last executing test programs: 2m57.426989379s ago: executing program 2 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x6e0963fdcd01c4eb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x700, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 2m57.37045046s ago: executing program 2 (id=231): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 2m57.315085032s ago: executing program 2 (id=232): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x7fc, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "af34000000000000"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740), 0x4000000000001f5, 0x2000, 0x0) 2m57.266446773s ago: executing program 2 (id=233): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x49b, &(0x7f0000001400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 2m56.887851212s ago: executing program 2 (id=236): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 2m56.210996699s ago: executing program 2 (id=240): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x158, &(0x7f0000000240)="$eJzs2z1OMlEUxvHnAi/w4heKWhgLEwttZPiIJHa6FAIjIQ5qxAZioStwDe7MBWhhZ+U1TgAT+ZhEIjfK/9dwkoebOVOcmdOMAMytY+3IyMhaa7Wdzt7njOuWAMyI7f2+WQDzJ/7qugMAbjyfSI+Snl5uaoonh/aDj/y2n8dSw/mdtJXo5Sat/1/3iwdpr3/eZEaezwzyhZH5/m7/+ota0rJWlNWq1pTr5fXB+c0pNiEAAOaHUT4qn/iHmE6bgV8Ym/8L8+LYPBnmpYi8PDZPhXm+dhHUJ7UJYITYlPMfj5j/RMT8A3Cn3emeVYPAv6KgoKAYFK6fTAB+mnfduvTane5Bs1Vt+A3/vFQoHFUOy8VKyQs3e2/yfg/g9/p86bvuBAAAAAAAAAAAAAAAfNe6Nly3AAAAAGBGZvE5ket7BAAAAAAAAAAAAAAAAADgr3kPAAD//2QXJhI=") r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300)) 2m55.993263674s ago: executing program 32 (id=240): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x158, &(0x7f0000000240)="$eJzs2z1OMlEUxvHnAi/w4heKWhgLEwttZPiIJHa6FAIjIQ5qxAZioStwDe7MBWhhZ+U1TgAT+ZhEIjfK/9dwkoebOVOcmdOMAMytY+3IyMhaa7Wdzt7njOuWAMyI7f2+WQDzJ/7qugMAbjyfSI+Snl5uaoonh/aDj/y2n8dSw/mdtJXo5Sat/1/3iwdpr3/eZEaezwzyhZH5/m7/+ota0rJWlNWq1pTr5fXB+c0pNiEAAOaHUT4qn/iHmE6bgV8Ym/8L8+LYPBnmpYi8PDZPhXm+dhHUJ7UJYITYlPMfj5j/RMT8A3Cn3emeVYPAv6KgoKAYFK6fTAB+mnfduvTane5Bs1Vt+A3/vFQoHFUOy8VKyQs3e2/yfg/g9/p86bvuBAAAAAAAAAAAAAAAfNe6Nly3AAAAAGBGZvE5ket7BAAAAAAAAAAAAAAAAADgr3kPAAD//2QXJhI=") r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300)) 2m12.63563407s ago: executing program 3 (id=686): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,iocharset=cp1251,namecase=1,gid=', @ANYRESHEX=r0, @ANYBLOB=',namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESOCT=0x0, @ANYBLOB="2dfd"], 0x1, 0x1535, &(0x7f0000001380)="$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") open(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000, 0x9) 2m12.012054505s ago: executing program 3 (id=693): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x68}], '\r\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) 2m11.783507451s ago: executing program 3 (id=694): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) r1 = io_uring_setup(0xff5, &(0x7f00000000c0)={0x0, 0x95f3, 0x2, 0x0, 0x165}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) 2m11.425871519s ago: executing program 3 (id=695): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1444c, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="68dc27454d2e2e9040c99f2221a7ac0d9b621736f9", @ANYRES16, @ANYRES16], 0xfe, 0xc17, &(0x7f0000001dc0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 2m10.663092768s ago: executing program 3 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m9.3551702s ago: executing program 3 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) 2m9.050680008s ago: executing program 33 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) 52.000826064s ago: executing program 1 (id=1459): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpriority(0x2, 0x0) 51.291254651s ago: executing program 1 (id=1464): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000010, &(0x7f0000000080)=ANY=[], 0x4, 0x6ea, &(0x7f0000000a00)="$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") symlink(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70) mknod$loop(&(0x7f0000001480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 50.976381969s ago: executing program 1 (id=1469): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r1}, 0xc) 50.831932782s ago: executing program 1 (id=1471): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x49b, &(0x7f0000001400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141104, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 50.085600651s ago: executing program 1 (id=1477): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 48.813814982s ago: executing program 1 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="00112233445566778899aabb0800", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.336852653s ago: executing program 34 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="00112233445566778899aabb0800", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.526823574s ago: executing program 7 (id=1771): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1010051, &(0x7f0000000100), 0x1, 0x567, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000300)={@desc={0x1, 0x0, @desc4}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x1, 0x147) 9.357286553s ago: executing program 7 (id=1783): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) 9.028068231s ago: executing program 7 (id=1788): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) r1 = io_uring_setup(0xff5, &(0x7f00000000c0)={0x0, 0x95f3, 0x2, 0x0, 0x165}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) 8.796028956s ago: executing program 7 (id=1791): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1444c, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="68dc27454d2e2e9040c99f2221a7ac0d9b621736f9", @ANYRES16, @ANYRES16], 0xfe, 0xc17, &(0x7f0000001dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 8.030572325s ago: executing program 7 (id=1795): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x81, 0xfffffff9}) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) 7.570351176s ago: executing program 5 (id=1799): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000002580)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xd}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 7.371000611s ago: executing program 7 (id=1802): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001180)={0x0, 0x5, 0x0, 0x200}) 6.961068051s ago: executing program 35 (id=1802): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001180)={0x0, 0x5, 0x0, 0x200}) 6.010651744s ago: executing program 5 (id=1806): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5.931002266s ago: executing program 6 (id=1807): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0xff80) 5.658441203s ago: executing program 5 (id=1811): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() 5.603302284s ago: executing program 6 (id=1812): r0 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x26) keyctl$invalidate(0x15, r0) 5.291630402s ago: executing program 6 (id=1816): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x42) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) 4.14991274s ago: executing program 6 (id=1827): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 3.922783025s ago: executing program 4 (id=1819): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = fcntl$dupfd(r0, 0x406, r0) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) 3.507553495s ago: executing program 5 (id=1820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2.167114638s ago: executing program 4 (id=1821): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000002c0)) 1.952947273s ago: executing program 0 (id=1822): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.837034056s ago: executing program 6 (id=1823): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001100)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000001140)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.145222443s ago: executing program 6 (id=1824): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x6, 0x3d, @private1, @loopback, 0x40, 0x7800, 0xfffffffc}}) 1.143113493s ago: executing program 4 (id=1836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x11, &(0x7f00000007c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000880)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000940)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.142437413s ago: executing program 0 (id=1825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000580)="ffff", 0x2, 0x20008005, &(0x7f00000005c0)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x18000, 0x0, 0x0}, &(0x7f0000000640)=0x40) 987.719557ms ago: executing program 4 (id=1826): r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x8}, 0x0) 935.163498ms ago: executing program 0 (id=1828): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 810.107011ms ago: executing program 4 (id=1829): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1000", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 736.709703ms ago: executing program 0 (id=1831): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r1, 0x37}, 0x8) 537.704658ms ago: executing program 0 (id=1833): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000080)) 481.653969ms ago: executing program 5 (id=1834): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xae46}, &(0x7f0000000040)=0xc) 330.344473ms ago: executing program 0 (id=1835): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x19) 141.890737ms ago: executing program 4 (id=1837): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='test,0x8000000000000000,0x1000', 0x1e) 0s ago: executing program 5 (id=1838): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): T34] device hsr_slave_0 left promiscuous mode [ 143.748298][ T34] device hsr_slave_1 left promiscuous mode [ 143.765390][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.779714][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.816470][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.827700][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.843572][ T34] device bridge_slave_1 left promiscuous mode [ 143.857838][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.879499][ T34] device bridge_slave_0 left promiscuous mode [ 143.900077][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.976350][ T34] device veth1_to_team left promiscuous mode [ 143.988644][ T34] device veth1_macvtap left promiscuous mode [ 144.003753][ T34] device veth0_macvtap left promiscuous mode [ 144.016748][ T34] device veth1_vlan left promiscuous mode [ 144.028396][ T34] device veth0_vlan left promiscuous mode [ 144.308963][ T6562] block nbd5: not configured, cannot reconfigure [ 144.898982][ T34] team0 (unregistering): Port device team_slave_1 removed [ 144.955221][ T34] team0 (unregistering): Port device team_slave_0 removed [ 145.025715][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.049186][ T6577] loop5: detected capacity change from 0 to 512 [ 145.118837][ T6577] EXT4-fs (loop5): 1 truncate cleaned up [ 145.128087][ T6577] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 145.155636][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.240837][ T5009] EXT4-fs (loop5): unmounting filesystem. [ 145.570801][ T34] bond0 (unregistering): Released all slaves [ 145.591763][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 145.640467][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.648344][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.656751][ T6474] device bridge_slave_1 entered promiscuous mode [ 145.665537][ T6542] device veth1_macvtap entered promiscuous mode [ 145.715310][ T6587] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.732459][ T6587] team0: Device ipvlan2 is already an upper device of the team interface [ 145.797399][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.807598][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 145.850204][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.919700][ T6474] team0: Port device team_slave_0 added [ 145.938995][ T6474] team0: Port device team_slave_1 added [ 145.990541][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.012765][ T6591] loop5: detected capacity change from 0 to 128 [ 146.038228][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.066793][ T6591] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 146.155207][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.203846][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.231517][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.277781][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.289735][ T9] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 146.366319][ T6474] device hsr_slave_0 entered promiscuous mode [ 146.392170][ T6474] device hsr_slave_1 entered promiscuous mode [ 146.409154][ T6474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.428868][ T6474] Cannot create hsr debugfs directory [ 146.486694][ T4362] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.628665][ T6589] loop1: detected capacity change from 0 to 40427 [ 146.671642][ T4362] usb 5-1: Using ep0 maxpacket: 16 [ 146.692253][ T4362] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 146.714479][ T6589] F2FS-fs (loop1): invalid crc value [ 146.732013][ T4362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.740058][ T4362] usb 5-1: Product: syz [ 146.756354][ T6589] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.785201][ T4362] usb 5-1: Manufacturer: syz [ 146.801669][ T4362] usb 5-1: SerialNumber: syz [ 146.853972][ T6589] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 146.891102][ T6589] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 146.900859][ T6474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.958020][ T6474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.986320][ T6474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.021282][ T6474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.027636][ T4362] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 147.059700][ T4362] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.081927][ T4362] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 147.100670][ T4362] usb 5-1: media controller created [ 147.107933][ T4271] syz-executor: attempt to access beyond end of device [ 147.107933][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.176457][ T4362] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.302550][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.353788][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.392178][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.423402][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.444575][ T4362] zl10353_read_register: readreg error (reg=127, ret==-32) [ 147.481061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.505482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.536455][ T4362] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 147.544824][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.551978][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.575181][ T4362] usb 5-1: USB disconnect, device number 5 [ 147.603104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.638476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.661857][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 147.717052][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.724231][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.780087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.807666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.842219][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.883597][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.896660][ T6625] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 147.908151][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.938938][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.969796][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.993579][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.022746][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.037049][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.073910][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.107276][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.154755][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.403199][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.780'. [ 148.782260][ T4363] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.995215][ T4363] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.002385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.037094][ T4363] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.045398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.061726][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.074856][ T6665] loop5: detected capacity change from 0 to 1024 [ 149.087939][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.101719][ T4363] usb 2-1: SerialNumber: syz [ 149.152606][ T6665] hfsplus: invalid length 32517 has been corrected to 255 [ 149.226173][ T27] audit: type=1800 audit(1792430069.085:27): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.787" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 149.442552][ T4372] hfsplus: b-tree write err: -5, ino 20 [ 149.743253][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 149.769466][ T4363] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 149.964575][ T6688] loop4: detected capacity change from 0 to 256 [ 149.985907][ T4363] usb 2-1: USB disconnect, device number 5 [ 150.260976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.277141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.322783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.342524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.362555][ T6474] device veth0_vlan entered promiscuous mode [ 150.372002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.390200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.416866][ T6474] device veth1_vlan entered promiscuous mode [ 150.501138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.511905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.542773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.564961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.619410][ T6474] device veth0_macvtap entered promiscuous mode [ 150.640760][ T6474] device veth1_macvtap entered promiscuous mode [ 150.680416][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.693696][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.723685][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.751064][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.779181][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.807791][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.831692][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.845637][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.883001][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.928804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.978725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.012385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.054707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.093088][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.131636][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.141506][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.182291][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.207936][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.234473][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.257928][ T6474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.291019][ T6474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.313093][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.326570][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.352560][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.388262][ T6474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.419531][ T6474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.457149][ T6474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.466173][ T6474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.481491][ T6717] syz.4.801 (6717) used greatest stack depth: 18096 bytes left [ 151.603636][ T6737] loop4: detected capacity change from 0 to 512 [ 151.657522][ T6737] EXT4-fs: inline encryption not supported [ 151.704336][ T6737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.742439][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.750320][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.795004][ T6737] EXT4-fs (loop4): 1 truncate cleaned up [ 151.800936][ T6737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.871469][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.890281][ T6737] EXT4-fs: can't change dax mount option while remounting [ 151.903239][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.967621][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.984940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.037273][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 152.165000][ T6733] loop0: detected capacity change from 0 to 32768 [ 152.181389][ T6748] loop4: detected capacity change from 0 to 512 [ 152.255632][ T6748] EXT4-fs: Invalid want_extra_isize 206 [ 152.317390][ T6733] ERROR: (device loop0): diAllocAG: numfree > numinos [ 152.317390][ T6733] [ 152.368222][ T6733] ERROR: (device loop0): remounting filesystem as read-only [ 152.424766][ T6733] ialloc: diAlloc returned -5! [ 152.480293][ T6757] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 152.480293][ T6757] [ 152.537397][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.812'. [ 152.608183][ T6766] bonding: no command found in bonding_masters - use +ifname or -ifname [ 153.254929][ T6791] loop0: detected capacity change from 0 to 256 [ 153.351093][ T6791] FAT-fs (loop0): Directory bread(block 64) failed [ 153.405906][ T6791] FAT-fs (loop0): Directory bread(block 65) failed [ 153.441827][ T6791] FAT-fs (loop0): Directory bread(block 66) failed [ 153.448414][ T6791] FAT-fs (loop0): Directory bread(block 67) failed [ 153.482091][ T6791] FAT-fs (loop0): Directory bread(block 68) failed [ 153.499212][ T6791] FAT-fs (loop0): Directory bread(block 69) failed [ 153.531887][ T6791] FAT-fs (loop0): Directory bread(block 70) failed [ 153.538479][ T6791] FAT-fs (loop0): Directory bread(block 71) failed [ 153.562432][ T6791] FAT-fs (loop0): Directory bread(block 72) failed [ 153.579360][ T6791] FAT-fs (loop0): Directory bread(block 73) failed [ 153.653459][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.830'. [ 153.681803][ T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.740001][ T6805] device bond1 entered promiscuous mode [ 153.747175][ T6805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.904476][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 153.923163][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.965860][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 153.988477][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 154.045198][ T22] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 154.065675][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.079125][ T22] usb 2-1: Product: syz [ 154.083675][ T22] usb 2-1: Manufacturer: syz [ 154.088465][ T22] usb 2-1: SerialNumber: syz [ 154.104577][ T22] usb 2-1: config 0 descriptor?? [ 154.215128][ T6824] loop6: detected capacity change from 0 to 8192 [ 154.278513][ T6824] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 154.321676][ T4369] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.352749][ T22] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 154.393162][ T6824] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 154.467667][ T6824] REISERFS (device loop6): using ordered data mode [ 154.525283][ T6824] reiserfs: using flush barriers [ 154.552651][ T4363] usb 2-1: USB disconnect, device number 6 [ 154.605992][ T6824] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 154.654630][ T6840] loop0: detected capacity change from 0 to 64 [ 154.684321][ T4369] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.694493][ T4369] usb 5-1: config 0 has no interface number 0 [ 154.717154][ T4369] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.722438][ T6824] REISERFS (device loop6): checking transaction log (loop6) [ 154.773450][ T6824] REISERFS (device loop6): Using r5 hash to sort names [ 154.776603][ T4369] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.817467][ T6824] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 154.842061][ T4369] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.876202][ T6824] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 154.877236][ T4369] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 154.923480][ T4369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.945352][ T4369] usb 5-1: config 0 descriptor?? [ 155.052030][ T6824] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 155.118950][ T6824] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 155.334018][ T6858] loop5: detected capacity change from 0 to 256 [ 155.390407][ T6858] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 155.555406][ T6863] program syz.0.850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.569583][ T4369] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0003/input/input10 [ 155.700768][ T6868] loop6: detected capacity change from 0 to 64 [ 155.720765][ T4369] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 155.807317][ T4369] usb 5-1: USB disconnect, device number 6 [ 155.825069][ T6870] loop5: detected capacity change from 0 to 2048 [ 156.036611][ T6876] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.089467][ T6877] Failed to get privilege flags for destination (handle=0x2:0x9) [ 156.090084][ T6871] fido_id[6871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 156.386888][ T6883] loop1: detected capacity change from 0 to 1024 [ 156.454680][ T6883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.568592][ T6889] loop5: detected capacity change from 0 to 512 [ 157.052342][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.863'. [ 157.502407][ T6917] set_capacity_and_notify: 1 callbacks suppressed [ 157.502422][ T6917] loop6: detected capacity change from 0 to 1024 [ 157.704346][ T6920] ALSA: mixer_oss: invalid OSS volume 'nused' [ 157.854337][ T6917] hfsplus: request for non-existent node 62977 in B*Tree [ 157.901861][ T6917] hfsplus: request for non-existent node 62977 in B*Tree [ 158.091752][ T11] hfsplus: b-tree write err: -5, ino 3 [ 159.373330][ T6948] loop0: detected capacity change from 0 to 32768 [ 159.515471][ T6976] ip_tables: iptables: counters copy to user failed while replacing table [ 159.557619][ T6977] loop1: detected capacity change from 0 to 512 [ 159.722650][ T6977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.757081][ T6977] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.981070][ T4296] smpboot: CPU 1 is now offline [ 160.440511][ T7002] loop6: detected capacity change from 0 to 512 [ 160.451408][ T6998] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in; [ 160.451408][ T6998] program syz.4.894 not setting count and/or reply_len properly [ 160.510084][ T7004] loop5: detected capacity change from 0 to 128 [ 160.611952][ T7004] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 160.656355][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 160.816742][ T7004] hpfs: filesystem error: improperly stopped [ 160.831973][ T7006] loop4: detected capacity change from 0 to 2048 [ 160.871258][ T7004] hpfs: You really don't want any checks? You are crazy... [ 160.892300][ T7002] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 160.916382][ T7006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.933744][ T6994] loop0: detected capacity change from 0 to 32768 [ 160.981462][ T7004] hpfs: hpfs_map_sector(): read error [ 161.035604][ T6994] jfs_strtoUCS: char2uni returned -22. [ 161.072064][ T7004] hpfs: code page support is disabled [ 161.077822][ T7002] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.105587][ T6994] charset = cp936, char = 0xd4 [ 161.150948][ T7004] hpfs: filesystem error: map_dirent: not a directory [ 161.227588][ T7004] [ 161.265280][ T7004] hpfs: hpfs_map_4sectors(): unaligned read [ 161.271231][ T7004] hpfs: filesystem error: unable to find root dir [ 161.330854][ T7002] EXT4-fs (loop6): shut down requested (1) [ 161.636664][ T6474] EXT4-fs (loop6): unmounting filesystem. [ 161.997633][ T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 162.085735][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 162.160084][ T7031] loop1: detected capacity change from 0 to 2048 [ 162.166509][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 162.166509][ T11] [ 162.202713][ T7031] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 162.234768][ T11] EXT4-fs (loop4): Total free blocks count 0 [ 162.267712][ T11] EXT4-fs (loop4): Free/Dirty block details [ 162.294042][ T7031] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 162.316882][ T11] EXT4-fs (loop4): free_blocks=66060288 [ 162.324743][ T4296] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 162.348226][ T11] EXT4-fs (loop4): dirty_blocks=3392 [ 162.365516][ T7031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.391115][ T11] EXT4-fs (loop4): Block reservation details [ 162.412698][ T11] EXT4-fs (loop4): i_reserved_data_blocks=212 [ 162.531520][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1336 with error 28 [ 162.553319][ T4296] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.588480][ T4296] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.644105][ T4296] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.701534][ T4296] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.752555][ T4296] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 162.796329][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.970181][ T7039] bonding: no command found in bonding_masters - use +ifname or -ifname [ 163.310058][ T4296] gud: probe of 7-1:1.0 failed with error -121 [ 163.636851][ T4377] usb 7-1: USB disconnect, device number 2 [ 164.056871][ T7072] loop1: detected capacity change from 0 to 512 [ 164.095003][ T7072] EXT4-fs: Ignoring removed oldalloc option [ 164.147348][ T7072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.923: bg 0: block 5: invalid block bitmap [ 164.183757][ T7036] loop5: detected capacity change from 0 to 32768 [ 164.206684][ T7072] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 164.244061][ T7036] XFS: ikeep mount option is deprecated. [ 164.255364][ T7072] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.923: invalid indirect mapped block 3 (level 2) [ 164.320294][ T7072] EXT4-fs (loop1): 1 orphan inode deleted [ 164.347741][ T7036] XFS (loop5): Mounting V5 Filesystem [ 164.365788][ T7072] EXT4-fs (loop1): 1 truncate cleaned up [ 164.396093][ T7072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.594565][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 164.612791][ T7036] XFS (loop5): Ending clean mount [ 164.984173][ T5009] XFS (loop5): Unmounting Filesystem [ 164.995596][ T7100] loop0: detected capacity change from 0 to 1024 [ 165.041132][ T7100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.110497][ T7100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.151371][ T7100] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.231659][ T7100] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.272232][ T7109] netlink: 34 bytes leftover after parsing attributes in process `syz.6.931'. [ 165.298058][ T7100] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 165.426395][ T7116] device-mapper: ioctl: name not supplied when creating device [ 165.455315][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 165.576091][ T7119] loop4: detected capacity change from 0 to 512 [ 165.811319][ T7127] netlink: 'syz.4.940': attribute type 32 has an invalid length. [ 167.269914][ T7186] netlink: 'syz.4.963': attribute type 12 has an invalid length. [ 167.298603][ T7188] loop0: detected capacity change from 0 to 512 [ 167.337804][ T7188] EXT4-fs (loop0): Test dummy encryption mode enabled [ 167.390094][ T7188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.985622][ T7188] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 168.213576][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 168.231473][ T7231] loop4: detected capacity change from 0 to 1024 [ 168.330151][ T7231] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.494466][ T7231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 168.630767][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.984'. [ 168.699320][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 168.881944][ T4363] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.084061][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 169.098239][ T4363] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 169.133685][ T4363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.149264][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 169.163419][ T7267] capability: warning: `syz.0.992' uses 32-bit capabilities (legacy support in use) [ 169.184690][ T4363] usb 6-1: Product: syz [ 169.199029][ T4363] usb 6-1: Manufacturer: syz [ 169.224006][ T7267] program syz.0.992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.234466][ T4363] usb 6-1: SerialNumber: syz [ 169.257075][ T4363] usb 6-1: config 0 descriptor?? [ 169.297954][ T4363] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 169.384100][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.994'. [ 169.436944][ T7275] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 169.465925][ T7278] loop6: detected capacity change from 0 to 256 [ 169.560088][ T7278] exfat: Deprecated parameter 'utf8' [ 169.628708][ T7278] exfat: Deprecated parameter 'namecase' [ 169.695298][ T7278] exfat: Deprecated parameter 'utf8' [ 169.769915][ T7278] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 170.405009][ T7290] loop0: detected capacity change from 0 to 131072 [ 170.426141][ T4371] usb 6-1: USB disconnect, device number 3 [ 170.436765][ T7290] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 170.444941][ T7290] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.478622][ T7290] F2FS-fs (loop0): invalid crc value [ 170.510710][ T7290] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.551730][ T7290] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 170.558851][ T7290] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 171.408720][ T7283] loop1: detected capacity change from 0 to 40427 [ 171.536921][ T7283] F2FS-fs (loop1): invalid crc value [ 171.579579][ T7283] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.765530][ T7283] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 171.844335][ T7283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 172.029230][ T4271] syz-executor: attempt to access beyond end of device [ 172.029230][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.150585][ T7341] block2mtd: illegal erase size [ 172.641691][ T4371] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.854350][ T4371] usb 5-1: Using ep0 maxpacket: 16 [ 172.894674][ T4371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.954304][ T4371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.024870][ T4371] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.110239][ T4371] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 173.173721][ T4371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.204854][ T7369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1021'. [ 173.234867][ T4371] usb 5-1: config 0 descriptor?? [ 173.673193][ T4371] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input11 [ 173.747063][ T4371] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 173.968669][ T4362] usb 5-1: USB disconnect, device number 7 [ 174.014526][ T7389] loop1: detected capacity change from 0 to 4096 [ 174.056901][ T7390] fido_id[7390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 174.079925][ T7389] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 174.926227][ T7422] loop0: detected capacity change from 0 to 2048 [ 174.959436][ T7427] loop5: detected capacity change from 0 to 1024 [ 175.035808][ T7422] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 175.121081][ T7422] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.722230][ T7446] sctp: [Deprecated]: syz.5.1045 (pid 7446) Use of int in maxseg socket option. [ 175.722230][ T7446] Use struct sctp_assoc_value instead [ 176.195726][ T7469] loop5: detected capacity change from 0 to 128 [ 176.381386][ T7469] syz.5.1054: attempt to access beyond end of device [ 176.381386][ T7469] loop5: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 176.399237][ T7480] loop0: detected capacity change from 0 to 512 [ 176.438466][ T7480] EXT4-fs: Ignoring removed i_version option [ 176.485248][ T7480] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.539314][ T7469] syz.5.1054: attempt to access beyond end of device [ 176.539314][ T7469] loop5: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 176.565121][ T7480] EXT4-fs (loop0): orphan cleanup on readonly fs [ 176.614512][ T7480] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 176.654936][ T7488] kAFS: Invalid Command on /proc/fs/afs/cells file [ 176.694719][ T7480] Quota error (device loop0): write_blk: dquota write failed [ 176.723824][ T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 176.759960][ T7480] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 176.814222][ T7480] Quota error (device loop0): write_blk: dquota write failed [ 176.856037][ T7480] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 176.874449][ T7494] loop6: detected capacity change from 0 to 16 [ 176.911410][ T7480] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1058: Failed to acquire dquot type 1 [ 176.935367][ T7494] erofs: (device loop6): mounted with root inode @ nid 36. [ 176.988695][ T7480] EXT4-fs (loop0): 1 truncate cleaned up [ 177.025792][ T7497] usb usb1: usbfs: process 7497 (syz.1.1063) did not claim interface 0 before use [ 177.040194][ T7480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.135433][ T7480] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.271312][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 177.368815][ T7500] loop4: detected capacity change from 0 to 4096 [ 177.424561][ T7500] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 177.560615][ T7500] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 177.759879][ T7517] tun0: tun_chr_ioctl cmd 1074025676 [ 177.775533][ T4273] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 177.807911][ T4273] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 177.825999][ T7517] tun0: owner set to 0 [ 178.027701][ T7526] loop1: detected capacity change from 0 to 512 [ 178.114303][ T7526] FAT-fs (loop1): error, corrupted file size (i_pos 51, 9216) [ 178.163707][ T7526] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 178.211045][ T7526] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 178.819135][ T7507] loop6: detected capacity change from 0 to 32768 [ 178.994410][ T7507] XFS (loop6): Mounting V5 Filesystem [ 179.204389][ T7507] XFS (loop6): Ending clean mount [ 179.868866][ T7574] loop4: detected capacity change from 0 to 32768 [ 179.886066][ T7588] batman_adv: batadv0: Adding interface: macsec1 [ 179.954052][ T7588] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.102821][ T6474] XFS (loop6): Unmounting Filesystem [ 180.264351][ T7588] batman_adv: batadv0: Interface activated: macsec1 [ 180.470343][ T7600] loop4: detected capacity change from 0 to 1024 [ 180.540479][ T7600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.669479][ T7600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.789320][ T7600] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 181.148886][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 181.286510][ T7632] loop0: detected capacity change from 0 to 256 [ 181.333011][ T7634] trusted_key: encrypted_key: keyword 'ÉSw' not recognized [ 181.370063][ T7635] delete_channel: no stack [ 181.400671][ T7632] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 181.504286][ T27] audit: type=1800 audit(1792430101.365:28): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.0.1103" name="file2" dev="loop0" ino=1048684 res=0 errno=0 [ 181.597944][ T7646] loop4: detected capacity change from 0 to 8 [ 181.779683][ T7650] loop0: detected capacity change from 0 to 1024 [ 181.967340][ T7650] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.1109: lblock 2 mapped to illegal pblock 2 (length 1) [ 182.085973][ T7650] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 182.151219][ T7650] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.1109: lblock 0 mapped to illegal pblock 48 (length 1) [ 182.227762][ T7668] loop1: detected capacity change from 0 to 64 [ 182.247208][ T7650] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 182.324297][ T7650] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1109: Failed to acquire dquot type 0 [ 182.345241][ T7668] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop1:00000002 [ 182.418939][ T7650] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 182.524593][ T7650] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.1109: mark_inode_dirty error [ 182.593788][ T7650] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 182.645176][ T7646] loop4: detected capacity change from 0 to 32768 [ 182.678396][ T7650] EXT4-fs (loop0): 1 orphan inode deleted [ 182.704022][ T4372] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 182.740808][ T7650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 182.754200][ T7646] JBD2: Ignoring recovery information on journal [ 182.842368][ T4372] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 182.897049][ T7646] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 182.935507][ T7650] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm syz.0.1109: lblock 1 mapped to illegal pblock 1 (length 1) [ 182.968719][ T4372] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 183.066200][ T7650] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 183.117294][ T7689] loop1: detected capacity change from 0 to 256 [ 183.128589][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 183.144574][ T7650] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 60928 [ 183.211859][ T7689] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 183.231107][ T7650] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1109: Failed to acquire dquot type 0 [ 183.320032][ T27] audit: type=1800 audit(1792430103.175:29): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.1120" name="file2" dev="loop1" ino=1048685 res=0 errno=0 [ 183.412155][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 183.424569][ T51] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 183.485534][ T51] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 183.546466][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 183.604960][ T4269] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 183.694306][ T4269] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 183.752087][ T4269] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 184.135607][ T7710] loop0: detected capacity change from 0 to 256 [ 184.217354][ T7686] loop6: detected capacity change from 0 to 32768 [ 184.706600][ T7687] loop5: detected capacity change from 0 to 40427 [ 184.836235][ T7687] F2FS-fs (loop5): invalid crc value [ 184.899615][ T7687] F2FS-fs (loop5): Found nat_bits in checkpoint [ 185.210108][ T7687] F2FS-fs (loop5): Start checkpoint disabled! [ 185.349530][ T7687] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 185.534594][ T7752] loop4: detected capacity change from 0 to 512 [ 185.599257][ T7752] EXT4-fs: Ignoring removed bh option [ 185.646240][ T7752] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 185.697855][ T7752] EXT4-fs (loop4): 1 truncate cleaned up [ 185.732559][ T7752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.761386][ T4372] kworker/u4:5: attempt to access beyond end of device [ 185.761386][ T4372] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 185.799020][ T7752] EXT4-fs (loop4): shut down requested (2) [ 185.881723][ T4371] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 185.902868][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 185.959429][ T4296] kernel write not supported for file /sequencer2 (pid: 4296 comm: kworker/0:3) [ 186.101661][ T4371] usb 7-1: Using ep0 maxpacket: 16 [ 186.126099][ T4371] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 186.173113][ T4371] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.219135][ T4371] usb 7-1: Product: syz [ 186.240958][ T4371] usb 7-1: Manufacturer: syz [ 186.256029][ T4371] usb 7-1: SerialNumber: syz [ 186.467990][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1160'. [ 186.488268][ T4371] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 186.517994][ T4371] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.541829][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 186.551875][ T4362] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 186.591777][ T4371] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 186.630762][ T4371] usb 7-1: media controller created [ 187.146364][ T7785] loop4: detected capacity change from 0 to 131072 [ 187.169133][ T7785] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 187.177378][ T7785] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 187.186738][ T7785] F2FS-fs (loop4): invalid crc value [ 187.193620][ T4362] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.215587][ T4371] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.238333][ T4362] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 187.248977][ T7785] F2FS-fs (loop4): Found nat_bits in checkpoint [ 187.281944][ T7785] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 187.289061][ T7785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 187.345744][ T4362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.369294][ T4371] zl10353_read_register: readreg error (reg=127, ret==-71) [ 187.409255][ T4362] usb 2-1: config 0 descriptor?? [ 187.478431][ T4371] dvb_usb_gl861: probe of 7-1:157.0 failed with error -5 [ 187.531726][ T4371] usb 7-1: USB disconnect, device number 3 [ 187.848292][ T4362] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 187.873136][ T4362] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 187.917451][ T4362] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 187.944567][ T4362] hid-rmi 0003:06CB:81A7.0005: unexpected long global item [ 187.967950][ T4362] hid-rmi 0003:06CB:81A7.0005: parse failed [ 187.988070][ T4362] hid-rmi: probe of 0003:06CB:81A7.0005 failed with error -22 [ 188.049481][ T4296] usb 2-1: USB disconnect, device number 7 [ 188.680947][ T7806] autofs4:pid:7806:autofs_fill_super: pipe file descriptor does not contain proper ops [ 189.047836][ T7797] loop6: detected capacity change from 0 to 32768 [ 189.176478][ T7797] XFS (loop6): Mounting V5 Filesystem [ 189.278017][ T7832] loop5: detected capacity change from 0 to 512 [ 189.334508][ T7797] XFS (loop6): Ending clean mount [ 189.432604][ T7832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.526474][ T7832] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.555902][ T6474] XFS (loop6): Unmounting Filesystem [ 189.621791][ T4296] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.831740][ T4296] usb 5-1: Using ep0 maxpacket: 32 [ 189.850818][ T4296] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 189.886633][ T7845] loop0: detected capacity change from 0 to 512 [ 189.894206][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.940702][ T7845] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 189.967134][ T4296] usb 5-1: config 0 descriptor?? [ 189.983464][ T7845] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 189.991520][ T7845] System zones: 0-1, 15-15, 18-18, 34-34 [ 190.064562][ T7845] EXT4-fs (loop0): orphan cleanup on readonly fs [ 190.084765][ T7848] loop1: detected capacity change from 0 to 64 [ 190.104062][ T7845] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 190.158958][ T7845] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 190.208064][ T4296] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 190.227444][ T4296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.247009][ T7845] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 190.264315][ T7845] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1181: bg 0: block 40: padding at end of block bitmap is not set [ 190.308736][ T4296] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 190.331353][ T4296] usb 5-1: media controller created [ 190.376431][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.391727][ T7845] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 190.431857][ T7845] EXT4-fs (loop0): 1 truncate cleaned up [ 190.437545][ T7845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 190.485508][ T4296] az6027: usb out operation failed. (-71) [ 190.512339][ T4296] az6027: usb out operation failed. (-71) [ 190.529786][ T4296] stb0899_attach: Driver disabled by Kconfig [ 190.536338][ T7845] EXT4-fs (loop0): shut down requested (1) [ 190.551618][ T4296] az6027: no front-end attached [ 190.551618][ T4296] [ 190.570429][ T7854] loop6: detected capacity change from 0 to 128 [ 190.606054][ T4296] az6027: usb out operation failed. (-71) [ 190.627909][ T4296] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 190.655329][ T7854] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 190.684681][ T4296] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 190.734886][ T4296] dvb-usb: schedule remote query interval to 400 msecs. [ 190.745980][ T7854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.773933][ T4296] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 190.819689][ T4296] usb 5-1: USB disconnect, device number 8 [ 190.868437][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 190.934682][ T4296] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 191.021866][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 191.027920][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 191.561493][ T7868] loop6: detected capacity change from 0 to 2048 [ 191.642241][ T7868] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 191.741959][ T4272] udevd[4272]: incorrect nilfs2 checksum on /dev/loop6 [ 191.786364][ T7874] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.940198][ T7878] jffs2: notice: (7878) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.984331][ T5009] EXT4-fs (loop5): unmounting filesystem. [ 192.067185][ T7884] loop0: detected capacity change from 0 to 164 [ 192.162065][ T7884] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 192.241638][ T4362] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 192.442822][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.469111][ T4283] block nbd0: Receive control failed (result -32) [ 192.514957][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.577916][ T4362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.627895][ T4362] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.658116][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.683675][ T4362] usb 5-1: config 0 descriptor?? [ 192.786383][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.792861][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.932068][ T7902] netlink: 'syz.5.1205': attribute type 11 has an invalid length. [ 193.069214][ T7907] loop0: detected capacity change from 0 to 2048 [ 193.108931][ T4362] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 193.172006][ T4362] plantronics 0003:047F:FFFF.0006: parse failed [ 193.179185][ T7907] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 193.221858][ T4362] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 193.263130][ T7907] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 193.321762][ T4362] usb 5-1: USB disconnect, device number 9 [ 193.351268][ T7910] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 193.405906][ T7910] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 193.754849][ T7930] loop9: detected capacity change from 0 to 524287871 [ 193.785498][ C0] blk_print_req_error: 9 callbacks suppressed [ 193.785509][ C0] I/O error, dev loop9, sector 524287616 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.842131][ C0] I/O error, dev loop9, sector 524287616 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.852112][ C0] buffer_io_error: 8 callbacks suppressed [ 193.852119][ C0] Buffer I/O error on dev loop9, logical block 65535952, async page read [ 193.866267][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.875383][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 193.898946][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.908153][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 193.918561][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.927760][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 193.969466][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.978669][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.026825][ T7938] loop1: detected capacity change from 0 to 8 [ 194.072256][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.081408][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.173540][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.182756][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.430068][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.439286][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.456107][ T4362] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 194.845698][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.854908][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.898712][ T7930] ldm_validate_partition_table(): Disk read failed. [ 195.086540][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.143841][ T7930] Dev loop9: unable to read RDB block 0 [ 195.192284][ T7930] loop9: unable to read partition table [ 195.220457][ T7930] loop_reread_partitions: partition scan of loop9 (ážXHuù£¨ÃÒJíˆý[¼d‚ÒwÍ|i4F‡Â-—ºä½ÚÚ£rwǘ3›êåùU™ÈžŒžJ½„?"e) failed (rc=-5) [ 195.296231][ T4362] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 195.335072][ T4362] usb 6-1: config 0 has no interface number 0 [ 195.364295][ T4362] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.427775][ T4362] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 195.470058][ T4362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.507719][ T4362] usb 6-1: Product: syz [ 195.523847][ T4362] usb 6-1: Manufacturer: syz [ 195.546968][ T4362] usb 6-1: SerialNumber: syz [ 195.567626][ T4362] usb 6-1: config 0 descriptor?? [ 195.658274][ T4362] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 195.906925][ T4362] usb 6-1: USB disconnect, device number 4 [ 195.935179][ T7928] yurex 6-1:0.50: yurex_write - failed to send bulk msg, error -19 [ 195.956159][ T4362] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 196.046221][ T7977] loop1: detected capacity change from 0 to 1024 [ 196.061091][ T7981] loop4: detected capacity change from 0 to 256 [ 196.072196][ T7980] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.092311][ T7977] EXT4-fs: Ignoring removed bh option [ 196.197332][ T7977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.350335][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 196.898593][ T7988] loop0: detected capacity change from 0 to 32768 [ 196.913351][ T7997] loop5: detected capacity change from 0 to 4096 [ 196.949381][ T7988] JBD2: Ignoring recovery information on journal [ 197.032863][ T7997] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 197.090496][ T7988] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 197.220548][ T7997] EXT4-fs (loop5): shut down requested (0) [ 197.380779][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 197.493858][ T5009] EXT4-fs (loop5): unmounting filesystem. [ 197.661677][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 198.331444][ T8008] loop5: detected capacity change from 0 to 131072 [ 198.352644][ T8008] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24) [ 198.360539][ T8008] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 198.368802][ T8008] F2FS-fs (loop5): Test dummy encryption mode enabled [ 198.378662][ T8008] F2FS-fs (loop5): invalid crc value [ 198.407065][ T8008] F2FS-fs (loop5): Found nat_bits in checkpoint [ 198.428454][ T8008] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 198.440938][ T8008] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 198.450656][ T8008] F2FS-fs (loop5): Start checkpoint disabled! [ 198.473765][ T8008] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 198.480837][ T8008] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 198.828243][ T8008] fscrypt (loop5, inode 4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 199.168576][ T4296] kernel write not supported for file /comedi4 (pid: 4296 comm: kworker/0:3) [ 199.735386][ T8043] sctp: [Deprecated]: syz.4.1262 (pid 8043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.735386][ T8043] Use struct sctp_sack_info instead [ 200.066168][ T8056] netlink: 'syz.0.1267': attribute type 9 has an invalid length. [ 200.096166][ T8054] loop4: detected capacity change from 0 to 2048 [ 200.186366][ T8054] NILFS (loop4): invalid segment: Magic number mismatch [ 200.237065][ T8054] NILFS (loop4): trying rollback from an earlier position [ 200.322689][ T8054] NILFS (loop4): recovery complete [ 200.367317][ T8061] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.454831][ T8054] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 200.499881][ T8063] loop1: detected capacity change from 0 to 2048 [ 200.659917][ T8063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 200.762318][ T8063] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.1271: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 200.901117][ T8063] EXT4-fs (loop1): Remounting filesystem read-only [ 200.944070][ T8063] CacheFiles: Lookup cache failed with error -117 [ 200.972267][ T8063] CacheFiles: Failed to register: -117 [ 201.060875][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 201.544938][ T8090] netlink: 'syz.5.1279': attribute type 28 has an invalid length. [ 201.725339][ T8095] loop1: detected capacity change from 0 to 256 [ 201.784333][ T8095] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 201.821755][ T8097] loop0: detected capacity change from 0 to 2048 [ 201.917671][ T8100] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.962072][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1286'. [ 202.049099][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1286'. [ 202.537441][ T8118] loop0: detected capacity change from 0 to 128 [ 202.602539][ T8118] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 202.691234][ T8118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.096832][ T8114] loop1: detected capacity change from 0 to 32768 [ 203.196809][ T8114] XFS (loop1): Mounting V5 Filesystem [ 203.304194][ T8114] XFS (loop1): Ending clean mount [ 203.375117][ T8114] XFS (loop1): Quotacheck needed: Please wait. [ 203.487436][ T8114] XFS (loop1): Quotacheck: Done. [ 203.853581][ T4271] XFS (loop1): Unmounting Filesystem [ 203.953729][ T7955] Set syz0 is full, maxelem 65536 reached [ 204.339019][ T8167] loop5: detected capacity change from 0 to 4096 [ 204.468330][ T8167] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 204.750345][ T8167] ntfs: volume version 3.1. [ 204.769698][ T8183] program syz.6.1316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.843732][ T8185] loop1: detected capacity change from 0 to 128 [ 204.909311][ T8185] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 205.004263][ T27] audit: type=1800 audit(1792430124.865:30): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.1318" name="file2" dev="loop1" ino=95 res=0 errno=0 [ 205.211445][ T8195] loop6: detected capacity change from 0 to 128 [ 205.252209][ T8198] program syz.4.1324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.313767][ T8195] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 205.506541][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 205.564476][ T8206] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 205.801203][ T8215] loop5: detected capacity change from 0 to 16 [ 205.861065][ T8215] erofs: (device loop5): mounted with root inode @ nid 36. [ 205.965657][ T27] audit: type=1800 audit(1792430125.825:31): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.1325" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 206.413073][ T8242] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 207.512095][ T8288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.750910][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.797001][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1366'. [ 208.065027][ T8283] loop0: detected capacity change from 0 to 32768 [ 208.109525][ T8283] (syz.0.1361,8283,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.109794][ T8283] (syz.0.1361,8283,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.114022][ T8283] (syz.0.1361,8283,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 208.153827][ T8283] JBD2: Ignoring recovery information on journal [ 208.158016][ T8296] loop5: detected capacity change from 0 to 1024 [ 208.203107][ T8296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.239974][ T8296] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 208.250996][ T8283] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 208.381478][ T8283] (syz.0.1361,8283,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4e60244d, computed 0x7fe56331. Applying ECC. [ 208.384730][ T8283] (syz.0.1361,8283,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4e60244d, computed 0x55f1ae3f [ 208.384750][ T8283] (syz.0.1361,8283,0):ocfs2_trim_mainbm:7610 ERROR: status = -5 [ 208.470737][ T5009] EXT4-fs (loop5): unmounting filesystem. [ 208.496777][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 208.613011][ T8306] loop1: detected capacity change from 0 to 512 [ 208.652416][ T8306] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 208.652444][ T8306] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1371: inode #15: comm syz.1.1371: iget: illegal inode # [ 208.652662][ T8306] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1371: couldn't read orphan inode 15 (err -117) [ 208.652831][ T8306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.667345][ T8306] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 208.757050][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 209.258978][ T4296] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0007/input/input13 [ 209.334766][ T4296] hid-generic 0005:0576:0306.0007: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 210.028477][ T8336] loop4: detected capacity change from 0 to 32768 [ 210.087142][ T8336] XFS (loop4): Mounting V5 Filesystem [ 210.125583][ T8336] XFS (loop4): Ending clean mount [ 210.135472][ T8336] XFS (loop4): Quotacheck needed: Please wait. [ 210.211865][ T8336] XFS (loop4): Quotacheck: Done. [ 210.215908][ T8336] XFS (loop4): User initiated shutdown received. [ 210.215941][ T8336] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 210.215967][ T8336] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 210.296625][ T4273] XFS (loop4): Unmounting Filesystem [ 210.578716][ T8363] input: syz0 as /devices/virtual/input/input14 [ 210.764388][ T8370] loop1: detected capacity change from 0 to 256 [ 210.962128][ T4296] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 211.165379][ T4296] usb 7-1: Using ep0 maxpacket: 8 [ 211.178033][ T4296] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 211.207435][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.249490][ T4296] pvrusb2: Hardware description: Terratec Grabster AV400 [ 211.287206][ T4296] pvrusb2: ********** [ 211.291214][ T4296] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 211.351728][ T4296] pvrusb2: Important functionality might not be entirely working. [ 211.379869][ T4296] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 211.436250][ T4296] pvrusb2: ********** [ 211.454879][ T8383] loop1: detected capacity change from 0 to 256 [ 211.464644][ T2312] pvrusb2: Invalid write control endpoint [ 211.500998][ T8383] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 211.597563][ T27] audit: type=1800 audit(1792430131.455:32): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.1399" name="file1" dev="loop1" ino=1048693 res=0 errno=0 [ 211.664765][ T8366] pvrusb2: Invalid write control endpoint [ 211.716772][ T4296] usb 7-1: USB disconnect, device number 4 [ 211.749694][ T2312] pvrusb2: Invalid write control endpoint [ 211.778632][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 211.797452][ T8372] loop5: detected capacity change from 0 to 32768 [ 211.830737][ T8388] loop4: detected capacity change from 0 to 128 [ 211.839708][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 211.858627][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 211.875777][ T8388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 211.897504][ T8372] JBD2: Ignoring recovery information on journal [ 211.915754][ T2312] pvrusb2: Device being rendered inoperable [ 211.926873][ T8388] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.946836][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 211.963682][ T8392] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 211.995621][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 212.043081][ T8372] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 212.084224][ T2312] pvrusb2: Attached sub-driver cx25840 [ 212.103841][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 212.145911][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 212.234409][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 212.575484][ T5009] ocfs2: Unmounting device (7,5) on (node local) [ 212.654671][ T8405] loop4: detected capacity change from 0 to 2048 [ 212.739326][ T8405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.805177][ T8405] EXT4-fs error (device loop4): ext4_ext_precache:627: inode #2: comm syz.4.1407: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 212.940825][ T8416] mtrr: base(0xe3b6000) is not aligned on a size(0x0000) boundary [ 213.013795][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 213.031651][ T4296] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.164627][ T8420] loop0: detected capacity change from 0 to 512 [ 213.219191][ T8420] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1412: invalid indirect mapped block 4294967295 (level 1) [ 213.262355][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 213.275271][ T4296] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.308445][ T8420] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1412: invalid indirect mapped block 4294967295 (level 1) [ 213.336422][ T4296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.365945][ T4296] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.375635][ T8420] EXT4-fs (loop0): 2 truncates cleaned up [ 213.400034][ T8420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.417211][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.448312][ T4296] usb 2-1: Product: syz [ 213.467348][ T4296] usb 2-1: Manufacturer: syz [ 213.478429][ T8420] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1412: bg 0: block 5: invalid block bitmap [ 213.496314][ T8430] loop4: detected capacity change from 0 to 2048 [ 213.506063][ T4296] usb 2-1: SerialNumber: syz [ 213.551280][ T8430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.575432][ T8420] EXT4-fs error (device loop0) in ext4_setattr:5695: error 28 [ 213.607647][ T8430] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.721419][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 213.745044][ T4296] usb 2-1: 0:2 : does not exist [ 213.783979][ T4296] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 213.818136][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 213.916673][ T4296] usb 2-1: USB disconnect, device number 8 [ 214.376517][ T8457] loop1: detected capacity change from 0 to 4096 [ 214.481700][ T4296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 214.566490][ T8460] loop5: detected capacity change from 0 to 128 [ 214.694360][ T4296] usb 7-1: Using ep0 maxpacket: 32 [ 214.710530][ T4296] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 214.755507][ T8465] loop1: detected capacity change from 0 to 512 [ 214.769797][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.795262][ T8465] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.825328][ T4296] usb 7-1: config 0 descriptor?? [ 214.868974][ T8465] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1427: invalid indirect mapped block 32768 (level 2) [ 214.894382][ T8462] loop0: detected capacity change from 0 to 8192 [ 214.947634][ T8462] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 214.968918][ T8465] EXT4-fs (loop1): 1 orphan inode deleted [ 214.993018][ T8465] EXT4-fs (loop1): 1 truncate cleaned up [ 215.019715][ T8462] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 215.038117][ T8465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.058069][ T4296] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 215.087552][ T4296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.114698][ T8462] REISERFS (device loop0): using ordered data mode [ 215.122329][ T8471] loop4: detected capacity change from 0 to 64 [ 215.156147][ T4296] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 215.168541][ T8462] reiserfs: using flush barriers [ 215.229340][ T4296] usb 7-1: media controller created [ 215.251810][ T8462] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 215.297310][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.316358][ T8462] REISERFS (device loop0): checking transaction log (loop0) [ 215.365346][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 215.371192][ T4296] az6027: usb out operation failed. (-71) [ 215.381300][ T8462] REISERFS (device loop0): Using r5 hash to sort names [ 215.403042][ T4296] az6027: usb out operation failed. (-71) [ 215.417939][ T8462] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 215.435260][ T4296] stb0899_attach: Driver disabled by Kconfig [ 215.441240][ T4296] az6027: no front-end attached [ 215.441240][ T4296] [ 215.449152][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 215.484166][ T4296] az6027: usb out operation failed. (-71) [ 215.489907][ T4296] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 215.504207][ T8462] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 215.528810][ T8474] device bond1 entered promiscuous mode [ 215.550137][ T4296] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 215.568885][ T8474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.586310][ T8462] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 215.611334][ T4296] dvb-usb: schedule remote query interval to 400 msecs. [ 215.640631][ T4296] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 215.653219][ T8462] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 215.693077][ T4296] usb 7-1: USB disconnect, device number 5 [ 215.809747][ T4296] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 216.364016][ T8501] loop1: detected capacity change from 0 to 64 [ 216.462646][ T4296] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 216.497662][ T8503] loop4: detected capacity change from 0 to 256 [ 216.536683][ T8503] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 216.670700][ T4296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 216.701923][ T11] wlan1: Trigger new scan to find an IBSS to join [ 216.735099][ T4296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.770444][ T4296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 216.810943][ T4296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 216.856503][ T4296] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 216.889874][ T4296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.922654][ T4296] usb 7-1: Product: syz [ 216.947961][ T4296] usb 7-1: Manufacturer: syz [ 216.966874][ T4296] usb 7-1: SerialNumber: syz [ 216.998267][ T4296] usb 7-1: config 0 descriptor?? [ 217.140021][ T8520] loop1: detected capacity change from 0 to 512 [ 217.233760][ T4296] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 217.390993][ T8523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.490174][ T4296] usb 7-1: USB disconnect, device number 6 [ 217.753386][ T8534] ALSA: mixer_oss: invalid OSS volume 'nused' [ 218.179507][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1461'. [ 218.408245][ T8546] set_capacity_and_notify: 2 callbacks suppressed [ 218.408259][ T8546] loop1: detected capacity change from 0 to 1024 [ 218.540263][ T8546] hfsplus: request for non-existent node 62977 in B*Tree [ 218.572206][ T8546] hfsplus: request for non-existent node 62977 in B*Tree [ 218.652881][ T51] hfsplus: b-tree write err: -5, ino 3 [ 218.854382][ T8560] loop1: detected capacity change from 0 to 512 [ 218.890201][ T8560] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 218.949982][ T8560] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1471: bg 0: block 104: invalid block bitmap [ 218.998274][ T8560] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 219.059792][ T8560] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1471: invalid indirect mapped block 1 (level 1) [ 219.122635][ T8560] EXT4-fs (loop1): 1 truncate cleaned up [ 219.159672][ T8560] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 219.200748][ T8568] loop4: detected capacity change from 0 to 512 [ 219.282112][ T8560] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 219.291003][ T8570] loop6: detected capacity change from 0 to 512 [ 219.303089][ T8568] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.334806][ T8568] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.364819][ T8570] EXT4-fs: Invalid want_extra_isize 206 [ 219.380561][ T8560] EXT4-fs error (device loop1): __ext4_iget:5102: inode #13: block 7962: comm syz.1.1471: invalid block [ 219.422187][ T8568] EXT4-fs (loop4): shut down requested (1) [ 219.430477][ T8560] overlayfs: failed to look up (file0) for ino (-117) [ 219.441115][ T8542] loop5: detected capacity change from 0 to 40427 [ 219.516305][ T8542] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 219.548398][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 219.564302][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 219.605076][ T8542] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 219.654839][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 219.667944][ T9] wlan1: Trigger new scan to find an IBSS to join [ 219.702009][ T8542] F2FS-fs (loop5): invalid crc value [ 219.724139][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 219.754684][ T8542] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 219.784016][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 219.841253][ T8542] F2FS-fs (loop5): Found nat_bits in checkpoint [ 219.848522][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 219.882591][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 219.922803][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 219.964132][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 220.009937][ T8585] loop6: detected capacity change from 0 to 1024 [ 220.019174][ T4271] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #11: comm syz-executor: invalid size [ 220.047796][ T8542] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 220.103427][ T8585] hfsplus: invalid length 32517 has been corrected to 255 [ 220.134912][ T8542] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 220.186320][ T27] audit: type=1800 audit(1792430140.045:33): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.6.1479" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 220.348642][ T9] hfsplus: b-tree write err: -5, ino 20 [ 220.398593][ T8542] syz.5.1473: attempt to access beyond end of device [ 220.398593][ T8542] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 220.477511][ T8583] loop4: detected capacity change from 0 to 32768 [ 220.616926][ T5009] syz-executor: attempt to access beyond end of device [ 220.616926][ T5009] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.687123][ T4931] EXT4-fs (loop1): unmounting filesystem. [ 220.779348][ T8591] loop6: detected capacity change from 0 to 512 [ 220.842935][ T4385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.126670][ T4385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.278852][ T4385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.429121][ T8598] loop6: detected capacity change from 0 to 128 [ 221.441728][ T4385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.496696][ T8598] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 221.573887][ T8598] hpfs: filesystem error: improperly stopped [ 221.623257][ T8598] hpfs: You really don't want any checks? You are crazy... [ 221.696551][ T8598] hpfs: hpfs_map_sector(): read error [ 221.756297][ T8598] hpfs: code page support is disabled [ 221.811897][ T8598] hpfs: filesystem error: map_dirent: not a directory [ 221.818692][ T8598] [ 221.821001][ T8598] hpfs: hpfs_map_4sectors(): unaligned read [ 221.913411][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.925542][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.935936][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.943360][ T8598] hpfs: filesystem error: unable to find root dir [ 221.950962][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.958631][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.966070][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.170042][ T8601] rxe_eth0 speed is unknown, defaulting to 1000 [ 222.566659][ T8619] loop0: detected capacity change from 0 to 2048 [ 222.626895][ T8609] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in; [ 222.626895][ T8609] program syz.5.1485 not setting count and/or reply_len properly [ 222.665312][ T8619] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 222.703085][ T57] wlan1: Trigger new scan to find an IBSS to join [ 222.736750][ T8619] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 222.845304][ T8619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.596649][ T8601] chnl_net:caif_netlink_parms(): no params data found [ 223.605328][ T57] wlan1: Creating new IBSS network, BSSID 9a:70:a1:c1:ff:2d [ 223.981723][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 224.145057][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.180081][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.265765][ T8601] device bridge_slave_0 entered promiscuous mode [ 224.292502][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.331763][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.401276][ T8601] device bridge_slave_1 entered promiscuous mode [ 224.457189][ T4385] device hsr_slave_0 left promiscuous mode [ 224.487213][ T4385] device hsr_slave_1 left promiscuous mode [ 224.525219][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.554815][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.697536][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.721965][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.759999][ T4385] batman_adv: batadv0: Removing interface: vlan2 [ 224.789536][ T4385] device bridge_slave_1 left promiscuous mode [ 224.816957][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.869614][ T4385] device bridge_slave_0 left promiscuous mode [ 224.891063][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.979727][ T4385] device veth1_macvtap left promiscuous mode [ 225.006300][ T4385] device veth0_macvtap left promiscuous mode [ 225.033603][ T4385] device veth1_vlan left promiscuous mode [ 225.058329][ T4385] device veth0_vlan left promiscuous mode [ 226.008826][ T8693] device-mapper: ioctl: name not supplied when creating device [ 226.061858][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 226.790664][ T8699] set_capacity_and_notify: 1 callbacks suppressed [ 226.790677][ T8699] loop6: detected capacity change from 0 to 32768 [ 226.846651][ T8699] XFS: ikeep mount option is deprecated. [ 226.904178][ T8699] XFS (loop6): Mounting V5 Filesystem [ 226.985154][ T8699] XFS (loop6): Ending clean mount [ 227.056014][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 227.117273][ T6474] XFS (loop6): Unmounting Filesystem [ 227.165132][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 227.248887][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.335760][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.669135][ T8713] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1531'. [ 228.016770][ T4385] bond0 (unregistering): Released all slaves [ 228.141731][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 228.156609][ T8601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.208681][ T8601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.305238][ T8724] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 228.402372][ T8726] loop5: detected capacity change from 0 to 512 [ 228.446365][ T8601] team0: Port device team_slave_0 added [ 228.482851][ T8601] team0: Port device team_slave_1 added [ 228.515651][ T8726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 228.594472][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.647228][ T8726] System zones: 1-12 [ 228.661206][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.719042][ T8726] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1525: missing EA_INODE flag [ 228.810968][ T8601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.837883][ T8726] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1525: error while reading EA inode 12 err=-117 [ 228.907118][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.936054][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.974967][ T8726] EXT4-fs (loop5): 1 orphan inode deleted [ 229.004624][ T8726] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 229.038887][ T8601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.069300][ T8726] fscrypt (loop5, inode 15): Direct key flag not allowed with different contents and filenames modes [ 229.149111][ T8601] device hsr_slave_0 entered promiscuous mode [ 229.175669][ T8601] device hsr_slave_1 entered promiscuous mode [ 229.267615][ T5009] EXT4-fs (loop5): unmounting filesystem. [ 229.367522][ T8755] loop6: detected capacity change from 0 to 1024 [ 229.415891][ T8755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.470108][ T8755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.521048][ T8755] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.560514][ T8601] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 229.596132][ T8601] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 229.604363][ T8755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.659450][ T8601] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 229.706641][ T8755] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 229.759920][ T8601] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.941288][ T8601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.956184][ T6474] EXT4-fs (loop6): unmounting filesystem. [ 229.995725][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.037522][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.069449][ T8601] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.110409][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.121610][ T4363] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 230.150131][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.180345][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.187459][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.221737][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 230.257683][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.283941][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.298405][ T8775] loop6: detected capacity change from 0 to 4096 [ 230.321612][ T4363] usb 5-1: Using ep0 maxpacket: 8 [ 230.328000][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.354859][ T4363] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.375716][ T8775] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 230.390884][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.398000][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.414969][ T4363] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.467921][ T4363] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 230.485823][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.517198][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.548695][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.568666][ T4363] usb 5-1: Product: syz [ 230.579337][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.600529][ T4363] usb 5-1: Manufacturer: syz [ 230.615440][ T4363] usb 5-1: SerialNumber: syz [ 230.631789][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.692302][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.737083][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.759545][ T8775] ntfs3: loop6: failed to convert "c46c" to cp864 [ 230.787841][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.818199][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.860999][ T4363] usb 5-1: selecting invalid altsetting 1 [ 230.880396][ T8601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.967839][ T4363] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 230.978227][ T8601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.027853][ T4272] udevd[4272]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.065772][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.076602][ T4363] usb 5-1: USB disconnect, device number 10 [ 231.108089][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.159750][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.920686][ T8601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.988568][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.031136][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.442557][ T8839] loop0: detected capacity change from 0 to 1024 [ 232.604417][ T8843] loop4: detected capacity change from 0 to 512 [ 232.736970][ T8843] EXT4-fs (loop4): Test dummy encryption mode enabled [ 232.799449][ T8843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.036452][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 233.172013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.213247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.716309][ T8861] loop4: detected capacity change from 0 to 131072 [ 233.734741][ T8861] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 233.743065][ T8861] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 233.762260][ T8861] F2FS-fs (loop4): invalid crc value [ 233.788469][ T8861] F2FS-fs (loop4): Found nat_bits in checkpoint [ 233.850562][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1560'. [ 233.872539][ T8861] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 233.879608][ T8861] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 233.938514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.994898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.036189][ T8601] device veth0_vlan entered promiscuous mode [ 234.074924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.118049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.174462][ T8601] device veth1_vlan entered promiscuous mode [ 234.225022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.245813][ T8873] loop5: detected capacity change from 0 to 512 [ 234.356637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.380766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.436923][ T8873] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 234.461254][ T8601] device veth0_macvtap entered promiscuous mode [ 234.536527][ T8601] device veth1_macvtap entered promiscuous mode [ 234.653399][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.665719][ T8873] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.763199][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.823262][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.906716][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.961187][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.027049][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.064076][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.115818][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.164605][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.198117][ T5009] EXT4-fs (loop5): unmounting filesystem. [ 235.225130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.263944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.321421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.369226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.426432][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.467945][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.520758][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.567989][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.621147][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.671262][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.715547][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.766475][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.813173][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.856117][ T8901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1567'. [ 235.939667][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.971357][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.032711][ T8601] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.069175][ T8601] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.128584][ T8601] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.178996][ T8601] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.359912][ T8920] loop4: detected capacity change from 0 to 512 [ 236.437861][ T8920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 236.467955][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.515044][ T8920] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.529497][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.587402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.627467][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.673330][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.720570][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.786387][ T8931] loop5: detected capacity change from 0 to 256 [ 236.844420][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 236.940584][ T8931] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 237.128274][ T8940] loop6: detected capacity change from 0 to 512 [ 237.197523][ T8940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.283202][ T4363] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 237.305691][ T8940] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 237.398926][ T8940] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.515382][ T4363] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 237.554379][ T4363] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.619506][ T4363] usb 8-1: Product: syz [ 237.633231][ T8957] sctp: [Deprecated]: syz.0.1582 (pid 8957) Use of int in maxseg socket option. [ 237.633231][ T8957] Use struct sctp_assoc_value instead [ 237.660741][ T4363] usb 8-1: Manufacturer: syz [ 237.676688][ T4363] usb 8-1: SerialNumber: syz [ 237.701086][ T4363] usb 8-1: config 0 descriptor?? [ 237.749754][ T6474] EXT4-fs (loop6): unmounting filesystem. [ 238.013171][ T8967] loop4: detected capacity change from 0 to 128 [ 238.036753][ T4363] usb 8-1: USB disconnect, device number 2 [ 238.106584][ T8970] loop5: detected capacity change from 0 to 8 [ 238.146807][ T8967] syz.4.1588: attempt to access beyond end of device [ 238.146807][ T8967] loop4: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 238.246977][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1584'. [ 238.273956][ T8967] syz.4.1588: attempt to access beyond end of device [ 238.273956][ T8967] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 238.585496][ T8981] loop6: detected capacity change from 0 to 2048 [ 238.629595][ T8986] program syz.4.1592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.644113][ T8983] program syz.5.1591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.675913][ T4385] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.701250][ T8981] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 238.810643][ T8981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.370559][ T9011] loop6: detected capacity change from 0 to 128 [ 239.495998][ T9016] loop5: detected capacity change from 0 to 16 [ 239.587122][ T9016] erofs: (device loop5): mounted with root inode @ nid 36. [ 239.800359][ T8994] loop0: detected capacity change from 0 to 32768 [ 240.164166][ T9037] loop7: detected capacity change from 0 to 164 [ 240.185064][ T9038] loop5: detected capacity change from 0 to 22 [ 240.257073][ T9037] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 240.287725][ T9038] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 240.367371][ T9037] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 240.395477][ T9038] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 241.080058][ T9063] loop6: detected capacity change from 0 to 512 [ 241.154357][ T9063] EXT4-fs: Ignoring removed i_version option [ 241.240210][ T9063] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.334937][ T9063] EXT4-fs (loop6): orphan cleanup on readonly fs [ 241.403980][ T9063] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 241.554955][ T9063] Quota error (device loop6): write_blk: dquota write failed [ 241.588559][ T9049] loop4: detected capacity change from 0 to 32768 [ 241.609691][ T9063] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 241.680546][ T9049] XFS (loop4): Mounting V5 Filesystem [ 241.711691][ T9063] Quota error (device loop6): write_blk: dquota write failed [ 241.789806][ T9063] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 241.825090][ T9049] XFS (loop4): Ending clean mount [ 241.912143][ T9063] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.1620: Failed to acquire dquot type 1 [ 242.012249][ T9063] EXT4-fs (loop6): 1 truncate cleaned up [ 242.044556][ T9063] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 242.116606][ T4273] XFS (loop4): Unmounting Filesystem [ 242.203841][ T9063] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.390274][ T6474] EXT4-fs (loop6): unmounting filesystem. [ 242.867483][ T9106] tun0: tun_chr_ioctl cmd 1074025676 [ 242.900128][ T9106] tun0: owner set to 0 [ 243.069155][ T9110] loop7: detected capacity change from 0 to 4096 [ 243.155610][ T9110] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 243.261498][ T9110] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 243.298947][ T9113] delete_channel: no stack [ 243.441451][ T9097] loop0: detected capacity change from 0 to 32768 [ 243.483332][ T8601] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 243.534429][ T8601] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 243.570472][ T9097] XFS (loop0): Mounting V5 Filesystem [ 243.646501][ T9127] loop4: detected capacity change from 0 to 256 [ 243.663479][ T9097] XFS (loop0): Ending clean mount [ 243.914825][ T9095] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 244.006242][ T9095] XFS (loop0): Unmount and run xfs_repair [ 244.024888][ T9137] netlink: 'syz.7.1643': attribute type 1 has an invalid length. [ 244.036098][ T9095] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 244.068518][ T9137] netlink: 'syz.7.1643': attribute type 2 has an invalid length. [ 244.084376][ T9095] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 244.112511][ T9140] netlink: 'syz.7.1643': attribute type 1 has an invalid length. [ 244.126515][ T9095] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 244.152031][ T9142] bonding: no command found in bonding_masters - use +ifname or -ifname [ 244.165718][ T9140] netlink: 'syz.7.1643': attribute type 2 has an invalid length. [ 244.176118][ T9095] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 244.196329][ T9095] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 244.255897][ T9095] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 244.295453][ T9095] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 244.334751][ T9095] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 244.378297][ T9095] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 244.396319][ T4371] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 244.423327][ T9146] loop5: detected capacity change from 0 to 256 [ 244.434878][ T9095] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 244.477101][ T9095] XFS (loop0): page discard on page ffffea00014cd280, inode 0x1806, pos 0. [ 244.594319][ T4371] usb 5-1: Using ep0 maxpacket: 16 [ 244.610924][ T4371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.671066][ T4371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.694138][ T4371] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.724414][ T4371] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.740733][ T4371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.760105][ T4371] usb 5-1: config 0 descriptor?? [ 244.821367][ T4269] XFS (loop0): Unmounting Filesystem [ 245.176013][ T4371] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 245.196651][ T4371] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 245.268027][ T4377] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 245.375693][ T4371] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 245.396720][ T4371] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 245.426018][ T4371] microsoft 0003:045E:07DA.0008: no inputs found [ 245.437306][ T4371] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 245.463355][ T4377] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.486815][ T4377] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.522663][ T4377] usb 8-1: config 0 descriptor?? [ 245.542738][ T4377] cp210x 8-1:0.0: cp210x converter detected [ 245.601826][ T4371] usb 5-1: USB disconnect, device number 11 [ 245.634595][ T9170] fido_id[9170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 246.157587][ T4377] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 246.198884][ T4377] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 246.238955][ T4377] usb 8-1: cp210x converter now attached to ttyUSB0 [ 246.287058][ T4377] usb 8-1: USB disconnect, device number 3 [ 246.327479][ T4377] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.378185][ T4377] cp210x 8-1:0.0: device disconnected [ 247.060473][ T9209] loop0: detected capacity change from 0 to 131072 [ 247.091489][ T9209] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 247.099725][ T9209] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 247.111975][ T9209] F2FS-fs (loop0): invalid crc value [ 247.155602][ T9209] F2FS-fs (loop0): Found nat_bits in checkpoint [ 247.219717][ T9209] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 247.226885][ T9209] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 247.267306][ T9217] loop4: detected capacity change from 0 to 16 [ 247.319448][ T4280] udevd[4280]: incorrect cramfs checksum on /dev/loop4 [ 247.329548][ T9217] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 247.476877][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1673'. [ 248.115335][ T9240] program syz.4.1681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.227303][ T4377] hid-generic 0005:046D:C082.0009: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 248.515230][ T9243] fido_id[9243]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 249.319606][ T9278] loop5: detected capacity change from 0 to 2048 [ 249.409506][ T9278] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 249.557399][ T9278] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 249.695196][ T9278] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 249.785817][ T9294] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 249.802016][ T9278] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 249.836371][ T9296] loop4: detected capacity change from 0 to 512 [ 249.883769][ T9278] UDF-fs: Scanning with blocksize 512 failed [ 249.948180][ T9296] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 249.995709][ T9296] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.018164][ T9278] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 250.123688][ T9278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.211365][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 250.403757][ T9318] device-mapper: ioctl: Invalid ioctl structure: name m, dev 30 [ 250.795891][ T9334] loop4: detected capacity change from 0 to 64 [ 250.824149][ T9336] syz.0.1719 (9336): /proc/9335/oom_adj is deprecated, please use /proc/9335/oom_score_adj instead. [ 251.071483][ T9343] loop7: detected capacity change from 0 to 2048 [ 251.200355][ T9343] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 251.395362][ T8601] EXT4-fs (loop7): unmounting filesystem. [ 251.403569][ T9359] loop4: detected capacity change from 0 to 164 [ 251.421705][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 251.626261][ T9365] phram: not enough arguments [ 252.007846][ T27] audit: type=1400 audit(1792430171.865:34): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9379 comm="syz.7.1734" name="unknown" offset=28 [ 252.744320][ T9383] loop0: detected capacity change from 0 to 32768 [ 252.805764][ T9403] loop4: detected capacity change from 0 to 2048 [ 252.819395][ T9383] XFS (loop0): Mounting V5 Filesystem [ 252.841449][ T9347] loop6: detected capacity change from 0 to 32768 [ 252.908051][ T9412] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.923576][ T9383] XFS (loop0): Ending clean mount [ 252.959312][ T9403] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 253.007129][ T9383] XFS (loop0): User initiated shutdown received. [ 253.084733][ T9383] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 253.127327][ T9403] Remounting filesystem read-only [ 253.231796][ T9347] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 253.240515][ T9347] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 253.248322][ T9383] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 253.379480][ T9421] loop7: detected capacity change from 0 to 256 [ 253.409552][ T4269] XFS (loop0): Unmounting Filesystem [ 253.633656][ T4372] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.719011][ T9347] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 253.852342][ T4377] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 253.891017][ T4377] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 254.072234][ T4377] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 181ms [ 254.110532][ T4377] gfs2: fsid=syz:syz.0: jid=0: Done [ 254.132952][ T9347] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 254.308244][ T9347] gfs2: fsid=syz:syz.0: can't start quotad thread: -4 [ 254.495307][ T9447] netlink: 'syz.7.1749': attribute type 28 has an invalid length. [ 255.391651][ T4371] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 255.503803][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.510134][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.622912][ T4371] usb 8-1: Using ep0 maxpacket: 32 [ 255.642539][ T4371] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 255.711690][ T4371] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.775010][ T4371] usb 8-1: config 0 descriptor?? [ 256.016044][ T4371] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 256.054568][ T4371] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.120482][ T9472] loop4: detected capacity change from 0 to 32768 [ 256.137552][ T9469] loop0: detected capacity change from 0 to 32768 [ 256.148884][ T4371] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 256.183672][ T4371] usb 8-1: media controller created [ 256.273016][ T4371] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.368593][ T9472] XFS (loop4): Mounting V5 Filesystem [ 256.375383][ T9469] XFS (loop0): Mounting V5 Filesystem [ 256.381222][ T4371] az6027: usb out operation failed. (-71) [ 256.433785][ T4371] az6027: usb out operation failed. (-71) [ 256.490209][ T4371] stb0899_attach: Driver disabled by Kconfig [ 256.532117][ T4371] az6027: no front-end attached [ 256.532117][ T4371] [ 256.574904][ T9469] XFS (loop0): Ending clean mount [ 256.580025][ T9472] XFS (loop4): Ending clean mount [ 256.590473][ T4371] az6027: usb out operation failed. (-71) [ 256.624639][ T4371] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 256.675599][ T4371] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input17 [ 256.718368][ T4371] dvb-usb: schedule remote query interval to 400 msecs. [ 256.753348][ T4371] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 256.816225][ T4371] usb 8-1: USB disconnect, device number 4 [ 256.958193][ T9512] loop7: detected capacity change from 0 to 2048 [ 256.966621][ T4371] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 257.044097][ T4273] XFS (loop4): Unmounting Filesystem [ 257.063612][ T4269] XFS (loop0): Unmounting Filesystem [ 257.083942][ T9512] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.185223][ T9512] EXT4-fs error (device loop7): ext4_find_extent:936: inode #2: comm syz.7.1760: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 257.295950][ T9512] EXT4-fs (loop7): Remounting filesystem read-only [ 257.353655][ T9512] CacheFiles: Lookup cache failed with error -117 [ 257.384748][ T9512] CacheFiles: Failed to register: -117 [ 257.535897][ T8601] EXT4-fs (loop7): unmounting filesystem. [ 257.738848][ T9528] loop7: detected capacity change from 0 to 2048 [ 257.807315][ T9528] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 257.918810][ T9534] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.209334][ T9561] loop7: detected capacity change from 0 to 512 [ 259.277564][ T9561] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 259.354506][ T9571] loop6: detected capacity change from 0 to 64 [ 259.373215][ T9561] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 259.381274][ T9561] System zones: 0-1, 15-15, 18-18, 34-34 [ 259.448607][ T9561] EXT4-fs (loop7): orphan cleanup on readonly fs [ 259.506382][ T9561] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 259.576316][ T9561] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 259.694693][ T9561] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 259.758881][ T9561] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1771: bg 0: block 40: padding at end of block bitmap is not set [ 259.883174][ T9561] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 259.956017][ T9561] EXT4-fs (loop7): 1 truncate cleaned up [ 259.990546][ T9561] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 260.018291][ T4283] block nbd1: Receive control failed (result -32) [ 260.154492][ T9561] EXT4-fs (loop7): shut down requested (1) [ 260.268470][ T8601] EXT4-fs (loop7): unmounting filesystem. [ 260.462623][ T9603] loop5: detected capacity change from 0 to 16 [ 260.561453][ T9603] erofs: (device loop5): mounted with root inode @ nid 36. [ 260.699571][ T9603] syz.5.1784: attempt to access beyond end of device [ 260.699571][ T9603] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 260.807295][ T9616] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 260.920114][ T9617] syz.5.1784: attempt to access beyond end of device [ 260.920114][ T9617] loop5: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 260.962406][ T9589] loop0: detected capacity change from 0 to 32768 [ 260.979180][ T9619] loop7: detected capacity change from 0 to 2048 [ 261.031347][ T9619] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 261.071045][ T9589] XFS (loop0): Mounting V5 Filesystem [ 261.090167][ T9617] syz.5.1784: attempt to access beyond end of device [ 261.090167][ T9617] loop5: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 261.128707][ T9619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.190385][ T9589] XFS (loop0): Ending clean mount [ 261.241235][ T9619] overlayfs: upper fs needs to support d_type. [ 261.250673][ T9589] XFS (loop0): Quotacheck needed: Please wait. [ 261.296931][ T9619] overlayfs: cleanup of 'work/#d' failed (-2) [ 261.350960][ T9619] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 261.373510][ T9589] XFS (loop0): Quotacheck: Done. [ 261.387811][ T9619] overlayfs: failed to set xattr on upper [ 261.424590][ T9619] overlayfs: ...falling back to index=off,metacopy=off. [ 261.605668][ T8601] UDF-fs: error (device loop7): udf_read_inode: (ino 1347) failed !bh [ 261.657240][ T8601] UDF-fs: error (device loop7): udf_read_inode: (ino 1347) failed !bh [ 261.719145][ T4269] XFS (loop0): Unmounting Filesystem [ 261.815766][ T4363] kernel write not supported for file /comedi4 (pid: 4363 comm: kworker/0:5) [ 262.369785][ T4385] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.442122][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 262.701830][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 263.035067][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.045239][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.058355][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.065989][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.076982][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.084324][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.490295][ T9657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.652601][ T4385] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.853025][ T4385] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.918631][ T9666] rxe_eth0 speed is unknown, defaulting to 1000 [ 264.096547][ T4385] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.816024][ T9666] chnl_net:caif_netlink_parms(): no params data found [ 265.102491][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 265.415340][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.451798][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.515356][ T9666] device bridge_slave_0 entered promiscuous mode [ 265.588334][ T9720] program syz.4.1818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.671998][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.691636][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.726091][ T9666] device bridge_slave_1 entered promiscuous mode [ 265.871712][ T4362] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 266.023023][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.063086][ T4377] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 266.074986][ T4362] usb 7-1: Using ep0 maxpacket: 32 [ 266.105539][ T4362] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 266.147938][ T4362] usb 7-1: config 0 has no interface number 0 [ 266.175749][ T4362] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 266.209290][ T4362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.236183][ T4362] usb 7-1: Product: syz [ 266.249666][ T4362] usb 7-1: Manufacturer: syz [ 266.272960][ T4362] usb 7-1: SerialNumber: syz [ 266.288037][ T4377] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.313386][ T4362] usb 7-1: config 0 descriptor?? [ 266.341295][ T4377] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.356462][ T4362] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 266.394965][ T4377] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 266.447438][ T4377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.498483][ T4377] usb 5-1: config 0 descriptor?? [ 266.545689][ T4377] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 266.558907][ T4362] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 266.615306][ T4377] dvb-usb: bulk message failed: -22 (3/0) [ 266.640637][ T4362] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 266.676471][ T4377] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 266.738098][ T4377] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 266.754417][ T9723] dvb-usb: bulk message failed: -22 (4/0) [ 266.797020][ T4377] usb 5-1: media controller created [ 266.821436][ T4377] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.886314][ T4377] dvb-usb: bulk message failed: -22 (6/0) [ 266.918182][ T4377] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 266.948862][ T4377] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 267.008680][ T4377] dvb-usb: schedule remote query interval to 150 msecs. [ 267.028434][ T4377] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 267.049961][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 267.090692][ T4377] usb 5-1: USB disconnect, device number 12 [ 267.147030][ T4296] usb 7-1: USB disconnect, device number 7 [ 267.166858][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.181997][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 267.202030][ T4296] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 267.261051][ T4296] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 267.315187][ T4296] quatech2 7-1:0.51: device disconnected [ 267.427721][ T4377] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 267.835005][ T9666] team0: Port device team_slave_0 added [ 268.028021][ T9751] loop6: detected capacity change from 0 to 4096 [ 268.119001][ T9751] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 268.168180][ T9666] team0: Port device team_slave_1 added [ 268.264953][ T9751] EXT4-fs (loop6): shut down requested (0) [ 268.283795][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.319572][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.502237][ T6474] EXT4-fs (loop6): unmounting filesystem. [ 268.520195][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.015252][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.056079][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.248022][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.261851][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 269.510909][ T9666] device hsr_slave_0 entered promiscuous mode [ 269.567055][ T9666] device hsr_slave_1 entered promiscuous mode [ 269.607294][ T9666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.626403][ T9796] ioremap: invalid physical address 8000000000000000 [ 269.653057][ T9666] Cannot create hsr debugfs directory [ 269.668498][ T9796] ------------[ cut here ]------------ [ 269.674178][ T9796] WARNING: CPU: 0 PID: 9796 at arch/x86/mm/ioremap.c:201 __ioremap_caller+0x4f8/0x620 [ 269.683822][ T9796] Modules linked in: [ 269.687710][ T9796] CPU: 0 PID: 9796 Comm: syz.4.1837 Not tainted syzkaller #0 [ 269.695106][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.705652][ T9796] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 269.711541][ T9796] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 b9 48 00 48 8b 74 24 60 48 c7 c7 60 ae 89 8a e8 f8 28 ef 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 269.731176][ T9796] RSP: 0018:ffffc900039a78e0 EFLAGS: 00010246 [ 269.737254][ T9796] RAX: 0000000000000032 RBX: 1ffff92000734f00 RCX: 070cec9ad6e1e200 [ 269.745233][ T9796] RDX: ffffc9000e079000 RSI: 0000000000003a5b RDI: 0000000000003a5c [ 269.753235][ T9796] RBP: ffffc900039a79f0 R08: ffffc900039a75e7 R09: 1ffff92000734ebc [ 269.761206][ T9796] R10: dffffc0000000000 R11: fffff52000734ebd R12: 000000000000002e [ 269.769211][ T9796] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 269.777211][ T9796] FS: 00007f049f13a6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 269.786150][ T9796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.792775][ T9796] CR2: 00007fe729497e9c CR3: 000000006853a000 CR4: 00000000003506f0 [ 269.800745][ T9796] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 269.808757][ T9796] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.816747][ T9796] Call Trace: [ 269.820014][ T9796] [ 269.822960][ T9796] ? register_device+0x129/0x570 [ 269.827909][ T9796] ? ioremap+0x30/0x30 [ 269.832000][ T9796] register_device+0x129/0x570 [ 269.836751][ T9796] ? kstrtoull+0x12c/0x1c0 [ 269.841168][ T9796] phram_setup+0x78a/0xa30 [ 269.845603][ T9796] ? rcu_is_watching+0x11/0xa0 [ 269.850353][ T9796] ? phram_param_call+0x70/0x70 [ 269.855240][ T9796] ? param_attr_store+0xcb/0x300 [ 269.860168][ T9796] ? mutex_lock_nested+0x10/0x10 [ 269.865122][ T9796] ? read_lock_is_recursive+0x10/0x10 [ 269.870491][ T9796] param_attr_store+0x20a/0x300 [ 269.875365][ T9796] ? param_attr_show+0x170/0x170 [ 269.880289][ T9796] ? sysfs_kf_read+0x350/0x350 [ 269.885064][ T9796] module_attr_store+0x5b/0x80 [ 269.889818][ T9796] kernfs_fop_write_iter+0x3a0/0x520 [ 269.895124][ T9796] vfs_write+0x482/0x9a0 [ 269.899359][ T9796] ? file_end_write+0x250/0x250 [ 269.904225][ T9796] ? __fget_files+0x3fc/0x460 [ 269.908895][ T9796] ? __fdget_pos+0x2ae/0x360 [ 269.913519][ T9796] ? ksys_write+0x70/0x260 [ 269.917949][ T9796] ksys_write+0x14d/0x260 [ 269.922297][ T9796] ? __ia32_sys_read+0x80/0x80 [ 269.927052][ T9796] ? lockdep_hardirqs_on+0x94/0x140 [ 269.932263][ T9796] do_syscall_64+0x4c/0xa0 [ 269.936668][ T9796] ? clear_bhb_loop+0x60/0xb0 [ 269.941331][ T9796] ? clear_bhb_loop+0x60/0xb0 [ 269.946024][ T9796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.952014][ T9796] RIP: 0033:0x7f049e19e559 [ 269.956432][ T9796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.976106][ T9796] RSP: 002b:00007f049f13a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.984570][ T9796] RAX: ffffffffffffffda RBX: 00007f049e425fa0 RCX: 00007f049e19e559 [ 269.992568][ T9796] RDX: 000000000000001e RSI: 0000200000000b00 RDI: 0000000000000003 [ 270.000532][ T9796] RBP: 00007f049e235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 270.008517][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.016513][ T9796] R13: 00007f049e426038 R14: 00007f049e425fa0 R15: 00007ffd5ba15998 [ 270.024532][ T9796] [ 270.027551][ T9796] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 270.034812][ T9796] CPU: 0 PID: 9796 Comm: syz.4.1837 Not tainted syzkaller #0 [ 270.042162][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 270.052200][ T9796] Call Trace: [ 270.055465][ T9796] [ 270.058378][ T9796] dump_stack_lvl+0x188/0x24e [ 270.063058][ T9796] ? memcpy+0x3c/0x60 [ 270.067021][ T9796] ? show_regs_print_info+0x12/0x12 [ 270.072206][ T9796] ? load_image+0x410/0x410 [ 270.076706][ T9796] panic+0x2d3/0x710 [ 270.080617][ T9796] ? bpf_jit_dump+0xd0/0xd0 [ 270.085114][ T9796] __warn+0x2f8/0x4f0 [ 270.089077][ T9796] ? __ioremap_caller+0x4f8/0x620 [ 270.094102][ T9796] ? __ioremap_caller+0x4f8/0x620 [ 270.099119][ T9796] report_bug+0x2ba/0x4f0 [ 270.103446][ T9796] ? __ioremap_caller+0x4f8/0x620 [ 270.108472][ T9796] handle_bug+0x3a/0x70 [ 270.112612][ T9796] exc_invalid_op+0x16/0x40 [ 270.117112][ T9796] asm_exc_invalid_op+0x16/0x20 [ 270.121947][ T9796] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 270.127566][ T9796] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 b9 48 00 48 8b 74 24 60 48 c7 c7 60 ae 89 8a e8 f8 28 ef 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 270.147159][ T9796] RSP: 0018:ffffc900039a78e0 EFLAGS: 00010246 [ 270.153221][ T9796] RAX: 0000000000000032 RBX: 1ffff92000734f00 RCX: 070cec9ad6e1e200 [ 270.161175][ T9796] RDX: ffffc9000e079000 RSI: 0000000000003a5b RDI: 0000000000003a5c [ 270.169127][ T9796] RBP: ffffc900039a79f0 R08: ffffc900039a75e7 R09: 1ffff92000734ebc [ 270.177097][ T9796] R10: dffffc0000000000 R11: fffff52000734ebd R12: 000000000000002e [ 270.185050][ T9796] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 270.193015][ T9796] ? register_device+0x129/0x570 [ 270.197959][ T9796] ? ioremap+0x30/0x30 [ 270.202020][ T9796] register_device+0x129/0x570 [ 270.206770][ T9796] ? kstrtoull+0x12c/0x1c0 [ 270.211170][ T9796] phram_setup+0x78a/0xa30 [ 270.215587][ T9796] ? rcu_is_watching+0x11/0xa0 [ 270.220340][ T9796] ? phram_param_call+0x70/0x70 [ 270.225198][ T9796] ? param_attr_store+0xcb/0x300 [ 270.230120][ T9796] ? mutex_lock_nested+0x10/0x10 [ 270.235047][ T9796] ? read_lock_is_recursive+0x10/0x10 [ 270.240424][ T9796] param_attr_store+0x20a/0x300 [ 270.245262][ T9796] ? param_attr_show+0x170/0x170 [ 270.250196][ T9796] ? sysfs_kf_read+0x350/0x350 [ 270.254959][ T9796] module_attr_store+0x5b/0x80 [ 270.259712][ T9796] kernfs_fop_write_iter+0x3a0/0x520 [ 270.264999][ T9796] vfs_write+0x482/0x9a0 [ 270.269230][ T9796] ? file_end_write+0x250/0x250 [ 270.274068][ T9796] ? __fget_files+0x3fc/0x460 [ 270.278733][ T9796] ? __fdget_pos+0x2ae/0x360 [ 270.283308][ T9796] ? ksys_write+0x70/0x260 [ 270.287727][ T9796] ksys_write+0x14d/0x260 [ 270.292051][ T9796] ? __ia32_sys_read+0x80/0x80 [ 270.296813][ T9796] ? lockdep_hardirqs_on+0x94/0x140 [ 270.302010][ T9796] do_syscall_64+0x4c/0xa0 [ 270.306420][ T9796] ? clear_bhb_loop+0x60/0xb0 [ 270.311075][ T9796] ? clear_bhb_loop+0x60/0xb0 [ 270.315731][ T9796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.321602][ T9796] RIP: 0033:0x7f049e19e559 [ 270.325998][ T9796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.345589][ T9796] RSP: 002b:00007f049f13a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.353982][ T9796] RAX: ffffffffffffffda RBX: 00007f049e425fa0 RCX: 00007f049e19e559 [ 270.361951][ T9796] RDX: 000000000000001e RSI: 0000200000000b00 RDI: 0000000000000003 [ 270.369990][ T9796] RBP: 00007f049e235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 270.377956][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.385918][ T9796] R13: 00007f049e426038 R14: 00007f049e425fa0 R15: 00007ffd5ba15998 [ 270.393879][ T9796] [ 270.396955][ T9796] Kernel Offset: disabled [ 270.401377][ T9796] Rebooting in 86400 seconds..