeGxYMrwsj4fVhfHhDWCi8MSwcFgmLhsXChLB4WCLUoQltSGEYlgxLhdHwprB0eHOYGJYJy4blQheWD5PCW8IK4a1hxfC2sFJ4e1g5vCOsElYNH3ugenhnWCO8K7w7rBnWCu8Ja4d1wrphvfDesH54X9ggvD9sGD4QVgwfDBuHD4VNwofDpuEjYbPw0bB5+FjYInw8bBm2CluHbcK24RNhu/DJsH3YIewYPhV2Cp8OO4fPhMnhs2GX8Lk/HE8J+4cDwlfDV0Pv75dLokuj6dGPoxnRZdHM6CfR5dFPo1nRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W1R7+vlB4dOOOmUC1w+l9/FuAIu1l3j4ty1rqC7zkXc9S7e3eAKuRtdYVfEFXXFXIIr7ko47YyzjlzoSrpSLupucqXdzS7RlXFlXTnnXHmX5Nq4tq6ta+eedO1dB9fRPeWeck+7p90z7hn3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuiBvihrqhbpgb5oa74W6kG+lGuVFutBvtxrgxbpwb5ya4CW6Sm+SmuCku1aW6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl511q5N3ItMh7kemR9yMzIjMjsyKzI2mROZG5kQ8i8yLzIwsiH0YWRj6KLIosjiyJLI2kRz6OZESWRTIjn0SWRz6NZEVWRFZGVkVWR9ZEvC++I/QlfSkf9Tf50v5mn+jL+LK+nHe+vE/yt/gK/lZf0d/mK/nbfWV/h6/iq/pq/nHf0rfyrX0b39Y/4dv5J31738F39E/5Tv5p39k/45P9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2L/mh/jX/VD/hh/m3/TD/Qg/0r/lR/m3/Wj/jh/jx/pxfryf4Cf6SX6yn+Kn+lT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+8n/1PWv5/ifvpTPGGGOM/f8v9Q/G+/+D74nfWq4BAHDtzmI5fzsuAWBz4b/2B4mEThEAeLZfj0f+rdWunZKS8ttjsyQEpRYDQORK/q+XaL/FK6AjPA3J0AEq/MP1DRK9LtAfzB+9HSD2b3Ji/voxB/9h/lv/k/mfeGpcRuXwXPw/mX8xQGKpKzkF4Ep8Zf6K/8n8Rdr9wfoLfJ0K0P5vcuLgSnxl/iR4Ep6D5L97JGOMMcYYY4wx9leDRLVulHsihn9+Pk9QV3Lyw5X4j87njDHGGGOMMcYYu/pe6NX7mSeSkzt04w53uMOdf+9c7f9MjDHGGGOMsT/blYv+q70SxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs7/p/8XFiV3uPjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2NX2fwIAAP//sN45jQ==") fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x18b900, 0x1da) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 777.682906ms ago: executing program 4 (id=1813): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) 661.251689ms ago: executing program 3 (id=1814): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 475.338535ms ago: executing program 3 (id=1815): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 367.512108ms ago: executing program 5 (id=1816): unshare(0x2000400) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) 339.120279ms ago: executing program 3 (id=1817): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x1, 0x1c7, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) 141.593286ms ago: executing program 5 (id=1818): syz_mount_image$cramfs(&(0x7f0000000200), &(0x7f00000003c0)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000480, &(0x7f0000000040)=ANY=[], 0x1, 0x15d, &(0x7f0000000240)="$eJzszk2rElEYwPH/aUztRSQosCAT2gyJaRO2C3IiQcgGCjetAh3BMIwkcpVKtGvX1kUv0Er8Cpa1sRTCtn2Au3Etl8vlXM6duYv78hGe327+55nnnAd3lzYZeJtk3/3Oi5ev/G7Xb2Qee9Xyk63ptGR6FNiE57taa79hap/vJXj+/3Xw8xBM/pmAZqvt36x32uZ7XQIbcM9xr3kmGOUCnDXtYjB7y8wNwb4Os0tBc05ot8N2JQJuMmgFQH8mbta6MaDV9mPhNb3Rttb60WJeyd34dtXifSV77XR4Nv4d9LT/wSlf/no+ZVHzf33BVRr4l5/n/uYn49VyUX3oDQHHuaNgUCiuvD+LSnGgte6bPU8VKLKTg31RUulIDd4p+KjMG9Y/VAKYfdp4O1rr8P74GysDqjeqP7PCZNkojjp1rAghhBBCCCGEEEIIIYQQQgghhBCH7QUAAP//K6tlcQ==") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1819): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) kernel console output (not intermixed with test programs): acity change from 0 to 8 [ 144.862737][ T6734] SQUASHFS error: Failed to read block 0x260685: -5 [ 144.885928][ T6734] SQUASHFS error: Unable to read metadata cache entry [260685] [ 144.940727][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.949420][ T6734] SQUASHFS error: Unable to read directory block [260685:0] [ 145.181591][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.485584][ T6759] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.536746][ T4418] usb 5-1: USB disconnect, device number 10 [ 145.559974][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.569621][ T6759] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.628028][ T6763] loop4: detected capacity change from 0 to 512 [ 145.753035][ T6763] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.784950][ T6763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.803192][ T6766] loop1: detected capacity change from 0 to 4096 [ 145.831800][ T6770] input: syz1 as /devices/virtual/input/input8 [ 145.850448][ T6766] EXT4-fs (loop1): inline encryption not supported [ 145.867874][ T6766] EXT4-fs (loop1): Test dummy encryption mode enabled [ 145.902446][ T6763] EXT4-fs (loop4): 1 truncate cleaned up [ 145.908161][ T6763] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000001000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 145.959185][ T6766] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 145.976673][ T6766] System zones: 0-5 [ 145.982932][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.993836][ T6747] loop3: detected capacity change from 0 to 40427 [ 146.012854][ T6766] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 146.042791][ T6766] EXT4-fs (loop1): inline encryption not supported [ 146.053364][ T6766] EXT4-fs (loop1): Test dummy encryption mode enabled [ 146.065976][ T6766] EXT4-fs (loop1): re-mounted. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,. Quota mode: writeback. [ 146.140848][ T6747] F2FS-fs (loop3): invalid crc value [ 146.184425][ T6747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.396076][ T6747] F2FS-fs (loop3): Start checkpoint disabled! [ 146.475081][ T6747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 146.546453][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.979'. [ 147.027410][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.087895][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 147.371843][ T6818] lo speed is unknown, defaulting to 1000 [ 147.515484][ T6821] loop0: detected capacity change from 0 to 1024 [ 147.624589][ T6821] hfsplus: xattr searching failed [ 147.653684][ T6819] loop3: detected capacity change from 0 to 8192 [ 147.677306][ T6819] FAT-fs (loop3): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿ18446744073709551615" or missing value [ 147.696827][ T6809] loop4: detected capacity change from 0 to 32768 [ 147.736909][ T6801] loop2: detected capacity change from 0 to 32768 [ 147.745522][ T3046] hfsplus: bad catalog file entry [ 147.752779][ T3046] hfsplus: b-tree write err: -5, ino 3 [ 147.953984][ T6801] JBD2: Ignoring recovery information on journal [ 148.149410][ T6809] XFS (loop4): Mounting V5 Filesystem [ 148.155792][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.220238][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.235406][ T6801] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 148.286567][ T6809] XFS (loop4): Ending clean mount [ 148.334940][ T144] (kworker/u4:1,144,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 148.373223][ T6831] loop0: detected capacity change from 0 to 32768 [ 148.380065][ T4191] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.410524][ T6809] XFS (loop4): User initiated shutdown received. [ 148.418813][ T6809] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 148.433722][ T6809] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 148.449640][ T6831] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.995 (6831) [ 148.499765][ T6831] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 148.518811][ T4195] XFS (loop4): Unmounting Filesystem [ 148.535629][ T6831] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 148.594700][ T6831] BTRFS info (device loop0): use zstd compression, level 3 [ 148.603424][ T6816] loop1: detected capacity change from 0 to 32768 [ 148.626596][ T6831] BTRFS info (device loop0): using free space tree [ 148.653499][ T6831] BTRFS info (device loop0): has skinny extents [ 148.660174][ T4191] usb 4-1: Using ep0 maxpacket: 32 [ 148.710281][ T26] audit: type=1800 audit(1778925042.990:10): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.984" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 148.768582][ T26] audit: type=1800 audit(1778925043.040:11): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.991" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 148.789396][ T4191] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 148.805632][ T4191] usb 4-1: config 0 has no interface number 0 [ 148.814297][ T4191] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 148.862460][ T4191] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.890478][ T4191] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.977767][ T6831] BTRFS info (device loop0): enabling ssd optimizations [ 149.003425][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 149.100133][ T4191] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 149.160015][ T4191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.181312][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.208920][ T4191] usb 4-1: Product: syz [ 149.217627][ T4191] usb 4-1: Manufacturer: syz [ 149.242897][ T4191] usb 4-1: SerialNumber: syz [ 149.266099][ T6861] loop1: detected capacity change from 0 to 128 [ 149.267582][ T4191] usb 4-1: config 0 descriptor?? [ 149.320324][ T6835] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.337422][ T6861] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 149.370809][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.401412][ T6861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.581413][ T4191] usb-storage 4-1:0.20: USB Mass Storage device detected [ 149.650433][ T4191] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 149.666140][ T6872] loop1: detected capacity change from 0 to 8 [ 149.729667][ T6872] SQUASHFS error: Failed to read block 0x260685: -5 [ 149.816310][ T6872] SQUASHFS error: Unable to read metadata cache entry [260685] [ 149.839551][ T4191] scsi host1: usb-storage 4-1:0.20 [ 149.850070][ T6872] SQUASHFS error: Unable to read directory block [260685:0] [ 149.980100][ T4417] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.024063][ T4247] usb 4-1: USB disconnect, device number 10 [ 150.328763][ T6866] loop2: detected capacity change from 0 to 32768 [ 150.390308][ T4417] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.401227][ T4417] usb 5-1: config 0 has no interface number 0 [ 150.422884][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.465298][ T6866] XFS (loop2): Mounting V5 Filesystem [ 150.527287][ T6866] XFS (loop2): Ending clean mount [ 150.580552][ T4417] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 150.589658][ T4417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.598290][ T4417] usb 5-1: Product: syz [ 150.603149][ T4417] usb 5-1: Manufacturer: syz [ 150.607784][ T4417] usb 5-1: SerialNumber: syz [ 150.614579][ T4417] usb 5-1: config 0 descriptor?? [ 150.622465][ T4191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.644424][ T4200] XFS (loop2): Unmounting Filesystem [ 150.906438][ T4417] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 150.936939][ T4417] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.956930][ T4417] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 150.966461][ T4417] usb 5-1: media controller created [ 151.016693][ T4417] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.149535][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.221207][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.239065][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.268749][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.292880][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.325460][ T6901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.694877][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1015'. [ 151.725955][ T6913] netlink: 'syz.0.1014': attribute type 17 has an invalid length. [ 151.743972][ T6913] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1014'. [ 151.826964][ T6900] loop1: detected capacity change from 0 to 32768 [ 151.999022][ T6900] XFS (loop1): Mounting V5 Filesystem [ 152.120917][ T6936] loop2: detected capacity change from 0 to 512 [ 152.131091][ T6900] XFS (loop1): Ending clean mount [ 152.170436][ T4417] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 152.176642][ T6873] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 152.201669][ T6900] XFS (loop1): Quotacheck needed: Please wait. [ 152.266731][ T6946] input: syz0 as /devices/virtual/input/input9 [ 152.294081][ T4417] usb 5-1: USB disconnect, device number 11 [ 152.492406][ T6900] XFS (loop1): Quotacheck: Done. [ 152.768882][ T4190] XFS (loop1): Unmounting Filesystem [ 152.986370][ T6964] loop3: detected capacity change from 0 to 256 [ 153.135970][ T6964] FAT-fs (loop3): Directory bread(block 64) failed [ 153.175962][ T6965] bond0: (slave bond_slave_1): Releasing backup interface [ 153.183793][ T6971] loop4: detected capacity change from 0 to 1024 [ 153.203002][ T6964] FAT-fs (loop3): Directory bread(block 65) failed [ 153.209626][ T6964] FAT-fs (loop3): Directory bread(block 66) failed [ 153.229182][ T6964] FAT-fs (loop3): Directory bread(block 67) failed [ 153.248720][ T6964] FAT-fs (loop3): Directory bread(block 68) failed [ 153.279336][ T6964] FAT-fs (loop3): Directory bread(block 69) failed [ 153.351901][ T6971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.365527][ T6964] FAT-fs (loop3): Directory bread(block 70) failed [ 153.373510][ T6964] FAT-fs (loop3): Directory bread(block 71) failed [ 153.380720][ T6964] FAT-fs (loop3): Directory bread(block 72) failed [ 153.387375][ T6964] FAT-fs (loop3): Directory bread(block 73) failed [ 153.535184][ T6971] EXT4-fs warning (device loop4): ext4_rmdir:3243: inode #11: comm syz.4.1039: empty directory 'file0' has too many links (111) [ 153.770218][ T4247] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.788355][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'. [ 153.957095][ T7001] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1051'. [ 154.041145][ T4247] usb 3-1: Using ep0 maxpacket: 8 [ 154.147555][ T7007] loop0: detected capacity change from 0 to 2048 [ 154.184131][ T7007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.200976][ T4247] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.227312][ T4247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.284492][ T7015] option changes via remount are deprecated (pid=7013 comm=syz.4.1057) [ 154.297054][ T7015] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 154.312904][ T4247] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.340320][ T4247] pvrusb2: ********** [ 154.356457][ T4247] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.387475][ T4247] pvrusb2: Important functionality might not be entirely working. [ 154.401281][ T4247] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.412798][ T4247] pvrusb2: ********** [ 154.537465][ T2425] pvrusb2: Invalid write control endpoint [ 154.580476][ T4418] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 154.615966][ T2425] pvrusb2: Invalid write control endpoint [ 154.624827][ T4247] net_ratelimit: 5 callbacks suppressed [ 154.624840][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.639623][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.652753][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.662706][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.673229][ T2425] pvrusb2: Device being rendered inoperable [ 154.684434][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 154.692787][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.700441][ T4272] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.721732][ T2425] pvrusb2: Attached sub-driver cx25840 [ 154.727607][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.739044][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 154.752510][ T4417] usb 3-1: USB disconnect, device number 9 [ 154.921483][ T7016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1058'. [ 154.940450][ T4272] usb 5-1: Using ep0 maxpacket: 16 [ 155.000365][ T4418] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.060147][ T4418] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 155.061667][ T4272] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 155.068870][ T4418] usb 4-1: can't read configurations, error -71 [ 155.082578][ T4272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.098326][ T4272] usb 5-1: config 0 descriptor?? [ 155.141725][ T4272] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 155.315681][ T7027] loop2: detected capacity change from 0 to 16 [ 155.341358][ T7027] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 155.370164][ T4272] usb 5-1: Detected FT232BM [ 155.420405][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.661333][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.810163][ T4272] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 155.818371][ T7038] loop3: detected capacity change from 0 to 32768 [ 155.827591][ T4272] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 155.843070][ T4272] usb 5-1: USB disconnect, device number 12 [ 155.853284][ T4272] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.863208][ T4272] ftdi_sio 5-1:0.0: device disconnected [ 155.902668][ T7038] XFS (loop3): Mounting V5 Filesystem [ 155.991467][ T7038] XFS (loop3): Ending clean mount [ 156.011952][ T7038] XFS (loop3): Quotacheck needed: Please wait. [ 156.084537][ T7038] XFS (loop3): Quotacheck: Done. [ 156.167892][ T4189] XFS (loop3): Unmounting Filesystem [ 156.263842][ T7051] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 156.565154][ T7060] loop4: detected capacity change from 0 to 2048 [ 156.640234][ T7060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.705754][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.897236][ T7067] loop4: detected capacity change from 0 to 512 [ 156.952425][ T7067] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 157.007671][ T7053] loop1: detected capacity change from 0 to 32768 [ 157.037328][ T7071] loop3: detected capacity change from 0 to 512 [ 157.042516][ T7067] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1075: bad orphan inode 15 [ 157.080259][ T7067] ext4_test_bit(bit=14, block=18) = 1 [ 157.099217][ T7071] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.140017][ T7067] is_bad_inode(inode)=0 [ 157.151740][ T7053] JBD2: Ignoring recovery information on journal [ 157.171590][ T7071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.181775][ T7067] NEXT_ORPHAN(inode)=1023 [ 157.186145][ T7067] max_ino=32 [ 157.189361][ T7067] i_nlink=0 [ 157.233470][ T7067] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.251268][ T7071] EXT4-fs (loop3): 1 truncate cleaned up [ 157.256968][ T7071] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000001000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 157.268156][ T7053] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 157.325594][ T7067] ext2 filesystem being mounted at /174/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 157.337479][ T155] (kworker/u4:3,155,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 157.386136][ T26] audit: type=1800 audit(1778925051.660:12): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1071" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 157.438709][ T7053] (syz.1.1071,7053,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 157.458568][ T7053] (syz.1.1071,7053,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 157.473533][ T7053] (syz.1.1071,7053,0):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2 [ 157.482464][ T7053] (syz.1.1071,7053,0):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2 [ 157.492072][ T7053] (syz.1.1071,7053,0):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2 [ 157.502958][ T7053] (syz.1.1071,7053,0):ocfs2_add_inode_to_orphan:2661 ERROR: status = -2 [ 157.511818][ T7053] (syz.1.1071,7053,0):ocfs2_dio_wr_get_block:2213 ERROR: status = -2 [ 157.537244][ T7053] (syz.1.1071,7053,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 157.558898][ T7067] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.1075: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 157.681701][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 157.741745][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.914616][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 158.410160][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 158.460450][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.664056][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 158.709992][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 158.725174][ T7116] ubi31: attaching mtd0 [ 158.735929][ T7116] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216) [ 158.780571][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.789086][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.815274][ T23] usb 5-1: too many configurations: 245, using maximum allowed: 8 [ 158.883117][ T7123] loop1: detected capacity change from 0 to 1024 [ 158.896227][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 158.906558][ T23] usb 5-1: can't read configurations, error -71 [ 158.945107][ T7125] serio: Serial port ttyS3 [ 158.950368][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 159.070467][ T7] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 159.080987][ T155] hfsplus: b-tree write err: -5, ino 8 [ 159.087292][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.172704][ T7] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 159.200176][ T4417] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.345273][ T7142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1109'. [ 159.470479][ T4417] usb 3-1: Using ep0 maxpacket: 32 [ 159.546443][ T7152] loop4: detected capacity change from 0 to 4096 [ 159.595081][ T4417] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 159.612631][ T4417] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 159.623742][ T7152] EXT4-fs (loop4): Test dummy encryption mode enabled [ 159.623774][ T7152] EXT4-fs (loop4): Ignoring removed orlov option [ 159.650017][ T4417] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 159.661966][ T7152] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 159.672301][ T4417] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 159.697584][ T4417] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.826893][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.849344][ T7152] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 159.900873][ T4417] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 159.912719][ T4417] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 159.921392][ T4417] usb 3-1: Product: syz [ 159.925581][ T4417] usb 3-1: Manufacturer: syz [ 159.931061][ T4417] usb 3-1: SerialNumber: syz [ 159.961260][ T4417] usb 3-1: config 0 descriptor?? [ 159.966979][ T7164] EXT4-fs (loop4): Ignoring removed orlov option [ 159.984040][ T7164] EXT4-fs (loop4): Remounting file system with no journal so ignoring journalled data option [ 160.012038][ T4417] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 160.020893][ T7] gspca_nw80x: reg_r err -71 [ 160.026279][ T7] nw80x: probe of 4-1:3.0 failed with error -71 [ 160.033033][ T7164] EXT4-fs (loop4): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 160.053502][ T4417] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 160.083144][ T7] usb 4-1: USB disconnect, device number 13 [ 160.236270][ T4191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.319417][ T7155] loop1: detected capacity change from 0 to 32768 [ 160.329389][ T4233] usb 3-1: USB disconnect, device number 10 [ 160.331138][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 160.346412][ T4233] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 160.362558][ T7172] loop0: detected capacity change from 0 to 64 [ 160.441282][ T7155] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 160.543305][ T7127] ldusb: No device or device unplugged -19 [ 160.572021][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 160.590520][ T7175] loop4: detected capacity change from 0 to 4096 [ 160.654034][ T7175] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 160.684995][ T7179] netlink: 'syz.3.1125': attribute type 3 has an invalid length. [ 160.700204][ T7175] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 160.742628][ T7180] loop1: detected capacity change from 0 to 128 [ 160.749371][ T7175] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 160.811436][ T7175] ntfs: volume version 3.1. [ 160.860658][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.078475][ T7191] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1129'. [ 161.377505][ T4195] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 161.507004][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 161.532767][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.593802][ T7210] loop4: detected capacity change from 0 to 64 [ 161.713144][ T7210] hfs: walked past end of dir [ 161.880108][ T4417] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.910931][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.998667][ T7221] loop0: detected capacity change from 0 to 4096 [ 162.048541][ T7221] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 162.099403][ T7229] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.135905][ T7227] loop1: detected capacity change from 0 to 8192 [ 162.160246][ T4417] usb 3-1: Using ep0 maxpacket: 16 [ 162.226230][ T7227] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 162.267779][ T7227] REISERFS (device loop1): using ordered data mode [ 162.300058][ T7227] reiserfs: using flush barriers [ 162.300758][ T4417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.320848][ T7234] loop3: detected capacity change from 0 to 2048 [ 162.322810][ T4417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.337528][ T7227] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.338828][ T4417] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 162.363492][ T4417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.373440][ T4417] usb 3-1: config 0 descriptor?? [ 162.390945][ T7227] REISERFS (device loop1): checking transaction log (loop1) [ 162.439623][ T7227] REISERFS (device loop1): Using rupasov hash to sort names [ 162.451336][ T7227] REISERFS (device loop1): using 3.5.x disk format [ 162.458137][ T7227] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.469871][ T7227] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.500804][ T7234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.520957][ T7227] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.580133][ T7227] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 162.695312][ T7243] exfat: Deprecated parameter 'namecase' [ 162.735324][ T7243] exfat: Deprecated parameter 'utf8' [ 162.778077][ T7243] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 162.844979][ T4417] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 162.965382][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.087615][ T23] usb 3-1: USB disconnect, device number 11 [ 163.131349][ T7253] fido_id[7253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 163.233064][ T7265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 163.246411][ T7265] System zones: 1-12 [ 163.290556][ T7268] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 163.302973][ T7265] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.1162: invalid block [ 163.411425][ T7265] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1162: invalid indirect mapped block 1819239214 (level 1) [ 163.438641][ T7265] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1162: bg 0: block 361: padding at end of block bitmap is not set [ 163.459840][ T7265] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 163.469565][ T7265] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1162: attempt to clear invalid blocks 33619980 len 1 [ 163.484600][ T7265] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1162: invalid indirect mapped block 1819239214 (level 0) [ 163.509430][ T7265] EXT4-fs (loop0): 1 truncate cleaned up [ 163.534684][ T7265] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 163.860337][ T4233] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 163.970433][ T7302] TCP: tcp_parse_options: Illegal window scaling value 19 > 14 received [ 163.995845][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.156028][ T4233] usb 4-1: Using ep0 maxpacket: 16 [ 164.280392][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.313977][ T4233] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 164.360311][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.393882][ T4233] usb 4-1: config 0 descriptor?? [ 164.540412][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.589723][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 164.682606][ T7328] netlink: 'syz.0.1188': attribute type 3 has an invalid length. [ 164.738862][ T7328] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1188'. [ 164.797621][ T7297] set_capacity_and_notify: 2 callbacks suppressed [ 164.797637][ T7297] loop1: detected capacity change from 0 to 32768 [ 164.874459][ T4233] sunplus 0003:04FC:05D8.000A: unknown global tag 0xe [ 164.897708][ T4233] sunplus 0003:04FC:05D8.000A: item 0 4 1 14 parsing failed [ 164.923840][ T7297] gfs2: fsid=Ô±rÐÛ»ð_î [ 164.923840][ T7297] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 164.923840][ T7297] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM" [ 164.947307][ T4233] sunplus: probe of 0003:04FC:05D8.000A failed with error -22 [ 165.019809][ T7297] gfs2: fsid=Ô±rÐÛ»ð_î [ 165.019809][ T7297] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Now mounting FS (format 1801)... [ 165.033787][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.084824][ T4233] usb 4-1: USB disconnect, device number 14 [ 165.137960][ T7297] gfs2: fsid=Ô±rÐÛ»ð_î [ 165.137960][ T7297] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: journal 0 mapped with 5 extents in 0ms [ 165.174323][ T7315] loop2: detected capacity change from 0 to 32768 [ 165.315686][ T7297] gfs2: fsid=Ô±rÐÛ»ð_î [ 165.315686][ T7297] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: first mount done, others may mount [ 165.328797][ T7315] XFS (loop2): Mounting V5 Filesystem [ 165.364479][ T7344] loop0: detected capacity change from 0 to 256 [ 165.490972][ T7344] exfat: Deprecated parameter 'namecase' [ 165.497101][ T7344] exfat: Deprecated parameter 'utf8' [ 165.532118][ T7315] XFS (loop2): Ending clean mount [ 165.649504][ T7344] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 165.804400][ T4200] XFS (loop2): Unmounting Filesystem [ 165.874776][ T7333] loop4: detected capacity change from 0 to 40427 [ 165.927154][ T7333] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 165.945103][ T7354] loop3: detected capacity change from 0 to 4096 [ 165.990159][ T7333] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 166.047970][ T7354] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 166.075006][ T7333] F2FS-fs (loop4): invalid crc value [ 166.088251][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.187513][ T7333] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 166.225546][ T7354] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 166.367700][ T26] audit: type=1800 audit(1778925060.640:13): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1194" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 166.538319][ T4245] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 166.564353][ T4189] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 166.584628][ T4189] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 166.613373][ T4189] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 166.622202][ T1201] block nbd0: Possible stuck request ffff888020ff8000: control (read@0,4096B). Runtime 60 seconds [ 166.671600][ T3046] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 166.679660][ T4189] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 166.688244][ T7333] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 166.710374][ T7333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.917750][ T4247] hid-generic 0005:0C45:1010.000B: item fetching failed at offset 3/7 [ 166.957160][ T4247] hid-generic: probe of 0005:0C45:1010.000B failed with error -22 [ 167.100449][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.347278][ T7393] loop3: detected capacity change from 0 to 8192 [ 167.586823][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.774256][ T7432] loop2: detected capacity change from 0 to 8 [ 167.780683][ T7429] syz.3.1212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 168.145551][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.232608][ T7447] loop4: detected capacity change from 0 to 512 [ 168.264097][ T7447] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.292067][ T7444] loop3: detected capacity change from 0 to 4096 [ 168.311244][ T7447] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1220: bad orphan inode 131083 [ 168.330656][ T7447] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.341738][ T4247] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.365602][ T7444] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 168.584359][ T4247] usb 2-1: Using ep0 maxpacket: 32 [ 168.652826][ T7444] ntfs3: loop3: failed to convert "c46c" to iso8859-3 [ 168.711043][ T4247] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 168.729086][ T4247] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 168.774838][ T4247] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 168.798429][ T7470] lo speed is unknown, defaulting to 1000 [ 168.804971][ T4247] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 168.837081][ T4247] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.942514][ T7472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.026190][ T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.060970][ T4247] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 169.079196][ T4247] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 169.096035][ T4247] usb 2-1: Product: syz [ 169.109189][ T4247] usb 2-1: Manufacturer: syz [ 169.132736][ T4247] usb 2-1: SerialNumber: syz [ 169.139553][ T7486] syz.0.1231 uses obsolete (PF_INET,SOCK_PACKET) [ 169.152797][ T4247] usb 2-1: config 0 descriptor?? [ 169.180491][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.202070][ T4247] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 169.229630][ T4247] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 169.420693][ T7496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.441663][ T4418] usb 2-1: USB disconnect, device number 9 [ 169.460862][ T7496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.460892][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 169.481364][ T4418] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 169.501489][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 169.523721][ T7496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.544234][ T7494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.648491][ T7440] ldusb: No device or device unplugged -19 [ 169.691556][ T23] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 169.704428][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.726089][ T23] usb 5-1: Product: syz [ 169.737408][ T23] usb 5-1: Manufacturer: syz [ 169.747974][ T23] usb 5-1: SerialNumber: syz [ 169.775247][ T23] usb 5-1: config 0 descriptor?? [ 169.800718][ T7464] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 169.816607][ T7464] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.057739][ T7464] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.070321][ T7464] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.182212][ T7483] loop2: detected capacity change from 0 to 32768 [ 170.222512][ T4418] net_ratelimit: 2 callbacks suppressed [ 170.222527][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.244577][ T7524] loop3: detected capacity change from 0 to 256 [ 170.255863][ T7522] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 170.354229][ T7483] JBD2: Ignoring recovery information on journal [ 170.449844][ T7483] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 170.530957][ T23] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 170.620189][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.628537][ C0] Illegal XDP return value 16128, expect packet loss! [ 170.648977][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.755858][ T23] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 170.765586][ T7540] loop0: detected capacity change from 0 to 1024 [ 170.791541][ T23] usb 5-1: USB disconnect, device number 15 [ 170.825515][ T7540] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 170.858601][ T7540] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.960378][ T7540] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 171.043826][ T7551] loop3: detected capacity change from 0 to 128 [ 171.080826][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 171.174120][ T7551] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 171.240823][ T7551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.260866][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.453020][ T7558] loop1: detected capacity change from 0 to 1024 [ 171.609788][ T7562] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 171.653972][ T155] hfsplus: b-tree write err: -5, ino 25 [ 171.685478][ T155] hfsplus: b-tree write err: -5, ino 4 [ 171.715017][ T155] hfsplus: b-tree write err: -5, ino 2 [ 171.779855][ T155] hfsplus: b-tree write err: -5, ino 26 [ 172.212774][ T7582] loop2: detected capacity change from 0 to 4096 [ 172.281691][ T7582] ntfs3: loop2: ino=3, Correct links count -> 2. [ 172.311062][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.658438][ T7582] ntfs3: loop2: ino=5, "/" directory corrupted [ 172.746437][ T7614] loop4: detected capacity change from 0 to 64 [ 172.939490][ T7619] netlink: 'syz.1.1284': attribute type 7 has an invalid length. [ 173.056689][ T7625] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1286'. [ 173.341675][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.398746][ T7636] loop4: detected capacity change from 0 to 8192 [ 173.477179][ T7636] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 173.491766][ T7636] REISERFS (device loop4): using ordered data mode [ 173.506978][ T7636] reiserfs: using flush barriers [ 173.530384][ T7636] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.610826][ T7636] REISERFS (device loop4): checking transaction log (loop4) [ 173.662325][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.692682][ T7636] REISERFS (device loop4): Using r5 hash to sort names [ 173.711950][ T7636] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 173.800385][ T7636] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 173.838638][ T7646] lo speed is unknown, defaulting to 1000 [ 174.092301][ T7649] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 174.380683][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.506552][ T7667] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 174.648160][ T7676] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.714865][ T7678] loop1: detected capacity change from 0 to 2048 [ 174.893573][ T7678] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.093527][ T7692] loop4: detected capacity change from 0 to 256 [ 175.145484][ T7692] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.157510][ T7692] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 175.235823][ T7692] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 175.465738][ T4418] net_ratelimit: 1 callbacks suppressed [ 175.465754][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.533277][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1322'. [ 175.626798][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1322'. [ 175.684236][ T13] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 175.897356][ T7714] loop1: detected capacity change from 0 to 4096 [ 176.017174][ T7721] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.030524][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 176.044754][ T7720] loop3: detected capacity change from 0 to 2048 [ 176.110123][ T13] usb 3-1: config 6 has an invalid interface number: 32 but max is 0 [ 176.119681][ T13] usb 3-1: config 6 has no interface number 0 [ 176.159997][ T13] usb 3-1: config 6 interface 32 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 176.219354][ T7720] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.350227][ T13] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice=2a.6a [ 176.374262][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.407326][ T13] usb 3-1: Product: syz [ 176.429302][ T13] usb 3-1: Manufacturer: syz [ 176.449165][ T13] usb 3-1: SerialNumber: syz [ 176.476838][ T7731] netlink: 'syz.1.1332': attribute type 1 has an invalid length. [ 176.507310][ T7731] netlink: 'syz.1.1332': attribute type 2 has an invalid length. [ 176.540735][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.587219][ T7732] netlink: 'syz.1.1332': attribute type 1 has an invalid length. [ 176.664945][ T7732] netlink: 'syz.1.1332': attribute type 2 has an invalid length. [ 176.701745][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.886068][ T7738] lo speed is unknown, defaulting to 1000 [ 176.961689][ T13] i2c-tiny-usb 3-1:6.32: version 2a.6a found at bus 003 address 012 [ 177.204377][ T7751] loop4: detected capacity change from 0 to 16 [ 177.273357][ T7751] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.404321][ T13] (null): failure reading functionality [ 177.430702][ T13] i2c i2c-1: failure reading functionality [ 177.454177][ T13] i2c i2c-1: connected i2c-tiny-usb device [ 177.460130][ T4233] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 177.513818][ T13] usb 3-1: USB disconnect, device number 12 [ 177.543722][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.591225][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.929695][ T7762] loop4: detected capacity change from 0 to 64 [ 178.061300][ T7766] loop1: detected capacity change from 0 to 8 [ 178.080758][ T4233] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 178.099934][ T4233] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 178.129147][ T4233] usb 4-1: Product: syz [ 178.142661][ T4233] usb 4-1: Manufacturer: syz [ 178.159262][ T4233] usb 4-1: SerialNumber: syz [ 178.178723][ T4233] usb 4-1: config 0 descriptor?? [ 178.200184][ T7766] SQUASHFS error: Unable to read inode 0x11f [ 178.281687][ T4233] ch341 4-1:0.0: ch341-uart converter detected [ 178.620939][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.805074][ T7786] loop4: detected capacity change from 0 to 512 [ 178.843238][ T7786] EXT4-fs (loop4): Ignoring removed bh option [ 178.896517][ T7786] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 178.971346][ T7786] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.059492][ T7794] device bond0 entered promiscuous mode [ 179.070388][ T7794] device bond_slave_0 entered promiscuous mode [ 179.090529][ T7794] device bond_slave_1 entered promiscuous mode [ 179.158330][ T7794] device bond0 left promiscuous mode [ 179.164706][ T4233] usb 4-1: failed to send control message: -71 [ 179.176922][ T4233] ch341-uart: probe of ttyUSB0 failed with error -71 [ 179.194385][ T7794] device bond_slave_0 left promiscuous mode [ 179.217601][ T4233] usb 4-1: USB disconnect, device number 15 [ 179.228849][ T7794] device bond_slave_1 left promiscuous mode [ 179.266450][ T4233] ch341 4-1:0.0: device disconnected [ 179.377347][ T7780] loop2: detected capacity change from 0 to 32768 [ 179.420568][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.437160][ T7780] JBD2: Ignoring recovery information on journal [ 179.513571][ T26] audit: type=1326 audit(1778925073.790:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 179.539046][ T26] audit: type=1326 audit(1778925073.790:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 179.566153][ T26] audit: type=1326 audit(1778925073.790:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 179.591328][ T26] audit: type=1326 audit(1778925073.820:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 179.615898][ T26] audit: type=1326 audit(1778925073.820:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 179.641099][ T7780] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 179.656644][ T7809] loop0: detected capacity change from 0 to 128 [ 179.670402][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.727673][ T7811] loop3: detected capacity change from 0 to 512 [ 179.765551][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.795155][ T7811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.808147][ T26] audit: type=1326 audit(1778925073.820:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 179.883372][ T26] audit: type=1326 audit(1778925073.840:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 179.926446][ T7811] EXT4-fs (loop3): 1 truncate cleaned up [ 179.976145][ T7811] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 180.009349][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 180.131791][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 180.148073][ T26] audit: type=1326 audit(1778925073.840:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 180.275461][ T26] audit: type=1326 audit(1778925073.890:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 180.330291][ T7827] loop4: detected capacity change from 0 to 1024 [ 180.373831][ T26] audit: type=1326 audit(1778925073.890:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.4.1362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da22e1e59 code=0x7ffc0000 [ 180.710687][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.907746][ T7844] loop2: detected capacity change from 0 to 1024 [ 180.993739][ T7848] input: syz0 as /devices/virtual/input/input10 [ 181.205604][ T7855] loop4: detected capacity change from 0 to 2048 [ 181.337726][ T5904] loop4: p3 < > [ 181.443860][ T7855] loop4: p3 < > [ 181.464941][ T7857] loop3: detected capacity change from 0 to 4096 [ 181.585617][ T7857] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 181.661598][ T7857] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 181.681907][ T5904] udevd[5904]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 181.720162][ T2238] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 181.729662][ T7868] loop0: detected capacity change from 0 to 512 [ 181.765247][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.779410][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 181.845894][ T7868] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1390: inode has both inline data and extents flags [ 181.862302][ T4438] udevd[4438]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 181.873831][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 181.882861][ T7870] netlink: 'syz.4.1389': attribute type 18 has an invalid length. [ 181.891966][ T7870] netlink: 'syz.4.1389': attribute type 15 has an invalid length. [ 181.948137][ T7868] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1390: couldn't read orphan inode 15 (err -117) [ 181.980371][ T7868] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 181.982385][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.032194][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1392'. [ 182.123525][ T2238] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.154147][ T2238] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 182.203298][ T2238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.237180][ T2238] usb 3-1: config 0 descriptor?? [ 182.300999][ T2238] pwc: Askey VC010 type 2 USB webcam detected. [ 182.425588][ T7887] Â: renamed from pim6reg1 [ 182.480433][ T4233] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 182.520164][ T2238] pwc: send_video_command error -71 [ 182.525569][ T2238] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 182.556101][ T2238] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 182.607247][ T2238] usb 3-1: USB disconnect, device number 13 [ 182.647346][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 182.740424][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 182.784327][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.807057][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.913863][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.936912][ T4233] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.969189][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.999677][ T4233] usb 5-1: config 0 descriptor?? [ 183.429745][ T4233] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.564155][ T7904] loop3: detected capacity change from 0 to 4096 [ 183.616619][ T7904] ntfs3: loop3: ino=3, Correct links count -> 2. [ 183.820955][ T7904] ntfs3: loop3: failed to convert "0080" to cp874 [ 183.831759][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.866236][ T7904] ntfs3: loop3: failed to convert name for inode 1e. [ 183.939680][ T7924] loop2: detected capacity change from 0 to 128 [ 183.986562][ T7924] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 184.066771][ T7924] sysv_free_block: trying to free block not in datazone [ 184.197615][ T4200] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 184.204895][ T2238] usb 5-1: USB disconnect, device number 16 [ 184.250161][ T7926] loop3: detected capacity change from 0 to 8192 [ 184.293555][ T7926] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 184.310565][ T7926] REISERFS (device loop3): using ordered data mode [ 184.325587][ T7926] reiserfs: using flush barriers [ 184.345223][ T7926] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.362431][ T7926] REISERFS (device loop3): checking transaction log (loop3) [ 184.381307][ T7926] REISERFS (device loop3): Using r5 hash to sort names [ 184.388566][ T7926] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 184.558047][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 184.606201][ T7937] device erspan0 entered promiscuous mode [ 184.862804][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.890091][ T4236] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 185.022774][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 185.130092][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 185.190149][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.260309][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.276488][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.316749][ T4236] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 185.329520][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.379782][ T4236] usb 2-1: config 0 descriptor?? [ 185.498814][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 185.508792][ T7970] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1433'. [ 185.562064][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1435'. [ 185.721800][ T7977] loop3: detected capacity change from 0 to 4096 [ 185.809262][ T7983] loop0: detected capacity change from 0 to 128 [ 185.826534][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.853516][ T7977] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 185.868617][ T4236] ntrig 0003:1B96:0008.000C: unknown main item tag 0x0 [ 185.879097][ T4236] ntrig 0003:1B96:0008.000C: unknown main item tag 0x0 [ 185.897100][ T4236] ntrig 0003:1B96:0008.000C: unknown main item tag 0x0 [ 185.907254][ T4236] ntrig 0003:1B96:0008.000C: unknown main item tag 0x0 [ 185.924601][ T4236] ntrig 0003:1B96:0008.000C: unknown main item tag 0x0 [ 185.932147][ T4236] ntrig 0003:1B96:0008.000C: unknown main item tag 0x0 [ 185.945182][ T7983] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.949449][ T4236] ntrig 0003:1B96:0008.000C: unknown main item tag 0x0 [ 185.972340][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.984741][ T4236] ntrig 0003:1B96:0008.000C: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 186.004373][ T7983] ext4 filesystem being mounted at /344/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.090238][ T4236] ntrig 0003:1B96:0008.000C: Firmware version: 6.2.27.63.0 (8bec f87f) [ 186.355340][ T7996] program syz.3.1443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.406941][ T7] usb 2-1: USB disconnect, device number 10 [ 186.537751][ T8000] device veth0 entered promiscuous mode [ 186.551343][ T7999] device veth0 left promiscuous mode [ 186.655963][ T8002] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 186.856259][ T8012] loop3: detected capacity change from 0 to 512 [ 186.977405][ T8012] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 187.022097][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.182891][ T8020] loop1: detected capacity change from 0 to 64 [ 187.621421][ T8030] netlink: 'syz.3.1460': attribute type 29 has an invalid length. [ 187.646281][ T8030] netlink: 'syz.3.1460': attribute type 29 has an invalid length. [ 187.832016][ T4417] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.886131][ T8014] loop4: detected capacity change from 0 to 40427 [ 187.921506][ T8014] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 187.939594][ T8014] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 187.959511][ T8014] F2FS-fs (loop4): invalid crc value [ 187.983834][ T8014] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.040925][ T8022] loop2: detected capacity change from 0 to 32768 [ 188.048170][ T8014] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 188.062197][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.100285][ T4417] usb 2-1: Using ep0 maxpacket: 8 [ 188.132612][ T8022] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 188.132612][ T8022] [ 188.150390][ T8014] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.155462][ T8041] loop3: detected capacity change from 0 to 64 [ 188.182143][ T8022] ERROR: (device loop2): remounting filesystem as read-only [ 188.221373][ T8042] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 188.221373][ T8042] [ 188.299805][ T8014] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x185/0x8f0 [ 188.347428][ T8014] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580 [ 188.450746][ T4417] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 188.470081][ T4195] attempt to access beyond end of device [ 188.470081][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 188.499941][ T4417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.528911][ T4417] usb 2-1: Product: syz [ 188.549216][ T4417] usb 2-1: Manufacturer: syz [ 188.558965][ T4417] usb 2-1: SerialNumber: syz [ 188.584692][ T4417] usb 2-1: config 0 descriptor?? [ 188.633003][ T4417] gspca_main: se401-2.14.0 probing 047d:5003 [ 188.865598][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.994897][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1470'. [ 189.026461][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.034898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.044049][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.052620][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.070564][ T4417] gspca_se401: Too many frame sizes [ 189.110788][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.278233][ T7] usb 2-1: USB disconnect, device number 11 [ 189.572928][ T8075] loop3: detected capacity change from 0 to 2048 [ 189.604280][ T4438] loop3: p3 < > [ 189.617619][ T8075] loop3: p3 < > [ 189.726354][ T8079] loop4: detected capacity change from 0 to 256 [ 189.860691][ T4438] udevd[4438]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 189.981165][ T4438] udevd[4438]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 190.210545][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 190.342124][ T8107] loop0: detected capacity change from 0 to 512 [ 190.437821][ T8107] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1488: inode has both inline data and extents flags [ 190.476843][ T8107] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1488: couldn't read orphan inode 15 (err -117) [ 190.496290][ T8107] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.533573][ T8112] loop1: detected capacity change from 0 to 8192 [ 190.606835][ T8112] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 190.619643][ T8112] REISERFS (device loop1): using ordered data mode [ 190.626605][ T8112] reiserfs: using flush barriers [ 190.660642][ T8112] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.690851][ T8112] REISERFS (device loop1): checking transaction log (loop1) [ 190.773399][ T8112] REISERFS (device loop1): Using r5 hash to sort names [ 190.832953][ T8131] loop2: detected capacity change from 0 to 128 [ 190.850281][ T8112] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 190.944317][ T8112] overlayfs: upper fs needs to support d_type. [ 190.968630][ T8131] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 191.032868][ T8131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.037810][ T8112] overlayfs: upper fs does not support tmpfile. [ 191.096784][ T8112] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 191.100505][ T2238] Bluetooth: hci3: command 0x0406 tx timeout [ 191.106200][ T4417] Bluetooth: hci2: command 0x0406 tx timeout [ 191.138600][ T4417] Bluetooth: hci1: command 0x0406 tx timeout [ 191.171030][ T8112] overlayfs: failed to set xattr on upper [ 191.176821][ T8112] overlayfs: ...falling back to index=off,metacopy=off. [ 191.185524][ T4417] net_ratelimit: 1 callbacks suppressed [ 191.185538][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.203090][ T8145] usb usb8: check_ctrlrecip: process 8145 (syz.0.1502) requesting ep 01 but needs 81 [ 191.227430][ T8141] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 191.281501][ T8112] overlayfs: failed to resolve './file0': -2 [ 191.288140][ T8141] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: inode #32: comm syz.4.1501: iget: special inode unallocated [ 191.431835][ T8141] EXT4-fs (loop4): no journal found [ 191.470356][ T8141] EXT4-fs (loop4): can't get journal size [ 191.504272][ T8149] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.551718][ T8141] EXT4-fs (loop4): filesystem is read-only [ 191.643880][ T8141] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 191.746686][ T8141] EXT4-fs (loop4): shut down requested (1) [ 191.931388][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.965439][ T8175] set_capacity_and_notify: 1 callbacks suppressed [ 191.965455][ T8175] loop3: detected capacity change from 0 to 512 [ 192.080823][ T8180] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 192.146280][ T8175] EXT4-fs (loop3): Ignoring removed nobh option [ 192.189988][ T8175] EXT4-fs (loop3): Ignoring removed nobh option [ 192.220312][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.222376][ T8175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.231562][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.323848][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.335767][ T8175] EXT4-fs (loop3): 1 truncate cleaned up [ 192.350010][ T8175] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,usrjquota=,nobh,nobh,i_version,,errors=continue. Quota mode: none. [ 192.466440][ T8194] loop0: detected capacity change from 0 to 8192 [ 192.656726][ T8202] netlink: 'syz.4.1523': attribute type 13 has an invalid length. [ 192.741411][ T8202] netlink: 'syz.4.1523': attribute type 4 has an invalid length. [ 192.780348][ T8202] netlink: 14232 bytes leftover after parsing attributes in process `syz.4.1523'. [ 192.980668][ T8216] binder: 8215:8216 ioctl 40046205 0 returned -22 [ 193.136537][ T8177] loop2: detected capacity change from 0 to 32768 [ 193.196218][ T8220] loop6: detected capacity change from 0 to 524287999 [ 193.253210][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.264263][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.277860][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.288989][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.309371][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.320411][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.329608][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.340719][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.362358][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.373689][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.401339][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.412395][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.429549][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.440590][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.452546][ T8177] XFS (loop2): Mounting V5 Filesystem [ 193.462002][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.473082][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.488075][ T5904] ldm_validate_partition_table(): Disk read failed. [ 193.495329][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.506326][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.516023][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.527055][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.546067][ T5904] Dev loop6: unable to read RDB block 0 [ 193.572179][ T5904] loop6: unable to read partition table [ 193.624132][ T8177] XFS (loop2): Ending clean mount [ 193.745204][ T4200] XFS (loop2): Unmounting Filesystem [ 194.051282][ T8218] loop4: detected capacity change from 0 to 131072 [ 194.060852][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.072864][ T8220] ldm_validate_partition_table(): Disk read failed. [ 194.081905][ T8220] Dev loop6: unable to read RDB block 0 [ 194.088392][ T8220] loop6: unable to read partition table [ 194.095030][ T8220] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 194.145834][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.152398][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.157598][ T4417] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 194.195664][ T8218] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 194.205202][ T8218] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 194.232590][ T8218] F2FS-fs (loop4): invalid crc value [ 194.263703][ T8218] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.274437][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 194.302640][ T8236] netlink: 'syz.1.1533': attribute type 25 has an invalid length. [ 194.338769][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 194.357922][ T8218] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 194.365178][ T8218] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 194.392450][ T8218] F2FS-fs (loop4): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 194.450455][ T4417] usb 4-1: Using ep0 maxpacket: 16 [ 194.590436][ T4417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.610261][ T4417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.626378][ T4417] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.639649][ T4417] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.649411][ T4417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.711291][ T4417] usb 4-1: config 0 descriptor?? [ 194.940290][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.075921][ T8244] loop2: detected capacity change from 0 to 32768 [ 195.101368][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.177159][ T8244] XFS (loop2): Mounting V5 Filesystem [ 195.212720][ T4417] microsoft 0003:045E:07DA.000D: unknown main item tag 0xd [ 195.230238][ T4417] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 195.237512][ T4417] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 195.246057][ T4417] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 195.257068][ T4417] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 195.268995][ T4417] microsoft 0003:045E:07DA.000D: no inputs found [ 195.275715][ T4417] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 195.314941][ T8244] XFS (loop2): Ending clean mount [ 195.437554][ T4417] usb 4-1: USB disconnect, device number 16 [ 195.467285][ T4200] XFS (loop2): Unmounting Filesystem [ 195.518028][ T8260] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1535'. [ 195.567369][ T8262] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1540'. [ 195.606734][ T8249] loop1: detected capacity change from 0 to 40427 [ 195.664467][ T8249] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 195.677740][ T8249] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 195.712542][ T8249] F2FS-fs (loop1): invalid crc value [ 195.738244][ T8249] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.784438][ T8249] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 195.803418][ T8249] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.835961][ T8249] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x185/0x8f0 [ 195.881373][ T8249] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580 [ 195.962756][ T4190] attempt to access beyond end of device [ 195.962756][ T4190] loop1: rw=2049, want=45104, limit=40427 [ 196.064111][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.195877][ T8279] loop0: detected capacity change from 0 to 22 [ 196.260637][ T8279] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 196.284509][ T8279] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 196.472300][ T8277] loop4: detected capacity change from 0 to 8192 [ 196.522432][ T8285] loop2: detected capacity change from 0 to 4096 [ 196.526320][ T8277] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 196.566880][ T8277] REISERFS (device loop4): using ordered data mode [ 196.579574][ T8277] reiserfs: using flush barriers [ 196.595345][ T8287] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.627627][ T8277] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 196.698157][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 196.707873][ T1201] block nbd0: Possible stuck request ffff888020ff8000: control (read@0,4096B). Runtime 90 seconds [ 196.750594][ T8277] REISERFS (device loop4): checking transaction log (loop4) [ 196.794396][ T8277] REISERFS (device loop4): Using r5 hash to sort names [ 196.853241][ T8277] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 196.947626][ T8277] overlayfs: upper fs needs to support d_type. [ 196.977270][ T8277] overlayfs: upper fs does not support tmpfile. [ 197.023844][ T8277] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 197.054645][ T8277] overlayfs: failed to set xattr on upper [ 197.103614][ T8277] overlayfs: ...falling back to index=off,metacopy=off. [ 197.137558][ T8277] overlayfs: failed to resolve './file0': -2 [ 197.181186][ T4417] net_ratelimit: 2 callbacks suppressed [ 197.181200][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.362216][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.382698][ T8316] loop0: Can't mount, would change RO state [ 197.468162][ T8320] loop1: detected capacity change from 0 to 256 [ 197.539410][ T8323] loop2: detected capacity change from 0 to 8192 [ 197.569708][ T8320] FAT-fs (loop1): Directory bread(block 64) failed [ 197.577598][ T8320] FAT-fs (loop1): Directory bread(block 65) failed [ 197.595591][ T8320] FAT-fs (loop1): Directory bread(block 66) failed [ 197.606108][ T8323] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 197.611210][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 197.650162][ T8323] REISERFS (device loop2): using ordered data mode [ 197.656930][ T8320] FAT-fs (loop1): Directory bread(block 67) failed [ 197.670932][ T8320] FAT-fs (loop1): Directory bread(block 68) failed [ 197.677781][ T8323] reiserfs: using flush barriers [ 197.685396][ T8320] FAT-fs (loop1): Directory bread(block 69) failed [ 197.694787][ T8323] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.712928][ T8320] FAT-fs (loop1): Directory bread(block 70) failed [ 197.720542][ T8320] FAT-fs (loop1): Directory bread(block 71) failed [ 197.727165][ T8320] FAT-fs (loop1): Directory bread(block 72) failed [ 197.734725][ T8320] FAT-fs (loop1): Directory bread(block 73) failed [ 197.751382][ T7] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 197.765245][ T8323] REISERFS (device loop2): checking transaction log (loop2) [ 197.771465][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.789589][ T7] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 197.808978][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.864817][ T7] usb 4-1: config 0 descriptor?? [ 197.959236][ T8323] REISERFS (device loop2): Using tea hash to sort names [ 197.978322][ T8323] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 197.984399][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.995647][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.175195][ T8326] loop1: detected capacity change from 0 to 4096 [ 198.221768][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.355413][ T7] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 198.369019][ T4190] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 198.378458][ T7] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 198.394587][ T7] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 198.401154][ T4190] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 198.408466][ T7] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 198.430203][ T7] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 198.473584][ T8332] loop4: detected capacity change from 0 to 64 [ 198.510352][ T7] corsair-psu 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 198.620441][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.737773][ T8344] loop4: detected capacity change from 0 to 256 [ 198.831969][ T8344] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.885300][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 198.885315][ T26] audit: type=1800 audit(2000000006.370:28): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1574" name="file1" dev="loop4" ino=1048655 res=0 errno=0 [ 198.919964][ T7] corsair-psu 0003:1B1C:1C09.000E: unable to initialize device (-110) [ 198.958983][ T7] corsair-psu: probe of 0003:1B1C:1C09.000E failed with error -110 [ 198.993947][ T7] usb 4-1: USB disconnect, device number 17 [ 199.030662][ T26] audit: type=1800 audit(2000000006.430:29): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1574" name="file1" dev="loop4" ino=1048655 res=0 errno=0 [ 199.066667][ T154] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 199.107986][ T154] FAT-fs (loop4): Filesystem has been set read-only [ 199.136473][ T154] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 199.186971][ T8353] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.228532][ T8355] fido_id[8355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 199.266721][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.274913][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.310441][ T4245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.334316][ T8352] loop0: detected capacity change from 0 to 8192 [ 199.367549][ T8360] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1580'. [ 199.403446][ T8360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1580'. [ 199.481816][ T8352] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 199.488924][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 199.501257][ T8365] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 199.520831][ T8352] REISERFS (device loop0): using ordered data mode [ 199.554474][ T8368] loop1: detected capacity change from 0 to 16 [ 199.573065][ T8352] reiserfs: using flush barriers [ 199.591177][ T8352] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.609104][ T8352] REISERFS (device loop0): checking transaction log (loop0) [ 199.627849][ T8338] loop2: detected capacity change from 0 to 32768 [ 199.650185][ T8368] erofs: (device loop1): mounted with root inode @ nid 36. [ 199.804710][ T8378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1588'. [ 199.814571][ T8378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1588'. [ 199.909133][ T8338] XFS (loop2): Mounting V5 Filesystem [ 199.953482][ T8352] REISERFS (device loop0): Using tea hash to sort names [ 199.983231][ T8338] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 200.019181][ T8352] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 200.019675][ T8338] XFS (loop2): Starting recovery (logdev: internal) [ 200.103035][ T8338] XFS (loop2): Ending recovery (logdev: internal) [ 200.119177][ T8338] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 200.129140][ T8338] XFS (loop2): Failed to initialize disk quotas. [ 200.300523][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.338689][ T4200] XFS (loop2): Unmounting Filesystem [ 200.750031][ T2238] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 200.777410][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.869974][ T4236] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.110025][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 201.120477][ T2238] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.137399][ T2238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.157040][ T2238] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.195105][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 201.230185][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 201.337029][ T8427] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1607'. [ 201.363767][ T2238] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.393318][ T2238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.416192][ T2238] usb 4-1: Product: syz [ 201.421292][ T4236] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 201.445610][ T2238] usb 4-1: Manufacturer: syz [ 201.451557][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.459716][ T2238] usb 4-1: SerialNumber: syz [ 201.471247][ T4236] usb 2-1: Product: syz [ 201.475466][ T4236] usb 2-1: Manufacturer: syz [ 201.485923][ T4236] usb 2-1: SerialNumber: syz [ 201.512622][ T4236] usb 2-1: config 0 descriptor?? [ 201.525938][ T2238] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 201.534743][ T2238] cdc_mbim 4-1:1.0: bind() failure [ 201.552588][ T4236] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 201.568577][ T4236] usb 2-1: Detected FT232RL [ 201.617074][ T8437] loop2: detected capacity change from 0 to 64 [ 201.636988][ T8437] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 201.670715][ T4418] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.770248][ T4236] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 201.930516][ T4418] usb 5-1: Using ep0 maxpacket: 16 [ 202.049596][ T4236] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 202.060556][ T4418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.074343][ T4418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.089204][ T4418] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.107303][ T4418] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.118144][ T4418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.149595][ T4418] usb 5-1: config 0 descriptor?? [ 202.253845][ T4236] usb 2-1: USB disconnect, device number 12 [ 202.271922][ T4236] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 202.287244][ T4236] ftdi_sio 2-1:0.0: device disconnected [ 202.380617][ T4233] net_ratelimit: 3 callbacks suppressed [ 202.380637][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.642082][ T4418] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 202.649508][ T4418] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 202.659226][ T4418] microsoft 0003:045E:07DA.000F: unbalanced delimiter at end of report description [ 202.670843][ T4418] microsoft 0003:045E:07DA.000F: parse failed [ 202.680844][ T4418] microsoft: probe of 0003:045E:07DA.000F failed with error -22 [ 202.869263][ T4236] usb 5-1: USB disconnect, device number 17 [ 202.957485][ T8463] loop2: detected capacity change from 0 to 1024 [ 203.049823][ T8463] hfsplus: catalog searching failed [ 203.084690][ T154] hfsplus: b-tree write err: -5, ino 3 [ 203.102077][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.324292][ T8467] loop1: detected capacity change from 0 to 32768 [ 203.420806][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.437009][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 203.459378][ T4418] usb 4-1: USB disconnect, device number 18 [ 203.508617][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 203.545420][ T4190] read_mapping_page failed! [ 203.565140][ T4236] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 203.573481][ T4190] ERROR: (device loop1): txCommit: [ 203.573481][ T4190] [ 203.629041][ T4190] ERROR: (device loop1): remounting filesystem as read-only [ 203.692293][ T8481] loop4: detected capacity change from 0 to 128 [ 203.757893][ T8481] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 203.782452][ T8481] hpfs: filesystem error: improperly stopped [ 203.788501][ T8481] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 203.802266][ T8481] hpfs: You really don't want any checks? You are crazy... [ 203.809727][ T8482] loop3: detected capacity change from 0 to 4096 [ 203.821678][ T8481] hpfs: hpfs_map_sector(): read error [ 203.827179][ T8481] hpfs: code page support is disabled [ 203.834970][ T8481] hpfs: hpfs_map_4sectors(): unaligned read [ 203.846621][ T8481] hpfs: hpfs_map_4sectors(): unaligned read [ 203.855662][ T8481] hpfs: filesystem error: unable to find root dir [ 203.909796][ T8482] ntfs: volume version 3.1. [ 203.960849][ T4236] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 203.969056][ T4236] usb 3-1: config 0 has no interface number 0 [ 203.971889][ T8482] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 203.975877][ T4236] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 203.998001][ T4236] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 204.009568][ T4236] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 204.045034][ T4236] usb 3-1: config 0 interface 2 has no altsetting 0 [ 204.070277][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.127225][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.209285][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1634'. [ 204.230378][ T4236] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 204.234393][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.239497][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.239520][ T4236] usb 3-1: Product: syz [ 204.239536][ T4236] usb 3-1: Manufacturer: syz [ 204.309957][ T4236] usb 3-1: SerialNumber: syz [ 204.318489][ T4236] usb 3-1: config 0 descriptor?? [ 204.350478][ T8473] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 204.362078][ T8473] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 204.379471][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.399544][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.480113][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.563392][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.845428][ T4236] usb 3-1: USB disconnect, device number 14 [ 204.859042][ T276] ERROR: (device loop1): diFree: numfree > numinos [ 204.859042][ T276] [ 205.026974][ T3046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.307241][ T8503] binder: 8502:8503 ioctl 400c620e 200000000340 returned -22 [ 205.564010][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.684666][ T8489] loop3: detected capacity change from 0 to 40427 [ 205.759302][ T8489] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 205.788371][ T8489] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 205.858347][ T8489] F2FS-fs (loop3): invalid crc value [ 205.924886][ T8489] F2FS-fs (loop3): Found nat_bits in checkpoint [ 206.084638][ T8534] loop2: detected capacity change from 0 to 256 [ 206.219022][ T8489] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 206.273054][ T8489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 206.616825][ T8547] __nla_validate_parse: 1 callbacks suppressed [ 206.616855][ T8547] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1653'. [ 206.623560][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.784188][ T8556] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 206.843950][ T8549] loop4: detected capacity change from 0 to 4096 [ 206.932541][ T8552] lo speed is unknown, defaulting to 1000 [ 206.941601][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.213349][ T144] device hsr_slave_0 left promiscuous mode [ 207.254523][ T144] device hsr_slave_1 left promiscuous mode [ 207.276559][ T4195] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 207.297837][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.330051][ T4195] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 207.419838][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.471286][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.499438][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.527494][ T144] device bridge_slave_1 left promiscuous mode [ 207.548305][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.633852][ T144] device bridge_slave_0 left promiscuous mode [ 207.660606][ T4417] net_ratelimit: 1 callbacks suppressed [ 207.660622][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.677920][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.699976][ T4247] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.851931][ T144] device veth1_macvtap left promiscuous mode [ 207.863650][ T8586] loop3: detected capacity change from 0 to 256 [ 207.870682][ T144] device veth0_macvtap left promiscuous mode [ 207.876776][ T144] device veth1_vlan left promiscuous mode [ 207.894632][ T8586] exfat: Deprecated parameter 'utf8' [ 207.922399][ T144] device veth0_vlan left promiscuous mode [ 207.950614][ T8586] exfat: Deprecated parameter 'namecase' [ 207.958682][ T4247] usb 5-1: Using ep0 maxpacket: 16 [ 207.980487][ T8586] exfat: Deprecated parameter 'namecase' [ 207.986255][ T8586] exfat: Deprecated parameter 'namecase' [ 208.016426][ T8586] exfat: Deprecated parameter 'namecase' [ 208.050064][ T8586] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 208.240530][ T4247] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 208.265161][ T4247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.280312][ T4247] usb 5-1: Product: syz [ 208.284676][ T4247] usb 5-1: Manufacturer: syz [ 208.293527][ T8565] loop2: detected capacity change from 0 to 40427 [ 208.300448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.309617][ T4247] usb 5-1: SerialNumber: syz [ 208.333882][ T4247] usb 5-1: config 0 descriptor?? [ 208.339494][ T8565] F2FS-fs (loop2): invalid crc value [ 208.351815][ T8565] F2FS-fs (loop2): Found nat_bits in checkpoint [ 208.423989][ T8565] F2FS-fs (loop2): Start checkpoint disabled! [ 208.485566][ T8565] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 208.573598][ T8598] loop3: detected capacity change from 0 to 64 [ 208.701436][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.737435][ T26] audit: type=1800 audit(2000000016.220:30): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1669" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 208.810376][ T4247] dvb_usb_dtv5100: probe of 5-1:0.0 failed with error -71 [ 208.835782][ T4247] usb 5-1: USB disconnect, device number 18 [ 208.853322][ T144] team0 (unregistering): Port device team_slave_1 removed [ 208.861534][ T3046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.862145][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 208.904007][ T144] team0 (unregistering): Port device team_slave_0 removed [ 208.974247][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.003861][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.353700][ T144] bond0 (unregistering): Released all slaves [ 209.503573][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.740510][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.058592][ T7] lo speed is unknown, defaulting to 1000 [ 210.140483][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.285997][ T8620] loop0: detected capacity change from 0 to 1024 [ 210.367689][ T8620] EXT4-fs (loop0): Ignoring removed orlov option [ 210.379653][ T8620] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 210.465862][ T8552] chnl_net:caif_netlink_parms(): no params data found [ 210.481431][ T8620] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 210.750375][ T8641] input: syz1 as /devices/virtual/input/input11 [ 210.783412][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.791618][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.822597][ T8639] device vlan2 entered promiscuous mode [ 210.828201][ T8639] device bond0 entered promiscuous mode [ 210.834775][ T8639] device bond_slave_0 entered promiscuous mode [ 210.841301][ T8639] device bond_slave_1 entered promiscuous mode [ 210.940274][ T2238] Bluetooth: hci2: command 0x041b tx timeout [ 210.987100][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.056844][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.085468][ T8552] device bridge_slave_0 entered promiscuous mode [ 211.122036][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.155466][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.201283][ T8552] device bridge_slave_1 entered promiscuous mode [ 211.314634][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.359230][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 211.401489][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.418968][ T8672] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1691'. [ 211.467491][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 211.545627][ T8552] team0: Port device team_slave_0 added [ 211.569440][ T8552] team0: Port device team_slave_1 added [ 211.695300][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.729043][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.816613][ T8552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.828712][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.873515][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.897514][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.956845][ T8687] loop2: detected capacity change from 0 to 256 [ 211.990007][ T8687] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.004674][ T8552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.026659][ T8687] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 212.072683][ T8687] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 212.158928][ T8552] device hsr_slave_0 entered promiscuous mode [ 212.203542][ T8552] device hsr_slave_1 entered promiscuous mode [ 212.236886][ T8552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.275674][ T8552] Cannot create hsr debugfs directory [ 212.792849][ T8674] loop3: detected capacity change from 0 to 40427 [ 212.863083][ T8552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.872287][ T4233] net_ratelimit: 2 callbacks suppressed [ 212.872303][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.901665][ T8552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.943073][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1702'. [ 212.976271][ T8552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.009779][ T8674] F2FS-fs (loop3): invalid crc value [ 213.022051][ T8552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.029517][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 213.049421][ T8674] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.297113][ T8674] F2FS-fs (loop3): Start checkpoint disabled! [ 213.357272][ T8552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.374840][ T8674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 213.417281][ T8717] option changes via remount are deprecated (pid=8716 comm=syz.4.1704) [ 213.485934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.521855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.542165][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.583973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.604401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.624327][ T8703] loop2: detected capacity change from 0 to 32768 [ 213.635975][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.643134][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.663532][ T8726] loop4: detected capacity change from 0 to 1024 [ 213.738734][ T8726] EXT4-fs (loop4): Ignoring removed orlov option [ 213.773096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.805864][ T8703] JBD2: Ignoring recovery information on journal [ 213.815655][ T8732] loop0: detected capacity change from 0 to 256 [ 213.870001][ T8726] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 213.883041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.892470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.901123][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.912142][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.919334][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.992787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.038321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.050435][ T8726] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 214.131857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.201816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.229024][ T8703] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 214.285712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.341352][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 214.352078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.392504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.454633][ T8741] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1712'. [ 214.454816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.524089][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 214.547357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.627619][ T8599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.634020][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 214.655407][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.701634][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.773094][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.900144][ T8757] loop0: detected capacity change from 0 to 512 [ 214.943455][ T8754] loop3: detected capacity change from 0 to 8192 [ 214.952708][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.029708][ T8757] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 215.100183][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 215.108460][ T8757] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.137803][ T8754] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 215.150281][ T8754] REISERFS (device loop3): using ordered data mode [ 215.227894][ T8754] reiserfs: using flush barriers [ 215.274144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.294961][ T8757] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1716: bg 0: block 217: padding at end of block bitmap is not set [ 215.312225][ T8754] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.326487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.381502][ T8757] EXT4-fs (loop0): Remounting filesystem read-only [ 215.398639][ T8754] REISERFS (device loop3): checking transaction log (loop3) [ 215.407080][ T8757] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 215.419610][ T8552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.449325][ T8757] EXT4-fs (loop0): Remounting filesystem read-only [ 215.458092][ T8754] REISERFS (device loop3): Using r5 hash to sort names [ 215.481653][ T8754] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 215.597566][ T4272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.902409][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.990836][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.192105][ T8753] loop4: detected capacity change from 0 to 40427 [ 216.298487][ T8753] F2FS-fs (loop4): invalid crc value [ 216.371362][ T8753] F2FS-fs (loop4): Found nat_bits in checkpoint [ 216.381148][ T8599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.399213][ T8599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.483054][ T8810] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 216.539790][ T8599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.548294][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.578505][ T8599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.631406][ T8599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.640457][ T8753] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.647154][ T8599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.702218][ T8552] device veth0_vlan entered promiscuous mode [ 216.752124][ T8552] device veth1_vlan entered promiscuous mode [ 216.870863][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.893711][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.928121][ T8552] device veth0_macvtap entered promiscuous mode [ 216.954790][ T4195] attempt to access beyond end of device [ 216.954790][ T4195] loop4: rw=2049, want=45112, limit=40427 [ 216.973550][ T8552] device veth1_macvtap entered promiscuous mode [ 217.020865][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.041858][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.100500][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.121825][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.143275][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.155825][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.174536][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.250421][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.285782][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.298110][ T8552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.324483][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.334721][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.355393][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.370425][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.381557][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.438618][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.459036][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.476494][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.495893][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.523384][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.572104][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.602067][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.642735][ T8552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.691713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.707272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.740874][ T8552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.749632][ T8552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.803391][ T8552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.820600][ T4245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.845773][ T8552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.062196][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.100960][ T8599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.108829][ T8599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.158805][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.163832][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.190290][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.199394][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.528873][ T8860] QAT: Device 6 not found [ 218.622174][ T4191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.757214][ T8850] loop4: detected capacity change from 0 to 32768 [ 218.883042][ T26] audit: type=1800 audit(2000000026.370:31): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1730" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 218.928179][ T8848] loop2: detected capacity change from 0 to 32768 [ 219.087778][ T8873] loop5: detected capacity change from 0 to 4096 [ 219.101660][ T4417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.208822][ T4200] read_mapping_page failed! [ 219.218768][ T8873] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 219.230262][ T4200] ERROR: (device loop2): txCommit: [ 219.230262][ T4200] [ 219.263643][ T4200] ERROR: (device loop2): remounting filesystem as read-only [ 219.361718][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1748'. [ 219.496023][ T276] ERROR: (device loop2): diFree: numfree > numinos [ 219.496023][ T276] [ 219.595868][ T8873] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 219.799063][ T8552] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22. [ 219.820319][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.843440][ T8552] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 219.981243][ T4417] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 220.140440][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.278595][ T8913] loop0: detected capacity change from 0 to 4096 [ 220.350187][ T4417] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.367771][ T4417] usb 4-1: config 0 has no interface number 0 [ 220.391060][ T8916] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.405434][ T4417] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.463041][ T4417] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.504203][ T4417] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.18 [ 220.541001][ T4417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.576471][ T4417] usb 4-1: config 0 descriptor?? [ 220.759315][ T8921] loop0: detected capacity change from 0 to 512 [ 220.950990][ T8921] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,noquota,errors=remount-ro,data_err=ignore,data_err=ignore,. Quota mode: none. [ 221.062590][ T4417] holtek_mouse 0003:04D9:A070.0010: unknown main item tag 0x0 [ 221.112214][ T8921] fs-verity: sha512 using implementation "sha512-avx2" [ 221.118810][ T4417] holtek_mouse 0003:04D9:A070.0010: unknown main item tag 0x0 [ 221.140139][ T4418] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 221.160290][ T8921] EXT4-fs warning (device loop0): ext4_begin_enable_verity:136: inode #13: comm syz.0.1757: verity is only allowed on extent-based files [ 221.179762][ T4417] holtek_mouse 0003:04D9:A070.0010: unknown main item tag 0x0 [ 221.200029][ T4417] holtek_mouse 0003:04D9:A070.0010: unknown main item tag 0x0 [ 221.207585][ T4417] holtek_mouse 0003:04D9:A070.0010: unknown main item tag 0x0 [ 221.309375][ T4417] holtek_mouse 0003:04D9:A070.0010: hidraw0: USB HID v0.00 Device [HID 04d9:a070] on usb-dummy_hcd.3-1/input1 [ 221.344391][ T4247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.370057][ T4417] usb 4-1: USB disconnect, device number 19 [ 221.380102][ T4418] usb 5-1: Using ep0 maxpacket: 32 [ 221.441754][ T4191] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 221.484884][ T8934] fido_id[8934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 221.506880][ T4418] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 221.527247][ T4418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.652341][ T4418] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 221.664752][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.690677][ T3046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.803350][ T8939] loop0: detected capacity change from 0 to 4096 [ 221.837869][ T4191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.854481][ T8926] udc-core: couldn't find an available UDC or it's busy [ 221.880342][ T4191] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.881741][ T8939] EXT4-fs (loop0): inline encryption not supported [ 221.896840][ T8926] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 221.944970][ T8939] EXT4-fs (loop0): Test dummy encryption mode enabled [ 221.970158][ T4191] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.979720][ T4191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.006235][ T8939] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 222.023727][ T4191] usb 6-1: SerialNumber: syz [ 222.027535][ T8939] System zones: 0-5 [ 222.050393][ T8939] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 222.310902][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.332925][ T4191] usb 6-1: 0:2 : does not exist [ 222.370265][ T4191] usb 6-1: USB disconnect, device number 2 [ 222.380932][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.398547][ T4247] usb 5-1: USB disconnect, device number 19 [ 222.670948][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.197477][ T8959] chnl_net:caif_netlink_parms(): no params data found [ 223.420951][ T4418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.481304][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.488524][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.496738][ T8959] device bridge_slave_0 entered promiscuous mode [ 223.506088][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.513309][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.521996][ T8959] device bridge_slave_1 entered promiscuous mode [ 223.583078][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.639834][ T8959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.714597][ T8959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.825847][ T8959] team0: Port device team_slave_0 added [ 223.829267][ T8995] loop4: detected capacity change from 0 to 64 [ 223.877352][ T8959] team0: Port device team_slave_1 added [ 223.935806][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.999956][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.104235][ T8959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.117022][ T4195] hfs: node 4:3 still has 1 user(s)! [ 224.140625][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.168150][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.194352][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.286079][ T8959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.382835][ T8959] device hsr_slave_0 entered promiscuous mode [ 224.434122][ T8959] device hsr_slave_1 entered promiscuous mode [ 224.465720][ T4197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.480171][ T8959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.498307][ T8959] Cannot create hsr debugfs directory [ 224.720400][ T2238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.768175][ T9019] loop3: detected capacity change from 0 to 2048 [ 224.874112][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.882991][ T2238] Bluetooth: hci4: command 0x0409 tx timeout [ 224.898333][ T9019] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 224.943100][ T8599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.990733][ T4438] udevd[4438]: incorrect nilfs2 checksum on /dev/loop3 [ 225.005348][ T9027] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.268436][ T8959] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.320732][ T8959] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.396645][ T8959] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 225.478409][ T8959] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 225.505852][ T4197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.823033][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1804'. [ 225.945626][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1804'. [ 226.032850][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.094835][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.116054][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.174652][ T8959] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.204272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.249474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.279099][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.286252][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.369928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.409540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.459859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.485442][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.492622][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.535236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.543282][ T4197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.579340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.624249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.668636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.700899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.741586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.769373][ T8959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.780641][ T1201] block nbd0: Possible stuck request ffff888020ff8000: control (read@0,4096B). Runtime 120 seconds [ 226.829920][ T8959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.893097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.941673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.950299][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 226.977852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.000159][ T9090] loop5: detected capacity change from 0 to 256 [ 227.043799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.062764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.082676][ T9090] exfat: Deprecated parameter 'namecase' [ 227.086656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.095903][ T9090] exfat: Deprecated parameter 'namecase' [ 227.158370][ T9090] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 227.352598][ T4278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.452743][ T3046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.475757][ T9106] loop3: detected capacity change from 0 to 64 [ 227.519161][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.528987][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.560312][ T8959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.623397][ T9112] loop5: detected capacity change from 0 to 16 [ 227.633197][ T9106] MINIX-fs: mounting file system with errors, running fsck is recommended [ 227.681791][ T26] audit: type=1800 audit(2000000035.170:32): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1817" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 227.750484][ T154] wlan1: Trigger new scan to find an IBSS to join [ 227.763111][ T9112] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 227.802881][ T9112] cramfs: empty filesystem [ 227.860359][ T3046] ------------[ cut here ]------------ [ 227.866543][ T3046] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 227.877649][ T3046] WARNING: CPU: 1 PID: 3046 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 227.887736][ T3046] Modules linked in: [ 227.891789][ T3046] CPU: 1 PID: 3046 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 227.899364][ T3046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.909510][ T3046] Workqueue: phy12 ieee80211_scan_work [ 227.915079][ T3046] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 227.921406][ T3046] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 8e 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 00 f0 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 227.941101][ T3046] RSP: 0018:ffffc9000da1f488 EFLAGS: 00010246 [ 227.947207][ T3046] RAX: a24595972a946800 RBX: 000000000000000c RCX: ffff88802afad940 [ 227.955269][ T3046] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 227.963310][ T3046] RBP: 0000000000000084 R08: ffffc9000da1efa7 R09: 1ffff92001b43df4 [ 227.971348][ T3046] R10: dffffc0000000000 R11: fffff52001b43df5 R12: ffff88805a52b2a8 [ 227.979354][ T3046] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 227.987402][ T3046] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 227.996406][ T3046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.003161][ T3046] CR2: 0000001b32c20ff8 CR3: 0000000023d39000 CR4: 00000000003506e0 [ 228.011211][ T3046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 228.019222][ T3046] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 228.027274][ T3046] Call Trace: [ 228.030628][ T3046] [ 228.033605][ T3046] rate_control_send_low+0x194/0x790 [ 228.038922][ T3046] ? ieee80211_scan_work+0x4eb/0x1b40 [ 228.044376][ T3046] rate_control_get_rate+0x207/0x5c0 [ 228.049715][ T3046] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 228.055444][ T3046] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 228.061501][ T3046] ? sta_info_hash_lookup+0x53e/0x580 [ 228.066928][ T3046] ? ieee80211_queue_skb+0xbc/0x2060 [ 228.072299][ T3046] invoke_tx_handlers_late+0xaa/0x16a0 [ 228.077807][ T3046] ? ieee80211_tx_h_select_key+0x12c0/0x17f0 [ 228.083859][ T3046] ? sta_info_get+0x220/0x230 [ 228.088587][ T3046] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 228.094490][ T3046] ieee80211_tx+0x2d4/0x460 [ 228.099064][ T3046] ? ieee80211_skb_resize+0x630/0x630 [ 228.104550][ T3046] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 228.110434][ T3046] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 228.116649][ T3046] ieee80211_scan_work+0x4eb/0x1b40 [ 228.121941][ T3046] process_one_work+0x85f/0x1010 [ 228.126963][ T3046] ? worker_detach_from_pool+0x240/0x240 [ 228.132677][ T3046] ? lockdep_hardirqs_off+0x70/0x100 [ 228.138005][ T3046] ? _raw_spin_lock_irq+0xb7/0xf0 [ 228.143119][ T3046] ? _raw_spin_lock_irqsave+0x100/0x100 [ 228.148706][ T3046] ? wq_worker_running+0x97/0x170 [ 228.153811][ T3046] worker_thread+0xaa6/0x1290 [ 228.158542][ T3046] ? lockdep_hardirqs_on+0x94/0x140 [ 228.163832][ T3046] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 228.169785][ T3046] kthread+0x436/0x520 [ 228.173917][ T3046] ? rcu_lock_release+0x20/0x20 [ 228.178800][ T3046] ? kthread_blkcg+0xd0/0xd0 [ 228.183464][ T3046] ret_from_fork+0x1f/0x30 [ 228.187935][ T3046] [ 228.191031][ T3046] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.198345][ T3046] CPU: 1 PID: 3046 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 228.205923][ T3046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.216004][ T3046] Workqueue: phy12 ieee80211_scan_work [ 228.221503][ T3046] Call Trace: [ 228.224825][ T3046] [ 228.227779][ T3046] dump_stack_lvl+0x188/0x250 [ 228.232490][ T3046] ? show_regs_print_info+0x20/0x20 [ 228.237721][ T3046] ? load_image+0x400/0x400 [ 228.242269][ T3046] panic+0x2e5/0x810 [ 228.246231][ T3046] ? bpf_jit_dump+0xd0/0xd0 [ 228.250786][ T3046] ? ret_from_fork+0x1f/0x30 [ 228.255427][ T3046] ? __rate_control_send_low+0x630/0x880 [ 228.261106][ T3046] __warn+0x248/0x2b0 [ 228.265145][ T3046] ? __rate_control_send_low+0x630/0x880 [ 228.270826][ T3046] report_bug+0x1b7/0x2e0 [ 228.275209][ T3046] handle_bug+0x3a/0x70 [ 228.279418][ T3046] exc_invalid_op+0x16/0x40 [ 228.283968][ T3046] asm_exc_invalid_op+0x16/0x20 [ 228.288849][ T3046] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 228.295125][ T3046] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 8e 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 00 f0 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 228.314766][ T3046] RSP: 0018:ffffc9000da1f488 EFLAGS: 00010246 [ 228.320876][ T3046] RAX: a24595972a946800 RBX: 000000000000000c RCX: ffff88802afad940 [ 228.328883][ T3046] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 228.336887][ T3046] RBP: 0000000000000084 R08: ffffc9000da1efa7 R09: 1ffff92001b43df4 [ 228.344907][ T3046] R10: dffffc0000000000 R11: fffff52001b43df5 R12: ffff88805a52b2a8 [ 228.352935][ T3046] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 228.360962][ T3046] ? __rate_control_send_low+0x630/0x880 [ 228.366657][ T3046] rate_control_send_low+0x194/0x790 [ 228.371987][ T3046] ? ieee80211_scan_work+0x4eb/0x1b40 [ 228.377397][ T3046] rate_control_get_rate+0x207/0x5c0 [ 228.382747][ T3046] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 228.388436][ T3046] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 228.394482][ T3046] ? sta_info_hash_lookup+0x53e/0x580 [ 228.399892][ T3046] ? ieee80211_queue_skb+0xbc/0x2060 [ 228.405227][ T3046] invoke_tx_handlers_late+0xaa/0x16a0 [ 228.410752][ T3046] ? ieee80211_tx_h_select_key+0x12c0/0x17f0 [ 228.416774][ T3046] ? sta_info_get+0x220/0x230 [ 228.421501][ T3046] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 228.427358][ T3046] ieee80211_tx+0x2d4/0x460 [ 228.431900][ T3046] ? ieee80211_skb_resize+0x630/0x630 [ 228.437492][ T3046] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 228.443345][ T3046] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 228.449563][ T3046] ieee80211_scan_work+0x4eb/0x1b40 [ 228.454833][ T3046] process_one_work+0x85f/0x1010 [ 228.459818][ T3046] ? worker_detach_from_pool+0x240/0x240 [ 228.465489][ T3046] ? lockdep_hardirqs_off+0x70/0x100 [ 228.470813][ T3046] ? _raw_spin_lock_irq+0xb7/0xf0 [ 228.475856][ T3046] ? _raw_spin_lock_irqsave+0x100/0x100 [ 228.481427][ T3046] ? wq_worker_running+0x97/0x170 [ 228.486486][ T3046] worker_thread+0xaa6/0x1290 [ 228.491222][ T3046] ? lockdep_hardirqs_on+0x94/0x140 [ 228.496465][ T3046] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 228.502383][ T3046] kthread+0x436/0x520 [ 228.506519][ T3046] ? rcu_lock_release+0x20/0x20 [ 228.511387][ T3046] ? kthread_blkcg+0xd0/0xd0 [ 228.515995][ T3046] ret_from_fork+0x1f/0x30 [ 228.520440][ T3046] [ 228.523816][ T3046] Kernel Offset: disabled [ 228.528571][ T3046] Rebooting in 86400 seconds..