last executing test programs: 13.466855093s ago: executing program 0 (id=722): syz_emit_ethernet(0x19, &(0x7f0000000080)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 11.586778879s ago: executing program 0 (id=727): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0xfc3, &(0x7f0000002980)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "615783", 0xf8d, 0x84, 0x1, @private1, @rand_addr=' \x01\x00', {[@fragment={0x2c, 0x0, 0x6, 0x1, 0x0, 0x18, 0x67}, @dstopts={0x2c, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @ra={0x5, 0x2, 0x70b5}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x81, 0x6, [0x2]}}]}], "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"}}}}}, 0x0) 9.003693673s ago: executing program 0 (id=735): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x1, 0xdb9, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40106e8c, &(0x7f0000000280)=0x1) 7.696109992s ago: executing program 1 (id=740): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)) 6.434228155s ago: executing program 1 (id=745): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0, 0x43}, {0x0}, {&(0x7f0000003bc0)=""/4104, 0x1000}, {&(0x7f0000000580)=""/102, 0x66}], 0x4, &(0x7f0000001700)=""/65, 0x45}, 0x1000}], 0x2, 0x2, 0x0) 5.828572135s ago: executing program 3 (id=747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8d0) 5.334838279s ago: executing program 0 (id=748): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x5, 0x8}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x80000000, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 5.292518465s ago: executing program 4 (id=749): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) preadv2(r0, &(0x7f00000015c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x8, 0x3, 0x1a) 4.702671629s ago: executing program 3 (id=750): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x4000) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 4.637373312s ago: executing program 4 (id=751): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@debug}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4.560215973s ago: executing program 2 (id=752): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x400000, 0x1, "3eccd8000000000000000010000000040100"}) 4.477936532s ago: executing program 1 (id=753): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000700)={0x7, 0x8296, &(0x7f00000000c0)=[0x401], &(0x7f0000000040)=[0x2, 0x4, 0x7ff, 0x4], &(0x7f0000000000)=[0x1, 0x21], &(0x7f0000000100)}) 3.939058034s ago: executing program 2 (id=754): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x9) 3.906560613s ago: executing program 3 (id=755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.415598529s ago: executing program 1 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) 2.901595827s ago: executing program 3 (id=757): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0x3, 0x394, &(0x7f0000000700)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2.677485391s ago: executing program 0 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25020000400900010073797a3200400000140002"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) 2.047478506s ago: executing program 2 (id=759): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r0, &(0x7f0000001f40)=""/4123, 0x101b) 2.039151035s ago: executing program 4 (id=760): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0x6, 0x19b, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xdffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendto$inet(r0, 0x0, 0x0, 0x400c810, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 1.497981404s ago: executing program 4 (id=761): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x6, 0x3, 0xa}, 0x3d) 1.442324997s ago: executing program 2 (id=762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x30, r1, 0x211, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.330580069s ago: executing program 1 (id=763): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x8, "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"}) 1.242023904s ago: executing program 0 (id=764): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="20311100000008"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.145057119s ago: executing program 3 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 876.822649ms ago: executing program 2 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 767.152772ms ago: executing program 4 (id=767): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000026000/0x1000)=nil) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) 105.224417ms ago: executing program 2 (id=768): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x3}, &(0x7f00000001c0)=0x80000001, 0x0, 0x3, 0x7, 0x800000000000008, 0x1, 0x9, 0x100000001}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0x4d29}, 0x0, 0x0, 0x9, 0x2, 0x865, 0x4, 0x30, 0x4}}], 0xb0, 0x80}, 0x0) 102.53165ms ago: executing program 3 (id=769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000cb000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 46.554996ms ago: executing program 1 (id=770): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 0s ago: executing program 4 (id=771): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 183.034877][ T5751] cgroup: Unknown subsys name 'net' [ 183.186753][ T5751] cgroup: Unknown subsys name 'cpuset' [ 183.205931][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 189.435062][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 194.014641][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.032958][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.042381][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.057447][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.069153][ T5069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.080981][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.090104][ T5069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.108998][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.117554][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.118503][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.136182][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.146010][ T5069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.162549][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.170699][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.177932][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.189846][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.202383][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.210835][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.229209][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.248204][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.274998][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.299604][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.309167][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.342809][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.367327][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.943027][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 196.172366][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 196.211759][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 196.296433][ T49] Bluetooth: hci0: command tx timeout [ 196.302055][ T49] Bluetooth: hci3: command tx timeout [ 196.307944][ T5780] Bluetooth: hci1: command tx timeout [ 196.338512][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 196.376468][ T49] Bluetooth: hci2: command tx timeout [ 196.456024][ T49] Bluetooth: hci4: command tx timeout [ 196.474314][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 196.919232][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.942977][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.957030][ T5770] bridge_slave_0: entered allmulticast mode [ 196.992302][ T5770] bridge_slave_0: entered promiscuous mode [ 197.012150][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.036385][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.044245][ T5770] bridge_slave_1: entered allmulticast mode [ 197.073556][ T5770] bridge_slave_1: entered promiscuous mode [ 197.338828][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.387585][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.395129][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.404244][ T5771] bridge_slave_0: entered allmulticast mode [ 197.415057][ T5771] bridge_slave_0: entered promiscuous mode [ 197.442975][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.572780][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.581046][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.590437][ T5771] bridge_slave_1: entered allmulticast mode [ 197.601459][ T5771] bridge_slave_1: entered promiscuous mode [ 197.835391][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.846002][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.857589][ T5783] bridge_slave_0: entered allmulticast mode [ 197.868611][ T5783] bridge_slave_0: entered promiscuous mode [ 197.918258][ T5770] team0: Port device team_slave_0 added [ 197.958295][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.966215][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.973704][ T5776] bridge_slave_0: entered allmulticast mode [ 197.982913][ T5776] bridge_slave_0: entered promiscuous mode [ 197.994759][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.003168][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.010810][ T5783] bridge_slave_1: entered allmulticast mode [ 198.019658][ T5783] bridge_slave_1: entered promiscuous mode [ 198.063228][ T5770] team0: Port device team_slave_1 added [ 198.122263][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.130026][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.137755][ T5776] bridge_slave_1: entered allmulticast mode [ 198.146732][ T5776] bridge_slave_1: entered promiscuous mode [ 198.191481][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.228263][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.236768][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.244411][ T5769] bridge_slave_0: entered allmulticast mode [ 198.253927][ T5769] bridge_slave_0: entered promiscuous mode [ 198.327391][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.339493][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.346997][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.373379][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.384969][ T49] Bluetooth: hci3: command tx timeout [ 198.390700][ T5780] Bluetooth: hci1: command tx timeout [ 198.390792][ T5772] Bluetooth: hci0: command tx timeout [ 198.403765][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.411832][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.419672][ T5769] bridge_slave_1: entered allmulticast mode [ 198.428590][ T5769] bridge_slave_1: entered promiscuous mode [ 198.456595][ T5772] Bluetooth: hci2: command tx timeout [ 198.477743][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.498779][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.537231][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.544364][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.571123][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.572064][ T5772] Bluetooth: hci4: command tx timeout [ 198.626435][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.739611][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.785165][ T5771] team0: Port device team_slave_0 added [ 198.805642][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.851047][ T5783] team0: Port device team_slave_0 added [ 198.864277][ T5771] team0: Port device team_slave_1 added [ 198.915128][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.957942][ T5783] team0: Port device team_slave_1 added [ 199.051889][ T5776] team0: Port device team_slave_0 added [ 199.087070][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.094136][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.120485][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.211879][ T5776] team0: Port device team_slave_1 added [ 199.248975][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.256555][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.282939][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.307725][ T5770] hsr_slave_0: entered promiscuous mode [ 199.317056][ T5770] hsr_slave_1: entered promiscuous mode [ 199.333461][ T5769] team0: Port device team_slave_0 added [ 199.348757][ T5769] team0: Port device team_slave_1 added [ 199.381970][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.389153][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.417718][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.507193][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.514363][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.540639][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.608273][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.615433][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.642134][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.726234][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.733413][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.759613][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.773827][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.781263][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.807749][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.862990][ T5771] hsr_slave_0: entered promiscuous mode [ 199.872197][ T5771] hsr_slave_1: entered promiscuous mode [ 199.881007][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 199.887073][ T5771] Cannot create hsr debugfs directory [ 199.912600][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.919890][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.946428][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.096503][ T5783] hsr_slave_0: entered promiscuous mode [ 200.105348][ T5783] hsr_slave_1: entered promiscuous mode [ 200.113613][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 200.119556][ T5783] Cannot create hsr debugfs directory [ 200.435053][ T5769] hsr_slave_0: entered promiscuous mode [ 200.444172][ T5769] hsr_slave_1: entered promiscuous mode [ 200.452599][ T5769] debugfs: 'hsr0' already exists in 'hsr' [ 200.459035][ T5772] Bluetooth: hci3: command tx timeout [ 200.459148][ T49] Bluetooth: hci1: command tx timeout [ 200.464592][ T5772] Bluetooth: hci0: command tx timeout [ 200.476345][ T5769] Cannot create hsr debugfs directory [ 200.531860][ T5776] hsr_slave_0: entered promiscuous mode [ 200.536810][ T5772] Bluetooth: hci2: command tx timeout [ 200.545284][ T5776] hsr_slave_1: entered promiscuous mode [ 200.553521][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 200.559686][ T5776] Cannot create hsr debugfs directory [ 200.616729][ T5772] Bluetooth: hci4: command tx timeout [ 201.750765][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.784755][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.830623][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.853625][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.970734][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.019840][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.042959][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.066222][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.242340][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.277358][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.309662][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.370248][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.537268][ T5772] Bluetooth: hci0: command tx timeout [ 202.537413][ T5780] Bluetooth: hci3: command tx timeout [ 202.550356][ T49] Bluetooth: hci1: command tx timeout [ 202.616448][ T49] Bluetooth: hci2: command tx timeout [ 202.697190][ T49] Bluetooth: hci4: command tx timeout [ 202.705131][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.754952][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.783635][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.820215][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.072719][ T5783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.109014][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.145215][ T5783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.197920][ T5783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.223975][ T5783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.328214][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.433288][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.440903][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.494494][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.518268][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.525646][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.770187][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.854848][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.862535][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.988900][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.996541][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.090840][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.098094][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.248971][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.462176][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.551369][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.650266][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.657932][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.724360][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.732007][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.874247][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.026032][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.033589][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.095499][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.195903][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.203490][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.372975][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.418519][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.552468][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.560081][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.668427][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.676140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.806966][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.375175][ T5770] veth0_vlan: entered promiscuous mode [ 206.687150][ T5770] veth1_vlan: entered promiscuous mode [ 206.908163][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.938898][ T5769] veth0_vlan: entered promiscuous mode [ 207.122095][ T5769] veth1_vlan: entered promiscuous mode [ 207.201911][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.358117][ T5770] veth0_macvtap: entered promiscuous mode [ 207.445537][ T5771] veth0_vlan: entered promiscuous mode [ 207.460870][ T5770] veth1_macvtap: entered promiscuous mode [ 207.648277][ T5771] veth1_vlan: entered promiscuous mode [ 207.723522][ T5769] veth0_macvtap: entered promiscuous mode [ 207.755433][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.821710][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.889175][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.927260][ T5769] veth1_macvtap: entered promiscuous mode [ 208.014273][ T5776] veth0_vlan: entered promiscuous mode [ 208.114624][ T3484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.162764][ T3484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.175489][ T3484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.192561][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.220600][ T5776] veth1_vlan: entered promiscuous mode [ 208.329453][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.344139][ T5771] veth0_macvtap: entered promiscuous mode [ 208.442422][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.485398][ T5771] veth1_macvtap: entered promiscuous mode [ 208.591941][ T3484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.637510][ T3484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.669103][ T3484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.715959][ T3484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.767132][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.862240][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.960674][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.040934][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.051812][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.116133][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.275189][ T5776] veth0_macvtap: entered promiscuous mode [ 209.373792][ T5776] veth1_macvtap: entered promiscuous mode [ 209.740583][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.995136][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.082217][ T5783] veth0_vlan: entered promiscuous mode [ 210.101001][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.117038][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.154777][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.187765][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.300286][ T5783] veth1_vlan: entered promiscuous mode [ 210.744615][ T5783] veth0_macvtap: entered promiscuous mode [ 210.836253][ T5783] veth1_macvtap: entered promiscuous mode [ 211.041437][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.145280][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.284655][ T136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.326302][ T136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.429728][ T136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.478386][ T136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.449182][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.515923][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.769854][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.822167][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.054770][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.073686][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.238967][ T5770] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 215.379248][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.409561][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.792079][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.838693][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.956984][ T5949] loop1: detected capacity change from 0 to 256 [ 216.125500][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.166869][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.232592][ T5949] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 217.479959][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.524039][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.119677][ T5970] capability: warning: `syz.1.8' uses deprecated v2 capabilities in a way that may be insecure [ 218.185188][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.266288][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.952824][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.997525][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.335209][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.402527][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.533500][ T5977] loop1: detected capacity change from 0 to 4096 [ 219.593004][ T5977] ======================================================= [ 219.593004][ T5977] WARNING: The mand mount option has been deprecated and [ 219.593004][ T5977] and is ignored by this kernel. Remove the mand [ 219.593004][ T5977] option from the mount to silence this warning. [ 219.593004][ T5977] ======================================================= [ 219.708556][ T5977] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 220.004596][ T5985] loop3: detected capacity change from 0 to 2048 [ 220.104910][ T5977] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 220.222185][ T5988] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.256213][ T29] audit: type=1800 audit(1771427907.662:2): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 222.253177][ T6011] loop5: detected capacity change from 0 to 7 [ 222.496325][ T5964] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 222.538455][ T5964] loop5: partition table partially beyond EOD, truncated [ 222.597418][ T5964] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 222.783960][ T6011] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 222.796700][ T6011] loop5: partition table partially beyond EOD, truncated [ 222.804930][ T6011] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 222.948459][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 223.008853][ T6017] loop1: detected capacity change from 0 to 512 [ 223.076098][ T6017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.283334][ T6017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.406774][ T6017] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.476990][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 223.757986][ T29] audit: type=1800 audit(1771427911.172:3): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.27" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 224.243007][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.308743][ T6031] loop0: detected capacity change from 0 to 2048 [ 224.337535][ T6033] warning: `syz.2.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 224.419875][ T6031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.436732][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 224.454525][ T6035] loop4: detected capacity change from 0 to 256 [ 224.499685][ T6035] exfat: Deprecated parameter 'utf8' [ 224.505239][ T6035] exfat: Deprecated parameter 'utf8' [ 224.627190][ T6035] exfat: Deprecated parameter 'utf8' [ 224.775960][ T6035] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 226.313948][ T6059] loop1: detected capacity change from 0 to 256 [ 226.432008][ T6059] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 226.632352][ T6059] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 226.756596][ T6063] gretap0: entered promiscuous mode [ 226.786285][ T6063] vlan2: entered promiscuous mode [ 227.145557][ T6061] loop3: detected capacity change from 0 to 4096 [ 227.171183][ T6061] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 227.455797][ T6061] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 227.542118][ T6068] loop1: detected capacity change from 0 to 64 [ 227.646707][ T6069] loop2: detected capacity change from 0 to 256 [ 228.041373][ T6069] FAT-fs (loop2): Directory bread(block 64) failed [ 228.041512][ T6069] FAT-fs (loop2): Directory bread(block 65) failed [ 228.065328][ T6069] FAT-fs (loop2): Directory bread(block 66) failed [ 228.065479][ T6069] FAT-fs (loop2): Directory bread(block 67) failed [ 228.066441][ T6069] FAT-fs (loop2): Directory bread(block 68) failed [ 228.066559][ T6069] FAT-fs (loop2): Directory bread(block 69) failed [ 228.066807][ T6069] FAT-fs (loop2): Directory bread(block 70) failed [ 228.066916][ T6069] FAT-fs (loop2): Directory bread(block 71) failed [ 228.067177][ T6069] FAT-fs (loop2): Directory bread(block 72) failed [ 228.067283][ T6069] FAT-fs (loop2): Directory bread(block 73) failed [ 228.216282][ T49] Bluetooth: hci4: command tx timeout [ 229.351308][ T6077] loop3: detected capacity change from 0 to 4096 [ 229.397101][ T6077] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 229.786846][ T6087] autofs: Bad value for 'uid' [ 229.786976][ T6087] autofs: Bad value for 'uid' [ 230.359107][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'. [ 230.874726][ T6094] loop3: detected capacity change from 0 to 256 [ 231.091772][ T6094] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 231.192939][ T6094] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 231.285418][ T6092] loop1: detected capacity change from 0 to 4096 [ 231.390937][ T6092] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 231.643088][ T6102] loop4: detected capacity change from 0 to 128 [ 231.723069][ T6102] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 231.792804][ T6102] hpfs: filesystem error: improperly stopped [ 231.806154][ T6102] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 231.866237][ T6102] hpfs: You really don't want any checks? You are crazy... [ 231.874084][ T6102] hpfs: hpfs_map_sector(): read error [ 231.951858][ T6102] hpfs: code page support is disabled [ 231.986150][ T6102] hpfs: hpfs_map_4sectors(): unaligned read [ 231.986543][ T6102] hpfs: hpfs_map_4sectors(): unaligned read [ 231.986611][ T6102] hpfs: filesystem error: unable to find root dir [ 232.068502][ T29] audit: type=1326 audit(1771427919.472:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1739c629 code=0x7ffc0000 [ 232.068750][ T29] audit: type=1326 audit(1771427919.472:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1739c629 code=0x7ffc0000 [ 232.084589][ T29] audit: type=1326 audit(1771427919.492:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f3e1739c629 code=0x7ffc0000 [ 232.087763][ T29] audit: type=1326 audit(1771427919.492:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1739c629 code=0x7ffc0000 [ 232.901796][ T6113] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 232.931067][ T6113] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 234.722917][ T6128] loop0: detected capacity change from 0 to 1024 [ 234.832645][ T6128] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 234.833195][ T6128] System zones: 0-1, 3-8 [ 234.879994][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 234.880829][ T6128] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.385196][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 235.629225][ T6143] loop2: detected capacity change from 0 to 128 [ 235.697518][ T6143] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 235.697749][ T6143] hpfs: filesystem error: improperly stopped [ 235.697843][ T6143] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 235.697943][ T6143] hpfs: You really don't want any checks? You are crazy... [ 235.698645][ T6143] hpfs: hpfs_map_sector(): read error [ 235.698713][ T6143] hpfs: code page support is disabled [ 235.726034][ T6143] hpfs: hpfs_map_4sectors(): unaligned read [ 235.726340][ T6143] hpfs: hpfs_map_4sectors(): unaligned read [ 235.726403][ T6143] hpfs: filesystem error: unable to find root dir [ 235.732126][ T6147] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 236.433867][ T6151] process 'syz.4.83' launched '/dev/fd/3' with NULL argv: empty string added [ 237.182622][ T6159] loop4: detected capacity change from 0 to 512 [ 237.253576][ T6159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.368148][ T6159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.382559][ T6159] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.661540][ T6167] loop3: detected capacity change from 0 to 1024 [ 237.925763][ T29] audit: type=1800 audit(1771427925.332:8): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.87" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 238.043753][ T29] audit: type=1400 audit(1771427925.452:9): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A2F2F0906 pid=6170 comm="syz.1.91" [ 238.557034][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.985472][ T6181] loop3: detected capacity change from 0 to 512 [ 239.063058][ T6182] loop0: detected capacity change from 0 to 512 [ 239.170170][ T6188] loop2: detected capacity change from 0 to 512 [ 239.173415][ T6181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.239436][ T6182] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 239.277674][ T6182] EXT4-fs (loop0): 1 truncate cleaned up [ 239.303262][ T6182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.423961][ T6188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.539776][ T6188] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.644830][ T49] Bluetooth: hci3: unexpected cc 0x203c length: 9 > 1 [ 239.991448][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.058396][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.191715][ T6196] netlink: 56 bytes leftover after parsing attributes in process `syz.4.100'. [ 240.328366][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.116100][ T6205] loop1: detected capacity change from 0 to 1024 [ 241.369300][ T6205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 241.418306][ T6205] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.495173][ T6202] loop2: detected capacity change from 0 to 4096 [ 241.947658][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.096440][ T6202] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 242.145910][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 242.357269][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 242.429764][ T5825] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 242.472203][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.494771][ T6220] tmpfs: Cannot change global quota limit on remount [ 242.511412][ T5825] usb 5-1: config 0 descriptor?? [ 242.528506][ T6218] loop3: detected capacity change from 0 to 1024 [ 243.059428][ T29] audit: type=1800 audit(1771427930.472:10): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.109" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=2 res=0 errno=0 [ 243.119372][ T6225] hfsplus: bad catalog folder entry [ 243.208279][ T5825] samsung 0003:0419:0600.0001: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 243.363042][ T5825] usb 5-1: USB disconnect, device number 2 [ 244.469239][ T6231] loop1: detected capacity change from 0 to 4096 [ 244.491226][ T6229] fido_id[6229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 244.884818][ T6231] ntfs3(loop1): ino=19, mi_enum_attr [ 244.924390][ T6231] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 244.965276][ T6231] ntfs3(loop1): ino=19, mi_enum_attr [ 245.000358][ T6231] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 245.320141][ T6247] loop4: detected capacity change from 0 to 64 [ 245.618162][ T6249] team0: Device ip6gre1 is of different type [ 245.825491][ T6253] loop2: detected capacity change from 0 to 64 [ 245.854999][ T6251] loop3: detected capacity change from 0 to 512 [ 245.981259][ T6251] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 246.017653][ T6251] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 246.035281][ T6251] EXT4-fs (loop3): orphan cleanup on readonly fs [ 246.059623][ T6251] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.123: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 246.137107][ T6256] lo speed is unknown, defaulting to 1000 [ 246.143293][ T6256] lo speed is unknown, defaulting to 1000 [ 246.156600][ T6251] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 246.160441][ T6251] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.123: couldn't read orphan inode 13 (err -117) [ 246.170072][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 246.170170][ C1] EXT4-fs (loop3): last error at time 1771427933: ext4_ext_check_inode:521: inode 13 [ 246.257115][ T6256] lo speed is unknown, defaulting to 1000 [ 246.341529][ T6251] loop3: lost filesystem error report for type 5 error -117 [ 246.356851][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.436243][ T6256] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 246.593921][ T6256] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 246.636140][ T6251] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (24564!=0) [ 246.951681][ T6256] lo speed is unknown, defaulting to 1000 [ 247.040153][ T6256] lo speed is unknown, defaulting to 1000 [ 247.104369][ T6256] lo speed is unknown, defaulting to 1000 [ 247.149043][ T6256] lo speed is unknown, defaulting to 1000 [ 247.158626][ T6262] loop2: detected capacity change from 0 to 736 [ 247.189694][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.266911][ T6256] lo speed is unknown, defaulting to 1000 [ 249.409146][ T6289] loop3: detected capacity change from 0 to 8 [ 249.737264][ T6281] loop1: detected capacity change from 0 to 32768 [ 249.747422][ T6281] xfs: Deprecated parameter 'noattr2' [ 249.756055][ T6281] XFS: noattr2 mount option is deprecated. [ 249.863475][ T6281] XFS (loop1): Mounting V5 filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb in no-recovery mode. Filesystem will be inconsistent. [ 249.949311][ T794] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 250.001420][ T6281] XFS (loop1): please mount without quota. [ 250.593635][ T6305] loop3: detected capacity change from 0 to 512 [ 250.636773][ T6305] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 250.685943][ T6305] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.732556][ T6307] loop0: detected capacity change from 0 to 164 [ 250.813887][ T6307] rock: directory entry would overflow storage [ 250.826722][ T6305] EXT4-fs (loop3): 1 truncate cleaned up [ 250.835000][ T6305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.876118][ T6307] rock: sig=0x66, size=4, remaining=3 [ 250.978930][ T6307] rock: directory entry would overflow storage [ 251.011271][ T6307] rock: sig=0x66, size=4, remaining=3 [ 251.291203][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.495634][ T6320] loop3: detected capacity change from 0 to 4096 [ 252.600073][ T6320] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 252.668138][ T6320] ntfs3(loop3): ino=3, mi_enum_attr [ 254.080408][ T6348] loop4: detected capacity change from 0 to 512 [ 254.357890][ T6348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.436798][ T6348] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.574111][ T6348] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 254.820612][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 254.904797][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.013888][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.028034][ T6368] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.168'. [ 255.067382][ T5825] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 255.109376][ T6367] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.168'. [ 255.167260][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.239876][ T5825] usb 2-1: config 0 descriptor?? [ 255.753383][ T5825] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 255.883737][ T794] usb 2-1: USB disconnect, device number 2 [ 256.297297][ T6382] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 256.875640][ T6383] fido_id[6383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 257.137778][ T6394] loop0: detected capacity change from 0 to 256 [ 257.237689][ T6398] loop2: detected capacity change from 0 to 512 [ 257.283041][ T6398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 257.404525][ T6398] EXT4-fs (loop2): 1 truncate cleaned up [ 257.481766][ T6398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.613238][ T6394] FAT-fs (loop0): Directory bread(block 64) failed [ 257.666998][ T6394] FAT-fs (loop0): Directory bread(block 65) failed [ 257.673950][ T6394] FAT-fs (loop0): Directory bread(block 66) failed [ 257.718893][ T6394] FAT-fs (loop0): Directory bread(block 67) failed [ 257.787484][ T6394] FAT-fs (loop0): Directory bread(block 68) failed [ 257.837197][ T6394] FAT-fs (loop0): Directory bread(block 69) failed [ 257.886819][ T6394] FAT-fs (loop0): Directory bread(block 70) failed [ 257.916225][ T6394] FAT-fs (loop0): Directory bread(block 71) failed [ 257.976611][ T6394] FAT-fs (loop0): Directory bread(block 72) failed [ 257.983400][ T6394] FAT-fs (loop0): Directory bread(block 73) failed [ 258.068841][ T6409] netlink: 96 bytes leftover after parsing attributes in process `syz.3.182'. [ 258.282551][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.242305][ T6423] loop0: detected capacity change from 0 to 22 [ 259.967958][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 260.047619][ T6438] netlink: 'syz.0.195': attribute type 2 has an invalid length. [ 260.865205][ T6444] loop4: detected capacity change from 0 to 1024 [ 261.017713][ T29] audit: type=1326 audit(1771427948.422:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce7f9c629 code=0x7ffc0000 [ 261.150165][ T29] audit: type=1326 audit(1771427948.462:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce7f9c629 code=0x7ffc0000 [ 261.278973][ T29] audit: type=1326 audit(1771427948.522:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ce7f9c629 code=0x7ffc0000 [ 261.441001][ T29] audit: type=1326 audit(1771427948.522:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce7f9c629 code=0x7ffc0000 [ 261.573965][ T29] audit: type=1326 audit(1771427948.522:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce7f9c629 code=0x7ffc0000 [ 261.700264][ T29] audit: type=1326 audit(1771427948.552:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f6ce7f9c629 code=0x7ffc0000 [ 261.826234][ T29] audit: type=1326 audit(1771427948.552:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6449 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce7f9c629 code=0x7ffc0000 [ 262.170104][ T6461] loop2: detected capacity change from 0 to 1024 [ 262.329216][ T6461] hfsplus: b-tree write err: -5, ino 2 [ 262.690333][ T2118] hfsplus: b-tree write err: -5, ino 25 [ 262.739268][ T2118] hfsplus: b-tree write err: -5, ino 4 [ 262.779340][ T2118] hfsplus: b-tree write err: -5, ino 2 [ 262.807580][ T2118] hfsplus: b-tree write err: -5, ino 26 [ 263.215483][ T6474] loop0: detected capacity change from 0 to 164 [ 263.334104][ T6474] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 264.415242][ T6487] loop4: detected capacity change from 0 to 22 [ 264.491082][ T6487] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 264.995316][ T6494] loop0: detected capacity change from 0 to 256 [ 265.005338][ T6494] exfat: Deprecated parameter 'utf8' [ 265.017104][ T6494] exfat: Unexpected value for 'utf8' [ 265.514333][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.523890][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.690800][ T5825] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 265.714212][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 265.753719][ T6505] netlink: 60 bytes leftover after parsing attributes in process `syz.2.228'. [ 265.856645][ T6505] netlink: 60 bytes leftover after parsing attributes in process `syz.2.228'. [ 265.887852][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 265.923144][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 266.029399][ T5825] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 266.092005][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.176424][ T5825] usb 4-1: config 0 descriptor?? [ 266.729564][ T6512] loop0: detected capacity change from 0 to 128 [ 266.916752][ T794] usb 4-1: USB disconnect, device number 2 [ 268.335994][ T5825] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 268.534724][ T5825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.554975][ T5825] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 268.588853][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.656466][ T5825] usb 4-1: config 0 descriptor?? [ 269.191289][ T5825] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 269.300087][ T5825] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 269.346138][ T6536] loop1: detected capacity change from 0 to 4096 [ 269.354650][ T5825] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 269.396610][ C0] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71 [ 269.472281][ T5825] usb 4-1: USB disconnect, device number 3 [ 269.665347][ T6536] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 269.707184][ T6536] ntfs3(loop1): ino=1a, mi_enum_attr [ 269.746533][ T6536] ntfs3(loop1): ino=1a, mi_enum_attr [ 269.784097][ T6536] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 270.063893][ T6546] fido_id[6546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 271.069551][ T6565] ipvlan2: entered promiscuous mode [ 272.502066][ T5825] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 272.746116][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 272.762985][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.823452][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 272.882623][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 272.927944][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.989678][ T5825] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 273.035482][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.069257][ T6594] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 273.076326][ T5825] usb 3-1: Product: syz [ 273.130586][ T5825] usb 3-1: Manufacturer: syz [ 273.135513][ T5825] usb 3-1: SerialNumber: syz [ 273.154716][ T5825] usb 3-1: config 0 descriptor?? [ 273.179976][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 273.207649][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 273.260422][ T5825] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 273.391976][ T5830] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 273.432495][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.481977][ T5830] usb 2-1: config 0 descriptor?? [ 273.552556][ T6599] macvlan0: entered promiscuous mode [ 273.926078][ T5825] rc_core: IR keymap rc-imon-pad not found [ 273.932213][ T5825] Registered IR keymap rc-empty [ 273.951482][ T5825] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 273.962890][ T5825] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 273.976298][ T5830] ath6kl: Unsupported hardware version: 0x8 [ 273.999536][ T5830] ath6kl: Failed to init ath6kl core: -22 [ 274.065229][ T5830] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 274.089702][ T5825] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 274.169056][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 274.192247][ T5825] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 274.217038][ T5830] usb 2-1: USB disconnect, device number 3 [ 274.309051][ T5825] imon 3-1:0.0: iMON device (15c2:003b, intf0) on usb<3:3> initialized [ 274.357988][ T5825] usb 3-1: USB disconnect, device number 3 [ 274.407475][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 274.431550][ T10] usb 1-1: config 0 has no interface number 0 [ 274.469333][ T6605] loop4: detected capacity change from 0 to 512 [ 274.480937][ T10] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 274.509440][ T6605] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.569913][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 274.611396][ T6608] netlink: 10 bytes leftover after parsing attributes in process `syz.3.270'. [ 274.653486][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 274.785490][ T6605] EXT4-fs (loop4): 1 orphan inode deleted [ 274.793911][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 274.837100][ T6605] EXT4-fs (loop4): 1 truncate cleaned up [ 274.849760][ T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 274.849898][ T10] usb 1-1: Product: syz [ 274.850001][ T10] usb 1-1: SerialNumber: syz [ 274.883130][ T10] usb 1-1: config 0 descriptor?? [ 274.919237][ T6605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.020533][ T10] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 275.087922][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input7 [ 275.251147][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.259011][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.266930][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.274463][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.282182][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.289903][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.298147][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.305718][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.317438][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.325053][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.377064][ T10] usb 1-1: USB disconnect, device number 2 [ 275.377339][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 275.431195][ T10] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 275.697414][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.885994][ T5825] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 276.095914][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 276.118336][ T5825] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 276.153568][ T6620] loop4: detected capacity change from 0 to 164 [ 276.165836][ T5825] usb 3-1: config 0 has no interface number 0 [ 276.174526][ T5825] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.251761][ T5825] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.342800][ T5825] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 276.396147][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.412328][ T6620] rock: directory entry would overflow storage [ 276.432191][ T5825] usb 3-1: config 0 descriptor?? [ 276.442897][ T6620] rock: sig=0x4d4e, size=5, remaining=4 [ 276.475552][ T6620] isofs: isofs_export_get_parent(): child directory not normalized! [ 277.224563][ T5825] usb 3-1: USB disconnect, device number 4 [ 277.284552][ T794] IPVS: starting estimator thread 0... [ 277.426257][ T6631] IPVS: using max 192 ests per chain, 9600 per kthread [ 277.812139][ T29] audit: type=1326 audit(1771427965.222:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c2d9c629 code=0x0 [ 278.486894][ T6640] loop0: detected capacity change from 0 to 2048 [ 278.540726][ T6645] netlink: 'syz.2.285': attribute type 12 has an invalid length. [ 278.586763][ T6645] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.285'. [ 278.648778][ T6640] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.723485][ T6656] loop0: detected capacity change from 0 to 1024 [ 279.918807][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.284579][ T6665] loop2: detected capacity change from 0 to 1024 [ 280.399907][ T6664] loop1: detected capacity change from 0 to 1024 [ 280.495490][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.636403][ T29] audit: type=1800 audit(1771427968.022:19): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.292" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=2 res=0 errno=0 [ 280.705454][ T6664] hfsplus: bad catalog folder entry [ 281.035333][ T6671] netlink: 'syz.4.298': attribute type 10 has an invalid length. [ 281.639488][ T6679] use of bytesused == 0 is deprecated and will be removed in the future, [ 281.745955][ T6679] use the actual size instead. [ 282.235228][ T6687] loop3: detected capacity change from 0 to 1024 [ 282.720433][ T6695] loop2: detected capacity change from 0 to 512 [ 282.792326][ T6693] loop1: detected capacity change from 0 to 1024 [ 282.945832][ T6695] EXT4-fs error (device loop2): __ext4_iget:5378: inode #11: block 1: comm syz.2.309: invalid block [ 283.030140][ T6695] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 283.045731][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 283.061751][ C1] EXT4-fs (loop2): initial error at time 1771427970: __ext4_iget:5378: inode 11: block 1 [ 283.072095][ C1] EXT4-fs (loop2): last error at time 1771427970: __ext4_iget:5378: inode 11: block 1 [ 283.101764][ T6695] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.309: couldn't read orphan inode 11 (err -117) [ 283.169687][ T6695] loop2: lost filesystem error report for type 5 error -117 [ 283.173706][ T6695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.400158][ T81] hfsplus: b-tree write err: -5, ino 25 [ 283.410757][ T81] hfsplus: b-tree write err: -5, ino 4 [ 283.448284][ T6699] loop0: detected capacity change from 0 to 4096 [ 283.456628][ T81] hfsplus: b-tree write err: -5, ino 2 [ 283.712475][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.321151][ T6715] loop2: detected capacity change from 0 to 4096 [ 285.332787][ T6722] loop3: detected capacity change from 0 to 64 [ 285.499760][ T6724] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.624065][ T6715] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 285.699667][ T6715] Remounting filesystem read-only [ 286.193160][ T5776] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 287.516081][ T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 287.696300][ T5825] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 287.733121][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.795912][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.840139][ T794] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 287.876326][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 287.898600][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.936299][ T5825] usb 2-1: config 0 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.938742][ T794] usb 1-1: config 0 descriptor?? [ 288.015465][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.022996][ T5825] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 288.043431][ T6753] Bluetooth: MGMT ver 1.23 [ 288.085975][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.149694][ T5825] usb 2-1: config 0 descriptor?? [ 288.219096][ T5829] IPVS: starting estimator thread 0... [ 288.317016][ T6757] IPVS: using max 192 ests per chain, 9600 per kthread [ 288.743374][ T6760] netlink: 44 bytes leftover after parsing attributes in process `syz.2.339'. [ 288.754526][ T5825] samsung 0003:0419:0001.0007: unbalanced delimiter at end of report description [ 288.773882][ T10] usb 1-1: USB disconnect, device number 3 [ 288.817609][ T6760] netlink: 13 bytes leftover after parsing attributes in process `syz.2.339'. [ 288.839430][ T5825] samsung 0003:0419:0001.0007: parse failed [ 288.859034][ T5825] samsung 0003:0419:0001.0007: probe with driver samsung failed with error -22 [ 288.993452][ T5825] usb 2-1: USB disconnect, device number 4 [ 290.150622][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 290.431482][ T6783] netlink: 43 bytes leftover after parsing attributes in process `syz.4.350'. [ 290.478762][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.350'. [ 290.925325][ T6792] loop2: detected capacity change from 0 to 512 [ 290.961163][ T6792] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 291.059475][ T6792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 291.114158][ T6792] System zones: 1-12 [ 291.156893][ T6792] EXT4-fs (loop2): orphan cleanup on readonly fs [ 291.214066][ T6792] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.353: invalid indirect mapped block 2 (level 2) [ 291.296147][ T6792] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 291.303702][ T6792] EXT4-fs (loop2): Remounting filesystem read-only [ 291.313265][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 291.313352][ C1] EXT4-fs (loop2): initial error at time 1771427978: ext4_free_branches:1023: inode 11 [ 291.313543][ C1] EXT4-fs (loop2): last error at time 1771427978: ext4_free_branches:1023: inode 11 [ 291.426468][ T6792] EXT4-fs (loop2): 1 truncate cleaned up [ 291.502005][ T6792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 292.038596][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 292.900354][ T6816] loop4: detected capacity change from 0 to 512 [ 293.013438][ T6816] EXT4-fs (loop4): 1 truncate cleaned up [ 293.028709][ T6816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.403221][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.427785][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 294.074893][ T6841] loop0: detected capacity change from 0 to 512 [ 294.127872][ T6841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.271938][ T6841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.320911][ T6841] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.587507][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.779459][ T6852] loop3: detected capacity change from 0 to 512 [ 294.800287][ T6852] EXT4-fs: Ignoring removed oldalloc option [ 294.995011][ T6852] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.377: Parent and EA inode have the same ino 15 [ 295.021572][ T6858] loop0: detected capacity change from 0 to 256 [ 295.069298][ T6859] loop1: detected capacity change from 0 to 256 [ 295.101259][ T6852] loop3: lost filesystem error report for type 5 error -117 [ 295.105803][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 295.119997][ C0] EXT4-fs (loop3): initial error at time 1771427982: ext4_xattr_inode_iget:437 [ 295.129298][ C0] EXT4-fs (loop3): last error at time 1771427982: ext4_xattr_inode_iget:437 [ 295.148660][ T6859] exfat: Deprecated parameter 'utf8' [ 295.156708][ T6852] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.377: Parent and EA inode have the same ino 15 [ 295.176676][ T6852] loop3: lost filesystem error report for type 5 error -117 [ 295.192483][ T6859] exfat: Deprecated parameter 'utf8' [ 295.211867][ T6852] EXT4-fs (loop3): 1 orphan inode deleted [ 295.249491][ T6852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.257409][ T6859] exfat: Deprecated parameter 'utf8' [ 295.380252][ T6859] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 295.413681][ T6852] EXT4-fs error (device loop3): ext4_rename:3810: inode #15: comm syz.3.377: target of rename is already freed [ 295.464292][ T6861] loop2: detected capacity change from 0 to 128 [ 295.573030][ T6863] loop4: detected capacity change from 0 to 1024 [ 295.592575][ T6858] FAT-fs (loop0): Directory bread(block 64) failed [ 295.608627][ T6861] smb3: Unexpected value for 'acl' [ 295.642866][ T6858] FAT-fs (loop0): Directory bread(block 65) failed [ 295.653518][ T6858] FAT-fs (loop0): Directory bread(block 66) failed [ 295.662258][ T6858] FAT-fs (loop0): Directory bread(block 67) failed [ 295.670673][ T6858] FAT-fs (loop0): Directory bread(block 68) failed [ 295.678972][ T6858] FAT-fs (loop0): Directory bread(block 69) failed [ 295.687607][ T6858] FAT-fs (loop0): Directory bread(block 70) failed [ 295.690931][ T6863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 295.695562][ T6858] FAT-fs (loop0): Directory bread(block 71) failed [ 295.715301][ T6858] FAT-fs (loop0): Directory bread(block 72) failed [ 295.723089][ T6858] FAT-fs (loop0): Directory bread(block 73) failed [ 295.774808][ T6863] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.853091][ T6863] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.382: lblock 3 mapped to illegal pblock 3 (length 1) [ 295.912448][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.925323][ T6863] EXT4-fs (loop4): Remounting filesystem read-only [ 296.399449][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 296.468279][ T6871] loop1: detected capacity change from 0 to 512 [ 296.475981][ T5829] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 296.506164][ T6871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 296.606317][ T6871] EXT4-fs (loop1): 1 truncate cleaned up [ 296.638359][ T6871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.682084][ T5829] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 296.713312][ T5829] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 296.735850][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.744119][ T5829] usb 3-1: Product: syz [ 296.760563][ T5829] usb 3-1: Manufacturer: syz [ 296.765380][ T5829] usb 3-1: SerialNumber: syz [ 297.051763][ T5829] usb 3-1: selecting invalid altsetting 1 [ 297.280070][ T5829] LME2510(C): Firmware Status: 06 03 e3 27 31 ad [ 297.280551][ T5829] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 297.481861][ T794] usb 3-1: USB disconnect, device number 5 [ 297.655211][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.963901][ T6885] loop4: detected capacity change from 0 to 512 [ 298.036055][ T6885] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 298.140838][ T6885] EXT4-fs (loop4): 1 truncate cleaned up [ 298.208886][ T6885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.309282][ T29] audit: type=1800 audit(1771427985.722:20): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.390" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 298.926553][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.457138][ T6905] openvswitch: netlink: Actions may not be safe on all matching packets [ 299.625943][ T5825] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 299.815262][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 299.935150][ T5825] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 299.976082][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.008657][ T5825] usb 5-1: Product: syz [ 300.026124][ T5825] usb 5-1: Manufacturer: syz [ 300.051313][ T5825] usb 5-1: SerialNumber: syz [ 300.145199][ T5825] usb 5-1: config 0 descriptor?? [ 300.224239][ T5825] gspca_main: se401-2.14.0 probing 047d:5003 [ 300.687914][ T5825] gspca_se401: Wrong descriptor type [ 300.909514][ T794] usb 5-1: USB disconnect, device number 3 [ 301.154134][ T6922] loop3: detected capacity change from 0 to 512 [ 301.222293][ T6922] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 301.234101][ T6923] loop2: detected capacity change from 0 to 512 [ 301.256730][ T6922] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.336775][ T6923] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 301.396234][ T6923] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 301.491767][ T6923] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.406: Corrupt directory, running e2fsck is recommended [ 301.602431][ T6923] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 301.664691][ T6923] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.406: corrupted in-inode xattr: e_name out of bounds [ 301.746343][ T6923] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 301.755803][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 301.771926][ C1] EXT4-fs (loop2): initial error at time 1771427989: ext4_iget_extra_inode:5025: inode 15 [ 301.782342][ C1] EXT4-fs (loop2): last error at time 1771427989: ext4_iget_extra_inode:5025: inode 15 [ 301.843912][ T6923] EXT4-fs (loop2): Remounting filesystem read-only [ 301.924777][ T6923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.170138][ T6923] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #2: comm syz.2.406: directory missing '.' [ 302.596691][ T5825] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 302.723893][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.792656][ T6938] loop4: detected capacity change from 0 to 16 [ 302.806561][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 302.837635][ T5825] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 302.867292][ T5825] usb 2-1: config 0 has no interface number 0 [ 302.884409][ T5825] usb 2-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30 [ 302.915895][ T5825] usb 2-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.947296][ T6938] erofs (device loop4): mounted with root inode @ nid 36. [ 303.008285][ T5825] usb 2-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.064664][ T5825] usb 2-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 303.134230][ T5825] usb 2-1: config 0 interface 30 has no altsetting 0 [ 303.176423][ T5825] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 303.223960][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.282804][ T5825] usb 2-1: config 0 descriptor?? [ 303.356283][ T794] IPVS: starting estimator thread 0... [ 303.363680][ T6943] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 303.477819][ T6944] IPVS: using max 192 ests per chain, 9600 per kthread [ 303.781790][ T5825] uclogic 0003:256C:006E.0008: interface is invalid, ignoring [ 303.956037][ T5825] usb 2-1: USB disconnect, device number 5 [ 304.148878][ T6951] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 304.873801][ T6957] loop3: detected capacity change from 0 to 16 [ 304.931570][ T6949] loop0: detected capacity change from 0 to 32768 [ 304.941800][ T6949] xfs: Deprecated parameter 'attr2' [ 304.955856][ T6949] XFS: attr2 mount option is deprecated. [ 304.967783][ T6957] erofs (device loop3): mounted with root inode @ nid 36. [ 305.016550][ T6949] XFS (loop0): sunit and swidth options incompatible with the noalign option [ 305.591272][ T6961] loop4: detected capacity change from 0 to 512 [ 305.650308][ T6961] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 305.723272][ T6961] EXT4-fs (loop4): invalid journal inode [ 305.743288][ T6961] EXT4-fs (loop4): can't get journal size [ 305.843057][ T6961] EXT4-fs (loop4): 1 truncate cleaned up [ 305.851301][ T6961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.248631][ T6967] loop0: detected capacity change from 0 to 1024 [ 306.337889][ T6967] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.587761][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.610692][ T6967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 306.676938][ T6967] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.730269][ T6965] loop2: detected capacity change from 0 to 4096 [ 306.816261][ T6965] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 307.255611][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 307.323473][ T6965] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 307.844342][ T6983] loop1: detected capacity change from 0 to 128 [ 307.892417][ T6983] EXT4-fs: Ignoring removed nobh option [ 308.038836][ T6983] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.160464][ T6983] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.725526][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.000935][ T7009] loop3: detected capacity change from 0 to 128 [ 310.117369][ T7009] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 310.238076][ T7009] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 310.504509][ T7011] loop1: detected capacity change from 0 to 256 [ 310.746500][ T81] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 311.009493][ T7011] FAT-fs (loop1): Directory bread(block 64) failed [ 311.040540][ T7011] FAT-fs (loop1): Directory bread(block 65) failed [ 311.066316][ T7011] FAT-fs (loop1): Directory bread(block 66) failed [ 311.123054][ T7011] FAT-fs (loop1): Directory bread(block 67) failed [ 311.146286][ T7011] FAT-fs (loop1): Directory bread(block 68) failed [ 311.155346][ T7011] FAT-fs (loop1): Directory bread(block 69) failed [ 311.177073][ T7011] FAT-fs (loop1): Directory bread(block 70) failed [ 311.183854][ T7011] FAT-fs (loop1): Directory bread(block 71) failed [ 311.257603][ T7011] FAT-fs (loop1): Directory bread(block 72) failed [ 311.264354][ T7011] FAT-fs (loop1): Directory bread(block 73) failed [ 311.638532][ T7025] pim6reg: entered allmulticast mode [ 311.653328][ T7025] pim6reg: left allmulticast mode [ 311.912609][ T7030] loop4: detected capacity change from 0 to 64 [ 313.168882][ T7047] netlink: 224 bytes leftover after parsing attributes in process `syz.2.461'. [ 313.237077][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 313.606930][ T7054] netlink: 'syz.4.464': attribute type 3 has an invalid length. [ 313.995452][ T794] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 314.040210][ T794] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 314.833441][ T7068] fido_id[7068]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 314.884787][ T7073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.471'. [ 314.940312][ T794] IPVS: starting estimator thread 0... [ 315.090554][ T7075] IPVS: using max 192 ests per chain, 9600 per kthread [ 315.784534][ T7082] loop2: detected capacity change from 0 to 256 [ 316.122939][ T7082] FAT-fs (loop2): Directory bread(block 64) failed [ 316.191029][ T7082] FAT-fs (loop2): Directory bread(block 65) failed [ 316.219051][ T7082] FAT-fs (loop2): Directory bread(block 66) failed [ 316.260748][ T7080] loop1: detected capacity change from 0 to 32768 [ 316.265567][ T7082] FAT-fs (loop2): Directory bread(block 67) failed [ 316.277490][ T7080] xfs: Deprecated parameter 'ikeep' [ 316.282911][ T7080] XFS: ikeep mount option is deprecated. [ 316.303234][ T7082] FAT-fs (loop2): Directory bread(block 68) failed [ 316.349897][ T7080] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 316.385899][ T7082] FAT-fs (loop2): Directory bread(block 69) failed [ 316.392866][ T7082] FAT-fs (loop2): Directory bread(block 70) failed [ 316.443524][ T7082] FAT-fs (loop2): Directory bread(block 71) failed [ 316.546540][ T7082] FAT-fs (loop2): Directory bread(block 72) failed [ 316.599614][ T7082] FAT-fs (loop2): Directory bread(block 73) failed [ 316.742643][ T7080] XFS (loop1): Starting recovery (logdev: internal) [ 316.805446][ T7080] XFS (loop1): Metadata CRC error detected at xfs_agi_read_verify+0x1b9/0x300, xfs_agi block 0x2 [ 316.817037][ T7080] XFS (loop1): Unmount and run xfs_repair [ 316.831876][ T7080] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 316.842186][ T7080] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00 XAGI............ [ 316.862897][ T7080] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 316.872231][ T7080] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff ...@............ [ 316.881404][ T7080] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 316.890647][ T7080] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 316.899794][ T7080] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 316.909000][ T7080] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 316.918270][ T7080] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 316.936980][ T7080] XFS (loop1): metadata I/O error in "xfs_read_agi+0x234/0x5f0" at daddr 0x2 len 1 error 74 [ 316.947712][ T7080] loop1: lost filesystem error report for type 5 error -117 [ 316.947833][ T7080] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 316.964781][ T7080] XFS (loop1): Failed to read root inode 0x1140, error 117 [ 316.972416][ T7080] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 318.218165][ T5825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 318.445431][ T5825] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 318.487627][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.567704][ T5825] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 318.625885][ T5825] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 318.634132][ T5825] usb 5-1: Manufacturer: syz [ 318.661137][ T5825] usb 5-1: config 0 descriptor?? [ 318.777271][ T5069] Bluetooth: hci1: command 0x0406 tx timeout [ 318.783524][ T5069] Bluetooth: hci3: command 0x0406 tx timeout [ 318.790445][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 318.797086][ T5069] Bluetooth: hci0: command 0x0406 tx timeout [ 318.949699][ T5825] rc_core: IR keymap rc-hauppauge not found [ 318.995314][ T5825] Registered IR keymap rc-empty [ 319.014089][ T5825] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 319.158823][ T5825] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 319.230244][ T7124] syz.1.492 uses obsolete (PF_INET,SOCK_PACKET) [ 319.309948][ C0] igorplugusb 5-1:0.0: receive overflow, at least 21 lost [ 319.557889][ T5825] usb 5-1: USB disconnect, device number 4 [ 320.486587][ T7137] loop0: detected capacity change from 0 to 512 [ 320.560983][ T7137] EXT4-fs (loop0): Test dummy encryption mode enabled [ 320.621225][ T7137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 320.733759][ T7137] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #17: comm syz.0.496: corrupted in-inode xattr: invalid ea_ino [ 320.748290][ T7137] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 320.755761][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 320.771820][ C1] EXT4-fs (loop0): initial error at time 1771428008: ext4_iget_extra_inode:5025: inode 17 [ 320.778379][ T7137] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.496: couldn't read orphan inode 17 (err -117) [ 320.782114][ C1] EXT4-fs (loop0): last error at time 1771428008: ext4_iget_extra_inode:5025: inode 17 [ 320.866853][ T7137] loop0: lost filesystem error report for type 5 error -117 [ 320.878618][ T7141] loop2: detected capacity change from 0 to 1764 [ 320.896711][ T7137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.098379][ T7137] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 321.198077][ T7137] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.496: invalid indirect mapped block 4294967040 (level 1) [ 321.655477][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.248032][ T7160] macsec1: entered allmulticast mode [ 322.286509][ T7160] macsec0: entered allmulticast mode [ 322.306289][ T7160] veth1_macvtap: entered allmulticast mode [ 322.740028][ T7164] loop2: detected capacity change from 0 to 2048 [ 322.848991][ T7164] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 322.901101][ T7164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.980853][ T7172] loop3: detected capacity change from 0 to 16 [ 323.031462][ T7171] loop0: detected capacity change from 0 to 512 [ 323.196365][ T7171] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 323.238036][ T7171] EXT4-fs (loop0): orphan cleanup on readonly fs [ 323.349470][ T7171] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.512: corrupted inode contents [ 323.386886][ T7171] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.395833][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 323.411949][ C0] EXT4-fs (loop0): initial error at time 1771428010: ext4_do_update_inode:5569: inode 16 [ 323.422256][ C0] EXT4-fs (loop0): last error at time 1771428010: ext4_do_update_inode:5569: inode 16 [ 323.466123][ T7171] EXT4-fs (loop0): Remounting filesystem read-only [ 323.473662][ T7171] EXT4-fs (loop0): 1 truncate cleaned up [ 323.495030][ T56] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 323.527887][ T56] Quota error (device loop0): write_blk: dquota write failed [ 323.535517][ T56] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 323.608527][ T56] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 323.655884][ T56] Quota error (device loop0): write_blk: dquota write failed [ 323.666853][ T7177] tipc: Started in network mode [ 323.672070][ T7177] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 323.682393][ T56] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 323.744614][ T7177] tipc: Enabling of bearer rejected, failed to enable media [ 323.759084][ T56] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 323.791360][ T56] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 323.884495][ T56] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 323.947548][ T7171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.102607][ T7182] loop2: detected capacity change from 0 to 512 [ 324.131416][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 324.150263][ T7182] EXT4-fs: Ignoring removed oldalloc option [ 324.257499][ T7182] EXT4-fs (loop2): 1 truncate cleaned up [ 324.265339][ T7182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.648529][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.842779][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.341755][ T7198] 9p: p9: multiple sources not supported [ 325.374413][ T7190] loop4: detected capacity change from 0 to 4096 [ 326.969522][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.995996][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.486427][ T7219] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 327.493209][ T7219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.570663][ T7219] vhci_hcd vhci_hcd.0: Device attached [ 327.826378][ T5825] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 327.899783][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 328.095960][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 328.129007][ T7235] max out of range [ 328.144848][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.173101][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.216012][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 328.225397][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.333323][ T10] usb 1-1: config 0 descriptor?? [ 328.664646][ T10] usb 1-1: USB disconnect, device number 4 [ 328.681106][ T7222] usb 33-1: recv xbuf, 0 [ 328.716239][ T81] vhci_hcd vhci_hcd.0: stop threads [ 328.721674][ T81] vhci_hcd vhci_hcd.0: release socket [ 328.762707][ T81] vhci_hcd vhci_hcd.0: disconnect device [ 328.796139][ T5825] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 329.472590][ T29] audit: type=1326 audit(1771428016.842:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864f9c629 code=0x7ffc0000 [ 329.619849][ T29] audit: type=1326 audit(1771428016.962:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864f9c629 code=0x7ffc0000 [ 329.664357][ T29] audit: type=1326 audit(1771428016.962:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd864f9c629 code=0x7ffc0000 [ 329.766164][ T29] audit: type=1326 audit(1771428016.962:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864f9c629 code=0x7ffc0000 [ 329.875942][ T29] audit: type=1326 audit(1771428017.002:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864f9c629 code=0x7ffc0000 [ 329.956002][ T29] audit: type=1326 audit(1771428017.002:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd864f9c629 code=0x7ffc0000 [ 330.046896][ T29] audit: type=1326 audit(1771428017.002:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864f9c629 code=0x7ffc0000 [ 330.071152][ T29] audit: type=1326 audit(1771428017.002:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7250 comm="syz.4.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd864f9c629 code=0x7ffc0000 [ 330.240381][ T5825] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 330.446111][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 330.496167][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.520637][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 330.574334][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.640431][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.756209][ T5825] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 330.816851][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.876032][ T5825] usb 2-1: Product: syz [ 330.914497][ T5825] usb 2-1: Manufacturer: syz [ 330.956349][ T5825] usb 2-1: SerialNumber: syz [ 331.010938][ T5825] usb 2-1: config 0 descriptor?? [ 331.103192][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 331.138054][ T5825] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 331.786413][ T5825] rc_core: IR keymap rc-imon-pad not found [ 331.793120][ T5825] Registered IR keymap rc-empty [ 331.821186][ T7279] loop0: detected capacity change from 0 to 16 [ 331.843204][ T5825] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 331.885352][ T5825] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 331.912613][ T7279] erofs (device loop0): mounted with root inode @ nid 36. [ 331.967456][ T5825] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 332.050692][ T5825] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 332.145424][ T7281] loop4: detected capacity change from 0 to 1024 [ 332.238349][ T5825] imon 2-1:0.0: iMON device (15c2:003b, intf0) on usb<2:6> initialized [ 332.340879][ T7281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 332.380620][ T5825] usb 2-1: USB disconnect, device number 6 [ 332.991266][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 333.487357][ T7295] Bluetooth: MGMT ver 1.23 [ 334.169093][ T7303] loop1: detected capacity change from 0 to 1024 [ 334.357719][ T7303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.906198][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.610778][ T7320] loop4: detected capacity change from 0 to 4096 [ 335.776992][ T7320] NILFS (loop4): invalid segment: Checksum error in segment payload [ 335.820821][ T7320] NILFS (loop4): trying rollback from an earlier position [ 336.005866][ T7320] NILFS (loop4): recovery complete [ 336.063428][ T7334] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.914824][ T7343] loop1: detected capacity change from 0 to 256 [ 336.982652][ T7343] exfat: Deprecated parameter 'utf8' [ 337.032313][ T7343] exfat: Bad value for 'gid' [ 337.063485][ T7343] exfat: Bad value for 'gid' [ 337.717248][ T7339] loop3: detected capacity change from 0 to 8192 [ 337.811874][ T7339] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.090870][ T7356] loop0: detected capacity change from 0 to 256 [ 338.174122][ T7356] FAT-fs (loop0): Directory bread(block 517) failed [ 338.215240][ T7356] FAT-fs (loop0): Directory bread(block 518) failed [ 338.278371][ T7356] FAT-fs (loop0): Directory bread(block 519) failed [ 338.285437][ T7356] FAT-fs (loop0): Directory bread(block 520) failed [ 338.410444][ T7356] FAT-fs (loop0): Directory bread(block 521) failed [ 338.476084][ T7356] FAT-fs (loop0): Directory bread(block 522) failed [ 338.516200][ T7356] FAT-fs (loop0): Directory bread(block 523) failed [ 338.523252][ T7356] FAT-fs (loop0): Directory bread(block 524) failed [ 338.607159][ T7356] FAT-fs (loop0): Directory bread(block 525) failed [ 338.646697][ T7356] FAT-fs (loop0): Directory bread(block 526) failed [ 338.758921][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 340.092590][ T7368] loop2: detected capacity change from 0 to 4096 [ 340.691566][ T7384] loop1: detected capacity change from 0 to 512 [ 340.749684][ T7382] loop0: detected capacity change from 0 to 512 [ 340.814272][ T7382] EXT4-fs: Ignoring removed oldalloc option [ 341.023598][ T7384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.046443][ T7382] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.603: Parent and EA inode have the same ino 15 [ 341.076923][ T7376] loop4: detected capacity change from 0 to 8192 [ 341.086678][ T7384] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.118616][ T7382] loop0: lost filesystem error report for type 5 error -117 [ 341.125805][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 341.140129][ C0] EXT4-fs (loop0): initial error at time 1771428028: ext4_xattr_inode_iget:437 [ 341.149529][ C0] EXT4-fs (loop0): last error at time 1771428028: ext4_xattr_inode_iget:437 [ 341.177247][ T7382] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.603: Parent and EA inode have the same ino 15 [ 341.212285][ T7382] loop0: lost filesystem error report for type 5 error -117 [ 341.234389][ T7382] EXT4-fs (loop0): 1 orphan inode deleted [ 341.355237][ T7382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.576402][ T7382] EXT4-fs error (device loop0): ext4_rename:3810: inode #15: comm syz.0.603: target of rename is already freed [ 341.847680][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.000044][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.567878][ T7392] loop2: detected capacity change from 0 to 4096 [ 342.644556][ T7392] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 343.170741][ T7392] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 343.279023][ T7392] ntfs3(loop2): mft corrupted [ 343.807279][ T7413] max out of range [ 344.224249][ T56] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.290883][ T56] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.333078][ T56] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.421715][ T136] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.223789][ T7430] loop2: detected capacity change from 0 to 512 [ 345.318962][ T7430] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 345.364172][ T7430] EXT4-fs (loop2): orphan cleanup on readonly fs [ 345.384774][ T7430] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 345.457665][ T7430] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 345.532242][ T7430] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.625: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 345.623101][ T7430] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 345.624527][ T7430] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.625: couldn't read orphan inode 13 (err -117) [ 345.634113][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 345.634204][ C0] EXT4-fs (loop2): last error at time 1771428033: ext4_ext_check_inode:521: inode 13 [ 345.676230][ T7430] loop2: lost filesystem error report for type 5 error -117 [ 345.717055][ T7430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.050615][ T7430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.117403][ T7430] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 346.194478][ T7430] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 346.266798][ T7430] System zones: 0-2, 18-18, 34-34 [ 346.273139][ T7430] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 346.618672][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.685146][ T7453] loop3: detected capacity change from 0 to 128 [ 347.273056][ T7454] loop1: detected capacity change from 0 to 4096 [ 348.070567][ T7470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.652'. [ 348.083909][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 349.316518][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 349.502628][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 349.552703][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 349.564667][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 349.611445][ T10] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 349.665077][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 349.729202][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 349.775902][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.922078][ T10] usb 4-1: config 0 descriptor?? [ 349.943688][ T7480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 350.427402][ T7494] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 350.479802][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.579182][ T10] wacom 0003:056A:0325.000A: unknown main item tag 0x0 [ 350.689648][ T10] wacom 0003:056A:0325.000A: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 350.818012][ T10] usb 4-1: USB disconnect, device number 4 [ 351.154751][ T7497] fido_id[7497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 351.719633][ T7508] loop4: detected capacity change from 0 to 64 [ 351.775960][ T7508] hfs: unable to locate alternate MDB [ 351.781621][ T7508] hfs: continuing without an alternate MDB [ 353.343581][ T7524] loop2: detected capacity change from 0 to 64 [ 353.404919][ T7525] ptrace attach of ""[7529] was attempted by "./syz-executor exec"[7525] [ 354.131178][ T5829] kernel read not supported for file /vga_arbiter (pid: 5829 comm: kworker/1:5) [ 354.244821][ T7533] loop3: detected capacity change from 0 to 764 [ 354.407609][ T7535] loop2: detected capacity change from 0 to 1024 [ 354.485487][ T7535] hfsplus: invalid length 32517 has been corrected to 255 [ 354.882678][ T7540] loop4: detected capacity change from 0 to 128 [ 355.021326][ T7540] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.107290][ T56] hfsplus: b-tree write err: -5, ino 20 [ 355.114922][ T7540] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.830061][ T5783] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.923216][ T7550] loop3: detected capacity change from 0 to 128 [ 356.075144][ T7550] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 356.116258][ T7550] hpfs: filesystem error: improperly stopped [ 356.122531][ T7550] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 356.196186][ T7550] hpfs: You really don't want any checks? You are crazy... [ 356.204083][ T7550] hpfs: hpfs_map_sector(): read error [ 356.276260][ T7550] hpfs: code page support is disabled [ 356.282104][ T7550] hpfs: hpfs_map_4sectors(): unaligned read [ 356.326933][ T7550] hpfs: hpfs_map_4sectors(): unaligned read [ 356.371543][ T7550] hpfs: filesystem error: unable to find root dir [ 357.577410][ T7570] loop4: detected capacity change from 0 to 128 [ 357.736743][ T7567] loop0: detected capacity change from 0 to 1024 [ 358.226225][ T7567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.363571][ T7578] loop2: detected capacity change from 0 to 512 [ 358.488439][ T7578] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.609538][ T7578] FAT-fs (loop2): FAT read failed (blocknr 1568) [ 358.676530][ T7581] loop4: detected capacity change from 0 to 512 [ 358.701431][ T7581] EXT4-fs: inline encryption not supported [ 358.715498][ T7578] FAT-fs (loop2): FAT read failed (blocknr 1568) [ 358.796276][ T7581] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.818821][ T7581] EXT4-fs (loop4): Test dummy encryption mode enabled [ 358.852608][ T7581] EXT4-fs (loop4): orphan cleanup on readonly fs [ 358.890876][ T7581] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.695: inode #13: comm syz.4.695: iget: illegal inode # [ 358.904249][ T7581] loop4: lost filesystem error report for type 5 error -117 [ 358.905855][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 358.920078][ C1] EXT4-fs (loop4): initial error at time 1771428046: ext4_orphan_get:1391 [ 358.929124][ C1] EXT4-fs (loop4): last error at time 1771428046: ext4_orphan_get:1391 [ 358.950982][ T7581] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.695: couldn't read orphan inode 13 (err -117) [ 359.085926][ T7581] loop4: lost filesystem error report for type 5 error -117 [ 359.124719][ T7581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 359.269171][ T7581] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.695: resize_inode disabled but reserved GDT blocks non-zero [ 359.338926][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.382460][ T7584] loop3: detected capacity change from 0 to 4096 [ 359.499602][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 359.517606][ T7584] NILFS (loop3): invalid segment: Checksum error in segment payload [ 359.606642][ T7584] NILFS (loop3): trying rollback from an earlier position [ 359.716901][ T7584] NILFS (loop3): recovery complete [ 359.725266][ T7589] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.779752][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.126593][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 361.233625][ T7596] loop0: detected capacity change from 0 to 1024 [ 361.665993][ T7596] hfsplus: bad catalog entry type [ 361.826582][ T7606] loop4: detected capacity change from 0 to 128 [ 361.945007][ T7606] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 361.969465][ T7608] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 362.026227][ T7606] FAT-fs (loop4): Filesystem has been set read-only [ 362.140035][ T7598] loop3: detected capacity change from 0 to 8192 [ 362.198309][ T12] hfsplus: b-tree write err: -5, ino 25 [ 362.221931][ T12] hfsplus: b-tree write err: -5, ino 4 [ 362.276151][ T12] hfsplus: b-tree write err: -5, ino 2 [ 362.401215][ T29] audit: type=1800 audit(1771428049.802:29): pid=7598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.702" name="file2" dev="loop3" ino=1048659 res=0 errno=0 [ 362.867538][ T5780] Bluetooth: hci3: unexpected event for opcode 0x0c7a [ 362.976544][ T7617] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 364.467528][ T7622] loop1: detected capacity change from 0 to 4096 [ 364.751521][ T7622] NILFS (loop1): invalid segment: Checksum error in segment payload [ 364.926588][ T7622] NILFS (loop1): trying rollback from an earlier position [ 365.211986][ T7631] loop4: detected capacity change from 0 to 32768 [ 365.230074][ T7631] (syz.4.718,7631,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xd57e6c51. Applying ECC. [ 365.243827][ T7631] (syz.4.718,7631,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc2d589a7, computed 0xf59bda01 [ 365.256726][ T7631] (syz.4.718,7631,1):ocfs2_validate_inode_block:1441 ERROR: Checksum failed for dinode 17 [ 365.277068][ T7631] (syz.4.718,7631,1):ocfs2_read_locked_inode:599 ERROR: status = -5 [ 365.286080][ T7631] (syz.4.718,7631,1):ocfs2_init_global_system_inodes:444 ERROR: status = -5 [ 365.295087][ T7631] (syz.4.718,7631,1):ocfs2_init_global_system_inodes:476 ERROR: status = -5 [ 365.305372][ T7631] (syz.4.718,7631,1):ocfs2_initialize_super:2198 ERROR: status = -5 [ 365.314196][ T7631] (syz.4.718,7631,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 365.367719][ T7622] NILFS (loop1): recovery complete [ 365.672954][ T7638] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.194571][ T7635] loop3: detected capacity change from 0 to 8192 [ 367.251248][ T7642] loop4: detected capacity change from 0 to 8192 [ 367.344610][ T7647] loop2: detected capacity change from 0 to 2048 [ 367.470213][ T7650] loop3: detected capacity change from 0 to 64 [ 367.503312][ T7647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.994452][ T7663] capability: warning: `syz.2.730' uses 32-bit capabilities (legacy support in use) [ 369.621315][ T7666] IPv6: sit1: Disabled Multicast RS [ 369.697785][ T7666] sit1: entered allmulticast mode [ 371.072544][ T7673] loop0: detected capacity change from 0 to 4096 [ 371.224409][ T29] audit: type=1326 audit(1771428058.632:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0959c629 code=0x7ffc0000 [ 371.283695][ T7673] NILFS (loop0): invalid segment: Checksum error in segment payload [ 371.346031][ T29] audit: type=1326 audit(1771428058.702:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0959c629 code=0x7ffc0000 [ 371.385902][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 371.388769][ T7673] NILFS (loop0): trying rollback from an earlier position [ 371.467036][ T7685] loop3: detected capacity change from 0 to 2048 [ 371.486990][ T29] audit: type=1326 audit(1771428058.752:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7faa0959c629 code=0x7ffc0000 [ 371.592561][ T7685] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 371.601767][ T29] audit: type=1326 audit(1771428058.752:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0959c629 code=0x7ffc0000 [ 371.650138][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.729309][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 371.762790][ T7685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.785402][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 371.793708][ T29] audit: type=1326 audit(1771428058.752:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.1.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0959c629 code=0x7ffc0000 [ 371.794976][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.897033][ T7673] NILFS (loop0): recovery complete [ 371.980666][ T7691] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.122966][ T10] usb 3-1: config 0 descriptor?? [ 372.728399][ T10] lenovo 0003:17EF:60A3.000B: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 372.917343][ T10] usb 3-1: USB disconnect, device number 6 [ 373.524232][ T7697] fido_id[7697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 374.255175][ T7708] loop4: detected capacity change from 0 to 512 [ 374.380183][ T7708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 374.416679][ T7708] EXT4-fs (loop4): orphan cleanup on readonly fs [ 374.501668][ T7708] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 374.612831][ T7708] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 374.657793][ T7708] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.751: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 374.771123][ T7708] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 374.777587][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 374.793576][ C1] EXT4-fs (loop4): last error at time 1771428062: ext4_ext_check_inode:521: inode 13 [ 374.840129][ T7708] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.751: couldn't read orphan inode 13 (err -117) [ 374.866364][ T7708] loop4: lost filesystem error report for type 5 error -117 [ 374.874047][ T7708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.318034][ T7708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.432124][ T7708] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 375.474414][ T7708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 375.528421][ T7708] System zones: 0-2, 18-18, 34-34 [ 375.585472][ T7708] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 375.938476][ T7722] loop3: detected capacity change from 0 to 256 [ 376.064311][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.260644][ T7722] FAT-fs (loop3): Directory bread(block 64) failed [ 376.286283][ T7722] FAT-fs (loop3): Directory bread(block 65) failed [ 376.293191][ T7722] FAT-fs (loop3): Directory bread(block 66) failed [ 376.391055][ T7722] FAT-fs (loop3): Directory bread(block 67) failed [ 376.418569][ T7722] FAT-fs (loop3): Directory bread(block 68) failed [ 376.467622][ T7722] FAT-fs (loop3): Directory bread(block 69) failed [ 376.505978][ T7722] FAT-fs (loop3): Directory bread(block 70) failed [ 376.512853][ T7722] FAT-fs (loop3): Directory bread(block 71) failed [ 376.576125][ T7722] FAT-fs (loop3): Directory bread(block 72) failed [ 376.582896][ T7722] FAT-fs (loop3): Directory bread(block 73) failed [ 377.862356][ T5829] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 378.194459][ T5829] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 378.247644][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.285943][ T5829] usb 1-1: Product: syz [ 378.290392][ T5829] usb 1-1: Manufacturer: syz [ 378.295183][ T5829] usb 1-1: SerialNumber: syz [ 378.406941][ T5829] usb 1-1: config 0 descriptor?? [ 378.710036][ T5829] hso 1-1:0.0: Failed to find INT IN ep [ 378.727178][ T3484] ===================================================== [ 378.734471][ T3484] BUG: KMSAN: uninit-value in __inet_bind+0x8a4/0xf20 [ 378.741681][ T3484] __inet_bind+0x8a4/0xf20 [ 378.746426][ T3484] inet_bind+0x12c/0x1a0 [ 378.750841][ T3484] kernel_bind+0xd6/0x130 [ 378.755407][ T3484] rds_tcp_conn_path_connect+0x952/0xff0 [ 378.761578][ T3484] rds_connect_worker+0x353/0x4d0 [ 378.767007][ T3484] process_scheduled_works+0xb21/0x1e30 [ 378.772751][ T3484] worker_thread+0xede/0x1580 [ 378.773440][ T5829] usb-storage 1-1:0.0: USB Mass Storage device detected [ 378.779703][ T3484] kthread+0x53f/0x600 [ 378.779862][ T3484] ret_from_fork+0x20f/0x910 [ 378.779986][ T3484] ret_from_fork_asm+0x1a/0x30 [ 378.780137][ T3484] [ 378.780164][ T3484] Uninit was stored to memory at: [ 378.780407][ T3484] kernel_bind+0x92/0x130 [ 378.780564][ T3484] rds_tcp_conn_path_connect+0x952/0xff0 [ 378.780730][ T3484] rds_connect_worker+0x353/0x4d0 [ 378.780847][ T3484] process_scheduled_works+0xb21/0x1e30 [ 378.780964][ T3484] worker_thread+0xede/0x1580 [ 378.781076][ T3484] kthread+0x53f/0x600 [ 378.781202][ T3484] ret_from_fork+0x20f/0x910 [ 378.781322][ T3484] ret_from_fork_asm+0x1a/0x30 [ 378.781460][ T3484] [ 378.781482][ T3484] Uninit was stored to memory at: [ 378.781654][ T3484] rds_tcp_conn_path_connect+0xaf8/0xff0 [ 378.781819][ T3484] rds_connect_worker+0x353/0x4d0 [ 378.781952][ T3484] process_scheduled_works+0xb21/0x1e30 [ 378.782088][ T3484] worker_thread+0xede/0x1580 [ 378.782212][ T3484] kthread+0x53f/0x600 [ 378.782346][ T3484] ret_from_fork+0x20f/0x910 [ 378.782456][ T3484] ret_from_fork_asm+0x1a/0x30 [ 378.782596][ T3484] [ 378.782619][ T3484] Uninit was created at: [ 378.782815][ T3484] kmem_cache_alloc_noprof+0x37b/0x1270 [ 378.783005][ T3484] rds_tcp_conn_alloc+0x7b/0xbb0 [ 378.783143][ T3484] __rds_conn_create+0x267f/0x34e0 [ 378.783309][ T3484] rds_conn_create_outgoing+0x5d/0x80 [ 378.783475][ T3484] rds_sendmsg+0x2684/0x4d70 [ 378.783577][ T3484] ____sys_sendmsg+0xfe7/0x1080 [ 378.783716][ T3484] ___sys_sendmsg+0x271/0x3b0 [ 378.783850][ T3484] __x64_sys_sendmsg+0x211/0x3e0 [ 378.783992][ T3484] x64_sys_call+0x1e20/0x3ea0 [ 378.784135][ T3484] do_syscall_64+0x134/0xf80 [ 378.784295][ T3484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.784403][ T3484] [ 378.784467][ T3484] CPU: 0 UID: 0 PID: 3484 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 378.784575][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.784669][ T3484] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 378.784814][ T3484] ===================================================== [ 378.784852][ T3484] Disabling lock debugging due to kernel taint [ 379.149152][ T3484] Kernel panic - not syncing: kmsan.panic set ... [ 379.155792][ T3484] CPU: 0 UID: 0 PID: 3484 Comm: kworker/u8:9 Tainted: G B syzkaller #0 PREEMPT(full) [ 379.167069][ T3484] Tainted: [B]=BAD_PAGE [ 379.171328][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.181540][ T3484] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 379.187913][ T3484] Call Trace: [ 379.191293][ T3484] [ 379.194327][ T3484] __dump_stack+0x26/0x30 [ 379.198870][ T3484] dump_stack_lvl+0x50/0x1c0 [ 379.203661][ T3484] ? dump_stack+0x12/0x25 [ 379.208181][ T3484] dump_stack+0x1e/0x25 [ 379.212547][ T3484] vpanic+0x7b4/0x1430 [ 379.216863][ T3484] panic+0x15d/0x160 [ 379.220993][ T3484] kmsan_report+0x31a/0x320 [ 379.225692][ T3484] ? __msan_warning+0x1b/0x30 [ 379.230561][ T3484] ? __inet_bind+0x8a4/0xf20 [ 379.235390][ T3484] ? inet_bind+0x12c/0x1a0 [ 379.240000][ T3484] ? kernel_bind+0xd6/0x130 [ 379.244698][ T3484] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 379.250763][ T3484] ? rds_connect_worker+0x353/0x4d0 [ 379.256139][ T3484] ? process_scheduled_works+0xb21/0x1e30 [ 379.262051][ T3484] ? worker_thread+0xede/0x1580 [ 379.267132][ T3484] ? kthread+0x53f/0x600 [ 379.271583][ T3484] ? ret_from_fork+0x20f/0x910 [ 379.276540][ T3484] ? ret_from_fork_asm+0x1a/0x30 [ 379.281733][ T3484] ? kmsan_get_metadata+0xf1/0x160 [ 379.287215][ T3484] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 379.293277][ T3484] ? __rcu_read_unlock+0x6c/0xd0 [ 379.298432][ T3484] ? inet_addr_type_table+0x33b/0x560 [ 379.304085][ T3484] ? kmsan_get_metadata+0xf1/0x160 [ 379.309466][ T3484] __msan_warning+0x1b/0x30 [ 379.314161][ T3484] __inet_bind+0x8a4/0xf20 [ 379.318851][ T3484] inet_bind+0x12c/0x1a0 [ 379.323320][ T3484] ? __pfx_inet_bind+0x10/0x10 [ 379.328297][ T3484] kernel_bind+0xd6/0x130 [ 379.332882][ T3484] ? rds_tcp_tune+0x834/0xe60 [ 379.337774][ T3484] ? kmsan_get_metadata+0xf1/0x160 [ 379.343101][ T3484] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 379.349164][ T3484] rds_tcp_conn_path_connect+0x952/0xff0 [ 379.355085][ T3484] ? kmsan_get_metadata+0xf1/0x160 [ 379.360465][ T3484] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 379.366847][ T3484] rds_connect_worker+0x353/0x4d0 [ 379.372073][ T3484] ? __pfx_rds_connect_worker+0x10/0x10 [ 379.377858][ T3484] process_scheduled_works+0xb21/0x1e30 [ 379.383680][ T3484] worker_thread+0xede/0x1580 [ 379.388598][ T3484] kthread+0x53f/0x600 [ 379.392887][ T3484] ? __pfx_worker_thread+0x10/0x10 [ 379.398204][ T3484] ? __pfx_kthread+0x10/0x10 [ 379.403022][ T3484] ret_from_fork+0x20f/0x910 [ 379.407819][ T3484] ? __switch_to+0x51c/0x750 [ 379.412651][ T3484] ? __pfx_kthread+0x10/0x10 [ 379.417461][ T3484] ret_from_fork_asm+0x1a/0x30 [ 379.422461][ T3484] [ 379.426297][ T3484] Kernel Offset: disabled [ 379.430695][ T3484] Rebooting in 86400 seconds..