last executing test programs: 10m40.890072511s ago: executing program 2 (id=990): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={0x24, 0x12, 0xa01, 0x0, 0x25dfdbfd, {0xa}, [@nested={0x10, 0x39, 0x0, 0x1, [@nested={0x8, 0x23, 0x0, 0x1, [@nested={0x4, 0x151}]}, @nested={0x4, 0x103}]}]}, 0x24}}, 0x0) 10m39.100896736s ago: executing program 2 (id=992): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10m37.505515587s ago: executing program 2 (id=996): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x52e, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 10m35.599918119s ago: executing program 1 (id=1000): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 10m34.013961676s ago: executing program 1 (id=1001): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10m31.070866634s ago: executing program 1 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "6986"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 10m30.428779893s ago: executing program 2 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000028000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316330b00010068656c70657200000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 10m28.873570672s ago: executing program 1 (id=1009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x124, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xed, 0xa8, @random="69e689e1e089da0bc2e93e5d5288fca5192aa16f20ddb61219a9ed863d9810ed2773b819915be3c3e5d5cc21fbf3e5b2c1666c41e10757c4b13ee6dfa9575c71c5d11e2fa566af7e705ac6c92cef3948990e367fbdaddf55ec1856ff256feb3cb80765e9cf9c84c53c7f890be0851c1e047bb70ab64352d5f0bfe42d0cf5b7af9690bbd72d46902c508af096d00d3fb3a53b13856379b666ed8a56a2c3ed81931f342ed1efd195777ce47710ae31ddf95bf5220a89d00a2a21ac6b4165dace8134dda2f69b8acfd62d4abbea49fd848279ed525d323eba74871c4c21b73d037776ea6e4643ef47ce00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x124}}, 0x80) 10m27.56122705s ago: executing program 2 (id=1013): r0 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x3) fallocate(r0, 0x0, 0x0, 0x200401) fallocate(r0, 0x0, 0x0, 0x200401) 10m26.767350906s ago: executing program 1 (id=1014): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000240)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$eJzs3Am4jlX3MPC19t43x8nwJJnvtdfNkwybJAklyZAkSUjmhCRJkiRxyJSEJGQ8ScYTkimddMzzkDnp5JUkSUhIsr/rNHz+vcPX+75//8/7fWf9ruu+7OW+177XPut6zj1c13m+6T6iZpNa1RoyM/w79O8D/PWfJABIAIDBAJALAAIAKJ+7fO6M/dk0Jv1bJxH/QxrNutIViCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITK1lAJXy5Z5N3n///849d9Jlut/poD/aIf0//83+l86WvqfuUn/Mzfpf+Ym/c/MgitdgLjC5POfuUn/hcjULvs75Q3nrvQ7bdn+hU0IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPi/4Jy/xADA7+MrXZcQQgghhBBCCCEuH//ula5ACCGEEEIIIYQQ//MQFGgwEEAWyAoJkA0S4SrIDjkgJ+SCGFwNueEayAPXQl7IB/mhABSEQlAYQiCwwBBBESgKcbgOisH1UBxKQEkoBQ5KQxm4AcrCjVAOboLycDNUgFugIlT65ZwZboeqcAdUgzuhOtSAmlAL7oLacDfUgXugLtwL9eA+qA/3QwN4ABpCI2gMD0ITeAiaQjNoDi2gJbSC1n+Sn5zr7+U/D73gBegNfSAJ+kI/eBH6wwAYCINgMLwEQ+BlGAqvwDAYDiPgVRgJr8EoeB1GwxgYC2/AOBgPE2AiTILJkAxvwhR4C6bC2w/lgOkwA2bCLJgNKfAOzIG5MA/ehfnwHiyA5GyLYDEsgfdhKXwAqfAhLIOPIA2WwwpYCatgNayBtbAO1sMG2AibYDNsga2wDT6G7bADdsIu2A17YC98AvvgU9gPn0E6fv4v5p/9Yz70QEBAhQoNGsyCWTABEzAREzE7ZsecmBNjGMPcmBvzYB7Mi3kxP+bHJCyIhbEwEhIyMhbBIhjHOBbDYlgci2NJLIkOHZbBMlgWb8RyWA7LY3msgBWwIlbCSngr3opVsApWxapYDathdayONbEm3oV34d1YB+tgXayL9bAe1sf62AAbYENsiI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YifshJ2xM3bBLtgVu2I37IbdsTv2wOfwOXwen8cX8AXsg9VVX+yH/bA/9seBOAgH4Us4BF/Gl/EVHIbDcQS+iq/iazgKz+BoHINjcSxWUeNxAk5EVpMxGZMxK0zBqTgVp+F0nI4zcRbOxhRMwTk4F+fiuzgf38P3cCEuxMW4BJfgUvwAUzEVl+FZTMPluAJX4ipcjatwLa7DtbgBN+IG3IybcStuxY/xY9yBO3AX7sI9uAc/wU/wU/wUh2E6puMBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5ADiP5/ECXsCLeDHjw68yGGVUFpVFJagElagSVXaVXeVUOVVMxVRulVvlUXlUXpVX5Vf5VUFVUBVWhRUpUqwiVUQVUXEVV8VUMVVcFVclVUnllFNlVBlVVpVV5VQ5VV7drCqoW1RFVUm1c7eqW1UV1d5VVXeoaqqaqq5qqJqqlqqlaqvaqo6qo+qquqqeqqfqq/tVA9UXB2IjldGZJmo4NlUjsLlqoVqqVuo1fFi1UaOwrWqn2qtH1RgcjR1VG9dJPaE6qwnYRT2lJuLTqpuajN3Vs6qHek71VM+rXqqt6636qGlZ+6p+aib2VwPUQDVIzcEaKqNjNdUr6vmsw9UI9apajK+pUep1NVqNUWPVG2qcGq8mqIlqkpqsktWbaop6S01Vb6tparqaoWaqWWq2SlHvqDlqrpqn3lXz1XtqgVqoFqnFaol6Xy1VH6hU9aFapj5SaWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qY7Vd7VA71S61W+1Re9Unap/6VO1Xn6l09bk6oP6iDqov1CH1pTqsvlJH1NfqqPpGHVPfquPqO3VCnVSn1PfqtPpBnVFn1Tn1ozqvflIX1M/qovIKNGqltTY60Fl0Vp2gs+lEfZXOrnPonDqXjumrdW59jc6jr9V5dT6d3xTQBXUhXViHmrTVrCNdRBfVcX2dLqav18V1CV1Sl9JOl9Zl9A26rL5Rl9M36fL6Zl1B36Ir6kq6sgd9m66ib9dV9R26mr5TV9c1dE1dS9+la+u7dR19j66r79X19H26vr5fN9AP6Ia6kW6sH9RN9EO6qW6mm+sWuqVupVvrh3Ub/Yhuq9vp9vpR3UE/pjvqx3Un/YTurJ/UXfRTuqt+WnfTz+ju+lndQz+ne+qf9UXtdW/dRyfpvrqfflH31wP0QD1ID9Yv6SH6ZT1Uv6KH6eF6hH5Vj9Sv6VH6dT1aj9Fj9Rt6nB6vJ+iJepKerJP1m3qKfktP1W/raXq6nqFn6ll6th7420zz/on8t/5O/tBfzr5Vb9Mf6+16h96pd+ndeo/eq/fqfXqf3q/363Sdrg/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6R/29Pq1/0Gf0WX1W/6jP6/P6wm8/AzBolNHGmMBkMVlNgslmEs1VJrvJYXKaXCZmrja5zTUmj7nW5DX5TH5TwBQ0hUxhExoy1rCJTBFT1MTNdaaYud4UNyVMSVPKOFPalDE3/Lfz/6y+1qa1aWPamLamrWlv2psOpoPpaDqaTqaT6Ww6my6mi+lquppuppvpbrqbHqaH6Wl6ml6ml+ltepskk2T6mRdNfzPADDSDzGDzkhlihpihZqgZZoaZEWaEGWlGmlFmlBltRpuxZqwZZ8aZCWaCmWQmmWSfy0wxU8xUM9VMM9PMjMG5zCwzy6SYFDPHzDHzzDwz38w3C8wCs8gsMkvMErPULDWpJtUsM8tMmllulpuVZqVZbVabtWatWW/Wm41mo9lsNps0s81sM9vNdrPT7DS7zW6z1+w1+8w+s9/sN+km3RwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXMx47YvUIEKTGCCLEGWICFICBKDxCB7kD3IGeQMYkEsyB3kDvIE1wZ5g3xB/qBAUDAoFBQOwoACG3AQBUWCokE8uC4oFlwfFA9KBCWDUoELSgdlghuCssGNQbngpqB8cHNQIbglqBhUCioHtwa3BVWC24OqwR1BteDOoHpQI6gZ1AruCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg0ChoHDwZNgoeCpkGzoHnQImgZtApaX9b5vT+T7xHXO+wTJoV9w37hi2H/cEA4MBwUDg5fCoeEL4dDw1fCYeHwcET4ajgyfC0cFb4ejg7HhGPDN8Jx4fhwQjgxnBRODpPDN8Mp4Vvh1PDtcFo4PZwRzAxnhbPDlPCdcE44N5wXvhvOD98LF4QLw0Xh4hB/vSWG1PDDcFn4UZgWLg9XhCvDVeHqcE24NlwXrg83hBvDTeHm8kN+PTTcHu4Id4a7wt3hnnBv+Em4L/w03B9+FqaHn4cHwr+EB8MvwkPhl+Hh8KvwSPh1eDT8JjwWfhseD78LT4Qnw1Ph9+Hp8IfwTHg2PBf+GJ4PfwovhD+HF0OfcXOfcXknQ4ayUBZKoARKpETKTtkpJ+WkGMUoN+WmPJSH8lJeyk/5qSAVpMJUmDIwMRWhIhSnOBWjYlScilNJKkmOHJWhMlSWylI5KkflqTxVoApUkSpSZapMt9FtdDvdTnfQHXQn3Uk1qAbVolpUm2pTHapDdaku1aN6VJ/qUwNqQA2pITWmxtSEmlBTakrNqTm1pJbUmlpTG2pDbakttaf21IE6UEfqSJ2oE3WmztSFulBX6krdqBt1p+7Ug3pQT+pJvagX9abelERJ1I/6UX/qTwNpIA2mwTSEhtBQGkrDaBiNoBE0kkbSKBpFo2kMjaU3aByNpwk0kSbRZEqmZJpCU2gqTaVpNI1m0AyaRbMohVJoDs2heTSP5tN8WkALaBEtoiW0hJbSUkqlVFpGyyiN0mgFraBVtIrW0BpaR+toA22gTbSJttAW2kbbaDttp520k3bTbtpLe2kf7aP9tJ/SKZ0O0AFEOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kTwl2Gw20V5ls9scNqfNZf86zm8L2IK2kC1sQ5vX5vtDTNba4raELWlLWWdL2zL2hr+JK9pKtrK91d5mq9jbbVVb0WaD/xrXtnfbOvYeW9fea2vZu/4Q17P32fr2IdvANrMNbQvb2LayTexDtqltZpvbFralbWU72MdsR/u47WSfsJ3tk38TL7Uf2HV2vd1gN9p99lN7zv5oj9pv7Hn7k+1t+9jB9iU7xL5sh9pX7DA7/I8xgB1r37Dj7Hg7wU60k+zkv4ln2Jl2lp1tU+w7do6d+zfxEvu+nW9T7QK70C6yi3+JM2pKtR/aZfYjm2aX2xV2pV1lV9s1du3/rnWl3Wy32K12r/3Ebrc77E67y+62e36JM9ax335m0+3n9oj92h60X9hD9pg9bL/6Jc5Y3zH7rT1uv7Mn7El7yn5vT9sf7Bl79pf1Z6z9e/uzvWi9BUZWrNlwwFk4KydwNk7kqzg75+CcnItjfDXn5ms4D1/LeTkf5+cCXJALcWEOmdgyc8RFuCjH+TouxtdzcS7BJbkUOy7NZfgGLss3cjm+icvzzVyBb+GKXIkr8618G1fh27kq38HV+E6uzjW4Jtfiu7g23811+B6uy/dyPb6P6/P93IAf4IbciBvzg9yEH+Km3Iybcwtuya24NT/MbfgRbsvtuD0/yh34Me7Ij3MnfoI785PchZ/irvw0d+NnuDs/yz34Oe7Jz3MvfoF7cx9O4r7cj1/k/jyAB/IgHswv8RB+mYfyKzyMh/MIfpVH8ms8il/n0TyGx/IbPI7H8wSeyJN4Mifzm+2m8Fs8ld/maTydZ/BMnsWzOYXf4Tk8l+fxuzyf3+MFvJAX8WJewu/z0oueU/lDXsYfcRov5xW8klfxal7Da3kdr+cNvJE38Wbewlt5G3/M23kH7+RdvJv38F7+hPfxp7yfP+N0/pwP8F/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kie4YIIxXpyERBlCXKGiVE2aLE6Kooe5QjyhnlimLR1VHu6JooT3RtlDfKF+WPCkQFo0JR4SiMKLIRR1FUJCoaxaPromLR9VHxqERUMioVuah0VCa6ISob3RiVi26Kykc3RxWiW6KKUaWocnRrdFtUJbo9qhrdEVWL7oyqRzWimlGt6K6odnR3VCe6J6ob3RuVi+6L6kf3Rw2iB6KGUaOocfRg1CR6KGoaNYuaRy2illGrqHX0cNQmeiRqG7WL2kePRh2ix6KO0eNRp+iJqHP05KX9JYJfr6Z/tT8p6hvp396Q3aMXxRfHl8Tfjy+NfxBPjX8YXxb/KJ4WXx5fEV8ZXxVfHV8TXxtfF18f3xDfGN8U3xzfEt8a975WVnCY8SAMxgUui8vqElw2l+iuctldDpfT5XIxd7XL7a5xedy1Lq/L5/K7Aq6gK+QKu9CRs45d5Iq4oi7urnPF3PWuuCvhSrpSzrnSroxr5Vq71q6Ne8S1de1ce/eoe9Q95h5zjyf8Vrjr4p5yXd3Trpt7xj3jnnU93HOup3ve9XIvuN6uj0tySa6f6+f6u/5uoBvoBrvBbogb4oa6oW6YG+ZGuBFupBvpRrlRbrQb7ca6sW6cG+cmuAlukpvkkl2ym+KmuKluqpvmprkZboab5Wa5FJfi5rg5bp6b5+a7+W6BW+AWuUVuiVvilrqlLtWlumVumUtzaW6FW+FWuVVujVvj1rl1boPb4Da5TW6L2+K2uW1uu9vudrqdbrfb7fa6vW6f2+f2u/0u3aW7A+6AO+gOukPuS3fYfeWOuK/dUfeNO+a+dcfdd+6EO+lOOa9Pux/cGXfWnXM/uvPuJ3fB/ewuOu+SY2/GpsTeik2NvR2bFpsemxGbGZsVmx1Lib0TmxObG5sXezc2PxfEFsQWxhYFEFsSez+2NPZBLDX2YWxZ7KNYWmx5bEVsZWxVbHXM+0LbI1/EF/Vxf50v5q/3xX0JX9KX8s6X9mX8Db6sv9GX8zf58v5mX8Hf4iv6Sr6yb+ab+xa+pW/lW/uHfRv/iG/r2/n2/lHfwT/mO/rHfSf/hO/sn/Rd/FO+q3/ad/PP+O7+2fd+67Lv5V/wvX0fn+T7+n7+Rd/fD/AD/SA/2L/kh/iX/VD/ih/mh/sR/lU/0r/mR/nX/Wg/xo/1b/hxfryf4Cf6SX6yT/Zv+in+LT/Vv+2n+el+hp/pZ/nZPsW/4+f4uX6ef9fP9+/5BX6hX+QX+yX+fb/Uf+BT/Yd+mf/Ip/nlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/12v8Pv9Lv8br/H7/Wf+H3+U7/ff+bT/ef+gP+LP+i/8If8l/6w/8of8V/7o/4bf8x/64/77/wJf9Kf8t/70/4Hf8af9ef8j/68/8lf8D/7i/I3a0IIIYQQ/xT9J/v7/p3/U79tGfoBQI4dBQ7/9Zyb8v46HqD2dY4BwBN9ujf6fWvUKCkp6bdj09pAUHQhAMQu5f/y/QO/xcuhPTwGnaAdlP279Q1QlX+57/uH82sI4jcDJAJk+z0n4/EoEf56/hv/wfzN3uc/m38hQPGil3IyTvR7fGn+cv9g/j0d/mT+bF8kA7T9LznZ4VJ8af4y8Ag8CZ3+cKQQQgghhBBCCPGrAep8jz97vs14Pi9oLuVkhUvxnz2f/4mql2MNQgghhBBCCCGE+D97+rmejz/cqVO7rpdl0BYALuuEl2eQ9T+jjP+AAQLAf0AZMvjPH1zp30xCCCGEEEKIy+3STf+VrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi8/v1vCFP/9MFXeo1CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfa/AgAA///mhlPZ") mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) socket$inet6_tcp(0xa, 0x1, 0x0) 10m24.392512763s ago: executing program 2 (id=1019): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x1054, &(0x7f0000002b40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000078101e0000fe8000000000000000000000000000aafe8000000000000000000000000000aa8400"], 0x0) 10m23.538045203s ago: executing program 1 (id=1021): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 10m2.776855649s ago: executing program 32 (id=1021): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 10m1.677784753s ago: executing program 33 (id=1019): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x1054, &(0x7f0000002b40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000078101e0000fe8000000000000000000000000000aafe8000000000000000000000000000aa8400"], 0x0) 1m26.155989896s ago: executing program 0 (id=2383): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000001280)={0x0, 0x9, 0x100000080003ff, 0x1, 0x1}) 1m25.437398857s ago: executing program 0 (id=2388): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) epoll_create(0x1ff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2, 0x7, 0x5d4f}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m24.641194818s ago: executing program 0 (id=2390): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f00000000c0)={[{@shortname_winnt}, {@shortname_lower}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@uni_xlate}, {@shortname_win95}]}, 0x89, 0x2c4, &(0x7f0000000b00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) getdents(r0, &(0x7f00000005c0)=""/188, 0xbc) 1m23.581278318s ago: executing program 0 (id=2395): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0x18) 1m22.064526569s ago: executing program 0 (id=2400): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) shutdown(r0, 0x1) 1m21.195740501s ago: executing program 0 (id=2405): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 1m18.661423907s ago: executing program 34 (id=2405): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 12.421572988s ago: executing program 6 (id=2612): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, r0, 0xb97534d5fe9704cf, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x66}]}, 0x44}}, 0x0) 11.259054608s ago: executing program 6 (id=2613): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) 11.040633861s ago: executing program 3 (id=2615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0xcc, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in=@remote, 0xfffc, 0x0, 0x0, 0x4, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@empty, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 10.055509182s ago: executing program 6 (id=2618): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 9.961941677s ago: executing program 3 (id=2619): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x44}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) 9.329423512s ago: executing program 7 (id=2620): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents64(r0, 0x0, 0x0) 9.023747401s ago: executing program 5 (id=2621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x47b2}, @TCA_FQ_FLOW_PLIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008801}, 0x20040000) 8.477339393s ago: executing program 6 (id=2623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x811, &(0x7f0000000280)={[{@discard}, {@space_cache}, {@nobarrier}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x74, 0x6c, 0x67, 0x6b, 0x32, 0x34]}}]}, 0x3, 0x5136, &(0x7f0000005500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) 8.151710859s ago: executing program 3 (id=2624): socketpair$unix(0x1, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) 7.740167901s ago: executing program 7 (id=2625): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000400)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580"], 0x1, 0x9e15, &(0x7f000000a040)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 6.686692077s ago: executing program 4 (id=2626): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x68, 0x0, 0x0) 6.470907103s ago: executing program 5 (id=2627): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_procfs(0x0, &(0x7f0000008240)='attr\x00') openat(r0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b) 5.716317026s ago: executing program 5 (id=2628): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='user.@.O+'], 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000180)=ANY=[], 0x6, 0x2ab, &(0x7f0000000d40)="$eJzs3b1rLFUUAPAzyX6pxW5hJYIDWlg9Xl5rs0HyILiVsoVa6MP3Hkh2ERII+IFrKlsbS/8CQbDzn7CxsBdsBTtTBEZmZya7ibObTHATP36/Jjd3zrn3zOQmYYs9+/6L04PHaTw9+eyX6PWS2BrGME6TGMRWVL6IC4ZfBQDwb3aaZfF7VmiSl0REb3NlAQAb1Pj///cbLwkA2LC33n7njd3RaO/NNO3Fw+mXx+P8lX3+tbi++zQ+jEk8ifvRj7OI7Fwxfphl2ayV5gbxynR2PM4zp+/9WK6/+1vEPH8n+jGYT13M3x/t7aSFpfxZXsez5f7DPP9B9OP5mv33R3sPavJj3IlXX16q/17046cP4qOYxON5EYv8z3fS9PXs6z8+fTcvL89PZsfj7jxuIdu+5R8NAAAAAAAAAAAAAAAAAAAAAAD/YffK3jndmPfvyafK/jvbZ/k37Ugrg4v9eYr8pFroUn+gWRbfVP117qdpmpWBi/xWvNCK1t3cNQAAAAAAAAAAAAAAAAAAAPyzHH38ycGjyeTJ4d8yqLoBVG/rv+k6w6WZl6ImZhDnM93FllvltmtWju0qJolYW0a+YqPi21fvvmLwzKqsb79r+uh6V8e0b1Bhw0F1ug4eJfXPsBvVTK86JD8sx3Timnt1Vl3KGh2/Tu2lfuN77zw3H8zWxESyrrDXfi2eXDmTXL6Lzvyp1qa3y0Hxu1B3Nhqd57/+rUh06wAAAAAAAAAAAAAAAAAAgI1avOm35uLJiqSf94sP+Y/BhqsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNux+Pz/BoNZmXyN4E4cHt3xLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/8GcAAAD//wrtYeE=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x104) 5.361516148s ago: executing program 6 (id=2629): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0xa0ce, &(0x7f00000002c0)={0x2e, 0xd47, 0xf}) 5.337136116s ago: executing program 4 (id=2630): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c775772", 0x5}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) close(r0) 4.983721081s ago: executing program 7 (id=2631): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000014}) 4.338686842s ago: executing program 3 (id=2632): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000280)=[{0x8, 0x8000, 0x0, 0x0}], 0x1}) 4.297698376s ago: executing program 5 (id=2633): openat(0xffffffffffffffff, 0x0, 0x2, 0x131) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 4.230021872s ago: executing program 4 (id=2634): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff8a0a43cdec5908060001080006040009aaaaaaaaaabb0a0101fffffffffffffffd"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.768832679s ago: executing program 7 (id=2635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) close(0x3) 3.248170654s ago: executing program 4 (id=2636): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000140)=0xa) 1.852729127s ago: executing program 5 (id=2637): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0x506b, 0x1040, 0xfffffffd, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f00000001c0)={0x1}, 0x0) 1.749603694s ago: executing program 7 (id=2638): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000001540)={0xa, 0x4e21, 0x0, @private2, 0x800}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000040)="88", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1.645842145s ago: executing program 4 (id=2639): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x68d, &(0x7f00000006c0)="$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") open(0x0, 0x4600, 0xe898d2275f586838) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc4) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 1.315421203s ago: executing program 3 (id=2640): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 497.048433ms ago: executing program 7 (id=2641): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) 336.672616ms ago: executing program 3 (id=2642): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0xd289}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x2, 0x0) 157.688762ms ago: executing program 4 (id=2643): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x38}}, 0x880) 47.873717ms ago: executing program 5 (id=2644): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x7, 0x7f, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) 0s ago: executing program 6 (id=2645): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffed7, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) kernel console output (not intermixed with test programs): 94967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1537" name="file2" dev="loop0" ino=31 res=0 errno=0 [ 849.951866][T10131] loop4: detected capacity change from 0 to 8 [ 850.288306][T10131] SQUASHFS error: Unable to read directory block [629:ff26] [ 850.484242][T10135] loop3: detected capacity change from 0 to 128 [ 850.573182][ T48] Bluetooth: hci3: command tx timeout [ 850.628885][T10135] syz.3.1543: attempt to access beyond end of device [ 850.628885][T10135] loop3: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 850.671782][T10135] Buffer I/O error on dev loop3, logical block 12837, async page read [ 850.760277][T10135] syz.3.1543: attempt to access beyond end of device [ 850.760277][T10135] loop3: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 850.834357][T10135] Buffer I/O error on dev loop3, logical block 12837, async page read [ 850.885085][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.971811][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.026882][ T79] bond0 (unregistering): Released all slaves [ 851.131227][ T48] Bluetooth: hci1: command tx timeout [ 851.847500][ T79] hsr_slave_0: left promiscuous mode [ 851.900278][ T79] hsr_slave_1: left promiscuous mode [ 851.940339][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.022049][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.214177][ T79] veth0_macvtap: left promiscuous mode [ 852.230393][ T79] veth1_vlan: left promiscuous mode [ 852.249368][ T79] veth0_vlan: left promiscuous mode [ 852.651763][ T48] Bluetooth: hci3: command tx timeout [ 853.515592][ T8379] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 853.775273][ T8379] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 853.802855][ T8379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.826620][ T8379] usb 1-1: Product: syz [ 853.838369][ T8379] usb 1-1: Manufacturer: syz [ 853.857884][ T8379] usb 1-1: SerialNumber: syz [ 853.953232][ T8379] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 854.201331][ T5675] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 854.672324][ T79] team0 (unregistering): Port device team_slave_1 removed [ 854.742936][ T48] Bluetooth: hci3: command tx timeout [ 854.754900][ T5681] usb 1-1: USB disconnect, device number 12 [ 854.801118][ T79] team0 (unregistering): Port device team_slave_0 removed [ 855.464500][ T5675] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 855.500619][ T5675] ath9k_htc: Failed to initialize the device [ 855.544689][ T5681] usb 1-1: ath9k_htc: USB layer deinitialized [ 856.865481][T10180] loop0: detected capacity change from 0 to 8 [ 857.598046][T10183] loop3: detected capacity change from 0 to 1024 [ 857.655753][ T8308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.687914][T10183] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 858.229790][ T8308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.848664][ T8308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.657416][ T8308] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.177026][ T8308] bridge_slave_1: left allmulticast mode [ 861.221458][ T8308] bridge_slave_1: left promiscuous mode [ 861.249686][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.341470][ T8308] bridge_slave_0: left allmulticast mode [ 861.382009][ T8308] bridge_slave_0: left promiscuous mode [ 861.425667][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.460436][T10236] loop3: detected capacity change from 0 to 764 [ 863.043541][ T8308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.143684][ T8308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.231059][ T8308] bond0 (unregistering): Released all slaves [ 864.036033][ T8308] hsr_slave_0: left promiscuous mode [ 864.100011][ T8308] hsr_slave_1: left promiscuous mode [ 864.147901][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.184571][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.228345][ T8308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.256232][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.378377][ T8308] veth1_macvtap: left promiscuous mode [ 864.408564][ T8308] veth0_macvtap: left promiscuous mode [ 864.426921][ T8308] veth1_vlan: left promiscuous mode [ 864.456135][ T8308] veth0_vlan: left promiscuous mode [ 866.827899][ T8308] team0 (unregistering): Port device team_slave_1 removed [ 866.951841][ T8308] team0 (unregistering): Port device team_slave_0 removed [ 868.040029][T10078] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.067340][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.108138][T10078] bridge_slave_0: entered allmulticast mode [ 868.156805][T10078] bridge_slave_0: entered promiscuous mode [ 868.249165][T10078] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.279470][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.293249][T10282] loop3: detected capacity change from 0 to 128 [ 868.311626][T10078] bridge_slave_1: entered allmulticast mode [ 868.387668][T10078] bridge_slave_1: entered promiscuous mode [ 868.424843][T10282] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 868.532205][T10282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 868.908439][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.027826][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.861052][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.890144][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.913966][T10103] bridge_slave_0: entered allmulticast mode [ 869.948899][T10103] bridge_slave_0: entered promiscuous mode [ 870.035658][T10078] team0: Port device team_slave_0 added [ 870.072250][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.110496][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.148150][T10103] bridge_slave_1: entered allmulticast mode [ 870.192889][T10103] bridge_slave_1: entered promiscuous mode [ 870.572777][T10303] loop0: detected capacity change from 0 to 1024 [ 870.584756][T10078] team0: Port device team_slave_1 added [ 870.955970][T10103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.369724][T10103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.580312][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.624884][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.763140][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.050189][T10103] team0: Port device team_slave_0 added [ 872.092161][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.121890][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.233744][T10322] loop0: detected capacity change from 0 to 128 [ 872.278890][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.345179][T10103] team0: Port device team_slave_1 added [ 872.386913][T10322] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 872.401319][T10322] ext4 filesystem being mounted at /393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 872.700633][ T5573] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 873.008317][T10103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.039565][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.186998][T10103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.384782][T10103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.413905][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.495521][T10103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.219537][T10078] hsr_slave_0: entered promiscuous mode [ 874.260822][T10078] hsr_slave_1: entered promiscuous mode [ 874.667705][T10339] trusted_key: encrypted_key: key trusted:syz not found [ 875.040020][T10103] hsr_slave_0: entered promiscuous mode [ 875.103015][T10103] hsr_slave_1: entered promiscuous mode [ 875.140410][T10103] debugfs: 'hsr0' already exists in 'hsr' [ 875.163435][T10103] Cannot create hsr debugfs directory [ 876.102208][T10350] loop4: detected capacity change from 0 to 512 [ 876.208828][T10350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 876.251926][T10352] loop3: detected capacity change from 0 to 512 [ 876.337572][T10350] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1605: iget: bad i_size value: 38620345925642 [ 876.372882][T10350] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 876.377714][T10350] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1605: couldn't read orphan inode 15 (err -117) [ 876.387564][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 876.387685][ C1] EXT4-fs (loop4): initial error at time 1779763092: ext4_orphan_get:1397: inode 15 [ 876.387850][ C1] EXT4-fs (loop4): last error at time 1779763092: ext4_orphan_get:1397: inode 15 [ 876.462039][T10352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.540216][T10352] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.634328][T10350] loop4: lost filesystem error report for type 5 error -117 [ 876.667410][T10350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 876.814996][T10352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 876.843274][T10352] EXT4-fs (loop3): can't enable nombcache during remount [ 876.879122][T10357] loop0: detected capacity change from 0 to 2048 [ 876.967973][T10357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 877.352735][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.477462][ T5573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.839755][ T5589] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.977167][ T7991] tipc: Subscription rejected, illegal request [ 879.989477][T10078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 880.105097][T10078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 880.156130][T10078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 880.315014][T10078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 880.485289][T10078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 880.592971][T10078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 880.638670][T10078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 880.728801][T10393] loop0: detected capacity change from 0 to 512 [ 880.747012][T10078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 880.894325][T10393] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 881.190630][T10393] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 882.235099][T10103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 882.359230][T10103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 882.480159][T10103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 882.568318][T10103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.809135][T10103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 882.969526][T10103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 883.031950][T10103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 883.164514][T10103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 883.987581][T10078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.346711][T10424] loop0: detected capacity change from 0 to 2048 [ 884.394563][T10078] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.590827][T10424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.631761][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.639526][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.919897][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.927912][ T7991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.054082][T10427] loop3: detected capacity change from 0 to 4096 [ 885.129535][T10427] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 885.264736][ T5573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.498946][T10427] ntfs3(loop3): ino=19, mi_enum_attr [ 885.526736][T10427] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 886.394771][T10440] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1631'. [ 886.735853][T10444] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1633'. [ 886.783657][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 886.964360][T10103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.314279][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 887.323888][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 887.447222][T10103] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.666837][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.674591][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.715188][T10449] loop3: detected capacity change from 0 to 512 [ 887.917791][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.925568][ T8015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.017024][T10449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.118387][T10449] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.518902][T10461] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz.3.1634: invalid size [ 888.628994][T10461] EXT4-fs (loop3): Remounting filesystem read-only [ 889.275733][ T8308] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 889.293142][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.345200][ T8308] Quota error (device loop3): write_blk: dquota write failed [ 889.400425][ T8308] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 890.179106][T10471] loop0: detected capacity change from 0 to 1764 [ 892.899530][T10505] loop4: detected capacity change from 0 to 128 [ 893.063135][T10505] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 893.146621][T10078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.218489][T10505] hpfs: filesystem error: improperly stopped [ 893.313362][T10505] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 893.365471][T10505] hpfs: You really don't want any checks? You are crazy... [ 893.421726][T10505] hpfs: Code page index out of array [ 893.454116][T10505] hpfs: code page support is disabled [ 893.485669][T10505] hpfs: hpfs_map_4sectors(): unaligned read [ 893.535777][T10505] hpfs: hpfs_map_4sectors(): unaligned read [ 893.616787][T10505] hpfs: filesystem error: unable to find root dir [ 893.800114][T10505] hpfs: hpfs_map_4sectors(): unaligned read [ 894.159857][T10518] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1648'. [ 894.195920][T10518] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1648'. [ 895.027585][T10103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.555206][T10533] loop4: detected capacity change from 0 to 256 [ 895.694598][T10533] exfat: Deprecated parameter 'namecase' [ 895.785862][T10533] exfat: Deprecated parameter 'utf8' [ 896.147443][T10533] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 897.189329][T10078] veth0_vlan: entered promiscuous mode [ 897.414060][T10078] veth1_vlan: entered promiscuous mode [ 897.506237][ T29] audit: type=1326 audit(1779763113.869:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 897.668831][ T29] audit: type=1326 audit(1779763113.949:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 897.828086][ T29] audit: type=1326 audit(1779763113.969:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 897.986167][ T29] audit: type=1326 audit(1779763113.979:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 898.108520][ T29] audit: type=1326 audit(1779763113.969:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 898.158233][T10078] veth0_macvtap: entered promiscuous mode [ 898.239045][T10561] loop4: detected capacity change from 0 to 64 [ 898.264023][ T29] audit: type=1326 audit(1779763113.979:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 898.349329][T10078] veth1_macvtap: entered promiscuous mode [ 898.395696][ T29] audit: type=1326 audit(1779763113.999:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 898.555094][ T29] audit: type=1326 audit(1779763113.999:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 898.693099][ T29] audit: type=1326 audit(1779763113.999:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.3.1657" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 899.054428][T10078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.309231][T10078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.793732][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.830367][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.845379][T10571] loop0: detected capacity change from 0 to 256 [ 899.889755][T10571] exfat: Deprecated parameter 'utf8' [ 899.927269][T10571] exfat: Deprecated parameter 'namecase' [ 899.944221][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.964467][T10571] exfat: Deprecated parameter 'namecase' [ 899.989578][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.143423][T10571] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 900.316042][T10103] veth0_vlan: entered promiscuous mode [ 900.727530][T10103] veth1_vlan: entered promiscuous mode [ 900.952760][T10578] loop3: detected capacity change from 0 to 8 [ 901.397896][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 902.912565][ T8564] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 903.183473][ T8564] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 903.235763][ T8564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.331947][ T8564] usb 4-1: config 0 descriptor?? [ 903.408580][ T8564] cp210x 4-1:0.0: cp210x converter detected [ 904.082829][ T8564] usb 4-1: cp210x converter now attached to ttyUSB0 [ 904.240408][ T8564] usb 4-1: USB disconnect, device number 9 [ 904.432930][ T8564] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 904.735477][ T8564] cp210x 4-1:0.0: device disconnected [ 905.097479][ T8554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 905.111774][ T8554] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 905.145284][ T8554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 905.183833][ T8554] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 905.229345][ T8554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 906.689060][ T8554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 906.712525][ T8554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 906.728805][ T8554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 906.785004][ T8554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 906.810223][ T8554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 907.145618][ T8307] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.371265][ T48] Bluetooth: hci5: command tx timeout [ 907.627298][ T8307] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.769664][T10626] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 908.162693][ T8307] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.695850][ T8307] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.891476][ T48] Bluetooth: hci1: command tx timeout [ 909.454977][ T48] Bluetooth: hci5: command tx timeout [ 910.308642][ T8307] bridge_slave_1: left allmulticast mode [ 910.361530][ T8307] bridge_slave_1: left promiscuous mode [ 910.396619][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.539474][ T8307] bridge_slave_0: left allmulticast mode [ 910.586029][ T8307] bridge_slave_0: left promiscuous mode [ 910.607828][T10648] loop3: detected capacity change from 0 to 4096 [ 910.623741][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.782390][T10653] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 910.975080][ T48] Bluetooth: hci1: command tx timeout [ 911.531246][ T48] Bluetooth: hci5: command tx timeout [ 912.408085][ T8307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.536019][ T8307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.631253][ T8307] bond0 (unregistering): Released all slaves [ 912.996709][T10661] pim6reg: entered allmulticast mode [ 913.051520][ T48] Bluetooth: hci1: command tx timeout [ 913.351901][ T8307] hsr_slave_0: left promiscuous mode [ 913.409238][ T8307] hsr_slave_1: left promiscuous mode [ 913.455353][ T8307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.485172][ T8307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.544881][ T8307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.576146][ T8307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.614186][ T48] Bluetooth: hci5: command tx timeout [ 913.723981][ T8307] veth1_macvtap: left promiscuous mode [ 913.767322][ T8307] veth0_macvtap: left promiscuous mode [ 913.779671][ T8307] veth1_vlan: left promiscuous mode [ 913.791393][ T8307] veth0_vlan: left promiscuous mode [ 914.522269][T10679] loop0: detected capacity change from 0 to 256 [ 914.886982][T10679] FAT-fs (loop0): Directory bread(block 64) failed [ 914.925095][T10679] FAT-fs (loop0): Directory bread(block 65) failed [ 914.959857][T10679] FAT-fs (loop0): Directory bread(block 66) failed [ 914.985960][T10679] FAT-fs (loop0): Directory bread(block 67) failed [ 915.011391][T10679] FAT-fs (loop0): Directory bread(block 68) failed [ 915.043406][T10679] FAT-fs (loop0): Directory bread(block 69) failed [ 915.083466][T10679] FAT-fs (loop0): Directory bread(block 70) failed [ 915.121343][T10679] FAT-fs (loop0): Directory bread(block 71) failed [ 915.131428][ T48] Bluetooth: hci1: command tx timeout [ 915.172462][T10679] FAT-fs (loop0): Directory bread(block 72) failed [ 915.208654][T10679] FAT-fs (loop0): Directory bread(block 73) failed [ 916.067988][T10687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1699'. [ 916.088128][T10686] loop4: detected capacity change from 0 to 128 [ 916.190426][T10686] EXT4-fs (loop4): Test dummy encryption mode enabled [ 916.351844][T10686] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 916.389041][T10686] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 916.408624][ T8307] team0 (unregistering): Port device team_slave_1 removed [ 916.490592][ T8307] team0 (unregistering): Port device team_slave_0 removed [ 916.535750][T10686] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 916.600342][T10690] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 916.835696][T10692] loop0: detected capacity change from 0 to 2048 [ 916.886540][T10692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 917.192141][ T5589] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 918.282954][T10698] loop0: detected capacity change from 0 to 64 [ 922.499909][ T8308] bridge_slave_1: left allmulticast mode [ 922.545236][ T8308] bridge_slave_1: left promiscuous mode [ 922.582036][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.710635][ T8308] bridge_slave_0: left allmulticast mode [ 922.760513][ T8308] bridge_slave_0: left promiscuous mode [ 922.806421][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.938995][T10743] loop3: detected capacity change from 0 to 64 [ 923.876306][T10748] loop3: detected capacity change from 0 to 256 [ 924.189562][T10748] FAT-fs (loop3): Directory bread(block 64) failed [ 924.225152][T10748] FAT-fs (loop3): Directory bread(block 65) failed [ 924.245224][T10748] FAT-fs (loop3): Directory bread(block 66) failed [ 924.278819][T10748] FAT-fs (loop3): Directory bread(block 67) failed [ 924.311684][T10748] FAT-fs (loop3): Directory bread(block 68) failed [ 924.344237][T10748] FAT-fs (loop3): Directory bread(block 69) failed [ 924.359078][T10748] FAT-fs (loop3): Directory bread(block 70) failed [ 924.393462][T10748] FAT-fs (loop3): Directory bread(block 71) failed [ 924.411506][T10748] FAT-fs (loop3): Directory bread(block 72) failed [ 924.430011][T10748] FAT-fs (loop3): Directory bread(block 73) failed [ 924.457238][ T8308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.531984][ T8308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.587017][ T8308] bond0 (unregistering): Released all slaves [ 924.799717][ T5228] 8021q: adding VLAN 0 to HW filter on device eth9 [ 925.369633][ T8308] hsr_slave_0: left promiscuous mode [ 925.402124][ T8308] hsr_slave_1: left promiscuous mode [ 925.427562][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.465880][T10753] loop3: detected capacity change from 0 to 512 [ 925.479277][ T8308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.591265][T10753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.653955][ T8308] veth1_vlan: left promiscuous mode [ 925.680411][ T8308] veth0_vlan: left promiscuous mode [ 925.768641][T10753] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #11: comm syz.3.1717: checksumming directory block 0 [ 926.130273][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.235156][T10759] loop0: detected capacity change from 0 to 512 [ 926.312842][T10759] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 926.400583][T10759] EXT4-fs (loop0): 1 truncate cleaned up [ 926.468354][T10759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.939474][ T5573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.138430][T10768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1722'. [ 928.194708][ T8308] team0 (unregistering): Port device team_slave_1 removed [ 928.267978][ T8308] team0 (unregistering): Port device team_slave_0 removed [ 929.920291][T10599] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.965413][T10599] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.003692][T10599] bridge_slave_0: entered allmulticast mode [ 930.065759][T10599] bridge_slave_0: entered promiscuous mode [ 930.347957][T10599] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.387289][T10599] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.432036][T10599] bridge_slave_1: entered allmulticast mode [ 930.474790][T10599] bridge_slave_1: entered promiscuous mode [ 931.009768][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.046886][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.087327][T10613] bridge_slave_0: entered allmulticast mode [ 931.127661][T10613] bridge_slave_0: entered promiscuous mode [ 931.208304][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.231829][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.255792][T10613] bridge_slave_1: entered allmulticast mode [ 931.295351][T10613] bridge_slave_1: entered promiscuous mode [ 931.423664][T10599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.824563][T10599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.147605][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.437314][T10599] team0: Port device team_slave_0 added [ 932.525102][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.813840][T10599] team0: Port device team_slave_1 added [ 933.470291][T10613] team0: Port device team_slave_0 added [ 933.512816][T10599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.552864][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.653472][T10599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.706845][T10599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.735966][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.821541][T10599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.909114][T10613] team0: Port device team_slave_1 added [ 934.190556][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.201018][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.276294][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.359926][ T5228] 8021q: adding VLAN 0 to HW filter on device eth10 [ 934.380088][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.388104][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.419321][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.458538][T10599] hsr_slave_0: entered promiscuous mode [ 934.470602][T10599] hsr_slave_1: entered promiscuous mode [ 934.737842][T10613] hsr_slave_0: entered promiscuous mode [ 934.755164][T10613] hsr_slave_1: entered promiscuous mode [ 934.765951][T10613] debugfs: 'hsr0' already exists in 'hsr' [ 934.773905][T10613] Cannot create hsr debugfs directory [ 937.169737][T10613] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 937.237769][T10613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 937.266647][T10613] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 937.316243][T10613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.355287][T10613] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 937.425803][T10613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.455207][T10613] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 937.531863][T10613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 937.810326][T10599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 937.843281][T10599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 937.884770][T10599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 937.922269][T10599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.951864][T10599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 937.983998][T10599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 938.038397][T10599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 938.077057][T10599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 938.924619][T10613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.154204][T10613] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.279831][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.287658][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.438192][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.445922][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.859716][T10599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.169914][T10599] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.331060][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.338747][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.509366][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.517182][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.977226][T10613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.675257][T10599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.328989][T10613] veth0_vlan: entered promiscuous mode [ 946.508924][T10613] veth1_vlan: entered promiscuous mode [ 946.857375][T10599] veth0_vlan: entered promiscuous mode [ 946.986476][T10599] veth1_vlan: entered promiscuous mode [ 947.164331][T10613] veth0_macvtap: entered promiscuous mode [ 947.257038][T10613] veth1_macvtap: entered promiscuous mode [ 947.598950][T10599] veth0_macvtap: entered promiscuous mode [ 947.654965][T10613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.818184][T10613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.844787][T10599] veth1_macvtap: entered promiscuous mode [ 947.969495][ T7991] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.986129][ T7991] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.038152][ T7991] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.063072][ T79] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.279569][T10599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.389952][T10599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.521282][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.555901][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.605619][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.633669][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.756849][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 948.767023][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 953.369593][ T7991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.389269][ T7991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.531467][ T7991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.550485][ T7991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.724115][ T7991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.741728][ T7991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.922709][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.985613][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.276515][T10966] loop6: detected capacity change from 0 to 512 [ 954.474435][T10966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.527833][T10966] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.023014][T10613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.614238][ T5718] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 955.837414][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 955.917955][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.972695][ T5718] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 956.027974][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.098851][ T5718] usb 4-1: config 0 descriptor?? [ 956.193256][ T5718] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 956.871670][ T5718] gspca_vc032x: reg_r err -71 [ 956.898873][ T5718] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 956.960015][ T5718] usb 4-1: USB disconnect, device number 10 [ 957.196833][T10998] loop0: detected capacity change from 0 to 24 [ 957.728627][T11002] loop6: detected capacity change from 0 to 1024 [ 957.794316][T11002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 958.000744][T11002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.184407][T11002] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 958.526003][T11012] netlink: 'syz.3.1752': attribute type 3 has an invalid length. [ 958.565979][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1752'. [ 958.633118][T10613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.146369][T11015] netlink: 'syz.0.1754': attribute type 2 has an invalid length. [ 959.789759][T11022] loop5: detected capacity change from 0 to 256 [ 959.967077][T11022] exfat: Deprecated parameter 'namecase' [ 960.019958][T11022] exfat: Deprecated parameter 'utf8' [ 960.478900][T11022] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 960.591762][ T5718] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 960.822418][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 960.947520][ T5718] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 960.989816][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 961.026511][ T5718] usb 4-1: Product: syz [ 961.061743][ T5718] usb 4-1: Manufacturer: syz [ 961.080124][ T5718] usb 4-1: SerialNumber: syz [ 961.145079][ T5718] usb 4-1: config 0 descriptor?? [ 961.230315][ T5718] gspca_main: sq905-2.14.0 probing 2770:9120 [ 961.894550][ T5718] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 961.925726][ T5718] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 961.970719][ T5718] usb 4-1: USB disconnect, device number 11 [ 962.183628][ T24] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 962.385192][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 962.417974][ T24] usb 1-1: config 0 has no interface number 0 [ 962.456889][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 962.515852][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 962.578059][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 962.648382][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.700359][ T24] usb 1-1: config 0 descriptor?? [ 962.747936][T11042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 962.958165][ T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 963.151644][ T24] usb 1-1: USB disconnect, device number 13 [ 963.270340][T11051] udevd[11051]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 964.233615][T11062] loop3: detected capacity change from 0 to 16 [ 964.353754][T11062] erofs (device loop3): mounted with root inode @ nid 36. [ 964.686534][T11068] loop0: detected capacity change from 0 to 64 [ 965.866039][T11075] loop3: detected capacity change from 0 to 1024 [ 968.088105][T11098] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 968.473065][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1794'. [ 971.456917][ T5686] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 971.657872][ T5686] usb 4-1: Using ep0 maxpacket: 8 [ 971.744308][ T5686] usb 4-1: unable to get BOS descriptor or descriptor too short [ 971.825852][ T5686] usb 4-1: config 9 has an invalid interface number: 40 but max is 0 [ 971.845395][ T5686] usb 4-1: config 9 has no interface number 0 [ 971.891379][ T5686] usb 4-1: config 9 interface 40 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 971.938508][ T5686] usb 4-1: config 9 interface 40 has no altsetting 0 [ 972.030467][ T5686] usb 4-1: New USB device found, idVendor=05da, idProduct=00a0, bcdDevice=f1.38 [ 972.074294][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.086790][ T5686] usb 4-1: Product: syz [ 972.096717][ T5686] usb 4-1: Manufacturer: syz [ 972.111139][ T5686] usb 4-1: SerialNumber: syz [ 972.557582][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.609782][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.695426][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.764253][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.909768][ T5686] usb 4-1: can only deal with bulk endpoints; endpoint 9 is not bulk. [ 972.970517][ T5686] usb 4-1: can only deal with bulk endpoints; endpoint 14 is not bulk. [ 973.002553][ T5686] usb 4-1: can only deal with bulk endpoints; endpoint 10 is not bulk. [ 973.034690][ T5686] usb 4-1: couldn't find two input bulk endpoints. Bailing out. [ 973.153838][ T5686] usb 4-1: USB disconnect, device number 12 [ 973.293563][T11138] syz.6.1808 (11138): drop_caches: 2 [ 974.126317][T11154] tipc: Failed to obtain node identity [ 974.173054][T11154] tipc: Enabling of bearer rejected, failed to enable media [ 975.550357][T11173] loop4: detected capacity change from 0 to 64 [ 976.589140][T11185] loop6: detected capacity change from 0 to 1024 [ 976.635116][T11185] EXT4-fs: Ignoring removed i_version option [ 976.661681][T11185] EXT4-fs: Ignoring removed orlov option [ 976.751171][ T5686] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 976.825123][T11185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.931428][ T5686] usb 1-1: Using ep0 maxpacket: 8 [ 976.944114][ T5686] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 976.990530][ T5686] usb 1-1: config 2 has no interface number 0 [ 977.010149][ T5686] usb 1-1: config 2 interface 31 has no altsetting 0 [ 977.050278][ T5686] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 977.094118][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.153368][ T5686] usb 1-1: Product: syz [ 977.179772][ T5686] usb 1-1: Manufacturer: syz [ 977.213387][ T5686] usb 1-1: SerialNumber: syz [ 977.700640][T10613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.050417][ T5686] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 978.254036][ T5686] usb 1-1: USB disconnect, device number 14 [ 978.791073][T11203] loop3: detected capacity change from 0 to 128 [ 978.906052][T11201] loop6: detected capacity change from 0 to 2048 [ 978.917608][T11203] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 978.996669][T11203] hpfs: filesystem error: improperly stopped [ 979.035939][T11203] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 979.080737][T11201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 979.091022][T11203] hpfs: You really don't want any checks? You are crazy... [ 979.129361][T11203] hpfs: hpfs_map_sector(): read error [ 979.175499][T11203] hpfs: code page support is disabled [ 979.210561][T11203] hpfs: hpfs_map_4sectors(): unaligned read [ 979.274011][T11203] hpfs: hpfs_map_4sectors(): unaligned read [ 979.329570][T11203] hpfs: filesystem error: unable to find root dir [ 980.418303][T11214] loop0: detected capacity change from 0 to 736 [ 980.855551][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1847'. [ 981.051601][T11214] rock: directory entry would overflow storage [ 981.088730][T11214] rock: sig=0x3b10, size=4, remaining=3 [ 982.317844][T11227] loop6: detected capacity change from 0 to 2048 [ 982.543121][T11236] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 982.551920][T11235] loop5: detected capacity change from 0 to 128 [ 982.789800][T11227] NILFS (loop6): error -2 truncating bmap (ino=16) [ 983.191933][T11236] NILFS (loop6): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 983.246340][T11236] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 983.289176][T11236] Remounting filesystem read-only [ 983.310739][T10613] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 984.624630][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1861'. [ 984.809446][T11246] loop6: detected capacity change from 0 to 4096 [ 984.876752][T11246] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 985.398921][T11246] ntfs3(loop6): ino=19, mi_enum_attr [ 985.452105][T11246] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 985.616631][T11259] ipvlan3: entered promiscuous mode [ 985.684667][T11246] ntfs3(loop6): failed to convert "c46c" to cp863 [ 985.698745][T11259] bridge0: port 3(ipvlan3) entered blocking state [ 985.713378][T11259] bridge0: port 3(ipvlan3) entered disabled state [ 985.724271][T11246] ntfs3(loop6): ino=20, mi_enum_attr [ 985.764225][T11259] ipvlan3: entered allmulticast mode [ 985.816394][T11259] bridge0: entered allmulticast mode [ 985.905907][T11259] ipvlan3: left allmulticast mode [ 985.942112][T11259] bridge0: left allmulticast mode [ 986.828083][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1870'. [ 986.929537][T11270] netlink: 'syz.6.1870': attribute type 21 has an invalid length. [ 986.973597][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1870'. [ 987.371745][T11277] loop3: detected capacity change from 0 to 512 [ 987.490730][T11277] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 987.655003][T11277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.695576][T11277] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.1873: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 987.851902][T11277] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 12: comm syz.3.1873: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 987.958838][T11277] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.1873: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 988.544591][ T5577] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 988.693890][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.158111][T11292] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1879'. [ 989.236890][T11292] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1879'. [ 989.362874][T11294] nbd: must specify a size in bytes for the device [ 990.017579][T11296] loop6: detected capacity change from 0 to 64 [ 990.221349][ T29] audit: type=1326 audit(1779763206.579:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.3.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 990.398630][ T29] audit: type=1326 audit(1779763206.579:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.3.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 990.533348][ T29] audit: type=1326 audit(1779763206.659:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.3.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 990.668291][ T29] audit: type=1326 audit(1779763206.659:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.3.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 990.828016][ T29] audit: type=1326 audit(1779763206.669:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.3.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 990.959362][ T29] audit: type=1326 audit(1779763206.669:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11299 comm="syz.3.1883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244d9ce59 code=0x7ffc0000 [ 991.138646][T11310] loop3: detected capacity change from 0 to 128 [ 991.377583][T11314] loop6: detected capacity change from 0 to 64 [ 992.914128][T11325] loop4: detected capacity change from 0 to 512 [ 993.028818][T11325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.477724][T11321] loop3: detected capacity change from 0 to 4096 [ 993.846320][ T5589] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.904491][T11321] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 994.241814][T11321] ntfs3(loop3): Failed to load $Extend (-22). [ 994.328676][T11321] ntfs3(loop3): Failed to initialize $Extend. [ 995.977258][T11353] loop0: detected capacity change from 0 to 64 [ 996.373286][T11355] netlink: 'syz.4.1907': attribute type 1 has an invalid length. [ 996.431180][T11355] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1907'. [ 997.081899][T11363] loop0: detected capacity change from 0 to 256 [ 997.481069][T11363] FAT-fs (loop0): Directory bread(block 64) failed [ 997.520445][T11363] FAT-fs (loop0): Directory bread(block 65) failed [ 997.562549][T11363] FAT-fs (loop0): Directory bread(block 66) failed [ 997.604156][T11363] FAT-fs (loop0): Directory bread(block 67) failed [ 997.646532][T11363] FAT-fs (loop0): Directory bread(block 68) failed [ 997.698638][T11363] FAT-fs (loop0): Directory bread(block 69) failed [ 997.783730][T11363] FAT-fs (loop0): Directory bread(block 70) failed [ 997.820144][T11363] FAT-fs (loop0): Directory bread(block 71) failed [ 997.878379][T11363] FAT-fs (loop0): Directory bread(block 72) failed [ 997.917386][T11363] FAT-fs (loop0): Directory bread(block 73) failed [ 998.624074][T11377] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1913'. [ 1000.098287][T11389] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 1000.486474][T11392] loop5: detected capacity change from 0 to 1024 [ 1000.981277][T11398] loop4: detected capacity change from 0 to 256 [ 1001.026866][T11398] exfat: Deprecated parameter 'namecase' [ 1001.065981][T11398] exfat: Deprecated parameter 'namecase' [ 1001.198207][T11398] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1001.941777][T11403] loop3: detected capacity change from 0 to 4096 [ 1002.271712][T11408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1003.813307][T11420] netlink: 'syz.3.1935': attribute type 3 has an invalid length. [ 1005.123466][T11428] loop4: detected capacity change from 0 to 1024 [ 1007.162380][T11449] loop4: detected capacity change from 0 to 256 [ 1007.361992][T11449] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1009.303071][T11470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1959'. [ 1009.399750][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1959'. [ 1010.184883][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1010.192173][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1010.274580][T11482] loop4: detected capacity change from 0 to 128 [ 1010.347014][T11482] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1010.418478][T11482] hpfs: filesystem error: improperly stopped [ 1010.439600][T11482] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1010.472081][T11482] hpfs: You really don't want any checks? You are crazy... [ 1010.499250][T11482] hpfs: hpfs_map_sector(): read error [ 1010.522705][T11482] hpfs: code page support is disabled [ 1010.563980][T11482] hpfs: hpfs_map_4sectors(): unaligned read [ 1010.594366][T11482] hpfs: hpfs_map_4sectors(): unaligned read [ 1010.637976][T11482] hpfs: filesystem error: unable to find root dir [ 1010.780740][T11482] hpfs: hpfs_map_4sectors(): unaligned read [ 1011.657380][T11493] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1967'. [ 1011.908116][T11499] IPVS: Error connecting to the multicast addr [ 1012.173461][T11495] loop4: detected capacity change from 0 to 4096 [ 1012.418915][T11502] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1012.953812][T11508] loop0: detected capacity change from 0 to 512 [ 1013.047188][T11508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1013.146808][T11508] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1975: bad orphan inode 131083 [ 1013.204705][T11508] loop0: lost filesystem error report for type 5 error -117 [ 1013.334647][T11508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.459457][ T5573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.824406][T11518] loop4: detected capacity change from 0 to 32768 [ 1014.835796][T11518] btrfs: Deprecated parameter 'usebackuproot' [ 1014.842408][T11518] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1014.909680][T11518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1977 (11518) [ 1014.937363][T11518] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1014.948225][T11518] BTRFS info (device loop4): using crc32c checksum algorithm [ 1015.088061][ T13] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1015.115264][T11518] BTRFS error (device loop4): failed to load root extent [ 1015.123209][T11518] BTRFS warning (device loop4): try to load backup roots slot 1 [ 1015.132678][ T1114] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1015.157453][T11518] BTRFS warning (device loop4): couldn't read tree root [ 1015.166883][T11518] BTRFS warning (device loop4): try to load backup roots slot 2 [ 1015.179220][ T13] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1015.287273][T11518] BTRFS warning (device loop4): couldn't read tree root [ 1015.299674][T11518] BTRFS warning (device loop4): try to load backup roots slot 3 [ 1015.342441][T11518] BTRFS info (device loop4): rebuilding free space tree [ 1015.384188][T11518] BTRFS info (device loop4): checking UUID tree [ 1015.399552][T11518] BTRFS info (device loop4): enabling ssd optimizations [ 1015.407601][T11518] BTRFS info (device loop4): disabling tree log [ 1015.414250][T11518] BTRFS info (device loop4): turning on async discard [ 1015.421488][T11518] BTRFS info (device loop4): enabling free space tree [ 1015.428522][T11518] BTRFS info (device loop4): force clearing of disk cache [ 1015.436105][T11518] BTRFS info (device loop4): enabling auto defrag [ 1015.442929][T11518] BTRFS info (device loop4): trying to use backup root at mount time [ 1015.451474][T11518] BTRFS info (device loop4): force zlib compression, level 3 [ 1015.737478][T11510] loop5: detected capacity change from 0 to 4096 [ 1015.774545][T11540] loop0: detected capacity change from 0 to 128 [ 1016.144545][ T5589] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1016.209610][T11510] NILFS (loop5): error -4 creating segctord thread [ 1017.249076][T11551] netlink: 75 bytes leftover after parsing attributes in process `syz.0.1986'. [ 1019.684116][T11561] loop6: detected capacity change from 0 to 4096 [ 1022.347071][T11590] loop4: detected capacity change from 0 to 256 [ 1023.134435][T11595] loop3: detected capacity change from 0 to 4096 [ 1023.289056][T11595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.484324][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.704072][T11610] loop5: detected capacity change from 0 to 2048 [ 1025.048019][T11610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.327105][ T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1025.503728][T11623] loop4: detected capacity change from 0 to 1024 [ 1025.567298][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1025.639926][ T24] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1025.679872][T11623] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1025.720215][ T24] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1025.802316][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1025.845028][ T24] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1025.895743][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.978103][ T24] usb 4-1: config 0 descriptor?? [ 1026.028362][T11620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1026.587223][ T24] hid (null): global environment stack underflow [ 1026.748072][ T24] maltron 0003:058F:9410.0010: unknown main item tag 0x0 [ 1026.803162][ T24] maltron 0003:058F:9410.0010: unknown main item tag 0x0 [ 1026.829373][ T24] maltron 0003:058F:9410.0010: global environment stack underflow [ 1026.899145][ T24] maltron 0003:058F:9410.0010: item 0 4 1 11 parsing failed [ 1026.955438][ T24] maltron 0003:058F:9410.0010: probe with driver maltron failed with error -22 [ 1027.114218][ T24] usb 4-1: USB disconnect, device number 13 [ 1027.611323][ T8554] Bluetooth: hci5: command 0x0406 tx timeout [ 1028.993820][T11651] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2028'. [ 1029.053154][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2028'. [ 1029.093868][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 1029.136236][T11652] loop5: detected capacity change from 0 to 164 [ 1029.382186][T11652] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1030.154992][T11662] GUP no longer grows the stack in syz.3.2035 (11662): 200000006000-200000009000 (200000004000) [ 1030.289763][T11662] CPU: 0 UID: 0 PID: 11662 Comm: syz.3.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.289969][T11662] Tainted: [L]=SOFTLOCKUP [ 1030.290030][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1030.290177][T11662] Call Trace: [ 1030.290237][T11662] [ 1030.290295][T11662] __dump_stack+0x26/0x30 [ 1030.290504][T11662] dump_stack_lvl+0x14c/0x1c0 [ 1030.290681][T11662] dump_stack+0x1e/0x25 [ 1030.290831][T11662] fixup_user_fault+0xcc0/0xde0 [ 1030.291054][T11662] fault_in_user_writeable+0x99/0x1a0 [ 1030.291296][T11662] futex_lock_pi+0x5ac/0x1550 [ 1030.291463][T11662] ? futex_unqueue+0x22d/0x2c0 [ 1030.291674][T11662] ? kmsan_get_metadata+0xf1/0x160 [ 1030.291880][T11662] ? __se_sys_futex+0x5b8/0x740 [ 1030.292028][T11662] ? __msan_warning+0x1b/0x30 [ 1030.292224][T11662] ? __pfx_futex_wake_mark+0x10/0x10 [ 1030.292453][T11662] do_futex+0x2e1/0x480 [ 1030.292612][T11662] __se_sys_futex+0x5b8/0x740 [ 1030.292757][T11662] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1030.292963][T11662] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1030.293186][T11662] __x64_sys_futex+0x114/0x1a0 [ 1030.293361][T11662] x64_sys_call+0x2c48/0x3ea0 [ 1030.293549][T11662] do_syscall_64+0x134/0x390 [ 1030.293759][T11662] ? clear_bhb_loop+0x50/0xa0 [ 1030.293925][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.294184][T11662] RIP: 0033:0x7fd244d9ce59 [ 1030.294323][T11662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.294457][T11662] RSP: 002b:00007fd245bda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1030.294612][T11662] RAX: ffffffffffffffda RBX: 00007fd245015fa0 RCX: 00007fd244d9ce59 [ 1030.294726][T11662] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 1030.294824][T11662] RBP: 00007fd244e32d6f R08: 0000000000000000 R09: 0000000000000082 [ 1030.294923][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.295018][T11662] R13: 00007fd245016038 R14: 00007fd245015fa0 R15: 00007ffcd22420d8 [ 1030.295168][T11662] [ 1031.356060][T11669] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2039'. [ 1034.554814][T11707] loop5: detected capacity change from 0 to 128 [ 1034.806573][T11709] loop0: detected capacity change from 0 to 1024 [ 1041.864983][ T48] Bluetooth: min 0 < 6 [ 1042.486264][T11790] loop4: detected capacity change from 0 to 1024 [ 1042.521411][T11790] EXT4-fs: Ignoring removed nobh option [ 1042.556773][T11790] EXT4-fs: Ignoring removed bh option [ 1042.614957][T11790] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1042.797831][T11790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.056093][T11794] loop0: detected capacity change from 0 to 2048 [ 1043.266872][T11794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1043.387404][T11794] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.2096: inline data xattr refers to an external xattr inode [ 1043.661777][ T5589] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.920318][ T5573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1043.933226][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 1045.362268][T11822] netlink: 'syz.4.2105': attribute type 29 has an invalid length. [ 1045.419690][T11818] netlink: 'syz.4.2105': attribute type 29 has an invalid length. [ 1046.098678][T11833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'. [ 1046.154840][T11835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'. [ 1046.375319][T11824] loop0: detected capacity change from 0 to 4096 [ 1046.832646][T11824] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1046.858580][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 1046.988587][T11839] sctp: [Deprecated]: syz.6.2114 (pid 11839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1046.988587][T11839] Use struct sctp_sack_info instead [ 1047.105145][T11842] sctp: [Deprecated]: syz.6.2114 (pid 11842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1047.105145][T11842] Use struct sctp_sack_info instead [ 1047.176373][T11824] ntfs3(loop0): Failed to load $Extend (-22). [ 1047.220618][T11824] ntfs3(loop0): Failed to initialize $Extend. [ 1048.152167][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1048.404694][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1048.462186][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.566074][ T24] usb 6-1: config 0 descriptor?? [ 1048.637465][ T24] cp210x 6-1:0.0: cp210x converter detected [ 1049.521540][ T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1049.564420][ T24] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1049.658186][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1049.751552][ T24] usb 6-1: USB disconnect, device number 2 [ 1049.833423][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1049.907708][ T24] cp210x 6-1:0.0: device disconnected [ 1050.407876][T11873] loop0: detected capacity change from 0 to 256 [ 1050.851573][T11873] FAT-fs (loop0): Directory bread(block 64) failed [ 1050.916303][T11873] FAT-fs (loop0): Directory bread(block 65) failed [ 1050.935425][T11873] FAT-fs (loop0): Directory bread(block 66) failed [ 1050.958881][T11873] FAT-fs (loop0): Directory bread(block 67) failed [ 1051.011801][T11873] FAT-fs (loop0): Directory bread(block 68) failed [ 1051.048337][T11873] FAT-fs (loop0): Directory bread(block 69) failed [ 1051.080918][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2132'. [ 1051.102611][T11873] FAT-fs (loop0): Directory bread(block 70) failed [ 1051.163717][T11873] FAT-fs (loop0): Directory bread(block 71) failed [ 1051.225174][T11884] netlink: 'syz.3.2133': attribute type 32 has an invalid length. [ 1051.242255][T11873] FAT-fs (loop0): Directory bread(block 72) failed [ 1051.249540][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2133'. [ 1051.265828][T11873] FAT-fs (loop0): Directory bread(block 73) failed [ 1051.688897][T11878] loop6: detected capacity change from 0 to 4096 [ 1051.766658][T11884] bond1: Setting coupled_control to off (0) [ 1051.817344][T11883] tipc: Invalid UDP bearer configuration [ 1051.817555][T11883] tipc: Enabling of bearer rejected, failed to enable media [ 1052.019614][T11878] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1052.216978][T11878] ntfs3(loop6): Failed to load $Extend (-22). [ 1052.291482][T11878] ntfs3(loop6): Failed to initialize $Extend. [ 1052.807122][T11889] program syz.3.2136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.217319][ T8554] Bluetooth: hci1: command 0x0406 tx timeout [ 1053.837331][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 1053.978677][ T24] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1054.095271][ T24] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1055.206215][T11903] fido_id[11903]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1056.398862][T11923] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2151'. [ 1056.518136][T11926] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2152'. [ 1057.253678][T11930] loop4: detected capacity change from 0 to 1024 [ 1057.301872][T11930] EXT4-fs: Ignoring removed bh option [ 1057.444331][T11930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.477407][T11941] loop0: detected capacity change from 0 to 1024 [ 1057.570484][T11941] hfsplus: cannot replace xattr [ 1057.650297][T11932] loop5: detected capacity change from 0 to 2048 [ 1057.807685][T11932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1058.180455][ T5589] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.234744][T11946] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2160'. [ 1059.405372][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1059.681680][ T24] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 1059.743450][ T24] usb 7-1: config 0 has no interface number 0 [ 1059.843511][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1059.900483][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.968598][ T24] usb 7-1: Product: syz [ 1060.006203][ T24] usb 7-1: Manufacturer: syz [ 1060.045085][ T24] usb 7-1: SerialNumber: syz [ 1060.118968][ T24] usb 7-1: config 0 descriptor?? [ 1060.226805][T11962] loop3: detected capacity change from 0 to 64 [ 1060.557931][ T24] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 1060.639108][ T24] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 1060.689042][ T24] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 1060.729364][ T24] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 1060.786387][ T24] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1061.012550][ T24] usb 7-1: USB disconnect, device number 2 [ 1061.110532][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1061.194357][ T24] keyspan 7-1:0.133: device disconnected [ 1061.355161][T11971] loop5: detected capacity change from 0 to 256 [ 1061.420518][T11971] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 1061.491396][T11975] loop0: detected capacity change from 0 to 64 [ 1062.094297][T11977] loop3: detected capacity change from 0 to 256 [ 1062.139942][T11979] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2174'. [ 1062.188150][T11979] tipc: Started in network mode [ 1062.213068][T11979] tipc: Node identity 00003a0000005f120000000000000001, cluster identity 4711 [ 1062.272356][T11979] tipc: Enabling of bearer rejected, failed to enable media [ 1062.314051][T11977] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x47af2d21, utbl_chksum : 0xe619d30d) [ 1062.497044][T11983] loop0: detected capacity change from 0 to 256 [ 1063.117239][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2179'. [ 1063.321845][T11985] loop4: detected capacity change from 0 to 4096 [ 1063.526157][T11993] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1063.951969][T11999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2183'. [ 1064.858301][T12010] loop3: detected capacity change from 0 to 512 [ 1064.908685][T12010] EXT4-fs: Ignoring removed oldalloc option [ 1064.941426][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1064.956879][T12010] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1065.065142][T12010] EXT4-fs (loop3): 1 truncate cleaned up [ 1065.119720][T12010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.187499][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1065.244274][T12015] netlink: 'syz.6.2193': attribute type 1 has an invalid length. [ 1065.267262][T12015] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2193'. [ 1065.271676][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.348849][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1065.398941][T12017] loop5: detected capacity change from 0 to 64 [ 1065.417031][ T24] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 1065.468742][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.535463][ T24] usb 1-1: config 0 descriptor?? [ 1065.542871][T12019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2192'. [ 1065.591296][T12017] hfs: request for non-existent node 3584 in B*Tree [ 1065.601916][T12017] hfs: request for non-existent node 3584 in B*Tree [ 1065.610174][T12017] hfs: request for non-existent node 1280 in B*Tree [ 1065.657703][T12017] hfs: request for non-existent node 1280 in B*Tree [ 1065.767621][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.090659][ T56] hfs: request for non-existent node 1280 in B*Tree [ 1066.124466][ T56] hfs: request for non-existent node 1280 in B*Tree [ 1066.279463][ T24] usb 1-1: string descriptor 0 read error: -71 [ 1066.320983][ T24] uclogic 0003:5543:0081.0012: failed retrieving string descriptor #200: -71 [ 1066.370243][ T24] uclogic 0003:5543:0081.0012: failed retrieving pen parameters: -71 [ 1066.423711][ T24] uclogic 0003:5543:0081.0012: failed probing pen v2 parameters: -71 [ 1066.434905][ T24] uclogic 0003:5543:0081.0012: failed probing parameters: -71 [ 1066.456229][ T24] uclogic 0003:5543:0081.0012: probe with driver uclogic failed with error -71 [ 1066.517518][ T24] usb 1-1: USB disconnect, device number 15 [ 1067.436125][T12038] loop0: detected capacity change from 0 to 256 [ 1067.456370][T12039] loop5: detected capacity change from 0 to 64 [ 1067.825490][T12038] FAT-fs (loop0): Directory bread(block 64) failed [ 1067.843892][T12038] FAT-fs (loop0): Directory bread(block 65) failed [ 1067.865698][T12038] FAT-fs (loop0): Directory bread(block 66) failed [ 1067.886599][T12038] FAT-fs (loop0): Directory bread(block 67) failed [ 1067.937330][T12038] FAT-fs (loop0): Directory bread(block 68) failed [ 1067.972862][T12038] FAT-fs (loop0): Directory bread(block 69) failed [ 1067.994544][T12038] FAT-fs (loop0): Directory bread(block 70) failed [ 1068.052309][T12038] FAT-fs (loop0): Directory bread(block 71) failed [ 1068.070271][T12038] FAT-fs (loop0): Directory bread(block 72) failed [ 1068.109465][T12038] FAT-fs (loop0): Directory bread(block 73) failed [ 1068.249186][T12044] nbd: must specify a size in bytes for the device [ 1071.163275][T12082] loop0: detected capacity change from 0 to 256 [ 1071.235784][T12082] exfat: Deprecated parameter 'namecase' [ 1071.266601][T12082] exfat: Deprecated parameter 'namecase' [ 1071.366513][T12074] loop4: detected capacity change from 0 to 4096 [ 1071.408270][T12082] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1071.637663][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1071.645249][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1071.857283][T12086] loop3: detected capacity change from 0 to 512 [ 1071.914966][T12086] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1072.095116][T12086] EXT4-fs (loop3): 1 truncate cleaned up [ 1072.168802][T12086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.319806][T12086] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 63 (only 1 groups) [ 1072.809497][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.385162][T12103] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2227'. [ 1073.443175][T12099] loop5: detected capacity change from 0 to 2048 [ 1073.769567][T12106] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1074.009247][T12106] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1074.114554][T12106] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1074.186580][T12106] Remounting filesystem read-only [ 1074.719286][T12111] loop0: detected capacity change from 0 to 128 [ 1074.767939][T10599] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1074.840039][T12111] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1074.894590][T12111] hpfs: filesystem error: improperly stopped [ 1074.903519][T12111] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1074.939251][T12111] hpfs: You really don't want any checks? You are crazy... [ 1075.008157][T12111] hpfs: Code page index out of array [ 1075.053761][T12111] hpfs: code page support is disabled [ 1075.102081][T12111] hpfs: hpfs_map_4sectors(): unaligned read [ 1075.172676][T12111] hpfs: hpfs_map_4sectors(): unaligned read [ 1075.231368][T12111] hpfs: filesystem error: unable to find root dir [ 1076.388684][T12122] loop3: detected capacity change from 0 to 512 [ 1076.509334][T12122] EXT4-fs: Ignoring removed nobh option [ 1076.562091][T12122] EXT4-fs: Ignoring removed orlov option [ 1076.761504][T12122] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.2237: invalid block [ 1076.781499][T12122] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1076.791076][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1076.807929][ C1] EXT4-fs (loop3): initial error at time 1779763293: __ext4_iget:5481: inode 11: block 1 [ 1076.818440][ C1] EXT4-fs (loop3): last error at time 1779763293: __ext4_iget:5481: inode 11: block 1 [ 1076.879737][T12122] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2237: couldn't read orphan inode 11 (err -117) [ 1076.919144][T12122] loop3: lost filesystem error report for type 5 error -117 [ 1076.940189][T12122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.150716][T12128] ipvlan2: entered promiscuous mode [ 1077.295362][T12128] bridge0: port 3(ipvlan2) entered blocking state [ 1077.367973][T12128] bridge0: port 3(ipvlan2) entered disabled state [ 1077.425587][T12128] ipvlan2: entered allmulticast mode [ 1077.483358][T12128] bridge0: entered allmulticast mode [ 1077.584869][T12128] ipvlan2: left allmulticast mode [ 1077.670121][T12128] bridge0: left allmulticast mode [ 1077.904305][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.568278][T12136] netlink: 'syz.3.2243': attribute type 2 has an invalid length. [ 1080.304304][T12153] loop0: detected capacity change from 0 to 1024 [ 1080.452608][T12153] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1080.558140][T12153] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1080.642353][T12153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.025068][T12161] loop6: detected capacity change from 0 to 512 [ 1081.236501][T12161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.292708][T12161] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.494799][T12161] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 143 vs 206 free clusters [ 1081.546874][T12161] Quota error (device loop6): write_blk: dquota write failed [ 1081.559181][T12161] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1081.603691][T12161] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2253: Failed to acquire dquot type 1 [ 1081.627709][ T5573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.802444][T12169] loop3: detected capacity change from 0 to 64 [ 1082.047211][T12169] Trying to free block not in datazone [ 1082.113014][T12169] Trying to free block not in datazone [ 1082.158045][T12171] loop5: detected capacity change from 0 to 256 [ 1082.180039][T12169] Trying to free block not in datazone [ 1082.216137][T10613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.683515][T12171] FAT-fs (loop5): Directory bread(block 64) failed [ 1082.729710][T12171] FAT-fs (loop5): Directory bread(block 65) failed [ 1082.767484][T12171] FAT-fs (loop5): Directory bread(block 66) failed [ 1082.790714][T12171] FAT-fs (loop5): Directory bread(block 67) failed [ 1082.835857][T12171] FAT-fs (loop5): Directory bread(block 68) failed [ 1082.857369][T12178] loop4: detected capacity change from 0 to 128 [ 1082.911954][T12171] FAT-fs (loop5): Directory bread(block 69) failed [ 1083.008733][T12171] FAT-fs (loop5): Directory bread(block 70) failed [ 1083.046925][T12178] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1083.089490][T12171] FAT-fs (loop5): Directory bread(block 71) failed [ 1083.170556][T12171] FAT-fs (loop5): Directory bread(block 72) failed [ 1083.242336][T12171] FAT-fs (loop5): Directory bread(block 73) failed [ 1083.519805][T12178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1084.006521][T12185] loop6: detected capacity change from 0 to 64 [ 1084.179730][T12185] syz.6.2263: attempt to access beyond end of device [ 1084.179730][T12185] loop6: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1084.292851][T12185] Buffer I/O error on dev loop6, logical block 512, async page read [ 1084.358313][T12185] syz.6.2263: attempt to access beyond end of device [ 1084.358313][T12185] loop6: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1084.451413][T12185] Buffer I/O error on dev loop6, logical block 56576, async page read [ 1086.238823][T12205] program syz.0.2272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1086.387359][T12206] loop3: detected capacity change from 0 to 512 [ 1086.461383][T12206] EXT4-fs: Ignoring removed orlov option [ 1086.676064][T12206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.791174][T12206] ext4 filesystem being mounted at /577/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.499030][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.262696][T12226] loop3: detected capacity change from 0 to 512 [ 1088.346723][T12226] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1088.459092][T12222] loop5: detected capacity change from 0 to 4096 [ 1088.471871][T12226] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2280: bad orphan inode 131083 [ 1088.546281][T12226] loop3: lost filesystem error report for type 5 error -117 [ 1088.551049][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1088.565400][ C0] EXT4-fs (loop3): initial error at time 1779763304: ext4_orphan_get:1423 [ 1088.574380][ C0] EXT4-fs (loop3): last error at time 1779763304: ext4_orphan_get:1423 [ 1088.743906][T12226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.779006][T12222] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1088.796626][T12233] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1088.848975][T12222] NILFS (loop5): mounting fs with errors [ 1089.351233][ T5577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.644172][T12237] loop6: detected capacity change from 0 to 64 [ 1090.181856][T12245] loop5: detected capacity change from 0 to 1024 [ 1090.283047][T10613] hfs: node 4:3 still has 1 user(s)! [ 1090.385456][T12245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.929511][T10599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.947189][T12249] loop0: detected capacity change from 0 to 4096 [ 1091.369501][T12255] ipvlan2: entered allmulticast mode [ 1091.440408][T12255] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1091.456298][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'. [ 1091.579348][T12255] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1091.633174][T12252] loop3: detected capacity change from 0 to 4096 [ 1094.062619][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1094.293288][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1094.388468][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1094.447891][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1094.501604][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1094.575005][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1094.640097][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1094.731789][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1094.797170][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.911039][ T24] usb 5-1: config 0 descriptor?? [ 1095.335090][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1095.893973][T12295] loop5: detected capacity change from 0 to 128 [ 1095.981330][T12295] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1096.524122][T12299] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2312'. [ 1096.642699][T12294] loop0: detected capacity change from 0 to 4096 [ 1097.450215][ T8564] usb 5-1: USB disconnect, device number 8 [ 1097.481818][T12294] ntfs3(loop0): failed to convert "0080" to cp869 [ 1097.596841][ T8564] usblp0: removed [ 1097.603486][T12294] ntfs3(loop0): failed to convert name for inode 1e. [ 1097.675356][T12294] ntfs3(loop0): ino=1f, mi_enum_attr [ 1098.584755][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2319'. [ 1098.790026][T12320] TCP: TCP_TX_DELAY enabled [ 1099.167398][T12323] loop5: detected capacity change from 0 to 256 [ 1099.254321][T12323] exfat: Deprecated parameter 'namecase' [ 1099.394849][T12323] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 1101.890324][T12351] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2332'. [ 1101.939463][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2332'. [ 1101.988613][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'. [ 1102.644980][ T8564] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1102.841362][ T8564] usb 1-1: Using ep0 maxpacket: 32 [ 1102.876374][ T8564] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.941894][ T8564] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.000624][ T8564] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1103.049275][ T8564] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1103.074143][ T8564] usb 1-1: Product: syz [ 1103.084528][ T8564] usb 1-1: Manufacturer: syz [ 1103.243462][ T8564] hub 1-1:4.0: USB hub found [ 1103.418707][ T8564] hub 1-1:4.0: 7 ports detected [ 1103.440242][ T8564] hub 1-1:4.0: insufficient power available to use all downstream ports [ 1103.800452][T12370] loop5: detected capacity change from 0 to 1024 [ 1103.886649][T12370] EXT4-fs: Ignoring removed bh option [ 1104.026380][T12370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1104.161592][ T8564] usb 1-1: USB disconnect, device number 16 [ 1104.479626][T10599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.597817][T12385] loop3: detected capacity change from 0 to 2048 [ 1105.710168][T12385] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1105.878795][T12385] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1106.020573][T12391] loop6: detected capacity change from 0 to 1024 [ 1106.070426][T12391] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1106.108221][T12387] loop0: detected capacity change from 0 to 4096 [ 1106.131421][T12391] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1106.166610][T12393] loop5: detected capacity change from 0 to 1024 [ 1106.205423][T12391] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1106.243875][T12391] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1106.258511][T12391] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.2351: Inode bitmap for bg 0 marked uninitialized [ 1106.276200][T12387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.308396][T12391] loop6: lost filesystem error report for type 5 error -117 [ 1106.310861][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1106.325313][ C1] EXT4-fs (loop6): initial error at time 1779763322: ext4_read_inode_bitmap:167 [ 1106.334808][ C1] EXT4-fs (loop6): last error at time 1779763322: ext4_read_inode_bitmap:167 [ 1106.379928][T12391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1106.664539][T12391] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 1106.706475][T12393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.756894][T12393] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.795185][ T5573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.216101][T10613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.397741][T10599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1107.711194][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 1111.115220][T12438] program syz.5.2371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1111.471292][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2373'. [ 1111.502544][T12441] loop0: detected capacity change from 0 to 2048 [ 1111.528625][T12444] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2372'. [ 1111.694461][T12441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1113.224896][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 1114.710306][T12476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2387'. [ 1115.109914][T12482] loop0: detected capacity change from 0 to 256 [ 1115.907826][T12486] netlink: 'syz.5.2392': attribute type 12 has an invalid length. [ 1115.975815][T12486] netlink: 'syz.5.2392': attribute type 29 has an invalid length. [ 1116.028521][T12486] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2392'. [ 1116.345018][T12493] program syz.3.2396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1116.422739][T12492] loop0: detected capacity change from 0 to 512 [ 1116.531864][T12492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1116.659962][T12492] EXT4-fs (loop0): 1 truncate cleaned up [ 1116.691397][T12492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.054632][ T5573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.195785][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.416834][T12510] loop4: detected capacity change from 0 to 128 [ 1118.590603][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.626061][T12510] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1118.658915][T12513] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2406'. [ 1118.750519][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2406'. [ 1118.892503][T12510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1118.955865][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.210480][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.757906][ T79] bridge_slave_1: left allmulticast mode [ 1119.777381][ T79] bridge_slave_1: left promiscuous mode [ 1119.805216][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.847637][ T79] bridge_slave_0: left allmulticast mode [ 1119.871620][ T79] bridge_slave_0: left promiscuous mode [ 1119.878507][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.451382][ T79] gretap0 (unregistering): left allmulticast mode [ 1120.953538][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.072606][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.144716][ T79] bond0 (unregistering): Released all slaves [ 1121.389934][T12521] loop5: detected capacity change from 0 to 2048 [ 1121.597373][ T79] tipc: Disabling bearer [ 1121.623405][T12521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1121.687978][ T79] tipc: Disabling bearer [ 1121.703861][ T79] tipc: Left network mode [ 1121.859428][T12521] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:169: inode #12: comm syz.5.2409: inline data xattr refers to an external xattr inode [ 1122.184555][ T8554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1122.204746][ T8554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1122.224921][ T8554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1122.247632][ T8554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1122.280272][ T8554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1122.614699][T10599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1122.931246][ T79] hsr_slave_0: left promiscuous mode [ 1122.998907][ T79] hsr_slave_1: left promiscuous mode [ 1123.040317][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.103493][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.168592][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.212793][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.336928][T12543] netlink: 'syz.5.2415': attribute type 10 has an invalid length. [ 1123.369806][T12543] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2415'. [ 1123.401189][ T79] veth1_macvtap: left promiscuous mode [ 1123.421070][ T79] veth0_macvtap: left promiscuous mode [ 1123.429138][ T79] veth1_vlan: left promiscuous mode [ 1123.446034][ T79] veth0_vlan: left promiscuous mode [ 1124.325408][T12552] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1124.344250][ T8554] Bluetooth: hci0: command tx timeout [ 1125.587745][ T79] team0 (unregistering): Port device team_slave_1 removed [ 1125.716028][ T79] team0 (unregistering): Port device team_slave_0 removed [ 1126.414195][ T8554] Bluetooth: hci0: command tx timeout [ 1127.063125][ T5228] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1127.669840][ T79] IPVS: stop unused estimator thread 0... [ 1128.491625][ T8554] Bluetooth: hci0: command tx timeout [ 1130.571786][ T8554] Bluetooth: hci0: command tx timeout [ 1132.739090][T12625] loop3: detected capacity change from 0 to 32768 [ 1132.749614][T12625] btrfs: Deprecated parameter 'usebackuproot' [ 1132.756103][T12625] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1132.773601][ T5718] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1132.781796][T12625] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2438 (12625) [ 1132.809183][T12625] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1132.821192][T12625] BTRFS info (device loop3): using crc32c checksum algorithm [ 1132.846949][ T5718] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1132.960707][ T79] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1133.065791][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1133.072739][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1133.090201][T12625] BTRFS error (device loop3): failed to load root extent [ 1133.098726][T12625] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1133.118746][ T1114] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1133.232225][T12625] BTRFS warning (device loop3): couldn't read tree root [ 1133.239648][T12625] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1133.254157][ T7991] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1133.294711][T12625] BTRFS warning (device loop3): couldn't read tree root [ 1133.302544][T12625] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1133.367789][T12625] BTRFS info (device loop3): rebuilding free space tree [ 1133.409368][T12625] BTRFS info (device loop3): checking UUID tree [ 1133.419908][T12625] BTRFS info (device loop3): enabling ssd optimizations [ 1133.427557][T12625] BTRFS info (device loop3): disabling tree log [ 1133.435854][T12625] BTRFS info (device loop3): turning on async discard [ 1133.443092][T12625] BTRFS info (device loop3): enabling free space tree [ 1133.450119][T12625] BTRFS info (device loop3): force clearing of disk cache [ 1133.457649][T12625] BTRFS info (device loop3): enabling auto defrag [ 1133.464609][T12625] BTRFS info (device loop3): trying to use backup root at mount time [ 1133.473096][T12625] BTRFS info (device loop3): force zlib compression, level 3 [ 1134.142101][ T5577] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1134.551470][T12652] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2441'. [ 1134.606195][ T5228] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1134.693894][T12649] fido_id[12649]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1136.588730][T12531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.646226][T12531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.715161][T12531] bridge_slave_0: entered allmulticast mode [ 1136.848301][T12531] bridge_slave_0: entered promiscuous mode [ 1137.058603][T12531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.072945][T12531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.113612][T12531] bridge_slave_1: entered allmulticast mode [ 1137.129384][T12673] loop4: detected capacity change from 0 to 2048 [ 1137.167454][T12531] bridge_slave_1: entered promiscuous mode [ 1137.415027][T12673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1137.909133][T12531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.049841][T12531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.113874][T12684] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2451'. [ 1138.673383][T12531] team0: Port device team_slave_0 added [ 1138.809247][T12531] team0: Port device team_slave_1 added [ 1139.465783][T12531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.501267][T12531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.637923][T12531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.767601][T12531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.808500][T12531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.983001][T12531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.138700][T12705] loop6: detected capacity change from 0 to 128 [ 1140.908939][T12709] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1140.923344][T12704] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1140.970067][T12531] hsr_slave_0: entered promiscuous mode [ 1141.008311][T12709] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1141.056984][T12531] hsr_slave_1: entered promiscuous mode [ 1141.130574][T12531] debugfs: 'hsr0' already exists in 'hsr' [ 1141.147774][T12709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1141.178060][T12531] Cannot create hsr debugfs directory [ 1141.196698][T12709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1141.332856][T12709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1141.915551][T12719] tipc: New replicast peer: 255.255.255.255 [ 1141.975539][T12719] tipc: Enabled bearer , priority 10 [ 1142.341169][ T8554] Bluetooth: hci5: command 0x0406 tx timeout [ 1142.655458][ T29] audit: type=1800 audit(1779763359.009:60): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2465" name="file0" dev="tmpfs" ino=2958 res=0 errno=0 [ 1142.910529][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2466'. [ 1142.965503][ T5228] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1143.124724][ T5718] tipc: Node number set to 25875 [ 1143.131313][ T8554] Bluetooth: hci1: command 0x0406 tx timeout [ 1144.022874][T12739] loop3: detected capacity change from 0 to 256 [ 1144.078241][T12531] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1144.102700][T12740] loop4: detected capacity change from 0 to 64 [ 1144.228767][T12531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1144.306212][T12531] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1144.317375][T12739] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 1144.411957][ T8554] Bluetooth: hci5: command 0x0406 tx timeout [ 1144.469705][T12531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1144.523321][T12531] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1144.678170][T12531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1144.726363][T12744] loop6: detected capacity change from 0 to 1024 [ 1144.749888][T12531] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1144.851786][ T5718] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1144.882772][T12531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1144.969678][T12744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.072508][ T5718] usb 6-1: Using ep0 maxpacket: 32 [ 1145.126799][ T5718] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1145.179382][ T8554] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1145.197583][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.262292][ T5718] usb 6-1: config 0 descriptor?? [ 1145.402705][ T5718] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1145.745646][T10613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.266248][ T5718] gspca_sunplus: reg_r err -71 [ 1146.309726][ T5718] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1146.403146][ T5718] usb 6-1: USB disconnect, device number 3 [ 1146.678129][T12752] loop3: detected capacity change from 0 to 4096 [ 1146.935159][T12760] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1147.457658][T12531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.777319][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2478'. [ 1147.842525][T12765] netlink: 'syz.4.2478': attribute type 6 has an invalid length. [ 1147.895429][T12531] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.076290][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.084008][ T7991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.485148][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.492912][ T7991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.900558][T12777] loop4: detected capacity change from 0 to 256 [ 1149.148233][T12777] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1149.214115][ T8554] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1149.222989][ T8554] Bluetooth: hci1: Injecting HCI hardware error event [ 1149.230589][ T8554] Bluetooth: hci1: hardware error 0x00 [ 1151.294743][ T8554] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1152.181800][ T807] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1152.388103][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 1152.492663][ T807] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1152.533884][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.574221][ T807] usb 4-1: Product: syz [ 1152.601242][ T807] usb 4-1: Manufacturer: syz [ 1152.618028][T12818] netlink: 'syz.4.2495': attribute type 1 has an invalid length. [ 1152.635672][ T807] usb 4-1: SerialNumber: syz [ 1152.657052][T12818] netlink: 'syz.4.2495': attribute type 2 has an invalid length. [ 1152.696954][ T807] usb 4-1: config 0 descriptor?? [ 1152.769684][ T5228] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1152.807611][ T807] gspca_main: se401-2.14.0 probing 047d:5003 [ 1152.883030][T12820] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1153.206550][T12824] loop6: detected capacity change from 0 to 64 [ 1153.268565][ T807] gspca_se401: ExtraFeatures: 63 [ 1153.307604][ T807] gspca_se401: Frame size: 0x0 1/16th janggu [ 1153.330682][ T807] gspca_se401: Frame size: 0x0 1/16th janggu [ 1153.359502][ T807] gspca_se401: Frame size: 0x0 1/16th janggu [ 1153.386277][T12824] Trying to free block not in datazone [ 1153.532836][ T807] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 1153.745427][ T807] usb 4-1: USB disconnect, device number 14 [ 1155.106850][T12839] ipvlan2: entered promiscuous mode [ 1155.212474][T12839] bridge0: port 3(ipvlan2) entered blocking state [ 1155.271897][T12839] bridge0: port 3(ipvlan2) entered disabled state [ 1155.305566][T12839] ipvlan2: entered allmulticast mode [ 1155.327310][T12839] bridge0: entered allmulticast mode [ 1155.338369][T12839] ipvlan2: left allmulticast mode [ 1155.391950][T12839] bridge0: left allmulticast mode [ 1156.993737][T12531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.201368][ T807] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1157.407687][ T807] usb 7-1: Using ep0 maxpacket: 8 [ 1157.494353][ T807] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1157.557100][ T807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.689424][ T807] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1157.729249][ T807] pvrusb2: ********** [ 1157.748324][ T807] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1157.800529][ T807] pvrusb2: Important functionality might not be entirely working. [ 1157.876822][ T807] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1157.973726][ T807] pvrusb2: ********** [ 1158.033676][ T2352] pvrusb2: Invalid write control endpoint [ 1158.304951][ T807] usb 7-1: USB disconnect, device number 3 [ 1158.602925][ T2352] pvrusb2: Invalid write control endpoint [ 1158.657736][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1158.716998][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1158.771786][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1158.848862][ T2352] pvrusb2: Device being rendered inoperable [ 1158.895315][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1158.914306][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1158.974040][ T2352] pvrusb2: Attached sub-driver cx25840 [ 1159.011924][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1159.056903][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1160.756958][T12531] veth0_vlan: entered promiscuous mode [ 1161.018482][T12531] veth1_vlan: entered promiscuous mode [ 1161.610032][T12531] veth0_macvtap: entered promiscuous mode [ 1161.769571][T12531] veth1_macvtap: entered promiscuous mode [ 1162.134727][T12531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.402925][T12531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.599414][ T1091] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.682975][ T1091] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.729773][ T1091] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.843996][ T1091] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.682125][T12952] loop5: detected capacity change from 0 to 512 [ 1164.730375][T12952] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1164.857083][T12952] EXT4-fs (loop5): 1 truncate cleaned up [ 1164.951355][T12952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.130521][T12952] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 63 (only 1 groups) [ 1165.722821][T10599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.945472][T12961] loop4: detected capacity change from 0 to 2048 [ 1166.109154][T12961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1166.431404][T12966] binder: 12964:12966 ioctl 4018620d 0 returned -22 [ 1166.682658][ T807] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1166.904672][ T807] usb 7-1: Using ep0 maxpacket: 16 [ 1167.013499][ T807] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1167.071195][ T807] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1167.119851][ T807] usb 7-1: Product: syz [ 1167.148509][ T807] usb 7-1: Manufacturer: syz [ 1167.171127][ T807] usb 7-1: SerialNumber: syz [ 1167.265833][ T807] usb 7-1: config 0 descriptor?? [ 1168.137347][ T807] usb 7-1: USB disconnect, device number 4 [ 1168.578737][T12985] sctp: [Deprecated]: syz.4.2544 (pid 12985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1168.578737][T12985] Use struct sctp_sack_info instead [ 1168.580395][T10991] udevd[10991]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1168.943537][T12988] loop6: detected capacity change from 0 to 256 [ 1170.260170][T13005] loop6: detected capacity change from 0 to 128 [ 1170.313731][T13007] loop3: detected capacity change from 0 to 64 [ 1170.392621][T13005] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1170.418040][T13004] loop5: detected capacity change from 0 to 1024 [ 1170.535956][T13005] hpfs: filesystem error: improperly stopped [ 1170.545719][T13004] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1170.608108][T13005] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1170.616601][T13005] hpfs: You really don't want any checks? You are crazy... [ 1170.625148][T13005] hpfs: hpfs_map_sector(): read error [ 1170.645379][T13005] hpfs: code page support is disabled [ 1170.659194][T13005] hpfs: hpfs_map_4sectors(): unaligned read [ 1170.666384][T13005] hpfs: hpfs_map_4sectors(): unaligned read [ 1170.696124][T13005] hpfs: filesystem error: unable to find root dir [ 1170.721784][T13004] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 1170.769606][T13004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1170.858455][T13005] hpfs: hpfs_map_4sectors(): unaligned read [ 1170.895269][T13005] hpfs: hpfs_map_sector(): read error [ 1171.476628][T10599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.629582][T13027] ipvlan2: entered allmulticast mode [ 1172.726260][T13027] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1173.028596][T13027] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1173.181503][T13025] loop6: detected capacity change from 0 to 40427 [ 1173.219960][T13025] F2FS-fs (loop6): build fault injection type: 0x7 [ 1173.252712][T13025] F2FS-fs (loop6): invalid crc value [ 1173.619394][T13025] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1173.633898][T13025] F2FS-fs (loop6): Start checkpoint disabled! [ 1173.648907][T13025] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1173.663866][T13025] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1174.217609][T12785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.317411][T12785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.763629][T12785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.815720][T12785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.289764][T13070] program syz.7.2569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.170653][T13091] loop4: detected capacity change from 0 to 64 [ 1179.202847][T13090] loop6: detected capacity change from 0 to 256 [ 1179.298552][T13090] exfat: Deprecated parameter 'utf8' [ 1179.323533][T13090] exfat: Deprecated parameter 'namecase' [ 1179.485514][T13090] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 1183.387361][T13133] loop5: detected capacity change from 0 to 4096 [ 1183.705131][T13133] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1184.047442][T13133] ntfs3(loop5): Failed to load $Extend (-22). [ 1184.088463][T13133] ntfs3(loop5): Failed to initialize $Extend. [ 1185.537261][T13166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.024738][T13171] loop5: detected capacity change from 0 to 1024 [ 1187.054112][T13173] loop3: detected capacity change from 0 to 4096 [ 1187.559534][T13187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2610'. [ 1188.102224][T13180] loop4: detected capacity change from 0 to 8192 [ 1189.194858][T13197] loop5: detected capacity change from 0 to 1024 [ 1189.304324][T13197] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1189.363250][T13197] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1189.425843][T13197] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1189.506107][T13197] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1189.605709][T13197] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.2614: Inode bitmap for bg 0 marked uninitialized [ 1189.630392][T13197] loop5: lost filesystem error report for type 5 error -117 [ 1189.630997][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1189.645335][ C0] EXT4-fs (loop5): initial error at time 1779763405: ext4_read_inode_bitmap:167 [ 1189.654804][ C0] EXT4-fs (loop5): last error at time 1779763405: ext4_read_inode_bitmap:167 [ 1189.687412][T13197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1189.739875][T13204] loop4: detected capacity change from 0 to 64 [ 1189.764022][T13197] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 1190.432757][T10599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.503686][T13216] loop6: detected capacity change from 0 to 32768 [ 1192.514566][T13216] btrfs: Deprecated parameter 'usebackuproot' [ 1192.524412][T13216] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1192.538705][T13216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2623 (13216) [ 1192.575596][T13216] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1192.586246][T13216] BTRFS info (device loop6): using crc32c checksum algorithm [ 1192.594201][T13216] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1192.691444][ T1091] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 1192.729321][ T5681] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1192.759621][T13216] BTRFS warning (device loop6): couldn't read tree root [ 1192.767148][T13216] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1192.778169][ T8308] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 1192.808707][T13216] BTRFS warning (device loop6): couldn't read tree root [ 1192.816144][T13216] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1192.854367][T13237] loop7: detected capacity change from 0 to 128 [ 1192.880134][ T8307] BTRFS warning (device loop6): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 1192.915059][ T5681] usb 4-1: Using ep0 maxpacket: 16 [ 1192.945831][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1192.968865][T13237] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1192.990078][ T5681] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1193.006212][T13237] hpfs: filesystem error: improperly stopped [ 1193.020659][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.042560][T13237] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1193.066044][T13216] BTRFS warning (device loop6): couldn't read tree root [ 1193.073724][T13216] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1193.088569][ T5681] usb 4-1: Product: syz [ 1193.104940][T13237] hpfs: You really don't want any checks? You are crazy... [ 1193.116579][ T5681] usb 4-1: Manufacturer: syz [ 1193.147158][ T5681] usb 4-1: SerialNumber: syz [ 1193.175183][T13237] hpfs: hpfs_map_sector(): read error [ 1193.203555][T13237] hpfs: code page support is disabled [ 1193.259511][T13216] BTRFS info (device loop6): enabling ssd optimizations [ 1193.266989][T13216] BTRFS info (device loop6): turning off barriers [ 1193.273927][T13216] BTRFS info (device loop6): turning on sync discard [ 1193.280928][T13216] BTRFS info (device loop6): enabling disk space caching [ 1193.288156][T13216] BTRFS info (device loop6): force clearing of disk cache [ 1193.295789][T13216] BTRFS info (device loop6): enabling auto defrag [ 1193.302529][T13216] BTRFS info (device loop6): trying to use backup root at mount time [ 1193.310884][T13216] BTRFS info (device loop6): max_inline set to 0 [ 1193.360622][T13237] hpfs: hpfs_map_4sectors(): unaligned read [ 1193.378663][ T5681] usb 4-1: config 0 descriptor?? [ 1193.415799][T13237] hpfs: hpfs_map_4sectors(): unaligned read [ 1193.440412][T13237] hpfs: filesystem error: unable to find root dir [ 1193.578250][ T5681] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1193.664952][T13237] hpfs: hpfs_map_4sectors(): unaligned read [ 1193.727118][ T1114] usb 4-1: Failed to submit usb control message: -71 [ 1193.746706][ T5681] usb 4-1: USB disconnect, device number 15 [ 1193.766442][ T1114] usb 4-1: unable to send the bmi data to the device: -71 [ 1193.814280][ T1114] usb 4-1: unable to get target info from device [ 1193.845386][ T1114] usb 4-1: could not get target info (-71) [ 1193.880437][ T1114] usb 4-1: could not probe fw (-71) [ 1194.013766][T10613] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1194.167156][T13252] loop5: detected capacity change from 0 to 256 [ 1194.455458][ T29] audit: type=1800 audit(1779763410.799:61): pid=13252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2628" name="user.@.O+" dev="loop5" ino=1048892 res=0 errno=0 [ 1194.513705][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1194.527452][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1195.651359][ T5681] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1195.810207][T13264] loop5: detected capacity change from 0 to 512 [ 1195.884074][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 1195.919522][T13264] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1195.961400][ T5681] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1196.025747][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.116870][T13264] EXT4-fs (loop5): 1 truncate cleaned up [ 1196.195157][ T5681] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1196.221096][ T5681] pvrusb2: ********** [ 1196.227554][ T5681] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1196.255212][ T5681] pvrusb2: Important functionality might not be entirely working. [ 1196.285097][ T5681] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1196.318114][T13264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.352449][ T5681] pvrusb2: ********** [ 1196.401092][ T2352] pvrusb2: Invalid write control endpoint [ 1196.677317][T13260] pvrusb2: Invalid write control endpoint [ 1196.706072][T12847] usb 4-1: USB disconnect, device number 16 [ 1197.209602][ T2352] pvrusb2: Invalid write control endpoint [ 1197.274600][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1197.344406][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1197.458097][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1197.555825][ T2352] pvrusb2: Device being rendered inoperable [ 1197.628877][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1197.672900][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1197.699531][T10599] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.777387][ T2352] pvrusb2: Attached sub-driver cx25840 [ 1197.817880][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1197.903456][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1198.428198][T13281] loop4: detected capacity change from 0 to 1024 [ 1198.735552][T13281] hfsplus: can't free extent: start 0, count 3 [ 1199.774780][T13296] ===================================================== [ 1199.782695][T13296] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 [ 1199.793612][T13296] _copy_to_iter+0xef3/0x3400 [ 1199.799668][T13296] __skb_datagram_iter+0x18f/0x12b0 [ 1199.808221][T13296] skb_copy_datagram_iter+0x5b/0x210 [ 1199.813919][T13296] packet_recvmsg+0xe34/0x2510 [ 1199.819060][T13296] sock_recvmsg_nosec+0x1e2/0x270 [ 1199.824479][T13296] ____sys_recvmsg+0x4e5/0x620 [ 1199.833773][T13296] ___sys_recvmsg+0x20b/0x850 [ 1199.841811][T13296] do_recvmmsg+0x40e/0xdf0 [ 1199.846473][T13296] __x64_sys_recvmmsg+0x383/0x500 [ 1199.852650][T13296] x64_sys_call+0x96d/0x3ea0 [ 1199.857660][T13296] do_syscall_64+0x134/0x390 [ 1199.862712][T13296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.868813][T13296] [ 1199.874331][T13296] Uninit was created at: [ 1199.878990][T13296] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 1199.887042][T13296] __alloc_skb+0x855/0x1190 [ 1199.894886][T13296] tipc_buf_acquire+0x4c/0x230 [ 1199.899914][T13296] tipc_disc_create+0x12f/0x870 [ 1199.909124][T13296] __tipc_nl_bearer_enable+0x1f61/0x2a00 [ 1199.915174][T13296] tipc_nl_compat_doit+0x67b/0xa10 [ 1199.920538][T13296] tipc_nl_compat_recv+0xfce/0x1630 [ 1199.926101][T13296] genl_family_rcv_msg_doit+0x338/0x3f0 [ 1199.937025][T13296] genl_rcv_msg+0xac5/0xc00 [ 1199.943096][T13296] netlink_rcv_skb+0x54d/0x680 [ 1199.948106][T13296] genl_rcv+0x41/0x60 [ 1199.952431][T13296] netlink_unicast+0xee2/0x1290 [ 1199.957582][T13296] netlink_sendmsg+0x10b2/0x1250 [ 1199.965781][T13296] ____sys_sendmsg+0xf37/0xfd0 [ 1199.971061][T13296] ___sys_sendmsg+0x271/0x3b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1199.975982][T13296] __x64_sys_sendmsg+0x211/0x3e0 [ 1199.981379][T13296] x64_sys_call+0x1e20/0x3ea0 [ 1199.986389][T13296] do_syscall_64+0x134/0x390 [ 1199.994507][T13296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.000642][T13296] [ 1200.006965][T13296] Bytes 4-5 of 120 are uninitialized [ 1200.013442][T13296] Memory access of size 120 starts at ffff88811e5ea464 [ 1200.020443][T13296] Data copied to user address 0000200000000c00 [ 1200.029781][T13296] [ 1200.032856][T13296] CPU: 0 UID: 0 PID: 13296 Comm: syz.3.2642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.044211][T13296] Tainted: [L]=SOFTLOCKUP [ 1200.048656][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1200.062052][T13296] ===================================================== [ 1200.069106][T13296] Disabling lock debugging due to kernel taint [ 1200.155384][T13296] Kernel panic - not syncing: kmsan.panic set ... [ 1200.162035][T13296] CPU: 0 UID: 0 PID: 13296 Comm: syz.3.2642 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1200.173244][T13296] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1200.178921][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1200.189143][T13296] Call Trace: [ 1200.192557][T13296] [ 1200.195635][T13296] __dump_stack+0x26/0x30 [ 1200.200265][T13296] dump_stack_lvl+0x50/0x1c0 [ 1200.205066][T13296] ? dump_stack+0x12/0x25 [ 1200.209624][T13296] dump_stack+0x1e/0x25 [ 1200.214001][T13296] vpanic+0x7b4/0x1430 [ 1200.218421][T13296] panic+0x15d/0x160 [ 1200.222592][T13296] kmsan_report+0x31a/0x320 [ 1200.227352][T13296] ? kmsan_internal_check_memory+0x166/0x240 [ 1200.233570][T13296] ? kmsan_copy_to_user+0xef/0x190 [ 1200.238917][T13296] ? _copy_to_iter+0xef3/0x3400 [ 1200.244022][T13296] ? __skb_datagram_iter+0x18f/0x12b0 [ 1200.249643][T13296] ? skb_copy_datagram_iter+0x5b/0x210 [ 1200.255329][T13296] ? packet_recvmsg+0xe34/0x2510 [ 1200.260523][T13296] ? sock_recvmsg_nosec+0x1e2/0x270 [ 1200.265927][T13296] ? ____sys_recvmsg+0x4e5/0x620 [ 1200.271125][T13296] ? ___sys_recvmsg+0x20b/0x850 [ 1200.276340][T13296] ? do_recvmmsg+0x40e/0xdf0 [ 1200.281243][T13296] ? __x64_sys_recvmmsg+0x383/0x500 [ 1200.286664][T13296] ? x64_sys_call+0x96d/0x3ea0 [ 1200.291655][T13296] ? do_syscall_64+0x134/0x390 [ 1200.296653][T13296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.302934][T13296] ? kmsan_get_metadata+0xf1/0x160 [ 1200.308302][T13296] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1200.314867][T13296] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1200.321190][T13296] ? finish_task_switch+0x464/0xbc0 [ 1200.326714][T13296] ? kmsan_get_metadata+0xf1/0x160 [ 1200.332091][T13296] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1200.338192][T13296] kmsan_internal_check_memory+0x166/0x240 [ 1200.344269][T13296] kmsan_copy_to_user+0xef/0x190 [ 1200.349592][T13296] _copy_to_iter+0xef3/0x3400 [ 1200.354513][T13296] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1200.361094][T13296] ? kmsan_get_metadata+0xf1/0x160 [ 1200.366581][T13296] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1200.372649][T13296] ? kmsan_get_metadata+0xf1/0x160 [ 1200.378028][T13296] __skb_datagram_iter+0x18f/0x12b0 [ 1200.383443][T13296] ? __skb_try_recv_datagram+0x5f1/0x6e0 [ 1200.389293][T13296] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1200.395141][T13296] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1200.400740][T13296] skb_copy_datagram_iter+0x5b/0x210 [ 1200.406276][T13296] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1200.412370][T13296] packet_recvmsg+0xe34/0x2510 [ 1200.417412][T13296] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1200.423464][T13296] ? filter_irq_stacks+0x49/0x190 [ 1200.428781][T13296] ? stack_depot_save_flags+0x35/0x790 [ 1200.434523][T13296] ? kmsan_get_metadata+0xf1/0x160 [ 1200.439864][T13296] ? __pfx_packet_recvmsg+0x10/0x10 [ 1200.445300][T13296] sock_recvmsg_nosec+0x1e2/0x270 [ 1200.450525][T13296] ____sys_recvmsg+0x4e5/0x620 [ 1200.455498][T13296] ? should_fail_ex+0x45/0x8c0 [ 1200.460598][T13296] ___sys_recvmsg+0x20b/0x850 [ 1200.465537][T13296] ? kmsan_internal_check_memory+0x9f/0x240 [ 1200.471666][T13296] ? kmsan_get_metadata+0xf1/0x160 [ 1200.477010][T13296] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1200.483050][T13296] do_recvmmsg+0x40e/0xdf0 [ 1200.487703][T13296] ? stack_depot_save_flags+0x35/0x790 [ 1200.493397][T13296] ? kmsan_get_metadata+0xf1/0x160 [ 1200.498753][T13296] __x64_sys_recvmmsg+0x383/0x500 [ 1200.504010][T13296] ? kmsan_get_metadata+0xf1/0x160 [ 1200.509354][T13296] x64_sys_call+0x96d/0x3ea0 [ 1200.514249][T13296] do_syscall_64+0x134/0x390 [ 1200.519082][T13296] ? clear_bhb_loop+0x50/0xa0 [ 1200.523998][T13296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.530139][T13296] RIP: 0033:0x7fd244d9ce59 [ 1200.534792][T13296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.554607][T13296] RSP: 002b:00007fd245bda028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1200.563258][T13296] RAX: ffffffffffffffda RBX: 00007fd245015fa0 RCX: 00007fd244d9ce59 [ 1200.571438][T13296] RDX: 0000000000000002 RSI: 0000200000004480 RDI: 0000000000000004 [ 1200.579561][T13296] RBP: 00007fd244e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1200.587676][T13296] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1200.595810][T13296] R13: 00007fd245016038 R14: 00007fd245015fa0 R15: 00007ffcd22420d8 [ 1200.603983][T13296] [ 1200.608102][T13296] Kernel Offset: disabled [ 1200.612546][T13296] Rebooting in 86400 seconds..