last executing test programs: 34.900412604s ago: executing program 1 (id=589): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x20, 0x12, 0xa01, 0x4, 0x0, {0x80, 0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@nested={0x5, 0x135, 0x0, 0x1, [@generic="cd"]}]}]}, 0x20}}, 0x0) 34.116196978s ago: executing program 1 (id=592): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000044c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000002140)=r0) 32.90307626s ago: executing program 1 (id=598): mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 32.349149133s ago: executing program 1 (id=603): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)=""/250, 0xfa}], 0x1, &(0x7f0000000080)=""/25, 0x19}, 0x10000) 31.786166969s ago: executing program 1 (id=606): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 31.17415877s ago: executing program 1 (id=609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r1, r0, 0x4, r0}, 0x6) 29.808203151s ago: executing program 0 (id=617): pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) splice(r1, &(0x7f0000000040)=0x8, r0, 0x0, 0x5, 0x0) 29.377141135s ago: executing program 0 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0xf03, 0xfffffffc, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 28.833903118s ago: executing program 0 (id=624): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='oom_adj\x00') cachestat(r0, &(0x7f0000000000)={0x264}, 0x0, 0x0) 28.186884885s ago: executing program 0 (id=628): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c732000000000000000020b00e44de83eb12e1addb51edd821f23ab83af360c42a3a64f4e227479c5dd61952d5fcb0bcfee33d3832a050f83cc04ac5025adbf5d9fc1d72fb565aa4734eec868691025f3a382de96d325d0f56d2859781ea76aea7305d7661f8bd5650b7e9dcc1af8c0daef9686f8a1a5637c77b000b423d659049a769bbd8ac3ec13220fb30c2cbcc5f045b71395d17d76da531a330468bfd2dd4b7f6d9991ec27e0485b36bff71689d333fd4b5b6d8dfabb206dd573227856bdd7661d970d01bf6639b3177b0fd9d80ce94358a17b72a27def19e853c337df0e8a1a8f27d44010f9399f8feae412a6c3d07f8f9e24f8948"], 0xfe, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 26.922900189s ago: executing program 0 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 26.067012966s ago: executing program 0 (id=639): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x253, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xfffff979, 0x8000000000000009, 0x7, 0x0, 0x35, 0x7}) 24.39849779s ago: executing program 32 (id=639): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x253, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xfffff979, 0x8000000000000009, 0x7, 0x0, 0x35, 0x7}) 15.844590339s ago: executing program 33 (id=609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r1, r0, 0x4, r0}, 0x6) 5.141295661s ago: executing program 4 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 5.00132268s ago: executing program 2 (id=703): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x80, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24d, 0xfffffff6, 0x0, 0x38, 0x1, 0x1, 0x7f, 0x7}, [{0x3, 0x4, 0xffffffff00000001, 0xa, 0x101, 0x6, 0x7, 0xffffffffffffff7f}]}, 0x78) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3789b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a0500200f314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263e44f59fae487c62c98a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae01bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449ac59110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc030000009443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a36d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd58023fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b152a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e222dbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c4d2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dbaabd1d51a60b474cef4c700faf718b810e4d3527a4663ee9fbc0000000000000000000000000000000000000000000000000061abf7a66b7b3f57ff830000"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.961793049s ago: executing program 3 (id=704): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000100)=ANY=[], 0x1, 0x24a, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.30339355s ago: executing program 4 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 4.109737316s ago: executing program 3 (id=706): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmda12\x00', [0x8005, 0x4, 0x3, 0x1f, 0x0, 0xcc7, 0x8, 0x7, 0x0, 0xff, 0x0, 0x1, 0x8, 0x2, 0x20006, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x5, 0x6, 0x4fa7f85b, 0x10000, 0x5149]}) 3.509449582s ago: executing program 4 (id=707): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 3.399317523s ago: executing program 2 (id=708): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300fff2) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000002200)=0xf1eb) 3.270522993s ago: executing program 3 (id=709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mlockall(0x2) 2.753095274s ago: executing program 2 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25390000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 2.705476975s ago: executing program 4 (id=711): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x6000, 0x0, 0x0) 2.583537854s ago: executing program 3 (id=712): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.933284081s ago: executing program 3 (id=713): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x42303159}) 1.897672837s ago: executing program 2 (id=714): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$VT_SETMODE(r0, 0x5602, 0x0) 1.43899902s ago: executing program 2 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)) 1.289238467s ago: executing program 4 (id=716): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200006, 0x0, 0x6, 0x7}) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, 0x0, &(0x7f00000000c0)) 446.072271ms ago: executing program 4 (id=717): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 382.739194ms ago: executing program 2 (id=718): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vcan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003b80)="870b", 0x2}], 0x1}}], 0x1, 0x4080) 0s ago: executing program 3 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) kernel console output (not intermixed with test programs): h: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.241447][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.322461][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.349624][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.360528][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.410362][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.432035][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.444770][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.533883][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.582038][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.194356][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 174.445171][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 174.938823][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 175.073077][ T5094] Bluetooth: hci0: command tx timeout [ 175.080346][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 175.134719][ T5094] Bluetooth: hci1: command tx timeout [ 175.359161][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.368617][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.376440][ T5797] bridge_slave_0: entered allmulticast mode [ 175.385652][ T5797] bridge_slave_0: entered promiscuous mode [ 175.398226][ T5094] Bluetooth: hci2: command tx timeout [ 175.402854][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 175.462847][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.473587][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.486782][ T5797] bridge_slave_1: entered allmulticast mode [ 175.496134][ T5797] bridge_slave_1: entered promiscuous mode [ 175.554707][ T5094] Bluetooth: hci3: command tx timeout [ 175.695182][ T5094] Bluetooth: hci4: command tx timeout [ 175.733346][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.756611][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.944374][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.952018][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.960484][ T5793] bridge_slave_0: entered allmulticast mode [ 175.969852][ T5793] bridge_slave_0: entered promiscuous mode [ 176.025533][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.033018][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.040828][ T5793] bridge_slave_1: entered allmulticast mode [ 176.050210][ T5793] bridge_slave_1: entered promiscuous mode [ 176.068901][ T5797] team0: Port device team_slave_0 added [ 176.075830][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.083194][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.092601][ T5803] bridge_slave_0: entered allmulticast mode [ 176.101968][ T5803] bridge_slave_0: entered promiscuous mode [ 176.162575][ T5797] team0: Port device team_slave_1 added [ 176.169237][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.177102][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.184841][ T5803] bridge_slave_1: entered allmulticast mode [ 176.192964][ T5803] bridge_slave_1: entered promiscuous mode [ 176.245717][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.402185][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.440906][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.450020][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.457747][ T5802] bridge_slave_0: entered allmulticast mode [ 176.466633][ T5802] bridge_slave_0: entered promiscuous mode [ 176.562184][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.570139][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.597103][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.609408][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.617150][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.624862][ T5802] bridge_slave_1: entered allmulticast mode [ 176.633903][ T5802] bridge_slave_1: entered promiscuous mode [ 176.646742][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.653917][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.680230][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.725147][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.734961][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.742585][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.750722][ T5806] bridge_slave_0: entered allmulticast mode [ 176.760079][ T5806] bridge_slave_0: entered promiscuous mode [ 176.853427][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.863862][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.873650][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.881414][ T5806] bridge_slave_1: entered allmulticast mode [ 176.889646][ T5806] bridge_slave_1: entered promiscuous mode [ 176.912406][ T5793] team0: Port device team_slave_0 added [ 177.053602][ T5793] team0: Port device team_slave_1 added [ 177.100303][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.118267][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.144915][ T5094] Bluetooth: hci0: command tx timeout [ 177.214674][ T5094] Bluetooth: hci1: command tx timeout [ 177.231136][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.283681][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.309307][ T5797] hsr_slave_0: entered promiscuous mode [ 177.319298][ T5797] hsr_slave_1: entered promiscuous mode [ 177.337844][ T5803] team0: Port device team_slave_0 added [ 177.437613][ T5803] team0: Port device team_slave_1 added [ 177.454936][ T5094] Bluetooth: hci2: command tx timeout [ 177.483419][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.490887][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.517127][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.615738][ T5094] Bluetooth: hci3: command tx timeout [ 177.625977][ T5802] team0: Port device team_slave_0 added [ 177.633904][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.642287][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.669400][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.689540][ T5806] team0: Port device team_slave_0 added [ 177.763502][ T5802] team0: Port device team_slave_1 added [ 177.799987][ T5094] Bluetooth: hci4: command tx timeout [ 177.850928][ T5806] team0: Port device team_slave_1 added [ 177.874178][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.881526][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.908229][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.020127][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.028463][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.055693][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.215831][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.222900][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.249219][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.262763][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.269971][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.296312][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.333562][ T5793] hsr_slave_0: entered promiscuous mode [ 178.343495][ T5793] hsr_slave_1: entered promiscuous mode [ 178.351658][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 178.357677][ T5793] Cannot create hsr debugfs directory [ 178.370494][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.377728][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.403986][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.418903][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.426186][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.452607][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.830919][ T5803] hsr_slave_0: entered promiscuous mode [ 178.840517][ T5803] hsr_slave_1: entered promiscuous mode [ 178.848590][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 178.854630][ T5803] Cannot create hsr debugfs directory [ 178.956313][ T5806] hsr_slave_0: entered promiscuous mode [ 178.966174][ T5806] hsr_slave_1: entered promiscuous mode [ 178.974822][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 178.980790][ T5806] Cannot create hsr debugfs directory [ 179.109951][ T5802] hsr_slave_0: entered promiscuous mode [ 179.118793][ T5802] hsr_slave_1: entered promiscuous mode [ 179.127333][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 179.133208][ T5802] Cannot create hsr debugfs directory [ 179.236174][ T5094] Bluetooth: hci0: command tx timeout [ 179.295240][ T5094] Bluetooth: hci1: command tx timeout [ 179.404942][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.558765][ T5094] Bluetooth: hci2: command tx timeout [ 179.567041][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.636833][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.724881][ T5094] Bluetooth: hci3: command tx timeout [ 179.747498][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.879455][ T5094] Bluetooth: hci4: command tx timeout [ 180.145495][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.246033][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.356717][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.399502][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.661811][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.759639][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.809728][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.846689][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.902154][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.958516][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.988553][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.079117][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.173839][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.230127][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.277823][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.289532][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.299427][ T5094] Bluetooth: hci0: command tx timeout [ 181.344748][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.375624][ T5094] Bluetooth: hci1: command tx timeout [ 181.547233][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.609175][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.624283][ T5094] Bluetooth: hci2: command tx timeout [ 181.723177][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.730644][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.775506][ T5094] Bluetooth: hci3: command tx timeout [ 181.816089][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.832784][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.840349][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.935856][ T5094] Bluetooth: hci4: command tx timeout [ 181.964517][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.971885][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.110380][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.117937][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.331357][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.420212][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.519979][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.567012][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.600200][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.607750][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.697908][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.705585][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.727634][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.746081][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.833048][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.840627][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.855740][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.863201][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.882752][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.890321][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.940677][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.948247][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.216065][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.301523][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.340814][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.732119][ T5793] veth0_vlan: entered promiscuous mode [ 184.841603][ T5793] veth1_vlan: entered promiscuous mode [ 184.969436][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.101897][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.112625][ T5793] veth0_macvtap: entered promiscuous mode [ 185.207774][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.260369][ T5793] veth1_macvtap: entered promiscuous mode [ 185.499142][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.543232][ T5803] veth0_vlan: entered promiscuous mode [ 185.604030][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.692163][ T5803] veth1_vlan: entered promiscuous mode [ 185.736473][ T4508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.750495][ T5802] veth0_vlan: entered promiscuous mode [ 185.788095][ T4508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.840878][ T4508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.899647][ T4508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.912657][ T5802] veth1_vlan: entered promiscuous mode [ 185.946160][ T5806] veth0_vlan: entered promiscuous mode [ 186.104977][ T5806] veth1_vlan: entered promiscuous mode [ 186.130036][ T5803] veth0_macvtap: entered promiscuous mode [ 186.211842][ T5803] veth1_macvtap: entered promiscuous mode [ 186.335705][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.380957][ T5802] veth0_macvtap: entered promiscuous mode [ 186.411388][ T5806] veth0_macvtap: entered promiscuous mode [ 186.435934][ T5802] veth1_macvtap: entered promiscuous mode [ 186.487639][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.541141][ T5806] veth1_macvtap: entered promiscuous mode [ 186.617642][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.678173][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.704293][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.758382][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.765970][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.798682][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.828116][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.845357][ T5797] veth0_vlan: entered promiscuous mode [ 186.865574][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.910602][ T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.978752][ T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.989463][ T5797] veth1_vlan: entered promiscuous mode [ 187.029234][ T3739] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.093742][ T3739] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.125618][ T3739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.188871][ T3739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.255014][ T4718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.264016][ T4718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.307805][ T5797] veth0_macvtap: entered promiscuous mode [ 187.374137][ T5797] veth1_macvtap: entered promiscuous mode [ 187.584585][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.676393][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.835067][ T4718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.906478][ T4718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.966661][ T4718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.029953][ T4718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.763894][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.772547][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.900307][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.908606][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.242873][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.253235][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.268205][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 192.452690][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.460932][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.622143][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.630559][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.829027][ T4718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.837255][ T4718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.069877][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.078164][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.340030][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.348443][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.394720][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.403007][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.691895][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.701148][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.949791][ T5983] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 193.956541][ T5983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.965532][ T5983] vhci_hcd vhci_hcd.0: Device attached [ 193.967050][ T5985] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 193.977727][ T5985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.986149][ T5985] vhci_hcd vhci_hcd.0: Device attached [ 194.072292][ T5983] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 194.079055][ T5983] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.087318][ T5983] vhci_hcd vhci_hcd.0: Device attached [ 194.191897][ T5986] vhci_hcd: connection closed [ 194.192678][ T5984] vhci_hcd: connection closed [ 194.202096][ T4508] vhci_hcd vhci_hcd.1: stop threads [ 194.212967][ T4508] vhci_hcd vhci_hcd.1: release socket [ 194.219484][ T4508] vhci_hcd vhci_hcd.1: disconnect device [ 194.265298][ T5990] vhci_hcd: connection closed [ 194.286123][ T794] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 194.358906][ T4508] vhci_hcd vhci_hcd.1: stop threads [ 194.365568][ T4508] vhci_hcd vhci_hcd.1: release socket [ 194.371169][ T4508] vhci_hcd vhci_hcd.1: disconnect device [ 194.442261][ T4508] vhci_hcd vhci_hcd.1: stop threads [ 194.448238][ T4508] vhci_hcd vhci_hcd.1: release socket [ 194.455843][ T4508] vhci_hcd vhci_hcd.1: disconnect device [ 194.615809][ T6000] loop4: detected capacity change from 0 to 512 [ 194.707122][ T6000] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.020318][ T6000] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.5: Bad quota inum: 2, type: 1 [ 195.115984][ T6000] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 195.447375][ T5797] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 196.533896][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 196.573284][ T6015] loop1: detected capacity change from 0 to 8192 [ 196.722569][ T6026] loop2: detected capacity change from 0 to 128 [ 196.734942][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 196.773305][ T6028] loop0: detected capacity change from 0 to 256 [ 196.798097][ T42] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.806980][ T42] usb 5-1: config 0 has no interface number 0 [ 196.849741][ T42] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 196.860024][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.868536][ T42] usb 5-1: Product: syz [ 196.872902][ T42] usb 5-1: Manufacturer: syz [ 196.877820][ T42] usb 5-1: SerialNumber: syz [ 196.882749][ T6026] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 197.008262][ T6028] FAT-fs (loop0): Directory bread(block 64) failed [ 197.016397][ T6028] FAT-fs (loop0): Directory bread(block 65) failed [ 197.023444][ T6028] FAT-fs (loop0): Directory bread(block 66) failed [ 197.030321][ T6028] FAT-fs (loop0): Directory bread(block 67) failed [ 197.037382][ T6028] FAT-fs (loop0): Directory bread(block 68) failed [ 197.044063][ T6028] FAT-fs (loop0): Directory bread(block 69) failed [ 197.051324][ T6028] FAT-fs (loop0): Directory bread(block 70) failed [ 197.058245][ T6028] FAT-fs (loop0): Directory bread(block 71) failed [ 197.065209][ T6028] FAT-fs (loop0): Directory bread(block 72) failed [ 197.071920][ T6028] FAT-fs (loop0): Directory bread(block 73) failed [ 197.112312][ T42] usb 5-1: config 0 descriptor?? [ 197.142572][ T6026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.163377][ T42] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 197.173257][ T42] usb 5-1: selecting invalid altsetting 1 [ 197.179337][ T42] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 197.205017][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 197.327203][ T42] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 197.338975][ T42] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 197.347887][ T42] usb 5-1: media controller created [ 197.412002][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.423381][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.433904][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 197.443401][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.537153][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.579028][ T24] usb 4-1: config 0 descriptor?? [ 197.832571][ T42] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 197.840433][ T42] zl10353_read_register: readreg error (reg=127, ret==-71) [ 197.904929][ T42] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 198.046979][ T24] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 198.243433][ T24] usb 4-1: USB disconnect, device number 2 [ 198.459944][ T42] usb 5-1: USB disconnect, device number 2 [ 198.796506][ T6043] warning: `syz.2.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.908231][ T6046] Zero length message leads to an empty skb [ 199.056808][ T42] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 199.259928][ T42] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 199.271760][ T42] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 199.280410][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 199.289599][ T42] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 199.300760][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 199.311518][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 199.396941][ T42] usb 5-1: string descriptor 0 read error: -22 [ 199.403796][ T42] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 199.413368][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.483548][ T794] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 199.497289][ T42] usb 5-1: config 0 descriptor?? [ 199.505468][ T6044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.529176][ T42] hub 5-1:0.0: bad descriptor, ignoring hub [ 199.541107][ T42] hub 5-1:0.0: probe with driver hub failed with error -5 [ 199.561591][ T42] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 199.600407][ T6057] loop1: detected capacity change from 0 to 64 [ 199.620279][ T6057] ======================================================= [ 199.620279][ T6057] WARNING: The mand mount option has been deprecated and [ 199.620279][ T6057] and is ignored by this kernel. Remove the mand [ 199.620279][ T6057] option from the mount to silence this warning. [ 199.620279][ T6057] ======================================================= [ 199.677662][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 200.042290][ T42] usb 5-1: USB disconnect, device number 3 [ 200.127337][ T24] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 200.136799][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.145170][ T24] usb 3-1: Product: syz [ 200.149502][ T24] usb 3-1: Manufacturer: syz [ 200.154271][ T24] usb 3-1: SerialNumber: syz [ 200.204834][ T24] usb 3-1: config 0 descriptor?? [ 200.225203][ T24] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 002 [ 200.906699][ T24] i2c i2c-1: failure reading functionality [ 200.964242][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 201.034269][ T24] usb 3-1: USB disconnect, device number 2 [ 201.248264][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.248264][ T3739] loop1: rw=1, sector=2088, nr_sectors = 2048 limit=64 [ 201.267392][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.267392][ T3739] loop1: rw=1, sector=4136, nr_sectors = 32 limit=64 [ 201.281359][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.281359][ T3739] loop1: rw=8388609, sector=4168, nr_sectors = 1 limit=64 [ 201.296652][ T3739] Buffer I/O error on dev loop1, logical block 4168, lost async page write [ 201.305955][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.305955][ T3739] loop1: rw=8388609, sector=4169, nr_sectors = 1 limit=64 [ 201.320191][ T3739] Buffer I/O error on dev loop1, logical block 4169, lost async page write [ 201.329260][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.329260][ T3739] loop1: rw=8388609, sector=4170, nr_sectors = 1 limit=64 [ 201.343641][ T3739] Buffer I/O error on dev loop1, logical block 4170, lost async page write [ 201.352523][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.352523][ T3739] loop1: rw=8388609, sector=4172, nr_sectors = 1 limit=64 [ 201.367404][ T3739] Buffer I/O error on dev loop1, logical block 4172, lost async page write [ 201.376424][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.376424][ T3739] loop1: rw=8388609, sector=4173, nr_sectors = 1 limit=64 [ 201.390655][ T3739] Buffer I/O error on dev loop1, logical block 4173, lost async page write [ 201.400351][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.400351][ T3739] loop1: rw=8388609, sector=4174, nr_sectors = 1 limit=64 [ 201.414840][ T3739] Buffer I/O error on dev loop1, logical block 4174, lost async page write [ 201.423640][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.423640][ T3739] loop1: rw=8388609, sector=4175, nr_sectors = 1 limit=64 [ 201.437908][ T3739] Buffer I/O error on dev loop1, logical block 4175, lost async page write [ 201.446823][ T3739] kworker/u8:19: attempt to access beyond end of device [ 201.446823][ T3739] loop1: rw=8388609, sector=4180, nr_sectors = 1 limit=64 [ 201.477933][ T3739] Buffer I/O error on dev loop1, logical block 4180, lost async page write [ 201.498304][ T3739] Buffer I/O error on dev loop1, logical block 4189, lost async page write [ 201.508144][ T3739] Buffer I/O error on dev loop1, logical block 4190, lost async page write [ 201.589079][ T6065] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 202.189767][ T6072] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 202.196526][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.204909][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 202.221982][ T6071] loop0: detected capacity change from 0 to 512 [ 202.433606][ T6071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.447431][ T6071] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.464728][ T794] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 202.556144][ T6071] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.40: corrupted xattr block 33: overlapping e_value [ 202.564999][ T5846] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 202.767834][ T5846] usb 3-1: config 0 has no interfaces? [ 202.773549][ T5846] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.783778][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.885698][ T5846] usb 3-1: config 0 descriptor?? [ 202.966020][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.121721][ T6073] usbip_core: unknown command [ 203.126780][ T6073] vhci_hcd: unknown pdu 0 [ 203.131237][ T6073] usbip_core: unknown command [ 203.170481][ T1136] vhci_hcd vhci_hcd.2: stop threads [ 203.176475][ T1136] vhci_hcd vhci_hcd.2: release socket [ 203.182127][ T1136] vhci_hcd vhci_hcd.2: disconnect device [ 203.190944][ T5873] usb 3-1: USB disconnect, device number 3 [ 203.199211][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 203.211076][ T794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 203.450446][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.461037][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 203.474129][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.484081][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.580373][ T6086] loop0: detected capacity change from 0 to 256 [ 203.581656][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.596159][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.604599][ T24] usb 5-1: Manufacturer: syz [ 203.616938][ T24] usb 5-1: config 0 descriptor?? [ 203.728292][ T6086] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 256) [ 204.154799][ T24] rc_core: IR keymap rc-hauppauge not found [ 204.161865][ T24] Registered IR keymap rc-empty [ 204.170216][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.256977][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.321140][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 204.341881][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 204.473091][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.560190][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.615091][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.644051][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.768660][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.811823][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.880719][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.923179][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 204.966444][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 205.003647][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 205.039240][ T24] mceusb 5-1:0.0: Registered ÒŸ with mce emulator interface version 1 [ 205.048085][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 205.226220][ T24] usb 5-1: USB disconnect, device number 4 [ 205.321953][ T6093] loop0: detected capacity change from 0 to 32768 [ 205.333553][ T6093] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.48 (6093) [ 205.353553][ T6093] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.364379][ T6093] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 205.381163][ T6093] workqueue: max_active 3636 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 205.426065][ T6093] workqueue: max_active 3636 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 205.465515][ T6093] workqueue: max_active 3636 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 205.479736][ T6093] workqueue: max_active 3636 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 205.512867][ T6093] workqueue: max_active 3636 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 205.527680][ T6093] workqueue: max_active 3636 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 205.636234][ T6093] BTRFS info (device loop0): rebuilding free space tree [ 205.676772][ T6093] BTRFS info (device loop0): setting nodatasum [ 205.683253][ T6093] BTRFS info (device loop0): allowing degraded mounts [ 205.690524][ T6093] BTRFS info (device loop0): setting nodatacow [ 205.704659][ T6093] BTRFS info (device loop0): enabling ssd optimizations [ 205.713288][ T6093] BTRFS info (device loop0): disabling tree log [ 205.722467][ T6093] BTRFS info (device loop0): enabling free space tree [ 205.729554][ T6093] BTRFS info (device loop0): force clearing of disk cache [ 205.737096][ T6093] BTRFS info (device loop0): enabling auto defrag [ 205.976242][ T6122] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 206.006840][ T5802] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.098890][ T6120] loop4: detected capacity change from 0 to 512 [ 206.291323][ T6120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.305395][ T6120] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.327898][ T6125] netlink: 'syz.2.57': attribute type 3 has an invalid length. [ 206.336017][ T6125] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 206.343743][ T6125] netlink: 224 bytes leftover after parsing attributes in process `syz.2.57'. [ 206.564685][ T6127] batadv0: entered promiscuous mode [ 206.571089][ T6126] batadv0: left promiscuous mode [ 206.744980][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.152060][ T6131] loop1: detected capacity change from 0 to 2048 [ 207.228131][ T6131] udf: Unexpected value for 'shortad' [ 207.290608][ T6134] loop4: detected capacity change from 0 to 1024 [ 207.327182][ T6131] netlink: zone id is out of range [ 207.332578][ T6131] netlink: zone id is out of range [ 207.338989][ T6131] netlink: zone id is out of range [ 207.344241][ T6131] netlink: zone id is out of range [ 207.350051][ T6131] netlink: zone id is out of range [ 207.355519][ T6131] netlink: zone id is out of range [ 207.360754][ T6131] netlink: zone id is out of range [ 207.366146][ T6131] netlink: zone id is out of range [ 207.371395][ T6131] netlink: zone id is out of range [ 207.376621][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.571945][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 207.652494][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.663561][ T5846] usb 4-1: config 0 has no interfaces? [ 207.712919][ T5846] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 207.722940][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.731332][ T5846] usb 4-1: Product: syz [ 207.735917][ T5846] usb 4-1: Manufacturer: syz [ 207.740712][ T5846] usb 4-1: SerialNumber: syz [ 207.832522][ T5846] usb 4-1: config 0 descriptor?? [ 208.100531][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.110801][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.208410][ T5094] Bluetooth: hci4: Malformed LE Event: 0x0d [ 208.227845][ T24] usb 4-1: USB disconnect, device number 3 [ 208.565009][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 208.786929][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 208.828059][ T24] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 208.836559][ T24] usb 2-1: config 0 has no interface number 0 [ 208.842832][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.854203][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 208.866170][ T24] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 208.878353][ T24] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 208.889519][ T24] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.100317][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 209.110054][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.118427][ T24] usb 2-1: Product: syz [ 209.124356][ T24] usb 2-1: Manufacturer: syz [ 209.130320][ T24] usb 2-1: SerialNumber: syz [ 209.268545][ T24] usb 2-1: config 0 descriptor?? [ 209.519815][ T24] iowarrior 2-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 209.786439][ T5846] usb 2-1: USB disconnect, device number 2 [ 209.833058][ T6161] loop3: detected capacity change from 0 to 256 [ 209.984923][ T6161] FAT-fs (loop3): Directory bread(block 64) failed [ 209.991848][ T6161] FAT-fs (loop3): Directory bread(block 65) failed [ 209.999889][ T6161] FAT-fs (loop3): Directory bread(block 66) failed [ 210.007223][ T6161] FAT-fs (loop3): Directory bread(block 67) failed [ 210.014074][ T6161] FAT-fs (loop3): Directory bread(block 68) failed [ 210.024346][ T6161] FAT-fs (loop3): Directory bread(block 69) failed [ 210.032093][ T6161] FAT-fs (loop3): Directory bread(block 70) failed [ 210.038970][ T6161] FAT-fs (loop3): Directory bread(block 71) failed [ 210.046473][ T6161] FAT-fs (loop3): Directory bread(block 72) failed [ 210.053179][ T6161] FAT-fs (loop3): Directory bread(block 73) failed [ 210.459722][ T5846] kernel write not supported for file /input/event2 (pid: 5846 comm: kworker/0:4) [ 211.125095][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 211.340693][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.351884][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 211.363357][ T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 211.373031][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.407038][ T24] usb 2-1: config 0 descriptor?? [ 211.424891][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 211.433062][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 211.446584][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 211.467433][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 211.477567][ T24] usb 2-1: media controller created [ 211.492525][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.512814][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 211.519127][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 211.556440][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 211.598500][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 211.607491][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 211.674847][ T6171] dibusb: i2c wr: len=8192 is too big! [ 211.674847][ T6171] [ 211.722924][ T24] usb 2-1: USB disconnect, device number 3 [ 211.843827][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 211.875139][ T6184] loop4: detected capacity change from 0 to 64 [ 212.024024][ T6186] loop0: detected capacity change from 0 to 128 [ 212.052009][ T6186] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 212.073436][ T6186] hpfs: filesystem error: improperly stopped [ 212.080224][ T6186] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 212.088524][ T6186] hpfs: You really don't want any checks? You are crazy... [ 212.129375][ T6184] hfs: request for non-existent node 131072 in B*Tree [ 212.134784][ T6186] hpfs: hpfs_map_sector(): read error [ 212.137003][ T6184] hfs: request for non-existent node 131072 in B*Tree [ 212.141800][ T6186] hpfs: code page support is disabled [ 212.174973][ T6186] hpfs: hpfs_map_4sectors(): unaligned read [ 212.214352][ T6186] hpfs: hpfs_map_4sectors(): unaligned read [ 212.220766][ T6186] hpfs: filesystem error: unable to find root dir [ 212.515660][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.690434][ T6205] loop1: detected capacity change from 0 to 2048 [ 213.761495][ T6205] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 213.832575][ T6205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.853805][ T6201] loop3: detected capacity change from 0 to 4096 [ 214.296144][ T6214] syz.2.99 uses old SIOCAX25GETINFO [ 215.357867][ T6227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.105'. [ 215.399456][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.4.105'. [ 215.431672][ T6229] loop1: detected capacity change from 0 to 512 [ 215.488265][ T6229] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 215.610461][ T6229] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 215.626449][ T6229] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.106: corrupted inode contents [ 215.680297][ T6229] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #11: comm syz.1.106: mark_inode_dirty error [ 215.720156][ T6229] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.106: invalid indirect mapped block 1 (level 1) [ 215.781832][ T6229] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.106: corrupted inode contents [ 215.846487][ T6229] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 215.884345][ T6229] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.106: corrupted inode contents [ 215.927606][ T6229] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.106: mark_inode_dirty error [ 215.971178][ T6229] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 215.995724][ T6229] EXT4-fs (loop1): 1 truncate cleaned up [ 216.003570][ T6229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.065028][ T6229] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.106: path /16/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 216.290290][ T30] audit: type=1326 audit(1765887445.636:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05f7d8f749 code=0x0 [ 216.478679][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.161319][ T5846] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 217.378390][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 217.419427][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 217.431228][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 217.444692][ T5846] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 217.445365][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 217.453907][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.496685][ T5846] usb 3-1: config 0 descriptor?? [ 217.796026][ T6265] loop4: detected capacity change from 0 to 256 [ 217.871818][ T6265] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4711949a, utbl_chksum : 0xe619d30d) [ 217.887865][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 217.958680][ T24] usb 4-1: config index 0 descriptor too short (expected 44303, got 18) [ 217.970120][ T24] usb 4-1: config 62 has too many interfaces: 65, using maximum allowed: 32 [ 217.979352][ T24] usb 4-1: config 62 has an invalid descriptor of length 0, skipping remainder of the config [ 217.990761][ T24] usb 4-1: config 62 has 0 interfaces, different from the descriptor's value: 65 [ 218.001035][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 218.010514][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.029876][ T5846] kovaplus 0003:1E7D:2D50.0002: item fetching failed at offset 0/3 [ 218.123892][ T5846] kovaplus 0003:1E7D:2D50.0002: parse failed [ 218.131384][ T5846] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -22 [ 218.215089][ T5846] usb 3-1: USB disconnect, device number 4 [ 218.419645][ T24] usb 4-1: string descriptor 0 read error: -71 [ 218.467194][ T24] usb 4-1: USB disconnect, device number 4 [ 218.781232][ T6274] ALSA: mixer_oss: invalid OSS volume '' [ 218.797630][ T6275] ALSA: mixer_oss: invalid OSS volume '' [ 219.203950][ T6279] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 219.771793][ T6290] loop4: detected capacity change from 0 to 128 [ 219.828517][ T6291] loop2: detected capacity change from 0 to 256 [ 219.863132][ T6290] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 219.877116][ T6287] loop3: detected capacity change from 0 to 4096 [ 219.916064][ T6291] exfat: Deprecated parameter 'namecase' [ 219.922428][ T6291] exfat: Deprecated parameter 'namecase' [ 219.928864][ T6291] exfat: Deprecated parameter 'namecase' [ 219.955162][ T6290] hpfs: filesystem error: improperly stopped [ 219.961478][ T6290] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 219.969698][ T6290] hpfs: You really don't want any checks? You are crazy... [ 220.037073][ T6290] hpfs: hpfs_map_sector(): read error [ 220.042625][ T6290] hpfs: code page support is disabled [ 220.099970][ T6291] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 220.130587][ T6290] hpfs: hpfs_map_4sectors(): unaligned read [ 220.151787][ T6290] hpfs: hpfs_map_4sectors(): unaligned read [ 220.158156][ T6290] hpfs: filesystem error: unable to find root dir [ 220.510807][ T30] audit: type=1326 audit(1765887449.856:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 220.533632][ T30] audit: type=1326 audit(1765887449.876:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 220.556690][ T30] audit: type=1326 audit(1765887449.876:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 221.310584][ T30] audit: type=1326 audit(1765887450.656:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 221.336490][ T6305] tipc: Enabling of bearer rejected, failed to enable media [ 221.471604][ T30] audit: type=1326 audit(1765887450.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 221.495120][ T30] audit: type=1326 audit(1765887450.736:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 221.519818][ T30] audit: type=1326 audit(1765887450.776:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 221.542564][ T30] audit: type=1326 audit(1765887450.776:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 221.565143][ T30] audit: type=1326 audit(1765887450.786:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1d58f749 code=0x7ffc0000 [ 221.913193][ T6311] loop4: detected capacity change from 0 to 256 [ 221.982024][ T6311] exfat: Deprecated parameter 'utf8' [ 222.071318][ T6316] loop1: detected capacity change from 0 to 512 [ 222.122545][ T6311] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 222.163422][ T6317] tipc: Started in network mode [ 222.168587][ T6317] tipc: Node identity , cluster identity 4711 [ 222.175238][ T6317] tipc: Failed to set node id, please configure manually [ 222.183425][ T6317] tipc: Enabling of bearer rejected, failed to enable media [ 222.210672][ T6316] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 222.345720][ T6316] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.147: bg 0: block 104: invalid block bitmap [ 222.419401][ T6316] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 222.435260][ T6316] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.147: invalid indirect mapped block 1 (level 1) [ 222.516001][ T6316] EXT4-fs (loop1): 1 truncate cleaned up [ 222.523705][ T6316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.773156][ T30] audit: type=1800 audit(1765887452.126:12): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 223.173493][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.227398][ T6332] loop2: detected capacity change from 0 to 16 [ 223.276282][ T6332] erofs (device loop2): mounted with root inode @ nid 36. [ 224.156644][ T6348] loop1: detected capacity change from 0 to 64 [ 224.170311][ T30] audit: type=1326 audit(1765887453.506:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc818f749 code=0x7fc00000 [ 224.193143][ T30] audit: type=1326 audit(1765887453.506:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cc818f749 code=0x7fc00000 [ 224.216549][ T30] audit: type=1326 audit(1765887453.506:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc818f749 code=0x7fc00000 [ 224.520229][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.529859][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.545448][ T6346] loop2: detected capacity change from 0 to 4096 [ 225.267479][ T6358] loop3: detected capacity change from 0 to 256 [ 225.434635][ T6358] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 226.213122][ T6369] loop4: detected capacity change from 0 to 2048 [ 226.288207][ T6376] loop2: detected capacity change from 0 to 256 [ 226.363080][ T6369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.647592][ T6376] FAT-fs (loop2): Directory bread(block 64) failed [ 226.654345][ T6376] FAT-fs (loop2): Directory bread(block 65) failed [ 226.661548][ T6376] FAT-fs (loop2): Directory bread(block 66) failed [ 226.668530][ T6376] FAT-fs (loop2): Directory bread(block 67) failed [ 226.675723][ T6376] FAT-fs (loop2): Directory bread(block 68) failed [ 226.682420][ T6376] FAT-fs (loop2): Directory bread(block 69) failed [ 226.697378][ T6376] FAT-fs (loop2): Directory bread(block 70) failed [ 226.704095][ T6376] FAT-fs (loop2): Directory bread(block 71) failed [ 226.713567][ T6376] FAT-fs (loop2): Directory bread(block 72) failed [ 226.720479][ T6376] FAT-fs (loop2): Directory bread(block 73) failed [ 226.810300][ T6381] loop1: detected capacity change from 0 to 64 [ 228.158701][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 228.472378][ T6404] netlink: 'syz.0.189': attribute type 3 has an invalid length. [ 228.566320][ T6400] loop3: detected capacity change from 0 to 4096 [ 228.932282][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 229.189965][ T6400] ntfs3(loop3): failed to convert "0080" to maccyrillic [ 229.221374][ T6400] ntfs3(loop3): failed to convert name for inode 1e. [ 229.261459][ T6400] ntfs3(loop3): ino=1f, mi_enum_attr [ 229.267382][ T6400] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 229.979702][ T6424] loop2: detected capacity change from 0 to 128 [ 230.155027][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 230.155095][ T30] audit: type=1800 audit(1765887459.486:27): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.199" name="file1" dev="loop2" ino=1048652 res=0 errno=0 [ 230.836007][ T30] audit: type=1326 audit(1765887460.196:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ecb8f749 code=0x7ffc0000 [ 230.858733][ T30] audit: type=1326 audit(1765887460.196:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f75ecb8f749 code=0x7ffc0000 [ 230.881392][ T30] audit: type=1326 audit(1765887460.196:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ecb8f749 code=0x7ffc0000 [ 230.904922][ T30] audit: type=1326 audit(1765887460.196:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6434 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ecb8f749 code=0x7ffc0000 [ 231.248856][ T6441] net_ratelimit: 48 callbacks suppressed [ 231.248934][ T6441] sock: sock_set_timeout: `syz.3.207' (pid 6441) tries to set negative timeout [ 231.588033][ T6447] binder: 6446:6447 ioctl c018620c 0 returned -14 [ 231.774942][ T794] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 231.978031][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.988337][ T794] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 231.997854][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.079932][ T794] usb 5-1: config 0 descriptor?? [ 232.549806][ T794] chicony 0003:04F2:1123.0003: hidraw0: USB HID v0.00 Device [HID 04f2:1123] on usb-dummy_hcd.4-1/input0 [ 232.734357][ T794] usb 5-1: USB disconnect, device number 5 [ 232.780538][ T6459] loop3: detected capacity change from 0 to 512 [ 232.907919][ T6459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.921088][ T6459] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.110330][ T6459] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.216: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 233.229067][ T6459] EXT4-fs (loop3): Remounting filesystem read-only [ 233.353734][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.404194][ T6460] fido_id[6460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 235.296556][ T6484] loop2: detected capacity change from 0 to 40427 [ 235.306836][ T6484] F2FS-fs: inline encryption not supported [ 235.347313][ T6484] F2FS-fs (loop2): invalid crc value [ 235.627927][ T6484] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 235.644134][ T6484] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 236.676519][ T6500] loop1: detected capacity change from 0 to 4096 [ 236.803808][ T6500] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 237.203772][ T6510] loop0: detected capacity change from 0 to 1764 [ 238.272507][ T6519] loop3: detected capacity change from 0 to 2048 [ 238.377939][ T6527] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.433181][ T6528] loop4: detected capacity change from 0 to 128 [ 238.606422][ T6528] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.716459][ T6528] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.899959][ T6536] loop1: detected capacity change from 0 to 512 [ 239.080631][ T5797] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.122918][ T6536] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.247: iget: immutable or append flags not allowed on symlinks [ 239.208014][ T6536] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.247: couldn't read orphan inode 17 (err -117) [ 239.259513][ T6536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.445839][ T6541] netlink: 'syz.2.251': attribute type 3 has an invalid length. [ 239.672126][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.802956][ T5846] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 239.917053][ T6540] loop3: detected capacity change from 0 to 4096 [ 240.008408][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.019905][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.030045][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.043355][ T5846] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.00 [ 240.045645][ T6549] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 240.052798][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.162759][ T5846] usb 1-1: config 0 descriptor?? [ 240.594276][ T6540] ntfs3(loop3): failed to convert "0000" to iso8859-9 [ 240.705720][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.714051][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.735207][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.743320][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.755946][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.764052][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.772524][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.782509][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.790837][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.799533][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: unknown main item tag 0x0 [ 240.864267][ T6555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.257'. [ 240.906745][ T6555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.257'. [ 241.046205][ T5846] hid-corsair-void 0003:1B1C:0A1A.0004: hidraw0: USB HID v40.00 Device [HID 1b1c:0a1a] on usb-dummy_hcd.0-1/input0 [ 241.169577][ T795] hid-corsair-void 0003:1B1C:0A1A.0004: failed to request firmware (reason: -71) [ 241.183029][ T9] hid-corsair-void 0003:1B1C:0A1A.0004: failed to request battery (reason: -71) [ 241.205486][ T5846] usb 1-1: USB disconnect, device number 2 [ 241.673773][ T6564] faux_driver vkms: [drm] Unknown color mode 1036; guessing buffer size. [ 241.801060][ T6559] fido_id[6559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 241.801089][ T6568] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 242.645690][ T6578] [U] ÿ [ 244.196687][ T6604] netlink: 'syz.3.280': attribute type 2 has an invalid length. [ 244.233540][ T6606] loop1: detected capacity change from 0 to 128 [ 244.314558][ T6606] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.379582][ T6606] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.380998][ T6612] capability: warning: `syz.2.284' uses deprecated v2 capabilities in a way that may be insecure [ 244.653666][ T6615] loop0: detected capacity change from 0 to 1024 [ 244.709070][ T6615] EXT4-fs: inline encryption not supported [ 244.719931][ T6615] EXT4-fs: Ignoring removed nobh option [ 244.726326][ T6615] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.747291][ T5793] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.842775][ T6620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.286'. [ 244.889649][ T6615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.343306][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.706467][ T6630] [U]  [ 245.711132][ T6629] netlink: 504 bytes leftover after parsing attributes in process `syz.4.290'. [ 246.544975][ T6648] @: renamed from vlan0 (while UP) [ 247.199895][ T6662] loop3: detected capacity change from 0 to 128 [ 247.224988][ T5846] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 247.361414][ T6662] bio_check_eod: 107 callbacks suppressed [ 247.361488][ T6662] syz.3.304: attempt to access beyond end of device [ 247.361488][ T6662] loop3: rw=2049, sector=138, nr_sectors = 84 limit=128 [ 247.442676][ T5846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.468670][ T5846] usb 5-1: config 6 has an invalid interface number: 158 but max is 0 [ 247.483732][ T5846] usb 5-1: config 6 has no interface number 0 [ 247.492364][ T5846] usb 5-1: config 6 interface 158 has no altsetting 0 [ 247.531721][ T5846] usb 5-1: string descriptor 0 read error: -22 [ 247.543171][ T5846] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 247.553790][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.600708][ T6660] loop2: detected capacity change from 0 to 4096 [ 247.972428][ T5846] rtsx_usb 5-1:6.158: probe with driver rtsx_usb failed with error -71 [ 248.030010][ T5846] usb 5-1: USB disconnect, device number 6 [ 249.584900][ T794] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 249.785109][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 249.846749][ T794] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 249.858684][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 249.938215][ T794] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 249.947605][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.955961][ T794] usb 3-1: Product: syz [ 249.960292][ T794] usb 3-1: Manufacturer: syz [ 249.965161][ T794] usb 3-1: SerialNumber: syz [ 250.088969][ T794] usb 3-1: config 0 descriptor?? [ 250.138851][ T794] usb 3-1: no audio or video endpoints found [ 250.287674][ T6703] loop3: detected capacity change from 0 to 128 [ 250.341633][ T24] usb 3-1: USB disconnect, device number 5 [ 250.387854][ T6703] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.405263][ T794] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 250.437815][ T6703] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.624605][ T794] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 250.634004][ T794] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 250.642415][ T794] usb 2-1: Product: syz [ 250.648176][ T794] usb 2-1: Manufacturer: syz [ 250.653635][ T794] usb 2-1: SerialNumber: syz [ 250.755301][ T794] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 250.790454][ T5806] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.175363][ T794] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 251.186321][ T794] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 251.385001][ T5846] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 251.406152][ T795] usb 2-1: USB disconnect, device number 4 [ 251.634022][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.645793][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.656056][ T5846] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 251.665517][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.728347][ T5846] usb 4-1: config 0 descriptor?? [ 252.199908][ T5846] hid_parser_main: 28 callbacks suppressed [ 252.200009][ T5846] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 252.214160][ T5846] pyra 0003:1E7D:2CF6.0005: unbalanced delimiter at end of report description [ 252.239935][ T5846] pyra 0003:1E7D:2CF6.0005: parse failed [ 252.246285][ T5846] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -22 [ 252.401864][ T794] usb 4-1: USB disconnect, device number 5 [ 252.644780][ T6736] loop0: detected capacity change from 0 to 1024 [ 252.834998][ T6736] hfsplus: bad catalog entry type [ 252.886757][ T6734] loop1: detected capacity change from 0 to 4096 [ 252.922913][ T6734] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 252.978560][ T6734] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 253.095410][ T6741] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.217062][ T4508] hfsplus: b-tree write err: -5, ino 4 [ 253.243196][ T6734] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 253.278060][ T6734] Remounting filesystem read-only [ 253.499892][ T6743] loop3: detected capacity change from 0 to 256 [ 253.700346][ T5793] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 253.703963][ T6747] loop0: detected capacity change from 0 to 16 [ 253.805017][ T6747] erofs (device loop0): mounted with root inode @ nid 36. [ 253.935551][ T6747] erofs (device loop0): xattr_isize 12 of nid 46 is not supported yet [ 254.885007][ T6763] loop0: detected capacity change from 0 to 256 [ 255.236758][ T6765] loop4: detected capacity change from 0 to 1024 [ 255.248970][ T6763] FAT-fs (loop0): Directory bread(block 64) failed [ 255.256024][ T6763] FAT-fs (loop0): Directory bread(block 65) failed [ 255.270883][ T6763] FAT-fs (loop0): Directory bread(block 66) failed [ 255.280065][ T6763] FAT-fs (loop0): Directory bread(block 67) failed [ 255.287084][ T6763] FAT-fs (loop0): Directory bread(block 68) failed [ 255.293781][ T6763] FAT-fs (loop0): Directory bread(block 69) failed [ 255.300808][ T6763] FAT-fs (loop0): Directory bread(block 70) failed [ 255.307907][ T6763] FAT-fs (loop0): Directory bread(block 71) failed [ 255.314917][ T6763] FAT-fs (loop0): Directory bread(block 72) failed [ 255.321607][ T6763] FAT-fs (loop0): Directory bread(block 73) failed [ 255.354218][ T6756] loop3: detected capacity change from 0 to 32768 [ 255.444152][ T6756] gfs2: can't find protocol lockJnolock [ 255.633480][ T6765] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 255.643414][ T6765] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 255.653160][ T6765] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.349: Failed to acquire dquot type 0 [ 255.890164][ T6765] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 255.905418][ T6765] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.349: corrupted inode contents [ 255.964220][ T6765] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.349: mark_inode_dirty error [ 256.030593][ T6765] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.349: corrupted inode contents [ 256.091282][ T6765] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.349: mark_inode_dirty error [ 256.137928][ T6765] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.349: corrupted inode contents [ 256.266870][ T6765] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 256.324723][ T6765] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.349: corrupted inode contents [ 256.368386][ T6765] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.349: mark_inode_dirty error [ 256.454833][ T6765] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 256.523412][ T6765] EXT4-fs (loop4): 1 truncate cleaned up [ 256.531315][ T6765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.729426][ T6765] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 256.817557][ T6786] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 256.892731][ T6786] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 257.151005][ T6791] loop2: detected capacity change from 0 to 1024 [ 257.282683][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.375627][ T6791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.988855][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.794892][ T6811] loop3: detected capacity change from 0 to 1024 [ 258.841006][ T6811] EXT4-fs: Ignoring removed bh option [ 258.915737][ T6811] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 259.024648][ T6811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.135662][ T6818] hsr0: entered promiscuous mode [ 259.526824][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.924604][ T6831] loop3: detected capacity change from 0 to 512 [ 260.090507][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.110706][ T6831] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.253375][ T6840] loop1: detected capacity change from 0 to 128 [ 260.305006][ T30] audit: type=1800 audit(1765887489.656:32): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.375" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 260.327638][ T6840] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.406801][ T6840] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.695609][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.157611][ T6851] syz.3.383 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 261.720170][ T6863] autofs: Bad value for 'fd' [ 261.766279][ T6862] netlink: 277 bytes leftover after parsing attributes in process `syz.1.389'. [ 263.641245][ T6893] loop3: detected capacity change from 0 to 256 [ 263.729095][ T6893] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 263.764974][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 263.989504][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 264.000852][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.012043][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 264.025810][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 264.035219][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.207108][ T9] usb 2-1: config 0 descriptor?? [ 264.216052][ T6886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 264.712032][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 264.730027][ T9] cypress 0003:04B4:07B1.0006: item fetching failed at offset 5/7 [ 264.808829][ T6911] ipvlan2: entered promiscuous mode [ 264.849628][ T9] cypress 0003:04B4:07B1.0006: parse failed [ 264.856119][ T9] cypress 0003:04B4:07B1.0006: probe with driver cypress failed with error -22 [ 264.922882][ T6913] netlink: 156 bytes leftover after parsing attributes in process `syz.3.413'. [ 264.945630][ T9] usb 2-1: USB disconnect, device number 5 [ 265.351795][ T6917] loop0: detected capacity change from 0 to 128 [ 265.396006][ T6916] loop2: detected capacity change from 0 to 256 [ 265.589001][ T6917] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 265.616469][ T6917] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.186654][ T5802] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.413251][ T6929] loop4: detected capacity change from 0 to 1024 [ 266.525067][ T6935] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 267.014049][ T3729] hfsplus: b-tree write err: -5, ino 4 [ 267.292963][ T6944] loop3: detected capacity change from 0 to 1024 [ 267.315801][ T6944] EXT4-fs: inline encryption not supported [ 267.321993][ T6944] EXT4-fs: Ignoring removed i_version option [ 267.656741][ T6944] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 268.241217][ T6944] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.428: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.285574][ T6952] loop4: detected capacity change from 0 to 256 [ 268.325389][ T6944] Quota error (device loop3): write_blk: dquota write failed [ 268.333039][ T6944] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 268.343559][ T6944] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.428: Failed to acquire dquot type 0 [ 268.449939][ T6952] FAT-fs (loop4): Directory bread(block 64) failed [ 268.457345][ T6952] FAT-fs (loop4): Directory bread(block 65) failed [ 268.464227][ T6952] FAT-fs (loop4): Directory bread(block 66) failed [ 268.465508][ T6944] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.428: Freeing blocks not in datazone - block = 0, count = 4096 [ 268.479533][ T6952] FAT-fs (loop4): Directory bread(block 67) failed [ 268.495012][ T6952] FAT-fs (loop4): Directory bread(block 68) failed [ 268.501811][ T6952] FAT-fs (loop4): Directory bread(block 69) failed [ 268.508991][ T6952] FAT-fs (loop4): Directory bread(block 70) failed [ 268.515843][ T6952] FAT-fs (loop4): Directory bread(block 71) failed [ 268.522735][ T6952] FAT-fs (loop4): Directory bread(block 72) failed [ 268.529690][ T6952] FAT-fs (loop4): Directory bread(block 73) failed [ 268.587527][ T6944] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.428: Invalid inode bitmap blk 0 in block_group 0 [ 268.606427][ T61] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.655637][ T6944] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 268.670984][ T6944] EXT4-fs (loop3): 1 orphan inode deleted [ 268.688992][ T6944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.692004][ T61] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 268.710998][ T61] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 268.811519][ T6956] Bluetooth: MGMT ver 1.23 [ 268.846417][ T6944] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.428: Invalid block bitmap block 0 in block_group 0 [ 268.904686][ T30] audit: type=1800 audit(1765887498.226:33): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.430" name="file1" dev="loop4" ino=1048662 res=0 errno=0 [ 269.220342][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.509657][ T6962] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 269.651799][ T6965] loop1: detected capacity change from 0 to 1024 [ 269.794731][ T6970] mmap: syz.0.438 (6970) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 269.935026][ T6965] hfsplus: xattr exists yet [ 270.365874][ T6968] loop3: detected capacity change from 0 to 4096 [ 270.705218][ T6968] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 270.759483][ T6968] ntfs3(loop3): ino=1a, mi_enum_attr [ 270.765701][ T6968] ntfs3(loop3): ino=1a, mi_enum_attr [ 270.771276][ T6968] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 272.083461][ T7001] loop2: detected capacity change from 0 to 1024 [ 272.137343][ T7001] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 272.148495][ T7001] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 272.159069][ T7001] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 272.315653][ T7001] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: inode #5: comm syz.2.452: unexpected bad inode w/o EXT4_IGET_BAD [ 272.431976][ T7001] EXT4-fs (loop2): no journal found [ 272.437976][ T7001] EXT4-fs (loop2): can't get journal size [ 272.473486][ T7001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.921296][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.128261][ T7012] loop0: detected capacity change from 0 to 64 [ 274.218903][ T7020] loop4: detected capacity change from 0 to 2048 [ 274.318977][ T7020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.338071][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 274.506095][ T7020] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.463: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 274.909689][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.736776][ T7046] loop3: detected capacity change from 0 to 4096 [ 275.855710][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 275.968025][ T7058] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 276.084959][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 276.107622][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.119656][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.129761][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.142985][ T24] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 276.153555][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.281695][ T24] usb 3-1: config 0 descriptor?? [ 276.688148][ T7064] loop0: detected capacity change from 0 to 256 [ 276.833336][ T24] hid (null): bogus close delimiter [ 276.905482][ T24] nzxt-kraken2 0003:1E71:170E.0007: bogus close delimiter [ 276.913144][ T24] nzxt-kraken2 0003:1E71:170E.0007: item 0 0 2 10 parsing failed [ 277.023941][ T7068] netlink: 822 bytes leftover after parsing attributes in process `syz.3.482'. [ 277.038402][ T24] nzxt-kraken2 0003:1E71:170E.0007: hid parse failed with -22 [ 277.046757][ T24] nzxt-kraken2 0003:1E71:170E.0007: probe with driver nzxt-kraken2 failed with error -22 [ 277.185935][ T24] usb 3-1: USB disconnect, device number 6 [ 277.208124][ T7070] loop4: detected capacity change from 0 to 128 [ 277.290765][ T7070] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 277.401444][ T7070] hpfs: filesystem error: improperly stopped [ 277.408148][ T7070] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 277.416406][ T7070] hpfs: You really don't want any checks? You are crazy... [ 277.504285][ T7070] hpfs: hpfs_map_sector(): read error [ 277.510087][ T7070] hpfs: code page support is disabled [ 277.575998][ T7070] hpfs: hpfs_map_4sectors(): unaligned read [ 277.633898][ T7070] hpfs: hpfs_map_4sectors(): unaligned read [ 277.640318][ T7070] hpfs: filesystem error: unable to find root dir [ 277.704004][ T7076] loop3: detected capacity change from 0 to 64 [ 278.666952][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 278.975731][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 279.152556][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 279.192330][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 279.242943][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 279.341293][ T9] usb 1-1: string descriptor 0 read error: -22 [ 279.348742][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 279.358241][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.547215][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 279.648877][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.660668][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 279.668622][ T9] usb 1-1: media controller created [ 279.848736][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.195619][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 280.612506][ T9] usb 1-1: USB disconnect, device number 3 [ 280.713524][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.507'. [ 280.781424][ T7116] loop1: detected capacity change from 0 to 2048 [ 280.888971][ T7116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.316698][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.689330][ T7132] loop0: detected capacity change from 0 to 1024 [ 281.743669][ T7132] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.793395][ T7132] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 281.922951][ T7132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.305709][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.372314][ T7146] loop2: detected capacity change from 0 to 1024 [ 282.427960][ T7146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.524235][ T7146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.663477][ T7146] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 282.679395][ T7145] loop3: detected capacity change from 0 to 4096 [ 282.771464][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 283.110910][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.795996][ T7156] loop1: detected capacity change from 0 to 4096 [ 283.830386][ T7164] loop4: detected capacity change from 0 to 256 [ 283.848851][ T7156] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 283.990361][ T7169] hub 5-0:1.0: USB hub found [ 284.006285][ T7164] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x8a8ef55c, utbl_chksum : 0xe619d30d) [ 284.028733][ T7169] hub 5-0:1.0: 1 port detected [ 284.125810][ T7164] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 284.728573][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 284.738212][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'. [ 284.757390][ T7175] loop3: detected capacity change from 0 to 256 [ 285.316854][ T5846] Process accounting resumed [ 285.456591][ T7186] loop3: detected capacity change from 0 to 2048 [ 285.527120][ T7185] Process accounting resumed [ 285.537573][ T7186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.977167][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.984633][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.465696][ T7201] loop4: detected capacity change from 0 to 512 [ 286.563222][ T7203] loop0: detected capacity change from 0 to 64 [ 286.657929][ T7201] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 286.731935][ T7201] EXT4-fs (loop4): 1 truncate cleaned up [ 286.740510][ T7201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.032804][ T7212] loop1: detected capacity change from 0 to 64 [ 287.240312][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.357943][ T7207] loop2: detected capacity change from 0 to 2048 [ 287.619881][ T7207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.390296][ T7214] loop0: detected capacity change from 0 to 40427 [ 288.411687][ T7214] F2FS-fs (loop0): Invalid log sectorsize (14) [ 288.418377][ T7214] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 288.434038][ T7214] F2FS-fs (loop0): old and new quota format mixing [ 289.696872][ T7234] loop4: detected capacity change from 0 to 1024 [ 289.809025][ T7234] hfsplus: bad catalog entry type [ 289.945508][ T5846] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 290.088156][ T154] hfsplus: b-tree write err: -5, ino 4 [ 290.144762][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 290.170876][ T5846] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.188204][ T5846] usb 2-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0x6D, changing to 0xD [ 290.202588][ T5846] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0xD has invalid maxpacket 58154, setting to 64 [ 290.213930][ T5846] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 290.227298][ T5846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.234142][ T5846] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 290.243655][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.481502][ T7250] loop3: detected capacity change from 0 to 8 [ 290.576694][ T5846] usb 2-1: config 0 descriptor?? [ 290.614155][ T7250] SQUASHFS error: Failed to read block 0x18e: -5 [ 290.621084][ T7250] SQUASHFS error: Unable to read metadata cache entry [18c] [ 290.915090][ T7254] loop2: detected capacity change from 0 to 512 [ 290.975388][ T7254] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.043732][ T7254] EXT4-fs (loop2): 1 truncate cleaned up [ 291.131090][ T5846] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 291.139403][ T5846] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 291.147703][ T5846] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 291.156185][ T5846] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 291.164280][ T5846] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 291.167664][ T7254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.389348][ T5846] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 291.402447][ T5846] hid-thrustmaster 0003:044F:B65D.0008: Unexpected non-int endpoint [ 291.425305][ C0] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71 [ 291.493525][ T7260] loop3: detected capacity change from 0 to 2048 [ 291.537381][ T5846] usb 2-1: USB disconnect, device number 6 [ 291.631155][ T7260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.835063][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.961765][ T7265] netlink: 96 bytes leftover after parsing attributes in process `syz.4.571'. [ 291.971776][ T7265] netlink: 32 bytes leftover after parsing attributes in process `syz.4.571'. [ 292.166563][ T7263] fido_id[7263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 292.390244][ T7268] loop0: detected capacity change from 0 to 512 [ 292.458441][ T7268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.558565][ T7268] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 292.627080][ T7268] EXT4-fs (loop0): 1 truncate cleaned up [ 292.636657][ T7268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.864943][ T7268] EXT4-fs (loop0): resizing filesystem from 256 to 1 blocks [ 292.872588][ T7268] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 293.200815][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.925883][ T7289] loop3: detected capacity change from 0 to 1024 [ 293.944840][ T7292] loop4: detected capacity change from 0 to 512 [ 293.974161][ T7293] loop1: detected capacity change from 0 to 256 [ 294.045273][ T7292] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.583: ea_inode file size=0 entry size=6 [ 294.046088][ T7292] ------------[ cut here ]------------ [ 294.046141][ T7292] EA inode 11 i_nlink=2 [ 294.046200][ T7292] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x73c/0x800, CPU#1: syz.4.583/7292 [ 294.046451][ T7292] Modules linked in: [ 294.046603][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.4.583 Tainted: G L syzkaller #0 PREEMPT(none) [ 294.046763][ T7292] Tainted: [L]=SOFTLOCKUP [ 294.046818][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.046919][ T7292] RIP: 0010:ext4_xattr_inode_update_ref+0x7b6/0x800 [ 294.047127][ T7292] Code: 06 00 00 44 89 b3 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 e4 75 38 45 85 ff 75 40 48 8b 7d c0 48 8b 75 d0 8b 55 b0 <67> 48 0f b9 3a e9 b9 fd ff ff 44 89 ef e8 c8 3e 57 ff 45 85 ff 0f [ 294.047244][ T7292] RSP: 0018:ffff888126587178 EFLAGS: 00010246 [ 294.047365][ T7292] RAX: 0000000000000000 RBX: ffff888016e02cd0 RCX: 0000000000aaa27b [ 294.047456][ T7292] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff9273d140 [ 294.047545][ T7292] RBP: ffff888126587200 R08: ffffea000000000f R09: 0000000000000000 [ 294.047649][ T7292] R10: ffff888125d870c0 R11: 00000000abcd0100 R12: 0000000000000000 [ 294.047739][ T7292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.047828][ T7292] FS: 00007f6cc8fda6c0(0000) GS:ffff8881aadf9000(0000) knlGS:0000000000000000 [ 294.047939][ T7292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.048125][ T7292] CR2: 00007f05f7d37b50 CR3: 000000011b3f0000 CR4: 00000000003526f0 [ 294.048228][ T7292] Call Trace: [ 294.048283][ T7292] [ 294.048365][ T7292] ext4_xattr_inode_dec_ref_all+0xffb/0x1730 [ 294.048566][ T7292] ? errseq_check+0x6f/0xd0 [ 294.048769][ T7292] ext4_xattr_delete_inode+0xd0d/0x14b0 [ 294.048984][ T7292] ext4_evict_inode+0x1d28/0x23d0 [ 294.049287][ T7292] ? __pfx_ext4_evict_inode+0x10/0x10 [ 294.049434][ T7292] evict+0x6a9/0xca0 [ 294.049581][ T7292] ? kmsan_get_metadata+0xfb/0x160 [ 294.049765][ T7292] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 294.049960][ T7292] iput+0xc6f/0x1070 [ 294.050152][ T7292] ext4_process_orphan+0x49a/0x520 [ 294.050311][ T7292] ext4_orphan_cleanup+0x10a6/0x1e30 [ 294.050501][ T7292] ext4_fill_super+0xa5d3/0xae50 [ 294.050817][ T7292] ? kmsan_get_metadata+0xfb/0x160 [ 294.050993][ T7292] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 294.051187][ T7292] ? sb_set_blocksize+0x24e/0x390 [ 294.051378][ T7292] get_tree_bdev_flags+0x6e6/0x920 [ 294.051548][ T7292] ? __pfx_ext4_fill_super+0x10/0x10 [ 294.051761][ T7292] ? __pfx_ext4_fill_super+0x10/0x10 [ 294.051936][ T7292] ? __pfx_ext4_get_tree+0x10/0x10 [ 294.052107][ T7292] get_tree_bdev+0x38/0x50 [ 294.052269][ T7292] ext4_get_tree+0x35/0x40 [ 294.052435][ T7292] vfs_get_tree+0xb3/0x5c0 [ 294.052610][ T7292] do_new_mount+0x879/0x1700 [ 294.052786][ T7292] ? kmsan_get_metadata+0xfb/0x160 [ 294.052992][ T7292] path_mount+0x749/0x1fb0 [ 294.053165][ T7292] ? user_path_at+0x241/0x3e0 [ 294.053320][ T7292] __se_sys_mount+0x6f7/0x7e0 [ 294.053506][ T7292] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 294.053695][ T7292] ? kmsan_get_metadata+0xfb/0x160 [ 294.053900][ T7292] __x64_sys_mount+0xe4/0x150 [ 294.054089][ T7292] x64_sys_call+0x38cb/0x3e70 [ 294.054263][ T7292] do_syscall_64+0xd9/0xf80 [ 294.054694][ T7292] ? clear_bhb_loop+0x40/0x90 [ 294.054845][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.054991][ T7292] RIP: 0033:0x7f6cc8190eea [ 294.055107][ T7292] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.055221][ T7292] RSP: 002b:00007f6cc8fd9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.055355][ T7292] RAX: ffffffffffffffda RBX: 00007f6cc8fd9ef0 RCX: 00007f6cc8190eea [ 294.055453][ T7292] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6cc8fd9eb0 [ 294.055549][ T7292] RBP: 0000200000000180 R08: 00007f6cc8fd9ef0 R09: 0000000000800700 [ 294.055650][ T7292] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 294.055740][ T7292] R13: 00007f6cc8fd9eb0 R14: 0000000000000473 R15: 0000200000000680 [ 294.055868][ T7292] [ 294.055928][ T7292] ---[ end trace 0000000000000000 ]--- [ 294.056592][ T7292] EXT4-fs (loop4): 1 orphan inode deleted [ 294.112077][ T7289] hfsplus: unable to mark blocks free: error -5 [ 294.112146][ T7289] hfsplus: can't free extent: start 134, count 1 [ 294.153170][ T7292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.289828][ T7293] FAT-fs (loop1): Directory bread(block 64) failed [ 294.289952][ T7293] FAT-fs (loop1): Directory bread(block 65) failed [ 294.290179][ T7293] FAT-fs (loop1): Directory bread(block 66) failed [ 294.290279][ T7293] FAT-fs (loop1): Directory bread(block 67) failed [ 294.290501][ T7293] FAT-fs (loop1): Directory bread(block 68) failed [ 294.290609][ T7293] FAT-fs (loop1): Directory bread(block 69) failed [ 294.290831][ T7293] FAT-fs (loop1): Directory bread(block 70) failed [ 294.290932][ T7293] FAT-fs (loop1): Directory bread(block 71) failed [ 294.291159][ T7293] FAT-fs (loop1): Directory bread(block 72) failed [ 294.291258][ T7293] FAT-fs (loop1): Directory bread(block 73) failed [ 294.697138][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.311394][ T7314] can: request_module (can-proto-3) failed. [ 297.078976][ T7329] Bluetooth: MGMT ver 1.23 [ 297.514776][ T5846] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 297.700570][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 297.745640][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.763776][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.776208][ T5846] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 297.785818][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.826078][ T7343] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 297.925787][ T5846] usb 5-1: config 0 descriptor?? [ 298.095817][ T7341] loop0: detected capacity change from 0 to 4096 [ 298.233929][ T7348] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.256476][ T7321] Bluetooth: hci0: command 0x0406 tx timeout [ 298.259725][ T7318] Bluetooth: hci1: command 0x0406 tx timeout [ 298.263909][ T7321] Bluetooth: hci3: command 0x0406 tx timeout [ 298.280037][ T7318] Bluetooth: hci2: command 0x0406 tx timeout [ 298.427695][ T5846] wacom 0003:056A:0084.0009: unbalanced delimiter at end of report description [ 298.504714][ T5846] wacom 0003:056A:0084.0009: parse failed [ 298.511119][ T5846] wacom 0003:056A:0084.0009: probe with driver wacom failed with error -22 [ 298.685224][ T24] usb 5-1: USB disconnect, device number 7 [ 299.664927][ T30] audit: type=1326 audit(1765887529.016:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92adb8f749 code=0x0 [ 299.728361][ T7364] netlink: 44 bytes leftover after parsing attributes in process `syz.4.614'. [ 299.780570][ T30] audit: type=1326 audit(1765887529.136:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7367 comm="syz.2.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75ecb8f749 code=0x0 [ 302.130846][ T7394] loop0: detected capacity change from 0 to 2048 [ 302.245168][ T7394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.422078][ T7394] overlayfs: upper fs needs to support d_type. [ 302.432764][ T7394] overlayfs: cleanup of 'work/#3' failed (-2) [ 302.439401][ T7394] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 302.446717][ T7394] overlayfs: failed to set xattr on upper [ 302.452569][ T7394] overlayfs: ...falling back to redirect_dir=nofollow. [ 302.459911][ T7394] overlayfs: ...falling back to index=off. [ 302.472995][ T7394] overlayfs: ...falling back to uuid=null. [ 302.885022][ T7404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.632'. [ 303.009536][ T5802] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 303.040803][ T5802] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 303.382224][ T7412] syz.3.636 (7412): /proc/7411/oom_adj is deprecated, please use /proc/7411/oom_score_adj instead. [ 303.580940][ T3527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.780679][ T3527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.939735][ T3527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.200650][ T3527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.630617][ T3527] bridge_slave_1: left allmulticast mode [ 304.636812][ T3527] bridge_slave_1: left promiscuous mode [ 304.643275][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.663024][ T3527] bridge_slave_0: left allmulticast mode [ 304.669216][ T3527] bridge_slave_0: left promiscuous mode [ 304.676149][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.156007][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.208052][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.242193][ T3527] bond0 (unregistering): Released all slaves [ 305.951302][ T3527] hsr_slave_0: left promiscuous mode [ 306.000588][ T3527] hsr_slave_1: left promiscuous mode [ 306.009563][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.017374][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.117361][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.125110][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.278630][ T3527] veth1_macvtap: left promiscuous mode [ 306.284343][ T3527] veth0_macvtap: left promiscuous mode [ 306.290320][ T3527] veth1_vlan: left promiscuous mode [ 306.295911][ T3527] veth0_vlan: left promiscuous mode [ 306.682471][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.691591][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.705754][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.718597][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.792985][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.366661][ T7428] loop2: detected capacity change from 0 to 4096 [ 307.417169][ T3527] team0 (unregistering): Port device team_slave_1 removed [ 307.543077][ T3527] team0 (unregistering): Port device team_slave_0 removed [ 308.173051][ T7445] loop4: detected capacity change from 0 to 64 [ 308.930596][ T50] Bluetooth: hci2: command tx timeout [ 309.486209][ T7458] loop3: detected capacity change from 0 to 1024 [ 309.585870][ T7458] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 309.598106][ T7433] chnl_net:caif_netlink_parms(): no params data found [ 309.738084][ T7458] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.652: lblock 2 mapped to illegal pblock 2 (length 1) [ 309.818555][ T7458] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 309.827225][ T7458] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.652: lblock 0 mapped to illegal pblock 48 (length 1) [ 309.907703][ T7458] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 309.916885][ T7458] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.652: Failed to acquire dquot type 0 [ 309.933676][ T7463] loop4: detected capacity change from 0 to 512 [ 309.997187][ T7458] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 310.047340][ T7458] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.652: mark_inode_dirty error [ 310.069086][ T7463] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 310.083613][ T7458] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 310.097406][ T7458] EXT4-fs (loop3): 1 orphan inode deleted [ 310.110106][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.126675][ T4984] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 310.172870][ T7463] EXT4-fs (loop4): 1 truncate cleaned up [ 310.184034][ T7463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.194816][ T4984] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 310.204963][ T4984] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 0 [ 310.419061][ T7458] EXT4-fs (loop3): stripe (248) is not aligned with cluster size (4096), stripe is disabled [ 310.497129][ T7458] EXT4-fs (loop3): can't enable nombcache during remount [ 310.645368][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.674956][ T30] audit: type=1326 audit(1765887540.006:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ecb8f749 code=0x7ffc0000 [ 310.698651][ T30] audit: type=1326 audit(1765887540.006:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ecb8f749 code=0x7ffc0000 [ 310.819417][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.895818][ T5806] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 310.918330][ T30] audit: type=1326 audit(1765887540.106:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f75ecb8f749 code=0x7ffc0000 [ 310.918699][ T5806] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 310.940849][ T30] audit: type=1326 audit(1765887540.106:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ecb8f749 code=0x7ffc0000 [ 310.982747][ T50] Bluetooth: hci2: command tx timeout [ 311.035805][ T5806] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 311.593190][ T7481] loop3: detected capacity change from 0 to 512 [ 311.637138][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.641627][ T7481] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 311.645722][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.653902][ T7481] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 311.661510][ T7433] bridge_slave_0: entered allmulticast mode [ 311.728614][ T7433] bridge_slave_0: entered promiscuous mode [ 311.756670][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.764245][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.772268][ T7433] bridge_slave_1: entered allmulticast mode [ 311.781851][ T7433] bridge_slave_1: entered promiscuous mode [ 311.804650][ T7481] EXT4-fs (loop3): 1 truncate cleaned up [ 311.813843][ T7481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.956663][ T7481] EXT4-fs: group quota file already specified [ 312.247552][ T7433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.355588][ T7433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.373000][ T5806] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.547786][ T7490] loop4: detected capacity change from 0 to 128 [ 312.663908][ T7490] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.686866][ T7490] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.759889][ T7493] netlink: 52 bytes leftover after parsing attributes in process `syz.2.662'. [ 312.770095][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 312.779283][ T7493] netlink: 52 bytes leftover after parsing attributes in process `syz.2.662'. [ 312.789693][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 312.799289][ T7493] netlink: 52 bytes leftover after parsing attributes in process `syz.2.662'. [ 312.829512][ T7433] team0: Port device team_slave_0 added [ 312.873148][ T7433] team0: Port device team_slave_1 added [ 313.055213][ T50] Bluetooth: hci2: command tx timeout [ 313.072983][ T5797] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.262620][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.274229][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.300713][ T7433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.445605][ T7501] netlink: 204 bytes leftover after parsing attributes in process `syz.4.664'. [ 313.479425][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.487012][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.513570][ T7433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.037042][ T7433] hsr_slave_0: entered promiscuous mode [ 314.048756][ T7433] hsr_slave_1: entered promiscuous mode [ 314.057297][ T7433] debugfs: 'hsr0' already exists in 'hsr' [ 314.063259][ T7433] Cannot create hsr debugfs directory [ 314.286513][ T7510] loop2: detected capacity change from 0 to 256 [ 314.351412][ T50] Bluetooth: hci1: unknown advertising packet type: 0x70 [ 314.351527][ T50] Bluetooth: hci1: unknown advertising packet type: 0x33 [ 314.572081][ T7510] FAT-fs (loop2): Directory bread(block 64) failed [ 314.588912][ T7510] FAT-fs (loop2): Directory bread(block 65) failed [ 314.595989][ T7510] FAT-fs (loop2): Directory bread(block 66) failed [ 314.602683][ T7510] FAT-fs (loop2): Directory bread(block 67) failed [ 314.609780][ T7510] FAT-fs (loop2): Directory bread(block 68) failed [ 314.618382][ T7510] FAT-fs (loop2): Directory bread(block 69) failed [ 314.625440][ T7510] FAT-fs (loop2): Directory bread(block 70) failed [ 314.632144][ T7510] FAT-fs (loop2): Directory bread(block 71) failed [ 314.639077][ T7510] FAT-fs (loop2): Directory bread(block 72) failed [ 314.646001][ T7510] FAT-fs (loop2): Directory bread(block 73) failed [ 315.139356][ T50] Bluetooth: hci2: command tx timeout [ 315.235960][ T5794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.264084][ T5794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 315.305350][ T5794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 315.323270][ T5794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 315.353184][ T5794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.043559][ T7433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.151041][ T7433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 316.315798][ T7433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 316.427333][ T7433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 316.870198][ T7542] loop3: detected capacity change from 0 to 256 [ 316.963951][ T7542] exfat: Deprecated parameter 'namecase' [ 316.970856][ T7542] exfat: Deprecated parameter 'namecase' [ 317.136512][ T7542] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 317.380915][ T7548] loop4: detected capacity change from 0 to 1024 [ 317.461410][ T50] Bluetooth: hci5: command tx timeout [ 317.497111][ T7548] EXT4-fs: Ignoring removed nobh option [ 317.503071][ T7548] EXT4-fs: inline encryption not supported [ 317.668279][ T7548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.937580][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.970381][ T7548] EXT4-fs: Cannot change journaled quota options when quota turned on [ 318.037873][ T7522] chnl_net:caif_netlink_parms(): no params data found [ 318.200738][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.416900][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.422066][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.542671][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.654176][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.915420][ T7433] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.973153][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.980717][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.123596][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.131209][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.346117][ T35] bridge_slave_1: left allmulticast mode [ 319.351955][ T35] bridge_slave_1: left promiscuous mode [ 319.360675][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.439446][ T35] bridge_slave_0: left allmulticast mode [ 319.445848][ T35] bridge_slave_0: left promiscuous mode [ 319.452305][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.536255][ T50] Bluetooth: hci5: command tx timeout [ 319.578702][ T30] audit: type=1326 audit(1765887548.906:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75ecb8f749 code=0x0 [ 319.939135][ T7579] loop4: detected capacity change from 0 to 256 [ 320.143560][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.195956][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.221293][ T35] bond0 (unregistering): Released all slaves [ 321.245371][ T35] hsr_slave_0: left promiscuous mode [ 321.267017][ T35] hsr_slave_1: left promiscuous mode [ 321.274968][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.282690][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.378789][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.386500][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.467041][ T35] veth1_macvtap: left promiscuous mode [ 321.472750][ T35] veth0_macvtap: left promiscuous mode [ 321.478778][ T35] veth1_vlan: left promiscuous mode [ 321.484370][ T35] veth0_vlan: left promiscuous mode [ 321.620356][ T50] Bluetooth: hci5: command tx timeout [ 321.974124][ T7603] loop4: detected capacity change from 0 to 512 [ 322.295747][ T35] team0 (unregistering): Port device team_slave_1 removed [ 322.389615][ T35] team0 (unregistering): Port device team_slave_0 removed [ 322.412752][ T7603] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.695: EA inode hash validation failed [ 322.426964][ T7603] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.695: corrupted inode contents [ 322.524763][ T7603] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.695: mark_inode_dirty error [ 322.584418][ T7603] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.695: corrupted inode contents [ 322.599757][ T7603] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.695: mark_inode_dirty error [ 322.679223][ T7603] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.695: mark inode dirty (error -117) [ 322.708542][ T7603] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 322.718165][ T7603] EXT4-fs (loop4): 1 orphan inode deleted [ 322.756344][ T7603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.055036][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.062563][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.070440][ T7522] bridge_slave_0: entered allmulticast mode [ 323.080009][ T7522] bridge_slave_0: entered promiscuous mode [ 323.250702][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.258529][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.267068][ T7522] bridge_slave_1: entered allmulticast mode [ 323.276510][ T7522] bridge_slave_1: entered promiscuous mode [ 323.321788][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.704641][ T50] Bluetooth: hci5: command tx timeout [ 323.767384][ T7522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.980528][ T7522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.274612][ T7433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.543792][ T7522] team0: Port device team_slave_0 added [ 324.597497][ T7623] loop3: detected capacity change from 0 to 32768 [ 324.662965][ T7522] team0: Port device team_slave_1 added [ 324.688216][ T7623] (syz.3.701,7623,0):ocfs2_initialize_super:2087 ERROR: couldn't mount because of unsupported optional features (1). [ 324.703058][ T7623] (syz.3.701,7623,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 325.097002][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.104124][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.130637][ T7522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.313835][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.321140][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.347575][ T7522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.993765][ T7522] hsr_slave_0: entered promiscuous mode [ 326.003517][ T7522] hsr_slave_1: entered promiscuous mode [ 326.012164][ T7522] debugfs: 'hsr0' already exists in 'hsr' [ 326.018174][ T7522] Cannot create hsr debugfs directory [ 327.365581][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 327.368571][ T7433] veth0_vlan: entered promiscuous mode [ 327.530104][ T7668] netem: change failed [ 327.614135][ T7433] veth1_vlan: entered promiscuous mode [ 327.792759][ T7666] loop4: detected capacity change from 0 to 4096 [ 328.010463][ T7670] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.033485][ T7522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.102373][ T7433] veth0_macvtap: entered promiscuous mode [ 328.161141][ T7522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.264358][ T7433] veth1_macvtap: entered promiscuous mode [ 328.306354][ T7522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.435899][ T7522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.556080][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.653058][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.739637][ T154] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.812804][ T154] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.873600][ T154] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.930217][ T154] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.745696][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.806239][ T4984] ===================================================== [ 329.813505][ T4984] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x420/0x9e0 [ 329.821896][ T4984] n_tty_receive_buf_closing+0x420/0x9e0 [ 329.828506][ T4984] n_tty_receive_buf_common+0x19e9/0x2630 [ 329.834390][ T4984] n_tty_receive_buf2+0x4c/0x60 [ 329.840118][ T4984] tty_ldisc_receive_buf+0xc6/0x2c0 [ 329.846517][ T4984] tty_port_default_receive_buf+0xd7/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 329.852535][ T4984] flush_to_ldisc+0x43e/0xe30 [ 329.858789][ T4984] process_scheduled_works+0xb91/0x1d80 [ 329.865034][ T4984] worker_thread+0xedf/0x1590 [ 329.869857][ T4984] kthread+0xd5c/0xf00 [ 329.874066][ T4984] ret_from_fork+0x208/0x710 [ 329.878989][ T4984] ret_from_fork_asm+0x1a/0x30 [ 329.883952][ T4984] [ 329.886671][ T4984] Uninit was stored to memory at: [ 329.891905][ T4984] n_tty_receive_buf_closing+0x419/0x9e0 [ 329.897843][ T4984] n_tty_receive_buf_common+0x19e9/0x2630 [ 329.903727][ T4984] n_tty_receive_buf2+0x4c/0x60 [ 329.908877][ T4984] tty_ldisc_receive_buf+0xc6/0x2c0 [ 329.914252][ T4984] tty_port_default_receive_buf+0xd7/0x1a0 [ 329.921751][ T4984] flush_to_ldisc+0x43e/0xe30 [ 329.926926][ T4984] process_scheduled_works+0xb91/0x1d80 [ 329.932670][ T4984] worker_thread+0xedf/0x1590 [ 329.938613][ T4984] kthread+0xd5c/0xf00 [ 329.942828][ T4984] ret_from_fork+0x208/0x710 [ 329.947958][ T4984] ret_from_fork_asm+0x1a/0x30 [ 329.952901][ T4984] [ 329.955510][ T4984] Uninit was created at: [ 329.959929][ T4984] __kmalloc_noprof+0xaf2/0x1c20 [ 329.965072][ T4984] __tty_buffer_request_room+0x3d4/0x7a0 [ 329.970880][ T4984] __tty_insert_flip_string_flags+0x157/0x6f0 [ 329.977479][ T4984] uart_insert_char+0x368/0x930 [ 329.982471][ T4984] serial8250_read_char+0x1ba/0x670 [ 329.987924][ T4984] serial8250_handle_irq+0x930/0x1110 [ 329.993453][ T4984] serial8250_default_handle_irq+0x116/0x370 [ 329.999745][ T4984] serial8250_interrupt+0xcb/0x430 [ 330.005141][ T4984] __handle_irq_event_percpu+0x122/0xf40 [ 330.010944][ T4984] handle_irq_event+0xe0/0x2a0 [ 330.016128][ T4984] handle_edge_irq+0x2a9/0xb50 [ 330.021058][ T4984] __common_interrupt+0x9d/0x180 [ 330.026273][ T4984] common_interrupt+0x94/0xb0 [ 330.031082][ T4984] asm_common_interrupt+0x2b/0x40 [ 330.036439][ T4984] [ 330.038868][ T4984] CPU: 1 UID: 0 PID: 4984 Comm: kworker/u8:24 Tainted: G W L syzkaller #0 PREEMPT(none) [ 330.050368][ T4984] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 330.055870][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.066205][ T4984] Workqueue: events_unbound flush_to_ldisc [ 330.072207][ T4984] ===================================================== [ 330.077283][ T7522] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.079363][ T4984] Disabling lock debugging due to kernel taint [ 330.079416][ T4984] Kernel panic - not syncing: kmsan.panic set ... [ 330.079493][ T4984] CPU: 1 UID: 0 PID: 4984 Comm: kworker/u8:24 Tainted: G B W L syzkaller #0 PREEMPT(none) [ 330.079647][ T4984] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 330.079696][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.079767][ T4984] Workqueue: events_unbound flush_to_ldisc [ 330.079918][ T4984] Call Trace: [ 330.079964][ T4984] [ 330.080000][ T4984] __dump_stack+0x26/0x30 [ 330.080125][ T4984] dump_stack_lvl+0x53/0x270 [ 330.080250][ T4984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 330.080413][ T4984] dump_stack+0x1e/0x25 [ 330.080525][ T4984] vpanic+0x435/0xd30 [ 330.080668][ T4984] panic+0x15d/0x160 [ 330.080835][ T4984] kmsan_report+0x31c/0x320 [ 330.080987][ T4984] ? __msan_warning+0x1b/0x30 [ 330.081108][ T4984] ? n_tty_receive_buf_closing+0x420/0x9e0 [ 330.081219][ T4984] ? n_tty_receive_buf_common+0x19e9/0x2630 [ 330.081331][ T4984] ? n_tty_receive_buf2+0x4c/0x60 [ 330.081427][ T4984] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 330.081562][ T4984] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 330.081709][ T4984] ? flush_to_ldisc+0x43e/0xe30 [ 330.081836][ T4984] ? process_scheduled_works+0xb91/0x1d80 [ 330.081991][ T4984] ? worker_thread+0xedf/0x1590 [ 330.082084][ T4984] ? kthread+0xd5c/0xf00 [ 330.082187][ T4984] ? ret_from_fork+0x208/0x710 [ 330.082329][ T4984] ? ret_from_fork_asm+0x1a/0x30 [ 330.082461][ T4984] ? ret_from_fork_asm+0x1a/0x30 [ 330.082593][ T4984] ? kmsan_get_metadata+0xfb/0x160 [ 330.082737][ T4984] ? kmsan_get_metadata+0xfb/0x160 [ 330.082883][ T4984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 330.083047][ T4984] ? ret_from_fork+0x1b1/0x710 [ 330.083186][ T4984] ? filter_irq_stacks+0x49/0x190 [ 330.083328][ T4984] ? stack_depot_save_flags+0x35/0x790 [ 330.083451][ T4984] ? kmsan_get_metadata+0xfb/0x160 [ 330.083597][ T4984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 330.083758][ T4984] ? kmsan_get_metadata+0xfb/0x160 [ 330.083913][ T4984] __msan_warning+0x1b/0x30 [ 330.084046][ T4984] n_tty_receive_buf_closing+0x420/0x9e0 [ 330.084202][ T4984] n_tty_receive_buf_common+0x19e9/0x2630 [ 330.084408][ T4984] n_tty_receive_buf2+0x4c/0x60 [ 330.084518][ T4984] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 330.084622][ T4984] tty_ldisc_receive_buf+0xc6/0x2c0 [ 330.084779][ T4984] tty_port_default_receive_buf+0xd7/0x1a0 [ 330.084947][ T4984] flush_to_ldisc+0x43e/0xe30 [ 330.085100][ T4984] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 330.085254][ T4984] ? __pfx_flush_to_ldisc+0x10/0x10 [ 330.085394][ T4984] process_scheduled_works+0xb91/0x1d80 [ 330.085605][ T4984] worker_thread+0xedf/0x1590 [ 330.085739][ T4984] kthread+0xd5c/0xf00 [ 330.085844][ T4984] ? __pfx_worker_thread+0x10/0x10 [ 330.085972][ T4984] ? __pfx_kthread+0x10/0x10 [ 330.086082][ T4984] ret_from_fork+0x208/0x710 [ 330.086221][ T4984] ? __switch_to+0x53d/0x790 [ 330.086338][ T4984] ? __pfx_kthread+0x10/0x10 [ 330.086447][ T4984] ret_from_fork_asm+0x1a/0x30 [ 330.086607][ T4984] [ 330.086967][ T4984] Kernel Offset: disabled