last executing test programs: 15m25.562781637s ago: executing program 2 (id=427): r0 = io_uring_setup(0x1450, &(0x7f0000000180)={0x0, 0x73d5, 0x80, 0x3, 0x1f}) r1 = signalfd4(r0, &(0x7f0000000300)={[0x100000001]}, 0x8, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x2100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x80000000}]}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x0, {0x8, 0x7}, 0x8}, 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r5 = syz_usb_connect$uac1(0x0, 0x71, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) 15m23.401152918s ago: executing program 2 (id=432): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @empty}, 0x27) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59dd", 0x15}], 0x1}, 0x0) readv(r5, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xfffd, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r2, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 15m20.049416925s ago: executing program 2 (id=439): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x87) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbf7, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) socket(0x10, 0x80003, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000004, 0x42031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r3, &(0x7f0000019080)=""/102352, 0x18fd0, 0x3) 15m18.867923182s ago: executing program 2 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 15m17.792599577s ago: executing program 2 (id=447): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x1e, &(0x7f0000000f00)=@raw=[@jmp={0x5, 0x0, 0x1, 0xa, 0x1, 0x10, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x6, 0x2, 0x8, 0x800000000000006e, 0x1}, @ringbuf_query, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @exit, @ldst={0x3, 0x3, 0x2, 0x0, 0x4, 0x6, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10) syz_emit_ethernet(0x162, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000300)=r1) r2 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f0000007f40)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES64=r2, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0xf095, 0x0, 0x3, 0x7fe}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x81, 0x7, 0x0, {0x0, 0x0, r7}}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x14, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x44, 0xcc142}) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000400)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x4a, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$ext4(&(0x7f0000000740)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000340)={[{@usrjquota}, {@nojournal_checksum}, {@noquota}], [{@permit_directio}, {@uid_lt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x5, 0x754, &(0x7f0000000780)="$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") 15m12.417818233s ago: executing program 2 (id=456): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 14m56.554190259s ago: executing program 32 (id=456): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e657200000040000280080002"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 13.241932214s ago: executing program 1 (id=2182): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) userfaultfd(0x801) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200004, &(0x7f00000000c0)={[{@mblk_io_submit}, {@grpjquota}, {@data_journal}, {@orlov}, {@grpquota}]}, 0x0, 0x640, &(0x7f0000000f40)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000067fb640b251a000100"], 0x14}}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x430001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x20, @tick=0x6e544000, 0x2, {0x0, 0x9}, 0xa}) socket$nl_netfilter(0x10, 0x3, 0xc) 11.306182501s ago: executing program 5 (id=2187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 11.068908565s ago: executing program 1 (id=2189): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000007360c88bd4de8d115954887a69f974a97cc7605da27dd75d5f2b1c7f0c3e67ec7ec9a8e1c98a960854311a5d4d18ec18b84f108224c8350602f525655ed3eb2fa1839953630b50ad90707b05622f42645efac5985feaba5d43902809912a88c9"], 0x48) keyctl$unlink(0x9, 0x0, 0x0) keyctl$clear(0x7, 0x0) 10.711885619s ago: executing program 4 (id=2190): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x80102, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e29, 0x80, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x6}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002000)}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 10.71106955s ago: executing program 5 (id=2191): socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf7}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, 0x0}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/186, 0xba) socket$nl_generic(0x10, 0x3, 0x10) 9.742895593s ago: executing program 5 (id=2192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) 9.376563108s ago: executing program 1 (id=2193): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) 9.000166493s ago: executing program 3 (id=2195): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000000}, 0x20) r7 = io_uring_setup(0x7fdb, &(0x7f00000002c0)={0x0, 0xa780, 0x0, 0x1, 0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',']) statfs(&(0x7f0000000200)='./file0\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0xfffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) 8.775191447s ago: executing program 5 (id=2196): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1008040, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC], 0xd3, 0x599, &(0x7f0000000b80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x3b51, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r6, 0x329, 0xfffffffc, 0x0, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r9, 0x786b6295d7f1977, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x18001}, 0x40040) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) 6.162643534s ago: executing program 3 (id=2198): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0xc1}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000000040)=""/249, 0x2b, 0xf9, 0x6, 0x9}, 0x28) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r7 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x8000}) r9 = fcntl$dupfd(r8, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455cb, 0x0) 6.113170414s ago: executing program 4 (id=2199): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000007e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084) fsmount(r0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x700, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3ef, 0xf00}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x44}}, 0x4004850) 5.996151126s ago: executing program 1 (id=2200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r1, &(0x7f0000000100)=[{}], 0x1) userfaultfd(0x801) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200004, &(0x7f00000000c0)={[{@mblk_io_submit}, {@grpjquota}, {@data_journal}, {@orlov}, {@grpquota}]}, 0x0, 0x640, &(0x7f0000000f40)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000067fb640b251a000100"], 0x14}}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x430001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x20, @tick=0x6e544000, 0x2, {0x0, 0x9}, 0xa}) socket$nl_netfilter(0x10, 0x3, 0xc) 5.01257756s ago: executing program 5 (id=2202): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.462764047s ago: executing program 1 (id=2204): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000007360c88bd4de8d115954887a69f974a97cc7605da27dd75d5f2b1c7f0c3e67ec7ec9a8e1c98a960854311a5d4d18ec18b84f108224c8350602f525655ed3eb2fa1839953630b50ad90707b05622f42645efac5985feaba5d43902809912a88c9"], 0x48) keyctl$unlink(0x9, 0x0, 0x0) keyctl$clear(0x7, 0x0) 4.458928617s ago: executing program 4 (id=2205): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.27213788s ago: executing program 0 (id=2206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61c7b2986eb5e52829e7cb839300"}}) fcntl$setownex(r1, 0xf, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r3, 0x80026101, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00060000000600160000000000050012000100000071b78c1fd4392cbe27a937170bc877754451131535ce030da553241055327f7fde9192b1ed46ba29b577aaa355ac24ffdf8e4e3f76b09bdd5b17fd7c06009a3a2ae7d844da047bac406851c3224ecd299ffbcb5b1c69379f8a1b3fcc875fa7a2a54eee1884c7d97042bdde790dcd5aeeeec2304a7b9f34ea93d122c330c8"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) bind$xdp(r7, &(0x7f0000000040)={0x2d, 0x0, 0x0, 0xc, r7}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r8) close(r6) 4.183025391s ago: executing program 4 (id=2207): syz_open_dev$admmidi(&(0x7f0000001500), 0xfffffffffffffffc, 0x2000) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x2], [0x0, 0x0, 0x0, 0x2], [0x400000000000000]}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x30) syz_usbip_server_init(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) socket(0x1d, 0x2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) 3.995389834s ago: executing program 1 (id=2208): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.791158887s ago: executing program 3 (id=2209): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000000}, 0x20) r7 = io_uring_setup(0x7fdb, &(0x7f00000002c0)={0x0, 0xa780, 0x0, 0x1, 0x8}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',']) statfs(&(0x7f0000000200)='./file0\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0xfffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) 2.591626573s ago: executing program 3 (id=2210): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x80102, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) socket$inet6(0xa, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002000)}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 2.501407204s ago: executing program 0 (id=2211): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x13c1, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000140)={0x2, 0x0, '\x00', {0x0, @bt={0x7, 0x4, 0x1, 0x1, 0x3, 0x6, 0x400, 0x3, 0x2a5b, 0x2, 0xff, 0x7, 0x8, 0xc, 0x4, 0x1, {0x4, 0x427}, 0x7, 0xf7}}}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.390703326s ago: executing program 4 (id=2212): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x80102, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e29, 0x80, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x97}, 0xffffffff}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000d40), 0x0}, 0x20) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002000)}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 2.337159487s ago: executing program 0 (id=2213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 2.10026163s ago: executing program 0 (id=2214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r1, 0x0, 0x6}, 0x18) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61c7b2986eb5e52829e7cb839300"}}) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r2, 0x80026101, &(0x7f00000000c0)) 1.139618293s ago: executing program 0 (id=2215): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r1, &(0x7f0000000100)=[{}], 0x1) userfaultfd(0x801) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200004, &(0x7f00000000c0)={[{@mblk_io_submit}, {@grpjquota}, {@data_journal}, {@orlov}, {@grpquota}]}, 0x0, 0x640, &(0x7f0000000f40)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000067fb640b251a000100"], 0x14}}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x430001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x20, @tick=0x6e544000, 0x2, {0x0, 0x9}, 0xa}) socket$nl_netfilter(0x10, 0x3, 0xc) 521.214242ms ago: executing program 4 (id=2216): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000007e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084) fsmount(r0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x700, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3ef, 0xf00}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x44}}, 0x4004850) 450.244703ms ago: executing program 3 (id=2217): syz_emit_vhci(0x0, 0x9) 104.173828ms ago: executing program 5 (id=2218): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000", 0x4d}], 0x1) userfaultfd(0x801) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000067fb640b251a000100"], 0x14}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 103.616658ms ago: executing program 3 (id=2219): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000007360c88bd4de8d115954887a69f974a97cc7605da27dd75d5f2b1c7f0c3e67ec7ec9a8e1c98a960854311a5d4d18ec18b84f108224c8350602f525655ed3eb2fa1839953630b50ad90707b05622f42645efac5985feaba5d43902809912a88c9"], 0x48) keyctl$unlink(0x9, 0x0, 0x0) keyctl$clear(0x7, 0x0) 0s ago: executing program 0 (id=2220): openat$ptmx(0xffffffffffffff9c, 0x0, 0x109003, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x150) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xfff3}, {0x1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) kernel console output (not intermixed with test programs): /u4:9: attempt to access beyond end of device [ 551.365110][ T4394] loop1: rw=1, sector=67, nr_sectors = 1 limit=64 [ 551.388224][ T8190] usb usb8: usbfs: process 8190 (syz.5.924) did not claim interface 0 before use [ 552.157370][ T4394] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 552.391401][ T4394] kworker/u4:9: attempt to access beyond end of device [ 552.391401][ T4394] loop1: rw=1, sector=68, nr_sectors = 1 limit=64 [ 552.491832][ T4394] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 552.530999][ T4394] kworker/u4:9: attempt to access beyond end of device [ 552.530999][ T4394] loop1: rw=1, sector=72, nr_sectors = 1 limit=64 [ 552.589367][ T4394] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 552.618197][ T4394] kworker/u4:9: attempt to access beyond end of device [ 552.618197][ T4394] loop1: rw=1, sector=73, nr_sectors = 1 limit=64 [ 552.712972][ T4394] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 552.727618][ T4394] kworker/u4:9: attempt to access beyond end of device [ 552.727618][ T4394] loop1: rw=1, sector=76, nr_sectors = 371 limit=64 [ 554.979617][ T8212] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 555.213752][ T8216] loop1: detected capacity change from 0 to 40427 [ 555.246517][ T8216] F2FS-fs (loop1): invalid crc value [ 555.265512][ T8216] F2FS-fs (loop1): Found nat_bits in checkpoint [ 555.296704][ T8216] F2FS-fs (loop1): Start checkpoint disabled! [ 555.314738][ T8220] loop3: detected capacity change from 0 to 256 [ 555.330799][ T8216] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 555.443628][ T8218] vivid-007: ================= START STATUS ================= [ 555.451540][ T8218] vivid-007: Enable Output Cropping: true [ 555.457497][ T8218] vivid-007: Enable Output Composing: true [ 555.463616][ T8218] vivid-007: Enable Output Scaler: true [ 555.469378][ T8218] vivid-007: Tx RGB Quantization Range: Automatic [ 555.476707][ T8218] vivid-007: Transmit Mode: HDMI [ 555.482031][ T8218] vivid-007: Display Present: true inactive [ 555.488131][ T8218] vivid-007: Hotplug Present: 0x00000001 [ 555.504110][ T8218] vivid-007: RxSense Present: 0x00000001 [ 555.510035][ T8218] vivid-007: EDID Present: 0x00000001 [ 555.515761][ T8218] vivid-007: ================== END STATUS ================== [ 556.277772][ T4967] kworker/u4:18: attempt to access beyond end of device [ 556.277772][ T4967] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 556.747559][ T8237] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 561.449090][ T8266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 561.455775][ T8266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 561.531516][ T8261] process 'syz.5.940' launched './file0' with NULL argv: empty string added [ 561.621452][ T8266] vhci_hcd vhci_hcd.0: Device attached [ 561.648041][ T8273] loop3: detected capacity change from 0 to 256 [ 561.810619][ T8273] exfat: Deprecated parameter 'utf8' [ 561.824087][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 561.833196][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.840633][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.865182][ T8273] exfat: Deprecated parameter 'namecase' [ 561.890496][ T8267] vhci_hcd: connection closed [ 561.903909][ T6690] vhci_hcd: stop threads [ 561.917345][ T8273] exfat: Bad value for 'gid' [ 561.926525][ T6690] vhci_hcd: release socket [ 561.931992][ T5263] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 561.936653][ T6690] vhci_hcd: disconnect device [ 562.721663][ T8286] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 562.785476][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.234483][ T8286] loop3: detected capacity change from 0 to 512 [ 563.349720][ T8286] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 563.422416][ T8286] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 566.271416][ T8324] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 567.112298][ T5263] vhci_hcd: vhci_device speed not set [ 569.285982][ T8328] loop3: detected capacity change from 0 to 40427 [ 569.300864][ T8328] F2FS-fs (loop3): invalid crc value [ 569.309873][ T8328] F2FS-fs (loop3): Found nat_bits in checkpoint [ 569.339658][ T8328] F2FS-fs (loop3): Start checkpoint disabled! [ 569.687952][ T8333] loop1: detected capacity change from 0 to 256 [ 569.727886][ T8332] loop5: detected capacity change from 0 to 764 [ 569.763578][ T8333] exfat: Deprecated parameter 'utf8' [ 569.769089][ T8333] exfat: Deprecated parameter 'namecase' [ 569.775238][ T8333] exfat: Bad value for 'gid' [ 569.786285][ T8328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 570.690118][ T4369] kworker/u4:7: attempt to access beyond end of device [ 570.690118][ T4369] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 573.960216][ T8362] loop0: detected capacity change from 0 to 512 [ 574.177280][ T8362] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 574.241311][ T8362] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264 [ 574.366878][ T8374] usb usb8: usbfs: process 8374 (syz.3.965) did not claim interface 0 before use [ 576.442178][ T8398] loop0: detected capacity change from 0 to 256 [ 576.460100][ T8400] loop3: detected capacity change from 0 to 764 [ 576.505473][ T8402] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 576.512633][ T8398] exfat: Deprecated parameter 'utf8' [ 576.518076][ T8398] exfat: Deprecated parameter 'namecase' [ 576.571917][ T8398] exfat: Bad value for 'gid' [ 582.141873][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 582.346074][ T8426] loop5: detected capacity change from 0 to 2048 [ 582.642025][ T8426] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 583.175308][ T8439] usb usb8: usbfs: process 8439 (syz.5.978) did not claim interface 0 before use [ 583.311926][ T8422] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 583.327939][ T8422] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 583.340460][ T8422] EXT4-fs (loop5): This should not happen!! Data will be lost [ 583.340460][ T8422] [ 583.350526][ T8422] EXT4-fs (loop5): Total free blocks count 0 [ 583.356688][ T8422] EXT4-fs (loop5): Free/Dirty block details [ 583.362775][ T8422] EXT4-fs (loop5): free_blocks=2415919104 [ 583.368638][ T8422] EXT4-fs (loop5): dirty_blocks=16 [ 583.373988][ T8422] EXT4-fs (loop5): Block reservation details [ 583.380098][ T8422] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 583.416643][ T8437] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 583.446634][ T8437] loop3: detected capacity change from 0 to 512 [ 583.539904][ T8437] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 583.592178][ T8437] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 584.133847][ T6390] EXT4-fs (loop5): unmounting filesystem. [ 584.534205][ T8457] loop0: detected capacity change from 0 to 256 [ 584.605641][ T8457] exfat: Deprecated parameter 'utf8' [ 584.611176][ T8457] exfat: Deprecated parameter 'namecase' [ 584.689229][ T8458] loop1: detected capacity change from 0 to 40427 [ 584.705460][ T8457] exfat: Bad value for 'gid' [ 584.743453][ T8458] F2FS-fs (loop1): invalid crc value [ 584.760994][ T8458] F2FS-fs (loop1): Found nat_bits in checkpoint [ 584.801619][ T8458] F2FS-fs (loop1): Start checkpoint disabled! [ 584.838057][ T8458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 584.930784][ T8469] loop5: detected capacity change from 0 to 764 [ 585.012811][ T6214] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 585.982583][ T4369] kworker/u4:7: attempt to access beyond end of device [ 585.982583][ T4369] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 586.512813][ T8483] loop5: detected capacity change from 0 to 2048 [ 586.880179][ T8483] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 587.758868][ T8507] loop3: detected capacity change from 0 to 764 [ 588.152253][ T8482] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 588.183226][ T6214] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 588.508020][ T8512] loop3: detected capacity change from 0 to 40427 [ 588.515536][ T8482] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 588.563360][ T8482] EXT4-fs (loop5): This should not happen!! Data will be lost [ 588.563360][ T8482] [ 588.604368][ T8512] F2FS-fs (loop3): invalid crc value [ 588.793139][ T8482] EXT4-fs (loop5): Total free blocks count 0 [ 588.799185][ T8482] EXT4-fs (loop5): Free/Dirty block details [ 588.817517][ T8512] F2FS-fs (loop3): Found nat_bits in checkpoint [ 589.463745][ T8482] EXT4-fs (loop5): free_blocks=2415919104 [ 589.478543][ T8512] F2FS-fs (loop3): Start checkpoint disabled! [ 589.494304][ T8482] EXT4-fs (loop5): dirty_blocks=16 [ 589.587971][ T8512] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 589.639100][ T8482] EXT4-fs (loop5): Block reservation details [ 589.774803][ T8482] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 590.602228][ T6390] EXT4-fs (loop5): unmounting filesystem. [ 590.638279][ T4386] kworker/u4:8: attempt to access beyond end of device [ 590.638279][ T4386] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 593.967861][ T8578] orangefs_mount: mount request failed with -4 [ 594.147392][ T8595] loop1: detected capacity change from 0 to 2048 [ 594.252804][ T8595] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 594.262543][ T8601] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 594.822424][ T8605] loop0: detected capacity change from 0 to 512 [ 594.986176][ T8605] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 595.049028][ T8594] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 595.169545][ T8601] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264 [ 595.228069][ T8594] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 595.332453][ T8594] EXT4-fs (loop1): This should not happen!! Data will be lost [ 595.332453][ T8594] [ 595.607459][ T8594] EXT4-fs (loop1): Total free blocks count 0 [ 595.667983][ T8594] EXT4-fs (loop1): Free/Dirty block details [ 595.722846][ T8594] EXT4-fs (loop1): free_blocks=2415919104 [ 595.728650][ T8594] EXT4-fs (loop1): dirty_blocks=16 [ 595.820087][ T8594] EXT4-fs (loop1): Block reservation details [ 595.871360][ T8594] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 596.003669][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 598.266076][ T8662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 598.318363][ T8662] loop3: detected capacity change from 0 to 512 [ 598.333554][ T8664] loop0: detected capacity change from 0 to 2048 [ 598.354762][ T8662] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 598.419644][ T8662] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 598.434569][ T8664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 598.502004][ T26] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 600.153777][ T26] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 600.441178][ T26] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 600.451794][ T26] usb 2-1: config 1 interface 0 has no altsetting 0 [ 600.465662][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 600.545471][ T26] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 600.576369][ T26] usb 2-1: Product: syz [ 600.584576][ T26] usb 2-1: Manufacturer: syz [ 600.590309][ T26] usb 2-1: SerialNumber: syz [ 602.499026][ T26] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 602.511930][ T26] usb 2-1: USB disconnect, device number 4 [ 602.563972][ T26] usblp0: removed [ 602.615907][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 605.318233][ T8722] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 605.324816][ T8722] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 605.799999][ T8722] vhci_hcd vhci_hcd.0: Device attached [ 606.002898][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 606.018384][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.026886][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.081949][ T4944] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 608.429135][ T8728] vhci_hcd: connection reset by peer [ 608.435022][ T4501] vhci_hcd: stop threads [ 608.439308][ T4501] vhci_hcd: release socket [ 608.475881][ T4501] vhci_hcd: disconnect device [ 608.489355][ T8735] loop5: detected capacity change from 0 to 2048 [ 610.597258][ T8735] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 611.334318][ T8748] loop1: detected capacity change from 0 to 256 [ 611.519728][ T8748] exfat: Deprecated parameter 'namecase' [ 612.619049][ T8748] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 612.631981][ T4944] vhci_hcd: vhci_device speed not set [ 613.943560][ T6390] EXT4-fs (loop5): unmounting filesystem. [ 614.563279][ T8789] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1066'. [ 617.019745][ T8805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.038925][ T8803] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 617.045600][ T8803] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 617.072125][ T8803] vhci_hcd vhci_hcd.0: Device attached [ 617.078722][ T8805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.129952][ T8805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.303394][ T8819] loop0: detected capacity change from 0 to 2048 [ 617.422060][ T5264] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 618.170169][ T8818] loop4: detected capacity change from 0 to 256 [ 618.265226][ T8804] vhci_hcd: connection reset by peer [ 618.287129][ T8818] exfat: Deprecated parameter 'namecase' [ 618.297714][ T4654] vhci_hcd: stop threads [ 618.302716][ T4654] vhci_hcd: release socket [ 618.312613][ T4654] vhci_hcd: disconnect device [ 618.352277][ T8819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 618.375061][ T8818] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 620.008702][ T8816] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 620.064372][ T8816] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 620.144902][ T8844] loop5: detected capacity change from 0 to 256 [ 620.191354][ T8816] EXT4-fs (loop0): This should not happen!! Data will be lost [ 620.191354][ T8816] [ 620.193054][ T8844] exfat: Deprecated parameter 'utf8' [ 620.253217][ T8844] exfat: Deprecated parameter 'namecase' [ 620.279455][ T8844] exfat: Bad value for 'gid' [ 620.286210][ T8816] EXT4-fs (loop0): Total free blocks count 0 [ 620.323651][ T8816] EXT4-fs (loop0): Free/Dirty block details [ 620.329667][ T8816] EXT4-fs (loop0): free_blocks=2415919104 [ 620.335647][ T7624] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 621.152137][ T7624] usb 2-1: Using ep0 maxpacket: 8 [ 621.193224][ T8816] EXT4-fs (loop0): dirty_blocks=16 [ 621.198606][ T8816] EXT4-fs (loop0): Block reservation details [ 621.205414][ T8816] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 621.290309][ T7624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.311924][ T7624] usb 2-1: config 0 has no interfaces? [ 621.323632][ T7624] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 621.443320][ T7624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.459216][ T7624] usb 2-1: Product: syz [ 621.465280][ T7624] usb 2-1: Manufacturer: syz [ 621.470158][ T7624] usb 2-1: SerialNumber: syz [ 621.494086][ T7624] usb 2-1: config 0 descriptor?? [ 621.859518][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 623.042017][ T5264] vhci_hcd: vhci_device speed not set [ 623.233674][ T8874] device batadv0 entered promiscuous mode [ 623.246636][ T8874] device batadv0 left promiscuous mode [ 623.736554][ T5047] usb 2-1: USB disconnect, device number 5 [ 624.232150][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.439796][ T8898] loop3: detected capacity change from 0 to 2048 [ 625.508211][ T8898] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 625.583467][ T8881] loop1: detected capacity change from 0 to 40427 [ 626.059906][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'. [ 626.153208][ T8881] F2FS-fs (loop1): invalid crc value [ 626.389004][ T8881] F2FS-fs (loop1): Found nat_bits in checkpoint [ 626.464982][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 626.565495][ T8881] F2FS-fs (loop1): Start checkpoint disabled! [ 626.636189][ T8881] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 627.710789][ T27] audit: type=1804 audit(1752203098.353:48): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1089" name="/newroot/220/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 628.060653][ T8932] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 628.685529][ T27] audit: type=1804 audit(1752203098.553:49): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1089" name="/newroot/220/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 628.772958][ T8934] loop4: detected capacity change from 0 to 2048 [ 628.970852][ T8934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 629.319950][ T8933] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 629.370809][ T8933] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 629.396053][ T8933] EXT4-fs (loop4): This should not happen!! Data will be lost [ 629.396053][ T8933] [ 629.414939][ T8933] EXT4-fs (loop4): Total free blocks count 0 [ 629.433693][ T8933] EXT4-fs (loop4): Free/Dirty block details [ 629.440155][ T8933] EXT4-fs (loop4): free_blocks=2415919104 [ 629.473610][ T8933] EXT4-fs (loop4): dirty_blocks=16 [ 629.478783][ T8933] EXT4-fs (loop4): Block reservation details [ 629.499026][ T8933] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 629.503121][ T4493] kworker/u4:11: attempt to access beyond end of device [ 629.503121][ T4493] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 629.681468][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 630.449125][ T8950] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 630.609343][ T8951] vivid-007: ================= START STATUS ================= [ 630.676144][ T8951] vivid-007: Enable Output Cropping: true [ 630.697065][ T8951] vivid-007: Enable Output Composing: true [ 630.721580][ T8951] vivid-007: Enable Output Scaler: true [ 630.735571][ T8951] vivid-007: Tx RGB Quantization Range: Automatic [ 630.810702][ T8951] vivid-007: Transmit Mode: HDMI [ 630.867126][ T8951] vivid-007: Display Present: true inactive [ 630.880951][ T8951] vivid-007: Hotplug Present: 0x00000001 [ 631.004134][ T8957] loop3: detected capacity change from 0 to 2048 [ 631.014256][ T8951] vivid-007: RxSense Present: 0x00000001 [ 631.022032][ T8951] vivid-007: EDID Present: 0x00000001 [ 631.032909][ T8951] vivid-007: ================== END STATUS ================== [ 631.140022][ T8957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 631.242681][ T8954] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 631.298815][ T8954] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 631.385043][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 631.804231][ T8954] EXT4-fs (loop3): This should not happen!! Data will be lost [ 631.804231][ T8954] [ 631.962586][ T8954] EXT4-fs (loop3): Total free blocks count 0 [ 632.361389][ T8973] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 633.729937][ T8954] EXT4-fs (loop3): Free/Dirty block details [ 633.875628][ T8954] EXT4-fs (loop3): free_blocks=2415919104 [ 634.229748][ T8954] EXT4-fs (loop3): dirty_blocks=16 [ 634.268977][ T8954] EXT4-fs (loop3): Block reservation details [ 634.311898][ T8954] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 634.513957][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 635.426312][ T8984] loop3: detected capacity change from 0 to 256 [ 635.632609][ T8984] exfat: Deprecated parameter 'namecase' [ 635.980718][ T8984] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 636.263010][ T8998] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 636.684505][ T9009] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 637.456554][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 637.467617][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1123'. [ 639.304054][ T9036] loop0: detected capacity change from 0 to 256 [ 639.323818][ T9036] exfat: Deprecated parameter 'utf8' [ 639.333912][ T9036] exfat: Deprecated parameter 'namecase' [ 639.368855][ T9036] exfat: Bad value for 'gid' [ 639.424433][ T9042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 640.807177][ T9038] loop4: detected capacity change from 0 to 256 [ 640.836155][ T9042] vivid-007: ================= START STATUS ================= [ 640.927303][ T9042] vivid-007: Enable Output Cropping: true [ 640.934492][ T9038] exfat: Deprecated parameter 'namecase' [ 641.128497][ T9042] vivid-007: Enable Output Composing: true [ 641.279014][ T9042] vivid-007: Enable Output Scaler: true [ 641.287815][ T9038] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 641.300579][ T9042] vivid-007: Tx RGB Quantization Range: Automatic [ 641.308462][ T9042] vivid-007: Transmit Mode: HDMI [ 641.323356][ T9042] vivid-007: Display Present: true inactive [ 642.769156][ T9042] vivid-007: Hotplug Present: 0x00000001 [ 642.776204][ T9042] vivid-007: RxSense Present: 0x00000001 [ 642.784043][ T9042] vivid-007: EDID Present: 0x00000001 [ 642.789445][ T9042] vivid-007: ================== END STATUS ================== [ 645.157919][ T9087] loop5: detected capacity change from 0 to 2048 [ 645.269140][ T9087] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 645.902845][ T9086] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 646.221907][ T9086] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 646.234434][ T9086] EXT4-fs (loop5): This should not happen!! Data will be lost [ 646.234434][ T9086] [ 646.244850][ T9086] EXT4-fs (loop5): Total free blocks count 0 [ 646.271875][ T9086] EXT4-fs (loop5): Free/Dirty block details [ 646.338833][ T9086] EXT4-fs (loop5): free_blocks=2415919104 [ 646.439232][ T9086] EXT4-fs (loop5): dirty_blocks=16 [ 646.452022][ T9086] EXT4-fs (loop5): Block reservation details [ 646.603435][ T9086] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 646.688482][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 646.850783][ T6390] EXT4-fs (loop5): unmounting filesystem. [ 647.216638][ T9107] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 647.390188][ T9108] vivid-007: ================= START STATUS ================= [ 647.398133][ T9108] vivid-007: Enable Output Cropping: true [ 647.404135][ T9108] vivid-007: Enable Output Composing: true [ 647.410146][ T9108] vivid-007: Enable Output Scaler: true [ 647.416093][ T9108] vivid-007: Tx RGB Quantization Range: Automatic [ 647.422825][ T9108] vivid-007: Transmit Mode: HDMI [ 647.428709][ T9108] vivid-007: Display Present: true inactive [ 647.434997][ T9108] vivid-007: Hotplug Present: 0x00000001 [ 647.451484][ T9108] vivid-007: RxSense Present: 0x00000001 [ 647.457705][ T9108] vivid-007: EDID Present: 0x00000001 [ 647.463592][ T9108] vivid-007: ================== END STATUS ================== [ 649.836819][ T9124] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 654.089062][ T9144] loop4: detected capacity change from 0 to 2048 [ 654.192760][ T9144] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 654.387383][ T9143] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 654.463946][ T9143] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 654.622595][ T9143] EXT4-fs (loop4): This should not happen!! Data will be lost [ 654.622595][ T9143] [ 655.190520][ T9143] EXT4-fs (loop4): Total free blocks count 0 [ 655.222680][ T9143] EXT4-fs (loop4): Free/Dirty block details [ 655.230277][ T9143] EXT4-fs (loop4): free_blocks=2415919104 [ 655.411842][ T9143] EXT4-fs (loop4): dirty_blocks=16 [ 655.418380][ T9143] EXT4-fs (loop4): Block reservation details [ 655.429306][ T9143] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 655.475942][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1164'. [ 655.630331][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 659.965130][ T9189] loop0: detected capacity change from 0 to 2048 [ 660.123213][ T9189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 660.206547][ T9188] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 660.237341][ T9194] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 660.244619][ T9188] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 660.330158][ T9195] vivid-007: ================= START STATUS ================= [ 660.338048][ T9195] vivid-007: Enable Output Cropping: true [ 660.344108][ T9195] vivid-007: Enable Output Composing: true [ 660.350150][ T9195] vivid-007: Enable Output Scaler: true [ 660.355959][ T9195] vivid-007: Tx RGB Quantization Range: Automatic [ 660.362621][ T9195] vivid-007: Transmit Mode: HDMI [ 660.367991][ T9195] vivid-007: Display Present: true inactive [ 660.374133][ T9195] vivid-007: Hotplug Present: 0x00000001 [ 660.380378][ T9188] EXT4-fs (loop0): This should not happen!! Data will be lost [ 660.380378][ T9188] [ 660.498280][ T9195] vivid-007: RxSense Present: 0x00000001 [ 660.519598][ T9195] vivid-007: EDID Present: 0x00000001 [ 660.525791][ T9195] vivid-007: ================== END STATUS ================== [ 661.767649][ T9188] EXT4-fs (loop0): Total free blocks count 0 [ 661.858428][ T9188] EXT4-fs (loop0): Free/Dirty block details [ 661.964635][ T9188] EXT4-fs (loop0): free_blocks=2415919104 [ 662.052406][ T9188] EXT4-fs (loop0): dirty_blocks=16 [ 662.057566][ T9188] EXT4-fs (loop0): Block reservation details [ 662.232958][ T9188] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 662.627951][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 662.894011][ T9200] loop3: detected capacity change from 0 to 2048 [ 662.985818][ T9203] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 663.031584][ T9200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 663.081519][ T9199] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 663.090568][ T9207] loop0: detected capacity change from 0 to 512 [ 663.111998][ T9199] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 663.145537][ T9199] EXT4-fs (loop3): This should not happen!! Data will be lost [ 663.145537][ T9199] [ 663.204346][ T9207] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 663.223891][ T9199] EXT4-fs (loop3): Total free blocks count 0 [ 663.261926][ T9199] EXT4-fs (loop3): Free/Dirty block details [ 663.282153][ T9203] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264 [ 663.298019][ T9199] EXT4-fs (loop3): free_blocks=2415919104 [ 663.526422][ T9199] EXT4-fs (loop3): dirty_blocks=16 [ 663.531587][ T9199] EXT4-fs (loop3): Block reservation details [ 664.256833][ T9199] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 664.731262][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 665.539559][ T9224] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1178'. [ 666.322339][ T9235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1182'. [ 666.357244][ T9233] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1182'. [ 668.382814][ T9239] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 668.389410][ T9239] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 668.501336][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 668.566534][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.616102][ T9239] vhci_hcd vhci_hcd.0: Device attached [ 668.678635][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.759474][ T9240] vhci_hcd: connection closed [ 668.764383][ T11] vhci_hcd: stop threads [ 668.785547][ T11] vhci_hcd: release socket [ 668.790919][ T11] vhci_hcd: disconnect device [ 669.902537][ T4373] vhci_hcd: vhci_device speed not set [ 670.353874][ T9262] loop0: detected capacity change from 0 to 2048 [ 670.383386][ T9263] loop1: detected capacity change from 0 to 2048 [ 670.422582][ T9262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 670.440784][ T9263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 670.512155][ T9259] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 670.531989][ T9259] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 670.562867][ T9259] EXT4-fs (loop0): This should not happen!! Data will be lost [ 670.562867][ T9259] [ 670.576777][ T9259] EXT4-fs (loop0): Total free blocks count 0 [ 670.583323][ T9259] EXT4-fs (loop0): Free/Dirty block details [ 670.590535][ T9259] EXT4-fs (loop0): free_blocks=2415919104 [ 670.598405][ T9259] EXT4-fs (loop0): dirty_blocks=16 [ 670.604898][ T9259] EXT4-fs (loop0): Block reservation details [ 670.610984][ T9259] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 671.147186][ T9260] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 671.162583][ T9260] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 671.175050][ T9260] EXT4-fs (loop1): This should not happen!! Data will be lost [ 671.175050][ T9260] [ 671.185375][ T9260] EXT4-fs (loop1): Total free blocks count 0 [ 671.191526][ T9260] EXT4-fs (loop1): Free/Dirty block details [ 671.197747][ T9260] EXT4-fs (loop1): free_blocks=2415919104 [ 671.203610][ T9260] EXT4-fs (loop1): dirty_blocks=16 [ 671.208856][ T9260] EXT4-fs (loop1): Block reservation details [ 671.215000][ T9260] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 671.298726][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 671.390199][ T9276] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 671.423082][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 671.566329][ T9279] loop3: detected capacity change from 0 to 512 [ 671.693348][ T9281] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1192'. [ 671.749448][ T9279] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 672.420586][ T9276] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 672.434322][ T9283] loop0: detected capacity change from 0 to 64 [ 672.971621][ T9285] loop4: detected capacity change from 0 to 2048 [ 672.986292][ T4501] kworker/u4:12: attempt to access beyond end of device [ 672.986292][ T4501] loop0: rw=1, sector=64, nr_sectors = 1 limit=64 [ 674.045494][ T4501] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 674.266528][ T9285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 674.541878][ T4501] kworker/u4:12: attempt to access beyond end of device [ 674.541878][ T4501] loop0: rw=1, sector=65, nr_sectors = 1 limit=64 [ 674.561282][ T9284] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 674.595916][ T4501] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 674.803819][ T9301] loop5: detected capacity change from 0 to 40427 [ 674.811842][ T9284] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 674.855519][ T4501] kworker/u4:12: attempt to access beyond end of device [ 674.855519][ T4501] loop0: rw=1, sector=66, nr_sectors = 1 limit=64 [ 674.880158][ T9301] F2FS-fs (loop5): invalid crc value [ 674.886640][ T4501] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 674.900918][ T9284] EXT4-fs (loop4): This should not happen!! Data will be lost [ 674.900918][ T9284] [ 674.907856][ T9301] F2FS-fs (loop5): Found nat_bits in checkpoint [ 674.962084][ T9301] F2FS-fs (loop5): Start checkpoint disabled! [ 674.973615][ T9284] EXT4-fs (loop4): Total free blocks count 0 [ 674.985183][ T9284] EXT4-fs (loop4): Free/Dirty block details [ 674.993067][ T4501] kworker/u4:12: attempt to access beyond end of device [ 674.993067][ T4501] loop0: rw=1, sector=67, nr_sectors = 1 limit=64 [ 675.009375][ T9284] EXT4-fs (loop4): free_blocks=2415919104 [ 675.020373][ T9301] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 675.041837][ T9284] EXT4-fs (loop4): dirty_blocks=16 [ 675.057196][ T9284] EXT4-fs (loop4): Block reservation details [ 675.086992][ T9284] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 675.116833][ T4501] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 675.227713][ T27] audit: type=1804 audit(1752203145.873:50): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1199" name="/newroot/125/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 675.487200][ T4501] kworker/u4:12: attempt to access beyond end of device [ 675.487200][ T4501] loop0: rw=1, sector=68, nr_sectors = 1 limit=64 [ 675.501958][ T4501] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 675.511862][ T4501] kworker/u4:12: attempt to access beyond end of device [ 675.511862][ T4501] loop0: rw=1, sector=72, nr_sectors = 1 limit=64 [ 675.525254][ T4501] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 675.534317][ T4501] kworker/u4:12: attempt to access beyond end of device [ 675.534317][ T4501] loop0: rw=1, sector=73, nr_sectors = 1 limit=64 [ 675.548049][ T4501] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 675.557440][ T4501] kworker/u4:12: attempt to access beyond end of device [ 675.557440][ T4501] loop0: rw=1, sector=76, nr_sectors = 371 limit=64 [ 675.578695][ T27] audit: type=1804 audit(1752203145.963:51): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1199" name="/newroot/125/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 675.601834][ T4331] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 675.636642][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 675.841850][ T4331] usb 2-1: Using ep0 maxpacket: 8 [ 675.851136][ T4331] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 676.574124][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.601591][ T4331] usb 2-1: Product: syz [ 676.633361][ T4331] usb 2-1: Manufacturer: syz [ 676.652762][ T4331] usb 2-1: SerialNumber: syz [ 676.678137][ T9320] loop3: detected capacity change from 0 to 2048 [ 676.698165][ T4331] usb 2-1: config 0 descriptor?? [ 676.734351][ T4386] kworker/u4:8: attempt to access beyond end of device [ 676.734351][ T4386] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 676.915916][ T9320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 677.367426][ T4331] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 677.622132][ T9319] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 677.665335][ T9319] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 677.685705][ T9319] EXT4-fs (loop3): This should not happen!! Data will be lost [ 677.685705][ T9319] [ 677.719906][ T9319] EXT4-fs (loop3): Total free blocks count 0 [ 677.738789][ T9319] EXT4-fs (loop3): Free/Dirty block details [ 677.750040][ T9319] EXT4-fs (loop3): free_blocks=2415919104 [ 677.767141][ T9319] EXT4-fs (loop3): dirty_blocks=16 [ 677.779702][ T9319] EXT4-fs (loop3): Block reservation details [ 677.788596][ T9319] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 677.906940][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 678.006844][ T4331] usb write operation failed. (-71) [ 678.089999][ T4331] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 678.132428][ T4331] dvbdev: DVB: registering new adapter (Terratec H7) [ 678.166805][ T4331] usb 2-1: media controller created [ 678.329550][ T4331] usb read operation failed. (-71) [ 678.335839][ T4331] usb write operation failed. (-71) [ 678.350975][ T4331] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 678.391607][ T9335] loop3: detected capacity change from 0 to 64 [ 678.414195][ T4331] usb 2-1: USB disconnect, device number 6 [ 678.566898][ T4694] kworker/u4:16: attempt to access beyond end of device [ 678.566898][ T4694] loop3: rw=1, sector=64, nr_sectors = 1 limit=64 [ 678.585110][ T4694] Buffer I/O error on dev loop3, logical block 64, lost async page write [ 678.625576][ T4694] kworker/u4:16: attempt to access beyond end of device [ 678.625576][ T4694] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 678.675491][ T4694] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 678.725733][ T4694] kworker/u4:16: attempt to access beyond end of device [ 678.725733][ T4694] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 678.779279][ T4694] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 678.813199][ T4694] kworker/u4:16: attempt to access beyond end of device [ 678.813199][ T4694] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 678.839835][ T9342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 678.858973][ T4694] kworker/u4:16: attempt to access beyond end of device [ 678.858973][ T4694] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 678.910978][ T4694] kworker/u4:16: attempt to access beyond end of device [ 678.910978][ T4694] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 678.938383][ T9343] loop1: detected capacity change from 0 to 512 [ 678.978647][ T4694] kworker/u4:16: attempt to access beyond end of device [ 678.978647][ T4694] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 679.006347][ T9343] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 679.067576][ T9343] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 679.372385][ T4694] buffer_io_error: 3 callbacks suppressed [ 679.372486][ T4694] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 679.804943][ T4694] kworker/u4:16: attempt to access beyond end of device [ 679.804943][ T4694] loop3: rw=1, sector=76, nr_sectors = 371 limit=64 [ 680.279435][ T9355] loop1: detected capacity change from 0 to 2048 [ 680.498826][ T9361] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 680.511560][ T9355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 680.629163][ T9363] vivid-007: ================= START STATUS ================= [ 680.637072][ T9363] vivid-007: Enable Output Cropping: true [ 680.643073][ T9363] vivid-007: Enable Output Composing: true [ 680.649045][ T9363] vivid-007: Enable Output Scaler: true [ 680.654972][ T9363] vivid-007: Tx RGB Quantization Range: Automatic [ 680.661569][ T9363] vivid-007: Transmit Mode: HDMI [ 680.666749][ T9363] vivid-007: Display Present: true inactive [ 680.672861][ T9363] vivid-007: Hotplug Present: 0x00000001 [ 680.678670][ T9363] vivid-007: RxSense Present: 0x00000001 [ 680.696597][ T9363] vivid-007: EDID Present: 0x00000001 [ 680.702520][ T9363] vivid-007: ================== END STATUS ================== [ 681.415014][ T9352] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 681.479412][ T9352] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 681.542165][ T9352] EXT4-fs (loop1): This should not happen!! Data will be lost [ 681.542165][ T9352] [ 681.611991][ T9352] EXT4-fs (loop1): Total free blocks count 0 [ 681.618040][ T9352] EXT4-fs (loop1): Free/Dirty block details [ 681.717081][ T9352] EXT4-fs (loop1): free_blocks=2415919104 [ 681.738323][ T9352] EXT4-fs (loop1): dirty_blocks=16 [ 681.747890][ T9352] EXT4-fs (loop1): Block reservation details [ 681.795207][ T9352] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 682.051886][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 682.909706][ T9377] loop0: detected capacity change from 0 to 2048 [ 682.988881][ T9377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 683.061156][ T9376] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 683.141888][ T9376] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 683.168336][ T9376] EXT4-fs (loop0): This should not happen!! Data will be lost [ 683.168336][ T9376] [ 683.204361][ T9376] EXT4-fs (loop0): Total free blocks count 0 [ 683.219888][ T9376] EXT4-fs (loop0): Free/Dirty block details [ 683.238487][ T9376] EXT4-fs (loop0): free_blocks=2415919104 [ 683.251629][ T9390] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 683.258195][ T9390] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 683.279615][ T9376] EXT4-fs (loop0): dirty_blocks=16 [ 683.282945][ T9390] vhci_hcd vhci_hcd.0: Device attached [ 683.293662][ T9376] EXT4-fs (loop0): Block reservation details [ 683.307558][ T9376] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 683.599590][ T9393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 683.730469][ T4344] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 685.452234][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 685.464139][ T9393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.522075][ T9393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.668890][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.799252][ T9398] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1223'. [ 686.345083][ T9391] vhci_hcd: connection reset by peer [ 686.465962][ T4386] vhci_hcd: stop threads [ 686.470457][ T4386] vhci_hcd: release socket [ 686.522670][ T4386] vhci_hcd: disconnect device [ 686.554459][ T9406] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 686.681946][ T9407] vivid-007: ================= START STATUS ================= [ 686.689763][ T9407] vivid-007: Enable Output Cropping: true [ 686.696309][ T9407] vivid-007: Enable Output Composing: true [ 686.702580][ T9407] vivid-007: Enable Output Scaler: true [ 686.708374][ T9407] vivid-007: Tx RGB Quantization Range: Automatic [ 686.715059][ T9407] vivid-007: Transmit Mode: HDMI [ 686.720228][ T9407] vivid-007: Display Present: true inactive [ 686.726450][ T9407] vivid-007: Hotplug Present: 0x00000001 [ 686.747112][ T9407] vivid-007: RxSense Present: 0x00000001 [ 686.753902][ T9407] vivid-007: EDID Present: 0x00000001 [ 686.759725][ T9407] vivid-007: ================== END STATUS ================== [ 687.461514][ T9410] loop5: detected capacity change from 0 to 2048 [ 688.638478][ T9410] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 688.683896][ T9409] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 688.854323][ T9409] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 688.926845][ T9424] loop0: detected capacity change from 0 to 64 [ 689.021933][ T9409] EXT4-fs (loop5): This should not happen!! Data will be lost [ 689.021933][ T9409] [ 689.127940][ T9409] EXT4-fs (loop5): Total free blocks count 0 [ 689.197249][ T4501] kworker/u4:12: attempt to access beyond end of device [ 689.197249][ T4501] loop0: rw=1, sector=64, nr_sectors = 1 limit=64 [ 689.218501][ T4501] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 689.242361][ T4501] kworker/u4:12: attempt to access beyond end of device [ 689.242361][ T4501] loop0: rw=1, sector=65, nr_sectors = 1 limit=64 [ 689.266464][ T9409] EXT4-fs (loop5): Free/Dirty block details [ 689.267374][ T4501] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 689.299149][ T4501] kworker/u4:12: attempt to access beyond end of device [ 689.299149][ T4501] loop0: rw=1, sector=66, nr_sectors = 1 limit=64 [ 689.320455][ T4501] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 689.344252][ T4501] kworker/u4:12: attempt to access beyond end of device [ 689.344252][ T4501] loop0: rw=1, sector=67, nr_sectors = 1 limit=64 [ 689.375939][ T4501] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 689.396142][ T4501] kworker/u4:12: attempt to access beyond end of device [ 689.396142][ T4501] loop0: rw=1, sector=68, nr_sectors = 1 limit=64 [ 689.438167][ T4501] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 689.479205][ T4501] kworker/u4:12: attempt to access beyond end of device [ 689.479205][ T4501] loop0: rw=1, sector=72, nr_sectors = 1 limit=64 [ 689.541045][ T4501] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 689.569688][ T9409] EXT4-fs (loop5): free_blocks=2415919104 [ 689.599301][ T4501] kworker/u4:12: attempt to access beyond end of device [ 689.599301][ T4501] loop0: rw=1, sector=73, nr_sectors = 1 limit=64 [ 689.645316][ T4501] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 689.664468][ T9409] EXT4-fs (loop5): dirty_blocks=16 [ 689.676376][ T9409] EXT4-fs (loop5): Block reservation details [ 689.701589][ T4501] kworker/u4:12: attempt to access beyond end of device [ 689.701589][ T4501] loop0: rw=1, sector=76, nr_sectors = 371 limit=64 [ 689.731892][ T9409] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 690.428978][ T6390] EXT4-fs (loop5): unmounting filesystem. [ 690.461965][ T4344] vhci_hcd: vhci_device speed not set [ 691.167690][ T9441] loop3: detected capacity change from 0 to 2048 [ 691.743047][ T9441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 691.922843][ T9452] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 691.957222][ T9452] loop1: detected capacity change from 0 to 512 [ 692.029332][ T9438] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 692.055254][ T9452] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 692.097012][ T9438] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 692.260216][ T9452] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 692.269483][ T9438] EXT4-fs (loop3): This should not happen!! Data will be lost [ 692.269483][ T9438] [ 692.299909][ T9438] EXT4-fs (loop3): Total free blocks count 0 [ 692.311908][ T9438] EXT4-fs (loop3): Free/Dirty block details [ 693.374065][ T9438] EXT4-fs (loop3): free_blocks=2415919104 [ 693.411658][ T9438] EXT4-fs (loop3): dirty_blocks=16 [ 693.482127][ T9438] EXT4-fs (loop3): Block reservation details [ 693.521231][ T9438] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 693.568738][ T9468] loop4: detected capacity change from 0 to 64 [ 693.947729][ T4967] kworker/u4:18: attempt to access beyond end of device [ 693.947729][ T4967] loop4: rw=1, sector=64, nr_sectors = 1 limit=64 [ 693.963779][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 693.997652][ T4967] Buffer I/O error on dev loop4, logical block 64, lost async page write [ 694.017539][ T4967] kworker/u4:18: attempt to access beyond end of device [ 694.017539][ T4967] loop4: rw=1, sector=65, nr_sectors = 1 limit=64 [ 694.110975][ T4967] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 694.180815][ T4967] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 694.212014][ T4967] bio_check_eod: 1 callbacks suppressed [ 694.212033][ T4967] kworker/u4:18: attempt to access beyond end of device [ 694.212033][ T4967] loop4: rw=1, sector=67, nr_sectors = 1 limit=64 [ 694.231942][ T4967] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 694.240711][ T4967] kworker/u4:18: attempt to access beyond end of device [ 694.240711][ T4967] loop4: rw=1, sector=68, nr_sectors = 1 limit=64 [ 694.261891][ T4967] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 694.283547][ T4967] kworker/u4:18: attempt to access beyond end of device [ 694.283547][ T4967] loop4: rw=1, sector=72, nr_sectors = 1 limit=64 [ 694.298571][ T4967] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 694.311796][ T4967] kworker/u4:18: attempt to access beyond end of device [ 694.311796][ T4967] loop4: rw=1, sector=73, nr_sectors = 1 limit=64 [ 694.328503][ T4967] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 694.338513][ T4967] kworker/u4:18: attempt to access beyond end of device [ 694.338513][ T4967] loop4: rw=1, sector=76, nr_sectors = 371 limit=64 [ 694.576209][ T9480] loop4: detected capacity change from 0 to 2048 [ 694.591850][ T4944] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 694.671889][ T9480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 694.771192][ T9479] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 694.787253][ T9479] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 694.801969][ T4944] usb 4-1: Using ep0 maxpacket: 8 [ 694.813372][ T9479] EXT4-fs (loop4): This should not happen!! Data will be lost [ 694.813372][ T9479] [ 694.826591][ T4944] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 694.834796][ T9479] EXT4-fs (loop4): Total free blocks count 0 [ 694.860037][ T9479] EXT4-fs (loop4): Free/Dirty block details [ 694.873277][ T9479] EXT4-fs (loop4): free_blocks=2415919104 [ 694.882929][ T9479] EXT4-fs (loop4): dirty_blocks=16 [ 694.889511][ T9479] EXT4-fs (loop4): Block reservation details [ 694.899462][ T9479] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 694.936817][ T4944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.961823][ T4944] usb 4-1: Product: syz [ 694.967101][ T4944] usb 4-1: Manufacturer: syz [ 694.980414][ T4944] usb 4-1: SerialNumber: syz [ 694.998042][ T4944] usb 4-1: config 0 descriptor?? [ 695.073959][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 695.215559][ T4944] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 695.425897][ T4944] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 695.761072][ T9490] loop4: detected capacity change from 0 to 32768 [ 695.768399][ T9490] XFS: ikeep mount option is deprecated. [ 695.853771][ T9490] XFS (loop4): Mounting V5 Filesystem [ 696.030204][ T9490] XFS (loop4): Ending clean mount [ 696.038432][ T9490] XFS (loop4): Quotacheck needed: Please wait. [ 696.103152][ T9490] XFS (loop4): Quotacheck: Done. [ 696.792149][ T4271] XFS (loop4): Unmounting Filesystem [ 697.370547][ T26] usb 4-1: USB disconnect, device number 3 [ 697.884480][ T9517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 698.123864][ T9519] loop3: detected capacity change from 0 to 512 [ 698.623287][ T9519] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 699.026972][ T9517] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 699.737154][ T9526] loop0: detected capacity change from 0 to 64 [ 699.897008][ T9533] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1257'. [ 699.920711][ T4654] kworker/u4:15: attempt to access beyond end of device [ 699.920711][ T4654] loop0: rw=1, sector=64, nr_sectors = 1 limit=64 [ 699.959624][ T4654] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 699.994842][ T4654] kworker/u4:15: attempt to access beyond end of device [ 699.994842][ T4654] loop0: rw=1, sector=65, nr_sectors = 1 limit=64 [ 700.025125][ T4654] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 700.109151][ T4654] kworker/u4:15: attempt to access beyond end of device [ 700.109151][ T4654] loop0: rw=1, sector=66, nr_sectors = 1 limit=64 [ 700.148227][ T4654] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 700.249329][ T9538] loop5: detected capacity change from 0 to 2048 [ 700.452905][ T9542] loop4: detected capacity change from 0 to 32768 [ 700.460022][ T9542] XFS: ikeep mount option is deprecated. [ 700.486903][ T4654] kworker/u4:15: attempt to access beyond end of device [ 700.486903][ T4654] loop0: rw=1, sector=67, nr_sectors = 1 limit=64 [ 700.645633][ T4654] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 700.660030][ T4654] kworker/u4:15: attempt to access beyond end of device [ 700.660030][ T4654] loop0: rw=1, sector=68, nr_sectors = 1 limit=64 [ 700.675635][ T4654] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 700.685152][ T4654] kworker/u4:15: attempt to access beyond end of device [ 700.685152][ T4654] loop0: rw=1, sector=72, nr_sectors = 1 limit=64 [ 700.713910][ T4654] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 700.734453][ T9538] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 700.737517][ T9542] XFS (loop4): Mounting V5 Filesystem [ 700.754502][ T4654] kworker/u4:15: attempt to access beyond end of device [ 700.754502][ T4654] loop0: rw=1, sector=73, nr_sectors = 1 limit=64 [ 700.769135][ T4654] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 700.782236][ T4654] kworker/u4:15: attempt to access beyond end of device [ 700.782236][ T4654] loop0: rw=1, sector=76, nr_sectors = 371 limit=64 [ 700.826592][ T9537] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 700.882995][ T9537] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 700.932505][ T9537] EXT4-fs (loop5): This should not happen!! Data will be lost [ 700.932505][ T9537] [ 700.949270][ T9542] XFS (loop4): Ending clean mount [ 700.985449][ T9542] XFS (loop4): Quotacheck needed: Please wait. [ 701.082513][ T9537] EXT4-fs (loop5): Total free blocks count 0 [ 701.108909][ T9537] EXT4-fs (loop5): Free/Dirty block details [ 701.118517][ T9542] XFS (loop4): Quotacheck: Done. [ 701.129077][ T9537] EXT4-fs (loop5): free_blocks=2415919104 [ 701.447642][ T9537] EXT4-fs (loop5): dirty_blocks=16 [ 701.464446][ T9537] EXT4-fs (loop5): Block reservation details [ 701.537968][ T9537] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 701.708701][ T4271] XFS (loop4): Unmounting Filesystem [ 701.738223][ T6390] EXT4-fs (loop5): unmounting filesystem. [ 704.430612][ T9582] loop3: detected capacity change from 0 to 64 [ 704.597486][ T4501] kworker/u4:12: attempt to access beyond end of device [ 704.597486][ T4501] loop3: rw=1, sector=64, nr_sectors = 1 limit=64 [ 704.640534][ T4501] Buffer I/O error on dev loop3, logical block 64, lost async page write [ 704.700098][ T4501] kworker/u4:12: attempt to access beyond end of device [ 704.700098][ T4501] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 704.761762][ T4501] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 704.770300][ T4501] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 705.168556][ T9588] loop4: detected capacity change from 0 to 256 [ 705.307262][ T9588] exfat: Deprecated parameter 'namecase' [ 705.372297][ T9588] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 706.032405][ T9600] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 706.140638][ T9604] loop1: detected capacity change from 0 to 512 [ 706.392992][ T9608] loop5: detected capacity change from 0 to 32768 [ 706.410386][ T9608] XFS: ikeep mount option is deprecated. [ 706.437663][ T9604] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 706.480837][ T9600] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 708.671222][ T9608] XFS (loop5): Mounting V5 Filesystem [ 708.897675][ T9608] XFS (loop5): Ending clean mount [ 708.911153][ T9608] XFS (loop5): Quotacheck needed: Please wait. [ 709.094613][ T9608] XFS (loop5): Quotacheck: Done. [ 710.843710][ T6390] XFS (loop5): Unmounting Filesystem [ 715.310262][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1285'. [ 716.874751][ T9684] dummy0 speed is unknown, defaulting to 1000 [ 716.881354][ T9684] dummy0 speed is unknown, defaulting to 1000 [ 717.031792][ T9684] dummy0 speed is unknown, defaulting to 1000 [ 717.135477][ T9684] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 717.340990][ T9686] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1291'. [ 717.723698][ T9684] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 718.519299][ T9684] dummy0 speed is unknown, defaulting to 1000 [ 718.551657][ T9684] dummy0 speed is unknown, defaulting to 1000 [ 718.589871][ T9684] dummy0 speed is unknown, defaulting to 1000 [ 718.631506][ T9684] dummy0 speed is unknown, defaulting to 1000 [ 718.651653][ T9684] dummy0 speed is unknown, defaulting to 1000 [ 719.082264][ T9702] dummy0 speed is unknown, defaulting to 1000 [ 725.810934][ T9769] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 725.817530][ T9769] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 725.884537][ T9769] vhci_hcd vhci_hcd.0: Device attached [ 726.054693][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 726.064661][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 726.073006][ T9772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 726.143424][ T9772] team0: Unable to change to the same mode the team is in [ 726.177388][ T4344] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 726.318400][ T9770] vhci_hcd: connection reset by peer [ 726.338385][ T4501] vhci_hcd: stop threads [ 726.342780][ T4501] vhci_hcd: release socket [ 726.367419][ T4501] vhci_hcd: disconnect device [ 726.387276][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 729.128616][ T9793] loop3: detected capacity change from 0 to 256 [ 729.135547][ T9793] exfat: Deprecated parameter 'namecase' [ 729.149535][ T9793] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 730.914698][ T9807] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 730.998296][ T9807] vivid-007: ================= START STATUS ================= [ 731.006076][ T9807] vivid-007: Enable Output Cropping: true [ 731.011864][ T9807] vivid-007: Enable Output Composing: true [ 731.017730][ T9807] vivid-007: Enable Output Scaler: true [ 731.023394][ T9807] vivid-007: Tx RGB Quantization Range: Automatic [ 731.029847][ T9807] vivid-007: Transmit Mode: HDMI [ 731.034962][ T9807] vivid-007: Display Present: true inactive [ 731.040868][ T9807] vivid-007: Hotplug Present: 0x00000001 [ 731.046541][ T9807] vivid-007: RxSense Present: 0x00000001 [ 731.052268][ T9807] vivid-007: EDID Present: 0x00000001 [ 731.057657][ T9807] vivid-007: ================== END STATUS ================== [ 731.407302][ T4344] vhci_hcd: vhci_device speed not set [ 734.957247][ T9834] loop4: detected capacity change from 0 to 256 [ 735.497601][ T9838] loop4: detected capacity change from 0 to 256 [ 735.504951][ T9838] exfat: Deprecated parameter 'namecase' [ 735.528944][ T9838] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 737.208010][ T9858] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 737.332511][ T9861] vivid-007: ================= START STATUS ================= [ 737.341449][ T9861] vivid-007: Enable Output Cropping: true [ 737.347491][ T9861] vivid-007: Enable Output Composing: true [ 737.353535][ T9861] vivid-007: Enable Output Scaler: true [ 737.359279][ T9861] vivid-007: Tx RGB Quantization Range: Automatic [ 737.366086][ T9861] vivid-007: Transmit Mode: HDMI [ 737.371191][ T9861] vivid-007: Display Present: true inactive [ 737.377343][ T9861] vivid-007: Hotplug Present: 0x00000001 [ 737.399921][ T9861] vivid-007: RxSense Present: 0x00000001 [ 737.405932][ T9861] vivid-007: EDID Present: 0x00000001 [ 737.411632][ T9861] vivid-007: ================== END STATUS ================== [ 738.575370][ T9867] loop1: detected capacity change from 0 to 256 [ 740.625528][ T9882] loop4: detected capacity change from 0 to 256 [ 740.632487][ T9882] exfat: Deprecated parameter 'namecase' [ 740.647120][ T9882] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 740.851911][ T4344] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 741.061792][ T4344] usb 1-1: Using ep0 maxpacket: 8 [ 741.150531][ T4344] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 741.261727][ T9887] loop4: detected capacity change from 0 to 32768 [ 741.269096][ T9887] XFS: ikeep mount option is deprecated. [ 741.307121][ T9887] XFS (loop4): Mounting V5 Filesystem [ 741.847492][ T9887] XFS (loop4): Ending clean mount [ 741.857289][ T9887] XFS (loop4): Quotacheck needed: Please wait. [ 741.980803][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.989438][ T4344] usb 1-1: Product: syz [ 741.993710][ T4344] usb 1-1: Manufacturer: syz [ 741.998342][ T4344] usb 1-1: SerialNumber: syz [ 742.005598][ T4344] usb 1-1: config 0 descriptor?? [ 742.063257][ T9887] XFS (loop4): Quotacheck: Done. [ 742.423597][ T4344] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 742.881972][ T4344] usb write operation failed. (-71) [ 743.517044][ T4344] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 743.617635][ T4271] XFS (loop4): Unmounting Filesystem [ 743.702182][ T4344] dvbdev: DVB: registering new adapter (Terratec H7) [ 743.708946][ T4344] usb 1-1: media controller created [ 743.732048][ T4344] usb read operation failed. (-71) [ 743.741927][ T4344] usb write operation failed. (-71) [ 743.751377][ T4344] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 743.769958][ T4344] usb 1-1: USB disconnect, device number 6 [ 743.996655][ T9919] loop0: detected capacity change from 0 to 256 [ 744.244874][ T9922] loop5: detected capacity change from 0 to 256 [ 744.251951][ T9922] exfat: Deprecated parameter 'namecase' [ 744.263732][ T9922] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 744.839644][ T9928] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1360'. [ 745.721369][ T9930] loop5: detected capacity change from 0 to 64 [ 745.837783][ T4493] bio_check_eod: 6 callbacks suppressed [ 745.837796][ T4493] kworker/u4:11: attempt to access beyond end of device [ 745.837796][ T4493] loop5: rw=1, sector=64, nr_sectors = 1 limit=64 [ 745.859108][ T9932] loop4: detected capacity change from 0 to 2048 [ 745.914252][ T4493] buffer_io_error: 4 callbacks suppressed [ 745.914267][ T4493] Buffer I/O error on dev loop5, logical block 64, lost async page write [ 745.949331][ T4493] kworker/u4:11: attempt to access beyond end of device [ 745.949331][ T4493] loop5: rw=1, sector=65, nr_sectors = 1 limit=64 [ 745.963061][ T4493] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 745.971550][ T4493] kworker/u4:11: attempt to access beyond end of device [ 745.971550][ T4493] loop5: rw=1, sector=66, nr_sectors = 1 limit=64 [ 745.982906][ T9932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 745.985467][ T4493] Buffer I/O error on dev loop5, logical block 66, lost async page write [ 746.002797][ T4493] kworker/u4:11: attempt to access beyond end of device [ 746.002797][ T4493] loop5: rw=1, sector=67, nr_sectors = 1 limit=64 [ 746.016764][ T4493] Buffer I/O error on dev loop5, logical block 67, lost async page write [ 746.025540][ T4493] kworker/u4:11: attempt to access beyond end of device [ 746.025540][ T4493] loop5: rw=1, sector=68, nr_sectors = 1 limit=64 [ 746.039746][ T4493] Buffer I/O error on dev loop5, logical block 68, lost async page write [ 746.048490][ T4493] kworker/u4:11: attempt to access beyond end of device [ 746.048490][ T4493] loop5: rw=1, sector=72, nr_sectors = 1 limit=64 [ 746.062134][ T4493] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 746.070817][ T4493] kworker/u4:11: attempt to access beyond end of device [ 746.070817][ T4493] loop5: rw=1, sector=73, nr_sectors = 1 limit=64 [ 746.087456][ T4493] Buffer I/O error on dev loop5, logical block 73, lost async page write [ 746.097132][ T4493] kworker/u4:11: attempt to access beyond end of device [ 746.097132][ T4493] loop5: rw=1, sector=76, nr_sectors = 371 limit=64 [ 746.135255][ T9931] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 746.201890][ T9931] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 746.259247][ T9931] EXT4-fs (loop4): This should not happen!! Data will be lost [ 746.259247][ T9931] [ 746.301095][ T9931] EXT4-fs (loop4): Total free blocks count 0 [ 746.329528][ T9931] EXT4-fs (loop4): Free/Dirty block details [ 746.686728][ T9931] EXT4-fs (loop4): free_blocks=2415919104 [ 746.975451][ T9944] loop3: detected capacity change from 0 to 32768 [ 746.982623][ T9944] XFS: ikeep mount option is deprecated. [ 746.989093][ T9931] EXT4-fs (loop4): dirty_blocks=16 [ 747.048478][ T9931] EXT4-fs (loop4): Block reservation details [ 747.067255][ T9931] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 747.099745][ T9944] XFS (loop3): Mounting V5 Filesystem [ 747.107319][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.199403][ T9944] XFS (loop3): Ending clean mount [ 747.209793][ T9944] XFS (loop3): Quotacheck needed: Please wait. [ 747.231225][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 747.351196][ T9944] XFS (loop3): Quotacheck: Done. [ 748.236867][ T4268] XFS (loop3): Unmounting Filesystem [ 748.583189][ T9969] loop4: detected capacity change from 0 to 256 [ 750.788217][ T9982] loop3: detected capacity change from 0 to 64 [ 750.800376][ T9983] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 751.246916][ T4438] kworker/u4:10: attempt to access beyond end of device [ 751.246916][ T4438] loop3: rw=1, sector=64, nr_sectors = 1 limit=64 [ 751.323928][ T4438] Buffer I/O error on dev loop3, logical block 64, lost async page write [ 751.361820][ T4438] kworker/u4:10: attempt to access beyond end of device [ 751.361820][ T4438] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 751.393299][ T4438] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 751.412519][ T4438] kworker/u4:10: attempt to access beyond end of device [ 751.412519][ T4438] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 751.434560][ T9970] loop0: detected capacity change from 0 to 32768 [ 751.467421][ T4438] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 751.698707][ T4438] kworker/u4:10: attempt to access beyond end of device [ 751.698707][ T4438] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 751.775837][ T4438] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 751.788931][ T9990] loop4: detected capacity change from 0 to 32768 [ 751.796821][ T9990] XFS: ikeep mount option is deprecated. [ 751.804393][ T4438] kworker/u4:10: attempt to access beyond end of device [ 751.804393][ T4438] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 751.817681][ T4438] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 751.826280][ T4438] kworker/u4:10: attempt to access beyond end of device [ 751.826280][ T4438] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 751.875582][ T4438] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 751.885604][ T4438] kworker/u4:10: attempt to access beyond end of device [ 751.885604][ T4438] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 751.910093][ T4438] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 751.915617][ T9990] XFS (loop4): Mounting V5 Filesystem [ 751.921998][ T4438] kworker/u4:10: attempt to access beyond end of device [ 751.921998][ T4438] loop3: rw=1, sector=76, nr_sectors = 371 limit=64 [ 752.082517][ T9990] XFS (loop4): Ending clean mount [ 752.089724][ T9990] XFS (loop4): Quotacheck needed: Please wait. [ 752.194050][ T9990] XFS (loop4): Quotacheck: Done. [ 753.295493][ T4271] XFS (loop4): Unmounting Filesystem [ 753.781924][ T4331] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 754.001883][ T4331] usb 2-1: Using ep0 maxpacket: 8 [ 754.030863][ T4331] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 754.040804][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.049099][ T4331] usb 2-1: Product: syz [ 754.054118][ T4331] usb 2-1: Manufacturer: syz [ 754.058841][ T4331] usb 2-1: SerialNumber: syz [ 754.081798][ T4331] usb 2-1: config 0 descriptor?? [ 754.607438][ T4331] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 755.065763][ T4331] usb write operation failed. (-71) [ 755.078490][ T4331] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 755.349097][T10026] loop4: detected capacity change from 0 to 40427 [ 755.357546][ T4331] dvbdev: DVB: registering new adapter (Terratec H7) [ 755.364692][ T4331] usb 2-1: media controller created [ 755.379556][ T4331] usb read operation failed. (-71) [ 755.388747][ T4331] usb write operation failed. (-71) [ 755.397418][T10026] F2FS-fs (loop4): invalid crc value [ 755.413146][ T4331] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 755.423459][ T4331] usb 2-1: USB disconnect, device number 7 [ 755.450720][T10026] F2FS-fs (loop4): Found nat_bits in checkpoint [ 755.494166][T10026] F2FS-fs (loop4): Start checkpoint disabled! [ 755.503395][T10026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 755.538811][ T27] audit: type=1804 audit(1752203226.183:52): pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1383" name="/newroot/290/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 755.621176][ T27] audit: type=1804 audit(1752203226.263:53): pid=10029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1383" name="/newroot/290/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 755.782683][T10031] loop1: detected capacity change from 0 to 64 [ 755.899004][ T29] kworker/u4:2: attempt to access beyond end of device [ 755.899004][ T29] loop1: rw=1, sector=64, nr_sectors = 1 limit=64 [ 755.958111][ T29] Buffer I/O error on dev loop1, logical block 64, lost async page write [ 755.987464][ T29] kworker/u4:2: attempt to access beyond end of device [ 755.987464][ T29] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 756.017443][ T29] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 756.034980][ T29] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 756.850461][T10043] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 757.035306][T10048] vivid-007: ================= START STATUS ================= [ 757.311428][T10047] loop0: detected capacity change from 0 to 32768 [ 757.318623][T10047] XFS: ikeep mount option is deprecated. [ 757.351894][T10048] vivid-007: Enable Output Cropping: true [ 757.452823][T10048] vivid-007: Enable Output Composing: true [ 757.471950][T10047] XFS (loop0): Mounting V5 Filesystem [ 757.576082][T10048] vivid-007: Enable Output Scaler: true [ 757.641904][T10048] vivid-007: Tx RGB Quantization Range: Automatic [ 758.440346][T10048] vivid-007: Transmit Mode: HDMI [ 758.478890][T10048] vivid-007: Display Present: true inactive [ 758.522110][T10048] vivid-007: Hotplug Present: 0x00000001 [ 758.527880][T10048] vivid-007: RxSense Present: 0x00000001 [ 758.557195][T10048] vivid-007: EDID Present: 0x00000001 [ 758.572664][T10048] vivid-007: ================== END STATUS ================== [ 758.612130][T10047] XFS (loop0): Ending clean mount [ 758.619215][T10047] XFS (loop0): Quotacheck needed: Please wait. [ 758.772194][T10047] XFS (loop0): Quotacheck: Done. [ 759.335771][ T4265] XFS (loop0): Unmounting Filesystem [ 759.569320][T10067] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 759.628316][T10067] loop5: detected capacity change from 0 to 512 [ 759.697525][T10067] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 759.729427][T10067] UDF-fs: error (device loop5): udf_read_inode: (ino 19) failed ident=264 [ 760.969597][T10081] loop5: detected capacity change from 0 to 64 [ 762.374837][ T4493] bio_check_eod: 7 callbacks suppressed [ 762.374854][ T4493] kworker/u4:11: attempt to access beyond end of device [ 762.374854][ T4493] loop5: rw=1, sector=64, nr_sectors = 1 limit=64 [ 762.685358][ T4493] buffer_io_error: 4 callbacks suppressed [ 762.685375][ T4493] Buffer I/O error on dev loop5, logical block 64, lost async page write [ 762.700190][ T4493] kworker/u4:11: attempt to access beyond end of device [ 762.700190][ T4493] loop5: rw=1, sector=65, nr_sectors = 1 limit=64 [ 762.715160][ T4493] Buffer I/O error on dev loop5, logical block 65, lost async page write [ 762.723719][ T4493] kworker/u4:11: attempt to access beyond end of device [ 762.723719][ T4493] loop5: rw=1, sector=66, nr_sectors = 1 limit=64 [ 762.737650][ T4493] Buffer I/O error on dev loop5, logical block 66, lost async page write [ 762.746338][ T4493] kworker/u4:11: attempt to access beyond end of device [ 762.746338][ T4493] loop5: rw=1, sector=67, nr_sectors = 1 limit=64 [ 762.759701][ T4493] Buffer I/O error on dev loop5, logical block 67, lost async page write [ 762.783129][ T4493] kworker/u4:11: attempt to access beyond end of device [ 762.783129][ T4493] loop5: rw=1, sector=68, nr_sectors = 1 limit=64 [ 762.802408][ T4493] Buffer I/O error on dev loop5, logical block 68, lost async page write [ 762.810949][ T4493] kworker/u4:11: attempt to access beyond end of device [ 762.810949][ T4493] loop5: rw=1, sector=72, nr_sectors = 1 limit=64 [ 762.832415][ T4493] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 762.946526][ T4493] kworker/u4:11: attempt to access beyond end of device [ 762.946526][ T4493] loop5: rw=1, sector=73, nr_sectors = 1 limit=64 [ 763.018389][ T4493] Buffer I/O error on dev loop5, logical block 73, lost async page write [ 763.027638][ T4493] kworker/u4:11: attempt to access beyond end of device [ 763.027638][ T4493] loop5: rw=1, sector=76, nr_sectors = 371 limit=64 [ 764.094566][T10103] loop4: detected capacity change from 0 to 32768 [ 764.101710][T10103] XFS: ikeep mount option is deprecated. [ 764.202551][T10103] XFS (loop4): Mounting V5 Filesystem [ 764.301521][T10103] XFS (loop4): Ending clean mount [ 764.309714][T10103] XFS (loop4): Quotacheck needed: Please wait. [ 764.432922][T10103] XFS (loop4): Quotacheck: Done. [ 764.922354][T10115] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 766.754523][ T4271] XFS (loop4): Unmounting Filesystem [ 773.587108][T10155] loop5: detected capacity change from 0 to 32768 [ 773.594197][T10155] XFS: ikeep mount option is deprecated. [ 773.818229][T10155] XFS (loop5): Mounting V5 Filesystem [ 773.940611][T10155] XFS (loop5): Ending clean mount [ 773.947757][T10155] XFS (loop5): Quotacheck needed: Please wait. [ 774.066587][T10140] loop0: detected capacity change from 0 to 32768 [ 774.131017][T10155] XFS (loop5): Quotacheck: Done. [ 774.362647][T10178] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1419'. [ 775.879571][ T6390] XFS (loop5): Unmounting Filesystem [ 777.988017][T10206] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 777.994624][T10206] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 778.024205][T10206] vhci_hcd vhci_hcd.0: Device attached [ 778.087161][T10212] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 778.103247][T10212] loop1: detected capacity change from 0 to 512 [ 778.187404][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 778.204074][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.212359][T10206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 778.263292][T10213] team0: Unable to change to the same mode the team is in [ 778.291896][ T7624] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 779.583730][T10212] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 779.946271][T10212] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 782.416279][T10217] loop1: detected capacity change from 0 to 2048 [ 782.473714][T10208] vhci_hcd: connection reset by peer [ 782.489237][ T4493] vhci_hcd: stop threads [ 782.495476][ T4493] vhci_hcd: release socket [ 782.555465][ T4493] vhci_hcd: disconnect device [ 782.566356][T10217] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 782.916919][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 782.920795][T10227] loop0: detected capacity change from 0 to 256 [ 782.960078][T10227] exfat: Deprecated parameter 'utf8' [ 783.016863][T10227] exfat: Deprecated parameter 'namecase' [ 783.131902][T10227] exfat: Bad value for 'gid' [ 783.231281][T10230] loop4: detected capacity change from 0 to 32768 [ 783.238605][T10230] XFS: ikeep mount option is deprecated. [ 783.819522][T10230] XFS (loop4): Mounting V5 Filesystem [ 784.004378][T10230] XFS (loop4): Ending clean mount [ 784.011389][T10230] XFS (loop4): Quotacheck needed: Please wait. [ 784.506244][T10230] XFS (loop4): Quotacheck: Done. [ 784.701978][ T7624] vhci_hcd: vhci_device speed not set [ 785.587476][ T4271] XFS (loop4): Unmounting Filesystem [ 785.726043][T10262] loop1: detected capacity change from 0 to 2048 [ 785.845037][T10262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 787.014419][T10261] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 787.029793][T10261] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 787.042364][T10261] EXT4-fs (loop1): This should not happen!! Data will be lost [ 787.042364][T10261] [ 787.052226][T10261] EXT4-fs (loop1): Total free blocks count 0 [ 787.058445][T10261] EXT4-fs (loop1): Free/Dirty block details [ 787.064485][T10261] EXT4-fs (loop1): free_blocks=2415919104 [ 787.070328][T10261] EXT4-fs (loop1): dirty_blocks=16 [ 787.075590][T10261] EXT4-fs (loop1): Block reservation details [ 787.081744][T10261] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 787.861547][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 789.018998][T10296] loop1: detected capacity change from 0 to 2048 [ 789.058455][T10298] loop5: detected capacity change from 0 to 256 [ 789.097693][T10298] exfat: Deprecated parameter 'utf8' [ 789.128614][T10298] exfat: Deprecated parameter 'namecase' [ 789.154165][T10298] exfat: Bad value for 'gid' [ 790.042771][T10296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 790.478264][T10295] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 790.494186][T10295] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 790.507039][T10295] EXT4-fs (loop1): This should not happen!! Data will be lost [ 790.507039][T10295] [ 790.517852][T10295] EXT4-fs (loop1): Total free blocks count 0 [ 790.524474][T10295] EXT4-fs (loop1): Free/Dirty block details [ 790.531420][T10295] EXT4-fs (loop1): free_blocks=2415919104 [ 790.539001][T10295] EXT4-fs (loop1): dirty_blocks=16 [ 790.544749][T10295] EXT4-fs (loop1): Block reservation details [ 790.551023][T10295] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 790.755940][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 791.937515][T10326] loop1: detected capacity change from 0 to 32768 [ 791.944918][T10326] XFS: ikeep mount option is deprecated. [ 792.111048][T10326] XFS (loop1): Mounting V5 Filesystem [ 792.356169][T10326] XFS (loop1): Ending clean mount [ 792.363798][T10326] XFS (loop1): Quotacheck needed: Please wait. [ 792.478000][T10326] XFS (loop1): Quotacheck: Done. [ 793.419650][ T4279] XFS (loop1): Unmounting Filesystem [ 793.531911][ T7624] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 793.725100][ T7624] usb 6-1: Using ep0 maxpacket: 8 [ 793.736278][ T7624] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.759494][ T7624] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 793.778972][ T7624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.799304][ T7624] usb 6-1: Product: syz [ 793.803642][ T7624] usb 6-1: Manufacturer: syz [ 793.808273][ T7624] usb 6-1: SerialNumber: syz [ 793.906757][ T7624] usb 6-1: config 0 descriptor?? [ 793.923746][ T7624] cdc_phonet: probe of 6-1:0.0 failed with error -22 [ 794.189419][ T4373] usb 6-1: USB disconnect, device number 8 [ 796.545178][T10359] loop0: detected capacity change from 0 to 256 [ 797.020689][T10359] exfat: Deprecated parameter 'utf8' [ 797.068699][T10359] exfat: Deprecated parameter 'namecase' [ 797.081944][T10359] exfat: Bad value for 'gid' [ 797.433376][T10365] loop3: detected capacity change from 0 to 2048 [ 797.490666][T10369] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 797.567249][T10369] loop1: detected capacity change from 0 to 512 [ 798.298721][T10369] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 798.318483][T10369] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 799.266493][T10365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 801.246467][T10392] loop0: detected capacity change from 0 to 2048 [ 801.255419][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 801.418743][T10392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 801.969671][T10391] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 801.985159][T10391] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 801.997620][T10391] EXT4-fs (loop0): This should not happen!! Data will be lost [ 801.997620][T10391] [ 802.007637][T10391] EXT4-fs (loop0): Total free blocks count 0 [ 802.013995][T10391] EXT4-fs (loop0): Free/Dirty block details [ 802.020348][T10391] EXT4-fs (loop0): free_blocks=2415919104 [ 802.026389][T10391] EXT4-fs (loop0): dirty_blocks=16 [ 802.031875][T10391] EXT4-fs (loop0): Block reservation details [ 802.037949][T10391] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 802.052680][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 802.388698][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 803.703965][T10422] loop4: detected capacity change from 0 to 256 [ 803.729625][T10422] exfat: Deprecated parameter 'utf8' [ 803.765432][T10422] exfat: Deprecated parameter 'namecase' [ 803.787944][T10424] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 803.791502][T10422] exfat: Bad value for 'gid' [ 803.924641][T10425] vivid-007: ================= START STATUS ================= [ 803.932501][T10425] vivid-007: Enable Output Cropping: true [ 803.938476][T10425] vivid-007: Enable Output Composing: true [ 803.944543][T10425] vivid-007: Enable Output Scaler: true [ 803.950283][T10425] vivid-007: Tx RGB Quantization Range: Automatic [ 803.956888][T10425] vivid-007: Transmit Mode: HDMI [ 803.962022][T10425] vivid-007: Display Present: true inactive [ 803.968255][T10425] vivid-007: Hotplug Present: 0x00000001 [ 803.974119][T10425] vivid-007: RxSense Present: 0x00000001 [ 804.057912][T10425] vivid-007: EDID Present: 0x00000001 [ 804.077720][T10425] vivid-007: ================== END STATUS ================== [ 806.963221][T10431] loop4: detected capacity change from 0 to 64 [ 808.455917][T10436] loop5: detected capacity change from 0 to 40427 [ 808.485487][T10438] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1479'. [ 808.544417][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.595100][T10436] F2FS-fs (loop5): invalid crc value [ 808.814528][T10436] F2FS-fs (loop5): Found nat_bits in checkpoint [ 808.904223][T10436] F2FS-fs (loop5): Start checkpoint disabled! [ 808.921894][T10436] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 808.972389][ T27] audit: type=1804 audit(1752203279.623:54): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1480" name="/newroot/175/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 809.009018][T10085] kworker/u4:23: attempt to access beyond end of device [ 809.009018][T10085] loop4: rw=1, sector=64, nr_sectors = 1 limit=64 [ 809.035298][ T27] audit: type=1804 audit(1752203279.683:55): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1480" name="/newroot/175/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 809.077548][T10085] Buffer I/O error on dev loop4, logical block 64, lost async page write [ 809.096427][T10085] kworker/u4:23: attempt to access beyond end of device [ 809.096427][T10085] loop4: rw=1, sector=65, nr_sectors = 1 limit=64 [ 809.161285][T10085] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 809.171545][T10085] kworker/u4:23: attempt to access beyond end of device [ 809.171545][T10085] loop4: rw=1, sector=66, nr_sectors = 1 limit=64 [ 809.198999][T10085] Buffer I/O error on dev loop4, logical block 66, lost async page write [ 809.231887][T10085] kworker/u4:23: attempt to access beyond end of device [ 809.231887][T10085] loop4: rw=1, sector=67, nr_sectors = 1 limit=64 [ 809.262959][T10085] Buffer I/O error on dev loop4, logical block 67, lost async page write [ 809.291946][T10085] kworker/u4:23: attempt to access beyond end of device [ 809.291946][T10085] loop4: rw=1, sector=68, nr_sectors = 1 limit=64 [ 809.310775][T10445] loop0: detected capacity change from 0 to 2048 [ 809.347293][T10085] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 809.366361][T10085] kworker/u4:23: attempt to access beyond end of device [ 809.366361][T10085] loop4: rw=1, sector=72, nr_sectors = 1 limit=64 [ 809.368178][ T4493] kworker/u4:11: attempt to access beyond end of device [ 809.368178][ T4493] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 809.412972][T10085] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 809.421511][T10085] kworker/u4:23: attempt to access beyond end of device [ 809.421511][T10085] loop4: rw=1, sector=73, nr_sectors = 1 limit=64 [ 809.462824][T10445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 809.470802][T10085] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 809.480741][T10085] kworker/u4:23: attempt to access beyond end of device [ 809.480741][T10085] loop4: rw=1, sector=76, nr_sectors = 371 limit=64 [ 810.125921][T10444] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 810.141878][T10444] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 810.154333][T10444] EXT4-fs (loop0): This should not happen!! Data will be lost [ 810.154333][T10444] [ 810.164138][T10444] EXT4-fs (loop0): Total free blocks count 0 [ 810.170205][T10444] EXT4-fs (loop0): Free/Dirty block details [ 810.176257][T10444] EXT4-fs (loop0): free_blocks=2415919104 [ 810.182219][T10444] EXT4-fs (loop0): dirty_blocks=16 [ 810.187457][T10444] EXT4-fs (loop0): Block reservation details [ 810.193518][T10444] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 812.206487][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 812.541231][T10463] loop4: detected capacity change from 0 to 32768 [ 812.549151][T10463] XFS: ikeep mount option is deprecated. [ 813.659011][T10463] XFS (loop4): Mounting V5 Filesystem [ 813.828612][T10480] loop1: detected capacity change from 0 to 256 [ 813.833444][T10463] XFS (loop4): Ending clean mount [ 813.846370][T10463] XFS (loop4): Quotacheck needed: Please wait. [ 813.892558][T10480] exfat: Deprecated parameter 'namecase' [ 813.937695][T10480] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 813.950489][T10463] XFS (loop4): Quotacheck: Done. [ 814.476011][T10492] 9pnet_fd: Insufficient options for proto=fd [ 814.512002][ T4271] XFS (loop4): Unmounting Filesystem [ 814.805117][T10488] block nbd5: shutting down sockets [ 814.862641][T10492] sp0: Synchronizing with TNC [ 814.910732][T10492] [U] è [ 822.117313][T10533] loop0: detected capacity change from 0 to 256 [ 822.125640][T10533] exfat: Deprecated parameter 'namecase' [ 822.156350][T10533] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 823.836677][T10550] loop4: detected capacity change from 0 to 2048 [ 824.003323][T10559] siw: device registration error -23 [ 824.010313][T10550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 825.602048][T10548] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 825.618036][T10548] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 825.630619][T10548] EXT4-fs (loop4): This should not happen!! Data will be lost [ 825.630619][T10548] [ 825.640473][T10548] EXT4-fs (loop4): Total free blocks count 0 [ 825.646588][T10548] EXT4-fs (loop4): Free/Dirty block details [ 825.652590][T10548] EXT4-fs (loop4): free_blocks=2415919104 [ 825.658389][T10548] EXT4-fs (loop4): dirty_blocks=16 [ 825.663658][T10548] EXT4-fs (loop4): Block reservation details [ 825.669814][T10548] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 825.919432][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 825.957510][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 826.811841][T10578] loop3: detected capacity change from 0 to 256 [ 826.818672][T10578] exfat: Deprecated parameter 'namecase' [ 826.840701][T10578] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 827.428399][T10584] dummy0 speed is unknown, defaulting to 1000 [ 830.317658][T10610] loop0: detected capacity change from 0 to 2048 [ 830.484410][T10610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 831.110034][T10609] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 831.125651][T10609] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 831.138787][T10609] EXT4-fs (loop0): This should not happen!! Data will be lost [ 831.138787][T10609] [ 831.148765][T10609] EXT4-fs (loop0): Total free blocks count 0 [ 831.154898][T10609] EXT4-fs (loop0): Free/Dirty block details [ 831.160866][T10609] EXT4-fs (loop0): free_blocks=2415919104 [ 831.166757][T10609] EXT4-fs (loop0): dirty_blocks=16 [ 831.172097][T10609] EXT4-fs (loop0): Block reservation details [ 831.178199][T10609] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 831.886663][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 832.120983][T10630] loop3: detected capacity change from 0 to 256 [ 832.138164][T10630] exfat: Deprecated parameter 'namecase' [ 832.733078][T10630] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 833.760333][T10646] device vlan2 entered promiscuous mode [ 833.766142][T10646] device netdevsim0 entered promiscuous mode [ 833.811902][ T4390] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 834.091810][ T4390] usb 4-1: Using ep0 maxpacket: 16 [ 834.105751][ T4390] usb 4-1: config 3 has an invalid interface number: 71 but max is 0 [ 834.138561][ T4390] usb 4-1: config 3 has no interface number 0 [ 834.161071][ T4390] usb 4-1: config 3 interface 71 has no altsetting 0 [ 834.184674][T10648] dummy0 speed is unknown, defaulting to 1000 [ 834.186387][ T4390] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 834.391751][ T4390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.411773][ T4390] usb 4-1: Product: syz [ 834.416016][ T4390] usb 4-1: Manufacturer: syz [ 834.420927][ T4390] usb 4-1: SerialNumber: syz [ 835.970459][ T4390] go7007 4-1:3.71: Sensoray 2250 found [ 835.976349][ T4390] go7007: probe of 4-1:3.71 failed with error -12 [ 835.986227][ T4390] usb 4-1: USB disconnect, device number 4 [ 838.436445][T10673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 838.451583][T10668] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 838.458181][T10668] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 838.500237][T10668] vhci_hcd vhci_hcd.0: Device attached [ 838.520753][T10673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.529834][T10673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.774911][T10677] loop3: detected capacity change from 0 to 64 [ 838.842115][ T4373] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 839.513578][T10668] team0: Unable to change to the same mode the team is in [ 840.268145][T10682] loop1: detected capacity change from 0 to 256 [ 840.280150][T10682] exfat: Deprecated parameter 'namecase' [ 842.547714][T10671] vhci_hcd: connection reset by peer [ 842.707137][ T4552] vhci_hcd: stop threads [ 842.711495][ T4552] vhci_hcd: release socket [ 842.764924][T10682] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 843.012361][ T4552] vhci_hcd: disconnect device [ 843.186346][ T4734] kworker/u4:17: attempt to access beyond end of device [ 843.186346][ T4734] loop3: rw=1, sector=64, nr_sectors = 1 limit=64 [ 843.292852][ T4734] Buffer I/O error on dev loop3, logical block 64, lost async page write [ 843.401050][ T4734] kworker/u4:17: attempt to access beyond end of device [ 843.401050][ T4734] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 843.455245][ T4734] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 843.489197][ T4734] kworker/u4:17: attempt to access beyond end of device [ 843.489197][ T4734] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 843.839312][ T4734] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 843.926851][ T4734] kworker/u4:17: attempt to access beyond end of device [ 843.926851][ T4734] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 844.009189][ T4734] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 844.017917][ T4734] kworker/u4:17: attempt to access beyond end of device [ 844.017917][ T4734] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 844.031965][ T4734] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 844.041160][ T4734] kworker/u4:17: attempt to access beyond end of device [ 844.041160][ T4734] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 844.061363][ T4734] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 844.082364][ T4373] vhci_hcd: vhci_device speed not set [ 844.120633][T10694] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 844.346067][T10696] vivid-007: ================= START STATUS ================= [ 844.353983][T10696] vivid-007: Enable Output Cropping: true [ 844.360678][T10696] vivid-007: Enable Output Composing: true [ 844.366783][T10696] vivid-007: Enable Output Scaler: true [ 844.372581][T10696] vivid-007: Tx RGB Quantization Range: Automatic [ 844.379154][T10696] vivid-007: Transmit Mode: HDMI [ 844.385476][T10696] vivid-007: Display Present: true inactive [ 844.391907][T10696] vivid-007: Hotplug Present: 0x00000001 [ 844.486706][T10696] vivid-007: RxSense Present: 0x00000001 [ 844.507142][T10696] vivid-007: EDID Present: 0x00000001 [ 844.512951][T10696] vivid-007: ================== END STATUS ================== [ 845.832986][ T4734] kworker/u4:17: attempt to access beyond end of device [ 845.832986][ T4734] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 846.047188][ T4734] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 846.226061][ T4734] kworker/u4:17: attempt to access beyond end of device [ 846.226061][ T4734] loop3: rw=1, sector=76, nr_sectors = 371 limit=64 [ 847.423383][T10702] loop3: detected capacity change from 0 to 2048 [ 848.832778][T10702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 849.212510][T10701] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 849.227851][T10701] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 849.240293][T10701] EXT4-fs (loop3): This should not happen!! Data will be lost [ 849.240293][T10701] [ 849.250216][T10701] EXT4-fs (loop3): Total free blocks count 0 [ 849.256428][T10701] EXT4-fs (loop3): Free/Dirty block details [ 849.263143][T10701] EXT4-fs (loop3): free_blocks=2415919104 [ 849.269094][T10701] EXT4-fs (loop3): dirty_blocks=16 [ 849.274536][T10701] EXT4-fs (loop3): Block reservation details [ 849.280584][T10701] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 849.633601][T10724] loop4: detected capacity change from 0 to 40427 [ 849.658900][T10724] F2FS-fs (loop4): invalid crc value [ 849.852977][T10724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 849.883323][T10724] F2FS-fs (loop4): Start checkpoint disabled! [ 849.891836][T10724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 849.985066][ T27] audit: type=1804 audit(1752203320.633:56): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1554" name="/newroot/320/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 850.037088][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 850.060762][ T27] audit: type=1804 audit(1752203320.703:57): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1554" name="/newroot/320/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 850.553491][ T4386] kworker/u4:8: attempt to access beyond end of device [ 850.553491][ T4386] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 851.330612][ T4373] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 851.615306][ T4373] usb 2-1: Using ep0 maxpacket: 32 [ 851.627632][ T4373] usb 2-1: unable to get BOS descriptor or descriptor too short [ 851.807293][ T4373] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 852.604857][ T4373] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.718074][ T4373] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 852.740070][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.752725][ T4373] usb 2-1: Product: syz [ 852.761406][ T4373] usb 2-1: Manufacturer: syz [ 852.782182][ T4373] usb 2-1: SerialNumber: syz [ 853.018694][T10744] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 853.025280][T10744] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 853.822150][T10744] vhci_hcd vhci_hcd.0: Device attached [ 853.842569][T10765] vhci_hcd: connection closed [ 853.844242][ T56] vhci_hcd: stop threads [ 853.855291][T10769] loop4: detected capacity change from 0 to 2048 [ 853.869758][ T4373] usb 2-1: 0:2 : does not exist [ 853.891383][ T56] vhci_hcd: release socket [ 853.907301][ T56] vhci_hcd: disconnect device [ 853.912622][ T4373] usb 2-1: USB disconnect, device number 8 [ 854.864050][T10769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 855.437657][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.560701][ T27] audit: type=1800 audit(1752203326.203:58): pid=10777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1567" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 855.860425][T10784] loop3: detected capacity change from 0 to 40427 [ 855.924006][T10784] F2FS-fs (loop3): invalid crc value [ 855.961054][T10784] F2FS-fs (loop3): Found nat_bits in checkpoint [ 855.967701][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 856.007147][T10784] F2FS-fs (loop3): Start checkpoint disabled! [ 856.078722][T10784] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 856.137197][ T27] audit: type=1804 audit(1752203326.783:59): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1569" name="/newroot/309/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 857.102100][ T27] audit: type=1804 audit(1752203326.863:60): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1569" name="/newroot/309/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 857.422269][ T4346] kworker/u4:5: attempt to access beyond end of device [ 857.422269][ T4346] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 857.714092][T10799] loop0: detected capacity change from 0 to 256 [ 857.723512][T10799] exfat: Deprecated parameter 'namecase' [ 857.750248][T10799] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 861.479422][T10827] loop0: detected capacity change from 0 to 2048 [ 861.600514][T10827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 862.710761][T10826] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 862.726093][T10826] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 862.738646][T10826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 862.738646][T10826] [ 862.748457][T10826] EXT4-fs (loop0): Total free blocks count 0 [ 862.754597][T10826] EXT4-fs (loop0): Free/Dirty block details [ 862.760558][T10826] EXT4-fs (loop0): free_blocks=2415919104 [ 862.766439][T10826] EXT4-fs (loop0): dirty_blocks=16 [ 862.771831][T10826] EXT4-fs (loop0): Block reservation details [ 862.778719][T10826] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 863.118678][T10835] loop4: detected capacity change from 0 to 40427 [ 863.153648][T10835] F2FS-fs (loop4): invalid crc value [ 863.166508][T10835] F2FS-fs (loop4): Found nat_bits in checkpoint [ 863.197740][T10835] F2FS-fs (loop4): Start checkpoint disabled! [ 863.218916][T10835] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 863.258921][ T27] audit: type=1804 audit(1752203333.903:61): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1582" name="/newroot/328/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 863.291788][T10839] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 863.292263][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 863.422641][T10840] vivid-007: ================= START STATUS ================= [ 863.430385][T10840] vivid-007: Enable Output Cropping: true [ 863.436381][T10840] vivid-007: Enable Output Composing: true [ 863.442404][T10840] vivid-007: Enable Output Scaler: true [ 863.448174][T10840] vivid-007: Tx RGB Quantization Range: Automatic [ 863.454882][T10840] vivid-007: Transmit Mode: HDMI [ 863.459978][T10840] vivid-007: Display Present: true inactive [ 863.466181][T10840] vivid-007: Hotplug Present: 0x00000001 [ 863.483910][T10840] vivid-007: RxSense Present: 0x00000001 [ 863.490022][T10840] vivid-007: EDID Present: 0x00000001 [ 863.496233][T10840] vivid-007: ================== END STATUS ================== [ 864.119621][ T27] audit: type=1804 audit(1752203334.763:62): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1582" name="/newroot/328/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 864.713662][T10848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1584'. [ 864.962506][T10851] device vlan2 entered promiscuous mode [ 864.968335][T10851] device netdevsim0 entered promiscuous mode [ 865.198284][ T4386] kworker/u4:8: attempt to access beyond end of device [ 865.198284][ T4386] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 868.336503][T10880] loop0: detected capacity change from 0 to 2048 [ 868.684532][T10887] loop4: detected capacity change from 0 to 40427 [ 868.697309][T10887] F2FS-fs (loop4): invalid crc value [ 868.793927][T10887] F2FS-fs (loop4): Found nat_bits in checkpoint [ 868.866251][T10887] F2FS-fs (loop4): Start checkpoint disabled! [ 869.159957][T10894] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 869.166988][T10887] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 869.459098][ T27] audit: type=1804 audit(1752203340.103:63): pid=10896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1596" name="/newroot/330/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 869.706458][T10880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 869.747275][T10898] vivid-007: ================= START STATUS ================= [ 869.755167][T10898] vivid-007: Enable Output Cropping: true [ 869.761295][T10898] vivid-007: Enable Output Composing: true [ 869.767298][T10898] vivid-007: Enable Output Scaler: true [ 869.773045][T10898] vivid-007: Tx RGB Quantization Range: Automatic [ 869.779654][T10898] vivid-007: Transmit Mode: HDMI [ 869.784881][T10898] vivid-007: Display Present: true inactive [ 869.791027][T10898] vivid-007: Hotplug Present: 0x00000001 [ 869.802339][T10898] vivid-007: RxSense Present: 0x00000001 [ 869.808284][T10898] vivid-007: EDID Present: 0x00000001 [ 869.814142][T10898] vivid-007: ================== END STATUS ================== [ 869.984508][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.292340][T10879] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 870.307928][T10879] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 870.320415][T10879] EXT4-fs (loop0): This should not happen!! Data will be lost [ 870.320415][T10879] [ 870.330261][T10879] EXT4-fs (loop0): Total free blocks count 0 [ 870.336459][T10879] EXT4-fs (loop0): Free/Dirty block details [ 870.342502][T10879] EXT4-fs (loop0): free_blocks=2415919104 [ 870.348338][T10879] EXT4-fs (loop0): dirty_blocks=16 [ 870.354248][T10879] EXT4-fs (loop0): Block reservation details [ 870.360343][T10879] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 870.372543][ T27] audit: type=1804 audit(1752203340.193:64): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1596" name="/newroot/330/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 870.573380][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 870.652396][ T4493] kworker/u4:11: attempt to access beyond end of device [ 870.652396][ T4493] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 871.803617][T10908] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 871.812728][T10908] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 871.822146][T10908] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 871.830975][T10908] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 871.840164][T10908] device geneve2 entered promiscuous mode [ 874.239252][T10939] loop0: detected capacity change from 0 to 40427 [ 874.390793][T10939] F2FS-fs (loop0): invalid crc value [ 874.471467][T10939] F2FS-fs (loop0): Found nat_bits in checkpoint [ 874.517361][T10939] F2FS-fs (loop0): Start checkpoint disabled! [ 874.800052][T10939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 875.072542][ T27] audit: type=1804 audit(1752203345.723:65): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1610" name="/newroot/337/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 875.362236][ T27] audit: type=1804 audit(1752203345.803:66): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1610" name="/newroot/337/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 875.408231][T10953] loop1: detected capacity change from 0 to 2048 [ 875.652781][T10953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 876.209924][T10950] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 876.225378][T10950] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 876.237859][T10950] EXT4-fs (loop1): This should not happen!! Data will be lost [ 876.237859][T10950] [ 876.247725][T10950] EXT4-fs (loop1): Total free blocks count 0 [ 876.253841][T10950] EXT4-fs (loop1): Free/Dirty block details [ 876.259775][T10950] EXT4-fs (loop1): free_blocks=2415919104 [ 876.265631][T10950] EXT4-fs (loop1): dirty_blocks=16 [ 876.270868][T10950] EXT4-fs (loop1): Block reservation details [ 876.277007][T10950] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 876.319619][ T4346] kworker/u4:5: attempt to access beyond end of device [ 876.319619][ T4346] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 876.451483][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 878.473872][T10971] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 878.480432][T10971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 878.592115][T10971] vhci_hcd vhci_hcd.0: Device attached [ 878.653438][T10971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 878.666528][T10971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 878.674708][T10971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 879.051763][ T7624] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 881.210695][T10972] vhci_hcd: connection reset by peer [ 881.227022][ T4493] vhci_hcd: stop threads [ 881.231333][ T4493] vhci_hcd: release socket [ 881.246578][ T4493] vhci_hcd: disconnect device [ 886.533449][ T4390] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 886.541454][ T7624] vhci_hcd: vhci_device speed not set [ 886.650863][T11021] vivid-007: ================= START STATUS ================= [ 886.658839][T11021] vivid-007: Enable Output Cropping: true [ 886.664897][T11021] vivid-007: Enable Output Composing: true [ 886.670911][T11021] vivid-007: Enable Output Scaler: true [ 886.676758][T11021] vivid-007: Tx RGB Quantization Range: Automatic [ 886.683422][T11021] vivid-007: Transmit Mode: HDMI [ 886.688547][T11021] vivid-007: Display Present: true inactive [ 886.694984][T11021] vivid-007: Hotplug Present: 0x00000001 [ 886.716702][T11021] vivid-007: RxSense Present: 0x00000001 [ 886.722767][T11021] vivid-007: EDID Present: 0x00000001 [ 886.728485][T11021] vivid-007: ================== END STATUS ================== [ 886.736986][ T4390] usb 1-1: Using ep0 maxpacket: 32 [ 888.215894][T11026] dummy0 speed is unknown, defaulting to 1000 [ 888.383515][ T4390] usb 1-1: unable to get BOS descriptor or descriptor too short [ 888.416346][ T4390] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 888.445772][ T4390] usb 1-1: can't read configurations, error -71 [ 888.626947][T11030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1633'. [ 888.977211][T11034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 888.983805][T11034] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 888.992452][T11034] vhci_hcd vhci_hcd.0: Device attached [ 889.511801][ T4331] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 890.901814][T11034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 890.916961][T11034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 890.925163][T11034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 891.895469][T11035] vhci_hcd: connection reset by peer [ 891.910214][ T6690] vhci_hcd: stop threads [ 891.919682][ T6690] vhci_hcd: release socket [ 891.938056][ T6690] vhci_hcd: disconnect device [ 895.090602][T11055] loop3: detected capacity change from 0 to 64 [ 895.489584][ T4493] kworker/u4:11: attempt to access beyond end of device [ 895.489584][ T4493] loop3: rw=1, sector=64, nr_sectors = 1 limit=64 [ 895.594715][ T4493] Buffer I/O error on dev loop3, logical block 64, lost async page write [ 895.605406][ T4493] kworker/u4:11: attempt to access beyond end of device [ 895.605406][ T4493] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 895.635052][ T4493] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 895.684581][T11063] vivid-007: ================= START STATUS ================= [ 895.692556][T11063] vivid-007: Enable Output Cropping: true [ 895.698648][T11063] vivid-007: Enable Output Composing: true [ 895.704921][T11063] vivid-007: Enable Output Scaler: true [ 895.710706][T11063] vivid-007: Tx RGB Quantization Range: Automatic [ 895.717344][T11063] vivid-007: Transmit Mode: HDMI [ 895.722527][T11063] vivid-007: Display Present: true inactive [ 895.728774][T11063] vivid-007: Hotplug Present: 0x00000001 [ 895.742556][T11063] vivid-007: RxSense Present: 0x00000001 [ 895.749058][T11063] vivid-007: EDID Present: 0x00000001 [ 895.755138][T11063] vivid-007: ================== END STATUS ================== [ 895.878934][ T4493] kworker/u4:11: attempt to access beyond end of device [ 895.878934][ T4493] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 895.901916][ T4331] vhci_hcd: vhci_device speed not set [ 896.243821][ T4493] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 896.334224][T11061] dummy0 speed is unknown, defaulting to 1000 [ 896.445313][ T4493] kworker/u4:11: attempt to access beyond end of device [ 896.445313][ T4493] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 896.458795][ T4493] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 896.468096][ T4493] kworker/u4:11: attempt to access beyond end of device [ 896.468096][ T4493] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 896.481516][ T4493] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 896.490111][ T4493] kworker/u4:11: attempt to access beyond end of device [ 896.490111][ T4493] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 896.503610][ T4493] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 896.512288][ T4493] kworker/u4:11: attempt to access beyond end of device [ 896.512288][ T4493] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 896.525676][ T4493] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 896.534975][ T4493] kworker/u4:11: attempt to access beyond end of device [ 896.534975][ T4493] loop3: rw=1, sector=76, nr_sectors = 371 limit=64 [ 897.265182][T11074] loop0: detected capacity change from 0 to 256 [ 897.287265][T11074] exfat: Deprecated parameter 'utf8' [ 897.299891][T11074] exfat: Deprecated parameter 'namecase' [ 897.312164][T11074] exfat: Bad value for 'gid' [ 898.822911][T11084] loop5: detected capacity change from 0 to 256 [ 898.832197][T11084] exfat: Deprecated parameter 'namecase' [ 899.097573][T11084] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 899.698162][T11098] loop1: detected capacity change from 0 to 64 [ 900.756347][ T4349] kworker/u4:6: attempt to access beyond end of device [ 900.756347][ T4349] loop1: rw=1, sector=64, nr_sectors = 1 limit=64 [ 900.834445][T11103] vivid-007: ================= START STATUS ================= [ 900.842438][T11103] vivid-007: Enable Output Cropping: true [ 900.848423][T11103] vivid-007: Enable Output Composing: true [ 900.854530][T11103] vivid-007: Enable Output Scaler: true [ 900.860382][T11103] vivid-007: Tx RGB Quantization Range: Automatic [ 900.867794][T11103] vivid-007: Transmit Mode: HDMI [ 900.873121][T11103] vivid-007: Display Present: true inactive [ 900.879445][T11103] vivid-007: Hotplug Present: 0x00000001 [ 900.897561][T11103] vivid-007: RxSense Present: 0x00000001 [ 900.903605][T11103] vivid-007: EDID Present: 0x00000001 [ 900.909423][T11103] vivid-007: ================== END STATUS ================== [ 901.632506][ T4349] Buffer I/O error on dev loop1, logical block 64, lost async page write [ 901.648023][ T4349] kworker/u4:6: attempt to access beyond end of device [ 901.648023][ T4349] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 901.882513][ T4349] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 901.931393][ T4349] kworker/u4:6: attempt to access beyond end of device [ 901.931393][ T4349] loop1: rw=1, sector=66, nr_sectors = 1 limit=64 [ 902.381684][ T4349] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 902.527039][ T4349] kworker/u4:6: attempt to access beyond end of device [ 902.527039][ T4349] loop1: rw=1, sector=67, nr_sectors = 1 limit=64 [ 902.548637][ T4349] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 902.565626][T11116] loop3: detected capacity change from 0 to 256 [ 902.573770][ T4349] kworker/u4:6: attempt to access beyond end of device [ 902.573770][ T4349] loop1: rw=1, sector=68, nr_sectors = 1 limit=64 [ 902.614519][T11116] exfat: Deprecated parameter 'utf8' [ 902.637544][T11116] exfat: Deprecated parameter 'namecase' [ 902.680457][ T4349] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 902.682690][T11116] exfat: Bad value for 'gid' [ 903.474313][ T4349] kworker/u4:6: attempt to access beyond end of device [ 903.474313][ T4349] loop1: rw=1, sector=72, nr_sectors = 1 limit=64 [ 903.487929][ T4349] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 903.496681][ T4349] kworker/u4:6: attempt to access beyond end of device [ 903.496681][ T4349] loop1: rw=1, sector=73, nr_sectors = 1 limit=64 [ 903.510183][ T4349] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 903.519574][ T4349] kworker/u4:6: attempt to access beyond end of device [ 903.519574][ T4349] loop1: rw=1, sector=76, nr_sectors = 371 limit=64 [ 903.960441][T11127] dummy0 speed is unknown, defaulting to 1000 [ 904.509173][ T4390] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 904.761783][ T4390] usb 5-1: Using ep0 maxpacket: 32 [ 904.784111][ T4390] usb 5-1: unable to get BOS descriptor or descriptor too short [ 904.817260][ T4390] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 904.846426][ T4390] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.920180][ T4390] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.946115][ T4390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.980044][ T4390] usb 5-1: Product: syz [ 904.984562][ T4390] usb 5-1: Manufacturer: syz [ 904.989296][ T4390] usb 5-1: SerialNumber: syz [ 905.326391][ T4390] usb 5-1: 0:2 : does not exist [ 905.416343][ T4390] usb 5-1: USB disconnect, device number 8 [ 905.846198][ T4374] udevd[4374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.379430][T11154] device batadv0 entered promiscuous mode [ 906.395477][T11154] device batadv0 left promiscuous mode [ 909.489419][T11170] loop4: detected capacity change from 0 to 2048 [ 909.746579][T11170] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 910.844394][T11169] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 910.859796][T11169] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 910.872435][T11169] EXT4-fs (loop4): This should not happen!! Data will be lost [ 910.872435][T11169] [ 910.882498][T11169] EXT4-fs (loop4): Total free blocks count 0 [ 910.888665][T11169] EXT4-fs (loop4): Free/Dirty block details [ 910.894830][T11169] EXT4-fs (loop4): free_blocks=2415919104 [ 910.900850][T11169] EXT4-fs (loop4): dirty_blocks=16 [ 910.906809][T11169] EXT4-fs (loop4): Block reservation details [ 910.913430][T11169] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 911.117575][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 911.224266][T11187] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 911.230849][T11187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 911.245136][T11187] vhci_hcd vhci_hcd.0: Device attached [ 911.357907][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 911.371717][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 911.379971][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 911.511846][ T4390] usb 43-1: new high-speed USB device number 7 using vhci_hcd [ 914.328154][T11188] vhci_hcd: connection reset by peer [ 914.333904][ T4346] vhci_hcd: stop threads [ 914.342279][ T4346] vhci_hcd: release socket [ 914.385833][ T4346] vhci_hcd: disconnect device [ 916.093445][T11219] loop3: detected capacity change from 0 to 32768 [ 916.100934][T11219] XFS: ikeep mount option is deprecated. [ 916.882233][T11219] XFS (loop3): Mounting V5 Filesystem [ 917.081022][T11237] loop4: detected capacity change from 0 to 2048 [ 917.403218][T11219] XFS (loop3): Ending clean mount [ 917.410907][T11219] XFS (loop3): Quotacheck needed: Please wait. [ 917.451150][T11237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 917.587434][T11219] XFS (loop3): Quotacheck: Done. [ 918.051745][ T4390] vhci_hcd: vhci_device speed not set [ 918.122112][T11232] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 918.142263][T11232] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 918.155100][T11232] EXT4-fs (loop4): This should not happen!! Data will be lost [ 918.155100][T11232] [ 918.165022][T11232] EXT4-fs (loop4): Total free blocks count 0 [ 918.171200][T11232] EXT4-fs (loop4): Free/Dirty block details [ 918.178066][T11232] EXT4-fs (loop4): free_blocks=2415919104 [ 918.184079][T11232] EXT4-fs (loop4): dirty_blocks=16 [ 918.189370][T11232] EXT4-fs (loop4): Block reservation details [ 918.195548][T11232] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 918.459105][ T4268] XFS (loop3): Unmounting Filesystem [ 920.246586][T11265] device vlan2 entered promiscuous mode [ 920.255228][T11265] device netdevsim0 entered promiscuous mode [ 920.375504][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 920.459638][T11268] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 920.466222][T11268] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 920.603435][T11268] vhci_hcd vhci_hcd.0: Device attached [ 920.871687][ T4390] usb 33-1: new high-speed USB device number 9 using vhci_hcd [ 922.535406][T11275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 924.737911][T11275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 924.927262][T11279] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 924.933847][T11279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 924.943335][T11279] vhci_hcd vhci_hcd.0: Device attached [ 925.009465][T11275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 925.285614][T11277] team0: Unable to change to the same mode the team is in [ 925.316449][T11269] vhci_hcd: connection reset by peer [ 925.336207][T10085] vhci_hcd: stop threads [ 925.345847][T10085] vhci_hcd: release socket [ 925.357747][T11284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 925.391825][ T4344] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 925.608434][T10085] vhci_hcd: disconnect device [ 928.408170][T11284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 928.442047][T11284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 928.521768][ T4390] vhci_hcd: vhci_device speed not set [ 928.986201][T11307] loop1: detected capacity change from 0 to 32768 [ 928.993604][T11307] XFS: ikeep mount option is deprecated. [ 929.002127][T11309] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1706'. [ 929.253677][T11314] loop3: detected capacity change from 0 to 64 [ 930.103850][T11307] XFS (loop1): Mounting V5 Filesystem [ 930.141195][T11281] vhci_hcd: connection reset by peer [ 930.147083][ T56] vhci_hcd: stop threads [ 930.151361][ T56] vhci_hcd: release socket [ 930.166418][ T56] vhci_hcd: disconnect device [ 930.205404][ T4349] kworker/u4:6: attempt to access beyond end of device [ 930.205404][ T4349] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 930.246232][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 930.291833][ T4349] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 930.300658][ T4349] kworker/u4:6: attempt to access beyond end of device [ 930.300658][ T4349] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 930.314373][ T4349] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 930.323058][ T4349] kworker/u4:6: attempt to access beyond end of device [ 930.323058][ T4349] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 930.471765][ T4349] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 930.541735][ T4344] vhci_hcd: vhci_device speed not set [ 931.092125][ T4349] kworker/u4:6: attempt to access beyond end of device [ 931.092125][ T4349] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 931.105784][ T4349] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 931.114815][ T4349] kworker/u4:6: attempt to access beyond end of device [ 931.114815][ T4349] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 931.128495][ T4349] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 931.137227][ T4349] kworker/u4:6: attempt to access beyond end of device [ 931.137227][ T4349] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 931.151822][ T4349] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 931.162055][ T4349] kworker/u4:6: attempt to access beyond end of device [ 931.162055][ T4349] loop3: rw=1, sector=76, nr_sectors = 1 limit=64 [ 931.163375][T11307] XFS (loop1): Ending clean mount [ 931.175707][ T4349] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 931.202663][T11307] XFS (loop1): Quotacheck needed: Please wait. [ 931.297860][ T4349] kworker/u4:6: attempt to access beyond end of device [ 931.297860][ T4349] loop3: rw=1, sector=77, nr_sectors = 1 limit=64 [ 931.341736][T11307] XFS (loop1): Quotacheck: Done. [ 931.424600][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.773764][ T4349] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 931.857478][ T4349] kworker/u4:6: attempt to access beyond end of device [ 931.857478][ T4349] loop3: rw=1, sector=78, nr_sectors = 363 limit=64 [ 931.886701][ T4279] XFS (loop1): Unmounting Filesystem [ 932.088235][T11339] loop3: detected capacity change from 0 to 2048 [ 932.292740][T11339] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 932.950301][T11338] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 932.965723][T11338] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 932.978109][T11338] EXT4-fs (loop3): This should not happen!! Data will be lost [ 932.978109][T11338] [ 932.987969][T11338] EXT4-fs (loop3): Total free blocks count 0 [ 932.994193][T11338] EXT4-fs (loop3): Free/Dirty block details [ 933.000292][T11338] EXT4-fs (loop3): free_blocks=2415919104 [ 933.006148][T11338] EXT4-fs (loop3): dirty_blocks=16 [ 933.011384][T11338] EXT4-fs (loop3): Block reservation details [ 933.017504][T11338] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 933.143373][T11347] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 935.149242][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 937.265953][T11359] loop3: detected capacity change from 0 to 40427 [ 937.275156][T11359] F2FS-fs (loop3): invalid crc value [ 937.284074][T11359] F2FS-fs (loop3): Found nat_bits in checkpoint [ 937.314095][T11359] F2FS-fs (loop3): Start checkpoint disabled! [ 937.324887][T11359] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 937.500443][ T27] audit: type=1804 audit(1752203408.143:67): pid=11364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1718" name="/newroot/338/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 937.643781][ T27] audit: type=1804 audit(1752203408.293:68): pid=11363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1718" name="/newroot/338/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 938.094447][T11370] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1720'. [ 938.918238][T11372] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 938.924827][T11372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 938.932787][T11372] vhci_hcd vhci_hcd.0: Device attached [ 938.978862][T11372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 938.993661][T11372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 939.002070][T11372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 939.221688][ T4944] usb 35-1: new high-speed USB device number 7 using vhci_hcd [ 941.266109][T11374] vhci_hcd: connection reset by peer [ 941.272634][ T4438] vhci_hcd: stop threads [ 941.276900][ T4438] vhci_hcd: release socket [ 941.311933][ T4438] vhci_hcd: disconnect device [ 941.624136][ T4694] kworker/u4:16: attempt to access beyond end of device [ 941.624136][ T4694] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 943.139627][T11395] loop1: detected capacity change from 0 to 2048 [ 943.268390][T11395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 943.501796][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 943.926354][T11394] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 943.941714][T11394] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 943.954193][T11394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 943.954193][T11394] [ 943.964018][T11394] EXT4-fs (loop1): Total free blocks count 0 [ 943.970182][T11394] EXT4-fs (loop1): Free/Dirty block details [ 943.976239][T11394] EXT4-fs (loop1): free_blocks=2415919104 [ 943.982861][T11394] EXT4-fs (loop1): dirty_blocks=16 [ 943.988099][T11394] EXT4-fs (loop1): Block reservation details [ 943.994469][T11394] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 944.033232][T11380] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 944.191370][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 944.223648][T11404] fuse: Bad value for 'fd' [ 944.482124][T11380] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 944.497112][T11380] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 944.509322][T11380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 945.320463][T11380] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 945.407793][T11416] fuse: Bad value for 'fd' [ 945.419433][T11380] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 945.662020][ T4944] vhci_hcd: vhci_device speed not set [ 945.706065][T11380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 945.714940][T11380] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 945.737376][T11380] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 945.745107][T11380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 945.754801][T11380] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 945.911742][T11380] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 945.927872][T11420] loop4: detected capacity change from 0 to 2048 [ 945.957714][T11380] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 945.975828][T11380] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 945.987254][T11420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 946.011831][T11380] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 946.061816][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 946.541848][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 946.604129][T11419] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 946.619485][T11419] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 946.631973][T11419] EXT4-fs (loop4): This should not happen!! Data will be lost [ 946.631973][T11419] [ 946.642396][T11419] EXT4-fs (loop4): Total free blocks count 0 [ 946.648517][T11419] EXT4-fs (loop4): Free/Dirty block details [ 946.654752][T11419] EXT4-fs (loop4): free_blocks=2415919104 [ 946.660599][T11419] EXT4-fs (loop4): dirty_blocks=16 [ 946.665862][T11419] EXT4-fs (loop4): Block reservation details [ 946.671994][T11419] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 947.294307][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 947.771796][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 947.821773][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 947.981685][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 948.436855][T11439] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1736'. [ 948.551040][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 948.621788][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 949.364751][T11454] dummy0 speed is unknown, defaulting to 1000 [ 949.916062][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 949.922930][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 950.061773][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 950.671930][T11465] loop1: detected capacity change from 0 to 64 [ 950.956193][ T4386] kworker/u4:8: attempt to access beyond end of device [ 950.956193][ T4386] loop1: rw=1, sector=64, nr_sectors = 1 limit=64 [ 951.109153][ T4386] Buffer I/O error on dev loop1, logical block 64, lost async page write [ 951.118146][ T4386] kworker/u4:8: attempt to access beyond end of device [ 951.118146][ T4386] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 951.140539][ T4386] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 951.153164][ T4386] kworker/u4:8: attempt to access beyond end of device [ 951.153164][ T4386] loop1: rw=1, sector=66, nr_sectors = 1 limit=64 [ 952.004361][ T4386] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 952.134057][ T4386] kworker/u4:8: attempt to access beyond end of device [ 952.134057][ T4386] loop1: rw=1, sector=67, nr_sectors = 1 limit=64 [ 952.209272][ T4386] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 952.224788][ T4386] kworker/u4:8: attempt to access beyond end of device [ 952.224788][ T4386] loop1: rw=1, sector=68, nr_sectors = 1 limit=64 [ 952.284172][ T4386] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 952.311254][ T4386] kworker/u4:8: attempt to access beyond end of device [ 952.311254][ T4386] loop1: rw=1, sector=72, nr_sectors = 1 limit=64 [ 952.373293][ T4386] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 952.491146][ T4386] kworker/u4:8: attempt to access beyond end of device [ 952.491146][ T4386] loop1: rw=1, sector=73, nr_sectors = 1 limit=64 [ 952.784295][ T4386] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 952.800727][ T4386] kworker/u4:8: attempt to access beyond end of device [ 952.800727][ T4386] loop1: rw=1, sector=76, nr_sectors = 371 limit=64 [ 953.279216][T11482] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1746'. [ 954.735006][T11490] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 955.506771][T11486] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 955.523163][T11486] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 955.529218][T11486] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 955.596599][T11493] vivid-007: ================= START STATUS ================= [ 955.604734][T11493] vivid-007: Enable Output Cropping: true [ 955.610820][T11493] vivid-007: Enable Output Composing: true [ 955.616927][T11493] vivid-007: Enable Output Scaler: true [ 955.622737][T11493] vivid-007: Tx RGB Quantization Range: Automatic [ 955.629300][T11493] vivid-007: Transmit Mode: HDMI [ 955.634488][T11493] vivid-007: Display Present: true inactive [ 955.640795][T11493] vivid-007: Hotplug Present: 0x00000001 [ 955.722540][T11493] vivid-007: RxSense Present: 0x00000001 [ 955.743592][T11493] vivid-007: EDID Present: 0x00000001 [ 955.749397][T11493] vivid-007: ================== END STATUS ================== [ 956.781895][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 957.227588][T11486] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 957.323163][T11486] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 957.414401][T11486] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 957.527215][T11486] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 957.618659][T11486] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 957.752242][T11486] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 957.894589][T11486] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 958.134542][T11486] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 958.142545][T11486] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 958.222913][T11486] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 958.278477][T11486] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 958.350870][T11486] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 958.861857][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 959.089660][T11510] dummy0 speed is unknown, defaulting to 1000 [ 959.329911][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 960.138553][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 960.156158][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 960.402933][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 961.041832][T11529] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1757'. [ 962.467485][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 962.473826][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 962.480033][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 962.486772][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 963.067100][T11545] loop4: detected capacity change from 0 to 256 [ 963.207534][T11545] exfat: Deprecated parameter 'utf8' [ 963.220055][T11545] exfat: Deprecated parameter 'namecase' [ 963.256550][T11545] exfat: Bad value for 'gid' [ 963.778190][T11542] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 963.811166][T11542] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 963.895069][T11542] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 963.970134][T11542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 964.064877][T11542] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 964.076366][T11542] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 964.204565][T11542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 964.234915][T11542] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 964.241060][T11542] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 964.347406][T11542] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 964.391961][T11542] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 964.398111][T11542] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 965.416708][T11532] Bluetooth: hci0: command 0x0c1a tx timeout [ 965.587152][T11542] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 965.645534][T11542] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 965.651532][T11542] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 965.983688][T11532] Bluetooth: hci2: command 0x0c1a tx timeout [ 966.141702][T11071] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 966.221673][T11532] Bluetooth: hci3: command 0x0c1a tx timeout [ 966.381710][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 966.521770][T11071] usb 4-1: Using ep0 maxpacket: 8 [ 966.539150][T11071] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 966.704104][T11071] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 966.721747][T11071] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 966.734327][T11071] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.753112][T11071] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 966.764653][T11071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.771702][ T4944] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 966.997903][T11571] dummy0 speed is unknown, defaulting to 1000 [ 967.000758][T11071] usb 4-1: GET_CAPABILITIES returned 0 [ 967.015079][T11071] usbtmc 4-1:16.0: can't read capabilities [ 967.227249][ T4944] usb 5-1: Using ep0 maxpacket: 16 [ 967.234719][ T4944] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 967.274399][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.668300][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 967.668585][T11532] Bluetooth: hci5: command 0x0c1a tx timeout [ 967.690341][T11576] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1773'. [ 967.711645][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.719172][ T4944] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 967.728958][ T4944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.753584][ T4944] usb 5-1: Product: syz [ 967.761204][ T4944] usb 5-1: Manufacturer: syz [ 967.766101][ T4944] usb 5-1: SerialNumber: syz [ 967.777591][ T4944] usb 5-1: config 0 descriptor?? [ 967.788718][ T4373] usb 4-1: USB disconnect, device number 5 [ 968.061849][T11532] Bluetooth: hci2: command 0x0406 tx timeout [ 968.301738][T11532] Bluetooth: hci3: command 0x0406 tx timeout [ 968.463174][T11532] Bluetooth: hci4: command 0x0406 tx timeout [ 969.375469][T11596] loop0: detected capacity change from 0 to 2048 [ 969.381507][T11071] usb 5-1: USB disconnect, device number 9 [ 969.533886][T11583] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 969.540058][T11583] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 969.552077][T11583] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 969.609295][T11583] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 969.625151][T11583] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 969.644762][T11583] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 969.653405][T11596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 969.741831][T11532] Bluetooth: hci5: command 0x0406 tx timeout [ 970.141683][T11532] Bluetooth: hci0: command 0x0c1a tx timeout [ 970.320771][T11583] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 970.342030][T11583] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 970.348328][T11583] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 970.356041][T11583] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 970.362426][T11583] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 970.368680][T11583] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 970.379838][T11583] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 970.391989][T11583] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 970.431136][T11583] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 970.537673][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 971.893714][T11532] Bluetooth: hci2: command 0x0c1a tx timeout [ 972.291715][T11532] Bluetooth: hci0: command 0x0406 tx timeout [ 972.768563][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 972.774826][T11532] Bluetooth: hci4: command 0x0c1a tx timeout [ 972.780997][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 973.238586][T11627] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1785'. [ 973.901791][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 974.277587][T11633] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 974.330969][T11633] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 974.366728][T11633] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 974.429029][T11633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 974.435693][T11633] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 974.569552][T11633] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 974.578736][T11633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 974.586401][T11633] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 974.593287][T11633] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 974.606371][T11633] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 974.613068][T11633] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 974.891847][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 975.352082][T11633] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 975.359948][T11633] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 975.368229][T11633] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 975.375276][T11633] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 975.663724][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 975.698309][T11654] loop1: detected capacity change from 0 to 2048 [ 975.844863][T11654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 976.461744][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 976.621808][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 976.621982][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 977.421714][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 977.497751][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 977.741793][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 978.541710][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 978.701685][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 978.709260][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 979.601926][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 981.733938][T11701] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 981.740552][T11701] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 981.755308][T11701] vhci_hcd vhci_hcd.0: Device attached [ 982.220912][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 982.249113][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 982.272158][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 982.422011][T11071] usb 33-1: new high-speed USB device number 10 using vhci_hcd [ 982.680390][T11711] team0: Unable to change to the same mode the team is in [ 985.617624][T11702] vhci_hcd: connection reset by peer [ 985.623371][ T56] vhci_hcd: stop threads [ 985.627839][ T56] vhci_hcd: release socket [ 985.658464][ T56] vhci_hcd: disconnect device [ 986.089128][T11725] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 986.418166][T11730] vivid-007: ================= START STATUS ================= [ 986.426245][T11730] vivid-007: Enable Output Cropping: true [ 986.432653][T11730] vivid-007: Enable Output Composing: true [ 986.438799][T11730] vivid-007: Enable Output Scaler: true [ 986.444629][T11730] vivid-007: Tx RGB Quantization Range: Automatic [ 986.451383][T11730] vivid-007: Transmit Mode: HDMI [ 986.456551][T11730] vivid-007: Display Present: true inactive [ 986.462851][T11730] vivid-007: Hotplug Present: 0x00000001 [ 986.559376][T11730] vivid-007: RxSense Present: 0x00000001 [ 986.583392][T11730] vivid-007: EDID Present: 0x00000001 [ 986.589106][T11730] vivid-007: ================== END STATUS ================== [ 989.243187][T11735] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 989.344476][T11071] vhci_hcd: vhci_device speed not set [ 989.532675][T11739] vivid-007: ================= START STATUS ================= [ 989.540649][T11739] vivid-007: Enable Output Cropping: true [ 989.547351][T11739] vivid-007: Enable Output Composing: true [ 989.553762][T11739] vivid-007: Enable Output Scaler: true [ 989.559600][T11739] vivid-007: Tx RGB Quantization Range: Automatic [ 989.566429][T11739] vivid-007: Transmit Mode: HDMI [ 989.571749][T11739] vivid-007: Display Present: true inactive [ 989.578068][T11739] vivid-007: Hotplug Present: 0x00000001 [ 989.607038][T11739] vivid-007: RxSense Present: 0x00000001 [ 989.613287][T11739] vivid-007: EDID Present: 0x00000001 [ 989.619221][T11739] vivid-007: ================== END STATUS ================== [ 992.865333][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.850141][T11753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 993.872987][T11753] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 993.879339][T11753] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 993.890541][T11753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 993.930859][T11753] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 993.937290][T11753] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 993.950189][T11753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 993.956550][T11753] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 993.969396][T11753] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 994.037285][T11753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 994.061862][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 994.067959][T11753] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 994.086604][T11753] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 994.111874][T11753] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 994.147662][T11753] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 994.158516][T11753] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 995.116735][T11780] device vlan2 entered promiscuous mode [ 995.142465][T11783] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 995.175800][T11780] device netdevsim0 entered promiscuous mode [ 995.563263][T11786] vivid-007: ================= START STATUS ================= [ 995.570952][T11786] vivid-007: Enable Output Cropping: true [ 995.654022][T11786] vivid-007: Enable Output Composing: true [ 995.678721][T11786] vivid-007: Enable Output Scaler: true [ 995.705025][T11786] vivid-007: Tx RGB Quantization Range: Automatic [ 995.719468][T11786] vivid-007: Transmit Mode: HDMI [ 995.734489][T11786] vivid-007: Display Present: true inactive [ 995.750841][T11786] vivid-007: Hotplug Present: 0x00000001 [ 995.765779][T11786] vivid-007: RxSense Present: 0x00000001 [ 995.801746][T11786] vivid-007: EDID Present: 0x00000001 [ 995.826951][T11786] vivid-007: ================== END STATUS ================== [ 995.911901][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 995.981808][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 996.062189][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 996.151781][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 996.605484][T11797] vivid-007: ================= START STATUS ================= [ 996.613931][T11797] vivid-007: Enable Output Cropping: true [ 996.620081][T11797] vivid-007: Enable Output Composing: true [ 996.626166][T11797] vivid-007: Enable Output Scaler: true [ 996.632012][T11797] vivid-007: Tx RGB Quantization Range: Automatic [ 996.638611][T11797] vivid-007: Transmit Mode: HDMI [ 996.643741][T11797] vivid-007: Display Present: true inactive [ 996.649849][T11797] vivid-007: Hotplug Present: 0x00000001 [ 996.655707][T11797] vivid-007: RxSense Present: 0x00000001 [ 996.661543][T11797] vivid-007: EDID Present: 0x00000001 [ 996.667166][T11797] vivid-007: ================== END STATUS ================== [ 997.901675][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 997.982951][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 998.023748][T11793] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 998.061736][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 998.141752][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 998.221880][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 998.710611][T11793] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 998.829001][T11793] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 998.959857][T11793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 999.064158][T11793] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 999.159739][T11793] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 999.310161][T11793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 999.396392][T11793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 999.514900][T11793] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 999.793902][T11793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 999.822166][T11793] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 999.829319][T11793] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 999.836957][T11793] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 999.850670][T11793] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1000.028682][T11793] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1000.141881][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 1001.021724][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 1001.230423][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 1001.351898][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 1001.660575][ T4373] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1001.851915][ T4373] usb 5-1: Using ep0 maxpacket: 32 [ 1001.873878][ T4373] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1001.897895][ T4373] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1001.915112][ T4373] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1001.935014][ T4373] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1001.970533][ T4373] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1002.014102][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.042964][ T4373] usb 5-1: Product: syz [ 1002.057762][ T4373] usb 5-1: Manufacturer: syz [ 1002.070026][ T4373] usb 5-1: SerialNumber: syz [ 1002.402217][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 1002.408579][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 1002.468327][T11819] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1002.474893][T11819] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1002.492061][T11819] vhci_hcd vhci_hcd.0: Device attached [ 1002.499771][T11833] vhci_hcd: connection closed [ 1002.500021][ T4394] vhci_hcd: stop threads [ 1002.518328][ T4373] usb 5-1: 0:2 : does not exist [ 1002.536279][ T4394] vhci_hcd: release socket [ 1002.541049][ T4394] vhci_hcd: disconnect device [ 1002.627154][ T4373] usb 5-1: USB disconnect, device number 10 [ 1003.101880][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1003.421943][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 1003.511985][T11836] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1003.518310][T11836] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1003.596981][T11836] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1003.636062][T11836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1003.658006][T11836] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1003.687640][T11836] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1003.756846][T11836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1003.774195][T11836] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1003.808223][T11836] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1003.832615][T11836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1004.010975][T11836] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1004.035272][T11836] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1004.139241][T11836] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1004.388193][T11836] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1004.422917][T11836] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1004.781790][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 1004.817987][T11851] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1004.856243][T11855] netlink: 'syz.1.1841': attribute type 2 has an invalid length. [ 1004.868912][T11855] netlink: 'syz.1.1841': attribute type 1 has an invalid length. [ 1004.901496][T11854] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1004.908087][T11854] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1004.934925][T11854] vhci_hcd vhci_hcd.0: Device attached [ 1005.240126][ T26] usb 43-1: new high-speed USB device number 8 using vhci_hcd [ 1005.688278][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 1005.820054][T11863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1005.827482][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1005.841205][T11863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1005.864216][T11863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1005.902156][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 1006.141684][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 1006.861755][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 1007.751792][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1007.763878][T11866] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1007.911824][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 1007.981839][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1008.187167][T11867] vivid-007: ================= START STATUS ================= [ 1008.195190][T11867] vivid-007: Enable Output Cropping: true [ 1008.201478][T11867] vivid-007: Enable Output Composing: true [ 1008.208547][T11867] vivid-007: Enable Output Scaler: true [ 1008.218281][T11867] vivid-007: Tx RGB Quantization Range: Automatic [ 1008.221767][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 1008.230994][T11867] vivid-007: Transmit Mode: HDMI [ 1008.236454][T11867] vivid-007: Display Present: true inactive [ 1008.250786][T11867] vivid-007: Hotplug Present: 0x00000001 [ 1008.256761][T11867] vivid-007: RxSense Present: 0x00000001 [ 1008.262641][T11867] vivid-007: EDID Present: 0x00000001 [ 1008.268216][T11867] vivid-007: ================== END STATUS ================== [ 1009.976205][T11857] vhci_hcd: connection reset by peer [ 1009.982720][ T4501] vhci_hcd: stop threads [ 1009.987312][ T4501] vhci_hcd: release socket [ 1010.017328][ T4501] vhci_hcd: disconnect device [ 1012.473867][ T26] vhci_hcd: vhci_device speed not set [ 1013.191753][T11870] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1013.192276][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 1013.334027][T11894] loop1: detected capacity change from 0 to 2048 [ 1013.464371][T11870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1013.855756][T11894] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1013.864656][T11870] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1014.191911][T11893] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1014.207423][T11893] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1014.219758][T11893] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1014.219758][T11893] [ 1014.230468][T11893] EXT4-fs (loop1): Total free blocks count 0 [ 1014.236710][T11893] EXT4-fs (loop1): Free/Dirty block details [ 1014.242796][T11893] EXT4-fs (loop1): free_blocks=2415919104 [ 1014.248561][T11893] EXT4-fs (loop1): dirty_blocks=16 [ 1014.253867][T11893] EXT4-fs (loop1): Block reservation details [ 1014.259886][T11893] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1014.269612][T11870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1014.284475][T11870] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1014.300830][T11870] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1014.322076][T11870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1014.331321][T11870] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1014.351496][T11870] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1014.362451][T11870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1014.369663][T11870] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1014.386528][T11870] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1014.399175][T11870] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1014.409094][T11870] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1014.416799][T11870] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1014.513172][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 1014.788407][T11906] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1014.801674][ T26] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1015.261706][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 1016.257566][T11911] vivid-007: ================= START STATUS ================= [ 1016.265388][T11911] vivid-007: Enable Output Cropping: true [ 1016.271153][T11911] vivid-007: Enable Output Composing: true [ 1016.277031][T11911] vivid-007: Enable Output Scaler: true [ 1016.282623][T11911] vivid-007: Tx RGB Quantization Range: Automatic [ 1016.289054][T11911] vivid-007: Transmit Mode: HDMI [ 1016.294024][T11911] vivid-007: Display Present: true inactive [ 1016.299934][T11911] vivid-007: Hotplug Present: 0x00000001 [ 1016.305607][T11911] vivid-007: RxSense Present: 0x00000001 [ 1016.311270][T11911] vivid-007: EDID Present: 0x00000001 [ 1016.316674][T11911] vivid-007: ================== END STATUS ================== [ 1016.324771][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 1016.381821][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1016.387937][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 1016.471823][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 1016.951785][ T4373] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1017.860379][T11930] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1017.888097][ T4373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.935238][ T4373] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1018.015521][T11933] vivid-007: ================= START STATUS ================= [ 1018.023528][T11933] vivid-007: Enable Output Cropping: true [ 1018.029521][T11933] vivid-007: Enable Output Composing: true [ 1018.035614][T11933] vivid-007: Enable Output Scaler: true [ 1018.041370][T11933] vivid-007: Tx RGB Quantization Range: Automatic [ 1018.048091][T11933] vivid-007: Transmit Mode: HDMI [ 1018.053311][T11933] vivid-007: Display Present: true inactive [ 1018.059430][T11933] vivid-007: Hotplug Present: 0x00000001 [ 1018.138815][ T4373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.211527][T11933] vivid-007: RxSense Present: 0x00000001 [ 1018.245046][T11933] vivid-007: EDID Present: 0x00000001 [ 1018.250710][T11933] vivid-007: ================== END STATUS ================== [ 1018.359272][ T4373] usb 2-1: config 0 descriptor?? [ 1018.381776][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1018.461927][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 1018.463759][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1018.541752][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 1019.747667][ T4373] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 1020.976104][ T4373] cypress 0003:04B4:07B1.0002: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.1-1/input0 [ 1021.470996][ T4373] usb 2-1: USB disconnect, device number 9 [ 1021.710276][T11938] fido_id[11938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1022.725241][T11947] loop0: detected capacity change from 0 to 2048 [ 1022.992662][T11947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1023.592422][T11946] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1023.607982][T11946] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1023.620425][T11946] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1023.620425][T11946] [ 1023.630257][T11946] EXT4-fs (loop0): Total free blocks count 0 [ 1023.636634][T11946] EXT4-fs (loop0): Free/Dirty block details [ 1023.642732][T11946] EXT4-fs (loop0): free_blocks=2415919104 [ 1023.649196][T11946] EXT4-fs (loop0): dirty_blocks=16 [ 1023.654574][T11946] EXT4-fs (loop0): Block reservation details [ 1023.660644][T11946] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1023.794811][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 1024.245920][T11945] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1024.322315][T11945] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1024.338649][T11945] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1024.356231][T11945] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1024.409910][T11945] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1024.439829][T11945] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1024.493168][T11945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1024.533452][T11945] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1024.554600][T11945] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1024.569755][T11945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1024.576399][T11945] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1024.584881][T11945] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1024.593235][T11945] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1024.599881][T11945] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1024.606754][T11945] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1024.785968][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 1024.891680][ T4373] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1025.891697][ T4373] usb 5-1: Using ep0 maxpacket: 8 [ 1025.901686][ T4373] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1025.998309][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.041515][ T4373] usb 5-1: Product: syz [ 1026.048676][ T4373] usb 5-1: Manufacturer: syz [ 1026.065166][ T4373] usb 5-1: SerialNumber: syz [ 1026.090379][ T4373] usb 5-1: config 0 descriptor?? [ 1026.697425][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 1026.787837][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 1028.205651][T11532] Bluetooth: hci5: command 0x0c1a tx timeout [ 1028.213373][T11532] Bluetooth: hci4: command 0x0c1a tx timeout [ 1028.219457][T11532] Bluetooth: hci0: command 0x0406 tx timeout [ 1028.722252][ T4373] usb write operation failed. (-71) [ 1028.727527][ T4373] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1028.849252][T11988] tipc: Enabling of bearer rejected, failed to enable media [ 1028.861769][T11978] Bluetooth: hci3: command 0x0406 tx timeout [ 1028.868369][T11978] Bluetooth: hci2: command 0x0406 tx timeout [ 1029.080446][ T4373] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1029.141280][ T4373] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1029.254160][T11981] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1029.349757][T11981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1029.371518][T11981] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1030.294421][T11981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1030.302104][T11978] Bluetooth: hci4: command 0x0406 tx timeout [ 1030.308185][T11978] Bluetooth: hci5: command 0x0406 tx timeout [ 1030.325974][T11981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1030.544970][T12002] loop4: detected capacity change from 0 to 40427 [ 1030.561200][T12002] F2FS-fs (loop4): invalid crc value [ 1030.575831][T12002] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1030.604571][T12002] F2FS-fs (loop4): Start checkpoint disabled! [ 1030.620004][T12002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1030.621737][T11978] Bluetooth: hci0: command 0x0c1a tx timeout [ 1030.635974][T11981] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1030.645946][T11981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1030.660573][T11981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1031.205858][T11981] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1031.217030][T12008] loop5: detected capacity change from 0 to 256 [ 1031.226749][T12008] exfat: Deprecated parameter 'utf8' [ 1031.232268][T12008] exfat: Deprecated parameter 'namecase' [ 1031.242139][T12008] exfat: Bad value for 'gid' [ 1031.263310][T11981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1031.312007][T11981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1031.318882][T11981] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1031.631248][T11981] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1031.735126][T11981] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1031.786923][T11981] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1032.039140][ T4552] kworker/u4:13: attempt to access beyond end of device [ 1032.039140][ T4552] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1032.301734][T11978] Bluetooth: hci2: command 0x0c1a tx timeout [ 1032.752059][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1032.752246][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 1033.261767][T11978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1033.537431][T12028] loop0: detected capacity change from 0 to 2048 [ 1033.755271][T11978] Bluetooth: hci5: command 0x0c1a tx timeout [ 1035.198909][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 1035.323158][T11978] Bluetooth: hci3: command 0x0406 tx timeout [ 1035.341774][T11978] Bluetooth: hci4: command 0x0406 tx timeout [ 1035.396883][T12028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1036.350542][T11978] Bluetooth: hci5: command 0x0406 tx timeout [ 1039.195647][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 1039.286033][T12070] loop1: detected capacity change from 0 to 256 [ 1039.297707][T12070] exfat: Deprecated parameter 'utf8' [ 1039.325910][T12070] exfat: Deprecated parameter 'namecase' [ 1039.346268][T12070] exfat: Bad value for 'gid' [ 1039.375580][T12075] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1039.467686][T12078] vivid-007: ================= START STATUS ================= [ 1039.475844][T12078] vivid-007: Enable Output Cropping: true [ 1039.481886][T12078] vivid-007: Enable Output Composing: true [ 1039.487893][T12078] vivid-007: Enable Output Scaler: true [ 1039.493720][T12078] vivid-007: Tx RGB Quantization Range: Automatic [ 1039.500286][T12078] vivid-007: Transmit Mode: HDMI [ 1039.505887][T12078] vivid-007: Display Present: true inactive [ 1039.512066][T12078] vivid-007: Hotplug Present: 0x00000001 [ 1039.604727][T12078] vivid-007: RxSense Present: 0x00000001 [ 1039.627284][T12078] vivid-007: EDID Present: 0x00000001 [ 1039.633395][T12078] vivid-007: ================== END STATUS ================== [ 1047.103265][T12101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1047.129709][T12101] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1047.136224][T12101] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1047.557339][T12120] loop4: detected capacity change from 0 to 2048 [ 1047.646463][T12101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1048.038542][T12120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1048.292288][T12119] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1048.307920][T12119] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1048.320354][T12119] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1048.320354][T12119] [ 1048.330917][T12119] EXT4-fs (loop4): Total free blocks count 0 [ 1048.337548][T12119] EXT4-fs (loop4): Free/Dirty block details [ 1048.343646][T12119] EXT4-fs (loop4): free_blocks=2415919104 [ 1048.349477][T12119] EXT4-fs (loop4): dirty_blocks=16 [ 1048.354740][T12119] EXT4-fs (loop4): Block reservation details [ 1048.360855][T12119] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1048.374839][T12101] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1048.380889][T12101] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1048.381769][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 1048.395886][T12101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1048.421987][T12101] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1048.431199][T12101] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1048.442680][T12101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1048.453939][T12101] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1048.479155][T12101] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1048.494483][T12101] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1048.507871][T12101] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1048.529317][T12101] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1048.694801][T12131] dummy0 speed is unknown, defaulting to 1000 [ 1049.992840][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 1050.461846][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 1050.468046][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1050.474708][T11978] Bluetooth: hci0: command 0x0406 tx timeout [ 1050.733598][T11532] Bluetooth: hci5: command 0x0c1a tx timeout [ 1050.754508][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1052.791789][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 1052.797948][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 1052.804082][T11532] Bluetooth: hci5: command 0x0406 tx timeout [ 1053.199817][T11978] Bluetooth: hci3: command 0x0406 tx timeout [ 1054.305734][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.661938][T12200] loop1: detected capacity change from 0 to 2048 [ 1057.779049][T12201] dummy0 speed is unknown, defaulting to 1000 [ 1058.760465][T12200] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1059.914677][T12198] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1060.319037][T12223] loop4: detected capacity change from 0 to 512 [ 1060.425666][T12198] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 1060.878933][T12198] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1060.878933][T12198] [ 1060.982560][T12223] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1062.141200][T12198] EXT4-fs (loop1): Total free blocks count 0 [ 1062.320379][T12198] EXT4-fs (loop1): Free/Dirty block details [ 1062.475723][T12198] EXT4-fs (loop1): free_blocks=2415919104 [ 1062.596826][T12198] EXT4-fs (loop1): dirty_blocks=16 [ 1062.701478][T12198] EXT4-fs (loop1): Block reservation details [ 1062.714385][T12223] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 1062.819138][T12198] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1063.469896][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 1064.726273][T12242] loop1: detected capacity change from 0 to 40427 [ 1064.792355][T12242] F2FS-fs (loop1): invalid crc value [ 1064.852186][T12242] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1064.900228][T12242] F2FS-fs (loop1): Start checkpoint disabled! [ 1064.967153][T12242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1067.329404][T12260] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1067.329404][T12260] program syz.0.1935 not setting count and/or reply_len properly [ 1067.377557][ T29] kworker/u4:2: attempt to access beyond end of device [ 1067.377557][ T29] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1073.437799][T12295] loop5: detected capacity change from 0 to 40427 [ 1073.452045][T12293] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1073.458621][T12293] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1073.467341][T12295] F2FS-fs (loop5): invalid crc value [ 1073.617819][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 1073.679621][T12293] vhci_hcd vhci_hcd.0: Device attached [ 1073.992840][T12295] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1074.029301][T12295] F2FS-fs (loop5): Start checkpoint disabled! [ 1074.108301][T12293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1074.124788][T12293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1074.134591][T12293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1074.242157][T12151] usb 33-1: new high-speed USB device number 11 using vhci_hcd [ 1077.114647][T12294] vhci_hcd: connection reset by peer [ 1077.150440][ T4694] vhci_hcd: stop threads [ 1077.157818][T12313] tipc: Started in network mode [ 1077.163119][T12313] tipc: Node identity 9654492963da, cluster identity 4711 [ 1077.170353][T12313] tipc: Enabled bearer , priority 0 [ 1077.175891][ T4694] vhci_hcd: release socket [ 1077.180526][T12313] device syzkaller0 entered promiscuous mode [ 1077.242936][ T4694] vhci_hcd: disconnect device [ 1078.281829][ T5274] tipc: Node number set to 4119742761 [ 1078.799158][T12325] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1947'. [ 1078.866130][T12313] tipc: Resetting bearer [ 1078.930408][T12312] tipc: Resetting bearer [ 1079.471800][T12332] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1952'. [ 1079.585319][T12312] tipc: Disabling bearer [ 1079.662887][T12321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1079.683681][T12321] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1079.761237][T12321] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1079.773190][T12321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1079.779512][T12321] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1079.788704][T12321] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1079.878792][T12321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1079.911989][T12321] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1079.928037][T12321] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1080.285994][T12321] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1080.300231][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1954'. [ 1080.320982][T12321] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1080.335551][T12321] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1080.354397][T12321] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1080.380725][T12321] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1080.388071][T12321] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1080.542539][T12151] vhci_hcd: vhci_device speed not set [ 1080.736551][T11978] Bluetooth: hci0: command 0x0c1a tx timeout [ 1080.743067][ T4331] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1081.201758][ T4331] usb 2-1: Using ep0 maxpacket: 8 [ 1081.234438][ T4331] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1081.244679][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.291823][ T4331] usb 2-1: Product: syz [ 1081.296731][ T4331] usb 2-1: Manufacturer: syz [ 1081.301467][ T4331] usb 2-1: SerialNumber: syz [ 1081.321630][ T4331] usb 2-1: config 0 descriptor?? [ 1081.573856][ T4331] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1081.821658][T11978] Bluetooth: hci2: command 0x0c1a tx timeout [ 1081.901717][T11978] Bluetooth: hci3: command 0x0c1a tx timeout [ 1082.311670][T11978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1082.333498][T12355] loop4: detected capacity change from 0 to 40427 [ 1082.341268][ T4331] usb write operation failed. (-71) [ 1082.368075][ T4331] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1082.381660][T11978] Bluetooth: hci5: command 0x0c1a tx timeout [ 1082.392163][T12355] F2FS-fs (loop4): invalid crc value [ 1082.423284][ T4331] dvbdev: DVB: registering new adapter (Terratec H7) [ 1082.432213][T12355] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1082.463219][ T4331] usb 2-1: media controller created [ 1082.479155][T12355] F2FS-fs (loop4): Start checkpoint disabled! [ 1082.488985][ T4331] usb read operation failed. (-71) [ 1082.495696][ T4331] usb write operation failed. (-71) [ 1082.503486][ T4331] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 1082.512882][ T4331] usb 2-1: USB disconnect, device number 10 [ 1082.519283][T12355] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1082.781702][T11978] Bluetooth: hci0: command 0x0406 tx timeout [ 1083.406046][T12363] loop1: detected capacity change from 0 to 512 [ 1083.434944][T12363] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1083.451109][ T4369] kworker/u4:7: attempt to access beyond end of device [ 1083.451109][ T4369] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1083.568755][T12363] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 1083.902289][T11978] Bluetooth: hci2: command 0x0406 tx timeout [ 1083.991724][T11978] Bluetooth: hci3: command 0x0406 tx timeout [ 1084.440731][T11978] Bluetooth: hci4: command 0x0406 tx timeout [ 1084.461691][T11978] Bluetooth: hci5: command 0x0406 tx timeout [ 1086.664306][T12376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1086.682511][T12376] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1086.689695][T12376] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1086.723898][T12376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1086.756882][T12376] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1086.782284][T12376] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1087.752818][T12397] loop4: detected capacity change from 0 to 2048 [ 1087.840658][T12376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1087.870362][T12376] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1087.889360][T12376] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1087.897779][T12397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1088.051928][T12376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1088.062040][T11978] Bluetooth: hci0: command 0x0c1a tx timeout [ 1088.426170][T12395] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1088.441688][T12395] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 1088.454128][T12395] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1088.454128][T12395] [ 1088.464529][T12395] EXT4-fs (loop4): Total free blocks count 0 [ 1088.470832][T12395] EXT4-fs (loop4): Free/Dirty block details [ 1088.477337][T12395] EXT4-fs (loop4): free_blocks=2415919104 [ 1088.483437][T12395] EXT4-fs (loop4): dirty_blocks=16 [ 1088.488808][T12395] EXT4-fs (loop4): Block reservation details [ 1088.494988][T12395] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1088.508016][T12376] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1088.547621][T12376] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1088.575714][T12376] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1088.611429][T12376] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1088.635291][T12376] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1088.781780][T11978] Bluetooth: hci2: command 0x0c1a tx timeout [ 1088.881429][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 1088.943615][ T4331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1089.016501][T12424] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1089.023361][T12424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1089.049035][T12424] vhci_hcd vhci_hcd.0: Device attached [ 1089.077716][T12429] loop5: detected capacity change from 0 to 512 [ 1089.151638][ T4331] usb 4-1: Using ep0 maxpacket: 8 [ 1089.160990][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1089.175149][ T4331] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1089.184987][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.193312][ T4331] usb 4-1: Product: syz [ 1089.197648][ T4331] usb 4-1: Manufacturer: syz [ 1089.202501][ T4331] usb 4-1: SerialNumber: syz [ 1089.209032][ T4331] usb 4-1: config 0 descriptor?? [ 1089.238058][T12429] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1089.321670][ T4344] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 1089.381483][T12429] UDF-fs: error (device loop5): udf_read_inode: (ino 19) failed ident=264 [ 1089.423740][ T4331] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1089.434555][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1089.442548][T12427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1089.901881][T11978] Bluetooth: hci3: command 0x0c1a tx timeout [ 1090.033743][ T4331] usb write operation failed. (-71) [ 1090.045577][ T4331] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1090.061690][T11978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1090.088734][ T4331] dvbdev: DVB: registering new adapter (Terratec H7) [ 1090.101821][ T4331] usb 4-1: media controller created [ 1090.117749][ T4331] usb read operation failed. (-71) [ 1090.125779][T12425] vhci_hcd: connection reset by peer [ 1090.125850][ T4331] usb write operation failed. (-71) [ 1090.139339][ T4331] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 1090.146523][T11978] Bluetooth: hci0: command 0x0406 tx timeout [ 1090.164238][ T4331] usb 4-1: USB disconnect, device number 6 [ 1090.170920][ T29] vhci_hcd: stop threads [ 1090.203878][ T4373] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1090.224062][ T29] vhci_hcd: release socket [ 1090.261677][ T29] vhci_hcd: disconnect device [ 1090.327779][ T4373] dvb_usb_az6007: probe of 5-1:0.0 failed with error -110 [ 1090.395913][ T4373] usb 5-1: USB disconnect, device number 11 [ 1090.621691][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 1090.761319][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1978'. [ 1091.106097][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 1092.031720][T11978] Bluetooth: hci3: command 0x0406 tx timeout [ 1092.141653][T11978] Bluetooth: hci4: command 0x0406 tx timeout [ 1092.701713][T11978] Bluetooth: hci5: command 0x0406 tx timeout [ 1092.721623][ T4331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1092.971759][ T4331] usb 1-1: Using ep0 maxpacket: 8 [ 1092.990833][ T4331] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1093.001922][ T4331] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1093.006581][T12466] loop1: detected capacity change from 0 to 2048 [ 1093.013347][ T4331] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1093.023686][T12470] loop5: detected capacity change from 0 to 512 [ 1093.034367][ T4331] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1093.034457][ T4331] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1093.034509][ T4331] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.034567][ T4331] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1093.034622][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.040073][ T4331] usbtmc: probe of 1-1:16.0 failed with error -22 [ 1093.305382][T12470] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1093.363576][T12466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1093.469614][T12470] UDF-fs: error (device loop5): udf_read_inode: (ino 19) failed ident=264 [ 1093.528566][T12471] device vlan2 entered promiscuous mode [ 1093.534389][T12471] device netdevsim0 entered promiscuous mode [ 1093.645856][ T4373] usb 1-1: USB disconnect, device number 9 [ 1093.936123][T12462] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1093.951678][T12462] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 1093.964226][T12462] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1093.964226][T12462] [ 1093.974216][T12462] EXT4-fs (loop1): Total free blocks count 0 [ 1093.980297][T12462] EXT4-fs (loop1): Free/Dirty block details [ 1093.986617][T12462] EXT4-fs (loop1): free_blocks=2415919104 [ 1093.992538][T12462] EXT4-fs (loop1): dirty_blocks=16 [ 1093.998416][T12462] EXT4-fs (loop1): Block reservation details [ 1094.004748][T12462] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1094.461726][ T4344] vhci_hcd: vhci_device speed not set [ 1094.486530][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 1094.972250][ T4331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1095.171661][ T4331] usb 1-1: Using ep0 maxpacket: 32 [ 1095.184420][ T4331] usb 1-1: config 32 has an invalid interface number: 40 but max is 0 [ 1095.193518][ T4331] usb 1-1: config 32 has no interface number 0 [ 1095.199934][ T4331] usb 1-1: config 32 interface 40 has no altsetting 0 [ 1095.214120][ T4331] usb 1-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=60.3f [ 1095.319877][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.330939][ T4331] usb 1-1: Product: syz [ 1095.335818][ T4331] usb 1-1: Manufacturer: syz [ 1095.340688][ T4331] usb 1-1: SerialNumber: syz [ 1095.352398][ T4331] belkin_sa 1-1:32.40: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1095.364068][ T4331] usb 1-1: bcdDevice: 603f, bfc: 0 [ 1095.410486][ T4331] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1095.632317][T12498] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1095.638902][T12498] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1095.652552][T12492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.670451][T12498] vhci_hcd vhci_hcd.0: Device attached [ 1095.687938][T12492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.740277][ T4373] usb 1-1: USB disconnect, device number 10 [ 1095.772262][ T4373] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1095.794411][ T4373] belkin_sa 1-1:32.40: device disconnected [ 1095.812300][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1095.830789][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1095.840798][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1095.962128][ T4344] usb 43-1: new high-speed USB device number 9 using vhci_hcd [ 1096.773794][T12501] vhci_hcd: connection reset by peer [ 1096.788734][T10085] vhci_hcd: stop threads [ 1096.795626][T10085] vhci_hcd: release socket [ 1096.806110][T10085] vhci_hcd: disconnect device [ 1101.473303][T12557] loop3: detected capacity change from 0 to 256 [ 1101.506665][T12557] exfat: Deprecated parameter 'utf8' [ 1101.531783][T12557] exfat: Deprecated parameter 'namecase' [ 1101.541687][T12557] exfat: Bad value for 'gid' [ 1101.684211][T12567] loop4: detected capacity change from 0 to 512 [ 1101.821693][ T4344] vhci_hcd: vhci_device speed not set [ 1102.582335][T12567] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1102.962866][T12577] loop1: detected capacity change from 0 to 40427 [ 1103.293595][T12577] F2FS-fs (loop1): invalid crc value [ 1103.421579][T12577] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1103.441964][T12567] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 1103.474036][T12577] F2FS-fs (loop1): Start checkpoint disabled! [ 1103.962286][T12577] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1104.106074][ T27] audit: type=1804 audit(1752203574.753:69): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2015" name="/newroot/418/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 1104.377830][ T27] audit: type=1804 audit(1752203574.773:70): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2015" name="/newroot/418/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 1104.992559][ T29] kworker/u4:2: attempt to access beyond end of device [ 1104.992559][ T29] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1105.488436][T11978] Bluetooth: Frame is too long (len 18, expected len 4) [ 1106.555058][T12619] loop3: detected capacity change from 0 to 256 [ 1106.739255][T12619] exfat: Deprecated parameter 'utf8' [ 1106.824671][T12619] exfat: Deprecated parameter 'namecase' [ 1107.121840][T12619] exfat: Bad value for 'gid' [ 1108.461862][T11978] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1108.916608][T12642] 9pnet_fd: Insufficient options for proto=fd [ 1109.274897][T12653] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1109.382182][T12654] vivid-007: ================= START STATUS ================= [ 1109.390504][T12654] vivid-007: Enable Output Cropping: true [ 1109.396680][T12654] vivid-007: Enable Output Composing: true [ 1109.403280][T12654] vivid-007: Enable Output Scaler: true [ 1109.409185][T12654] vivid-007: Tx RGB Quantization Range: Automatic [ 1109.416146][T12654] vivid-007: Transmit Mode: HDMI [ 1109.421472][T12654] vivid-007: Display Present: true inactive [ 1109.428970][T12654] vivid-007: Hotplug Present: 0x00000001 [ 1109.534822][T12654] vivid-007: RxSense Present: 0x00000001 [ 1109.556329][T12654] vivid-007: EDID Present: 0x00000001 [ 1109.562902][T12654] vivid-007: ================== END STATUS ================== [ 1115.172144][T12677] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1115.178729][T12677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1115.743751][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.081925][T12677] vhci_hcd vhci_hcd.0: Device attached [ 1116.161591][T12690] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1116.481608][ T4373] usb 33-1: new high-speed USB device number 12 using vhci_hcd [ 1117.241597][T12695] vivid-007: ================= START STATUS ================= [ 1117.249364][T12695] vivid-007: Enable Output Cropping: true [ 1117.255423][T12695] vivid-007: Enable Output Composing: true [ 1117.261429][T12695] vivid-007: Enable Output Scaler: true [ 1117.267423][T12695] vivid-007: Tx RGB Quantization Range: Automatic [ 1117.274043][T12695] vivid-007: Transmit Mode: HDMI [ 1117.279128][T12695] vivid-007: Display Present: true inactive [ 1117.285187][T12695] vivid-007: Hotplug Present: 0x00000001 [ 1117.290961][T12695] vivid-007: RxSense Present: 0x00000001 [ 1117.303354][T12695] vivid-007: EDID Present: 0x00000001 [ 1117.308995][T12695] vivid-007: ================== END STATUS ================== [ 1117.471394][T12679] vhci_hcd: connection reset by peer [ 1117.482990][ T4346] vhci_hcd: stop threads [ 1117.487330][ T4346] vhci_hcd: release socket [ 1117.523881][ T4346] vhci_hcd: disconnect device [ 1118.330642][T12706] Cannot find del_set index 0 as target [ 1119.643911][T12714] netlink: 'syz.4.2050': attribute type 11 has an invalid length. [ 1119.861278][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2052'. [ 1120.163805][T12725] vivid-007: ================= START STATUS ================= [ 1120.171679][T12725] vivid-007: Enable Output Cropping: true [ 1120.177653][T12725] vivid-007: Enable Output Composing: true [ 1120.183708][T12725] vivid-007: Enable Output Scaler: true [ 1120.189403][T12725] vivid-007: Tx RGB Quantization Range: Automatic [ 1120.196096][T12725] vivid-007: Transmit Mode: HDMI [ 1120.201144][T12725] vivid-007: Display Present: true inactive [ 1120.207356][T12725] vivid-007: Hotplug Present: 0x00000001 [ 1120.298562][T12725] vivid-007: RxSense Present: 0x00000001 [ 1120.321220][T12725] vivid-007: EDID Present: 0x00000001 [ 1120.327107][T12725] vivid-007: ================== END STATUS ================== [ 1122.072133][ T4373] vhci_hcd: vhci_device speed not set [ 1123.747185][T12731] loop3: detected capacity change from 0 to 40427 [ 1124.484638][T12731] F2FS-fs (loop3): invalid crc value [ 1124.801123][T12731] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1124.859526][T12731] F2FS-fs (loop3): Start checkpoint disabled! [ 1124.933964][T12731] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1125.091918][ T27] audit: type=1804 audit(1752203595.733:71): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2056" name="/newroot/399/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 1125.258097][T12743] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1125.385338][T12748] vivid-007: ================= START STATUS ================= [ 1125.393294][T12748] vivid-007: Enable Output Cropping: true [ 1125.406071][T12748] vivid-007: Enable Output Composing: true [ 1125.412214][T12748] vivid-007: Enable Output Scaler: true [ 1125.418055][T12748] vivid-007: Tx RGB Quantization Range: Automatic [ 1125.424833][T12748] vivid-007: Transmit Mode: HDMI [ 1125.430376][T12748] vivid-007: Display Present: true inactive [ 1125.446338][T12748] vivid-007: Hotplug Present: 0x00000001 [ 1125.452480][T12748] vivid-007: RxSense Present: 0x00000001 [ 1125.458380][T12748] vivid-007: EDID Present: 0x00000001 [ 1125.464043][T12748] vivid-007: ================== END STATUS ================== [ 1125.842156][ T27] audit: type=1804 audit(1752203595.763:72): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2056" name="/newroot/399/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 1126.247420][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 1126.935773][T12755] dummy0 speed is unknown, defaulting to 1000 [ 1126.936314][ T46] kworker/u4:3: attempt to access beyond end of device [ 1126.936314][ T46] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1130.517104][ T4331] libceph: connect (1)[c::]:6789 error -101 [ 1130.527640][ T4331] libceph: mon0 (1)[c::]:6789 connect error [ 1130.915563][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1130.925360][T12776] ceph: No mds server is up or the cluster is laggy [ 1130.957487][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1131.507188][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1131.542907][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1131.911652][T11978] Bluetooth: hci5: command 0x0405 tx timeout [ 1135.683040][T12814] loop4: detected capacity change from 0 to 512 [ 1135.734480][T12814] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1135.784727][T12814] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 1138.846218][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 1140.589922][T12848] fuse: Bad value for 'fd' [ 1142.122719][T12869] loop3: detected capacity change from 0 to 512 [ 1142.396177][T12869] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1142.817040][T12869] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 1144.619806][T12894] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2089'. [ 1145.238158][T12902] loop4: detected capacity change from 0 to 256 [ 1145.277296][T12902] exfat: Deprecated parameter 'utf8' [ 1145.284913][T12902] exfat: Deprecated parameter 'namecase' [ 1145.334570][T12902] exfat: Bad value for 'gid' [ 1146.311739][T12887] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1146.381716][T11978] Bluetooth: hci0: command 0x0c1a tx timeout [ 1147.095097][T12887] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1147.248235][T12887] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1147.265440][T12887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1147.304228][T12887] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1147.310234][T12887] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1147.360646][T12887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1147.369958][T12887] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1147.389152][T12887] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1147.406133][T12887] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1147.425196][T12887] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1147.445659][T12887] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1147.609354][T12887] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1149.111604][T11978] Bluetooth: hci0: command 0x0406 tx timeout [ 1149.117799][T12887] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1149.148418][T12887] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1149.341642][T11978] Bluetooth: hci2: command 0x0c1a tx timeout [ 1149.431842][T11978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1149.438098][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1149.661869][T11978] Bluetooth: hci5: command 0x0c1a tx timeout [ 1151.421616][T11978] Bluetooth: hci2: command 0x0406 tx timeout [ 1151.511780][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 1151.516681][T11978] Bluetooth: hci4: command 0x0406 tx timeout [ 1151.741641][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 1151.957401][T12953] loop1: detected capacity change from 0 to 256 [ 1151.972283][T12953] exfat: Deprecated parameter 'utf8' [ 1152.042430][T12953] exfat: Deprecated parameter 'namecase' [ 1152.112784][T12953] exfat: Bad value for 'gid' [ 1154.458597][T12975] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2121'. [ 1155.502422][T12968] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1155.511707][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 1155.521906][T12968] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 1155.581456][T12979] loop0: detected capacity change from 0 to 512 [ 1155.631769][T12968] Bluetooth: hci0: Suspend notifier action (1) failed: -110 [ 1155.825196][T12979] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1155.915708][T12979] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264 [ 1156.603504][T12968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1156.663220][T12968] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1156.694821][T12968] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1157.058835][T12968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1157.091474][T12968] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1157.152191][T12968] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1157.159520][T12968] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1157.303184][T12968] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1157.321858][T12968] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1157.381065][T12968] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1157.391403][T12968] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1157.408994][T12968] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1157.581682][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 1157.671831][T11978] Bluetooth: hci2: command 0x0c1a tx timeout [ 1158.564814][T13016] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1158.664004][T13020] vivid-007: ================= START STATUS ================= [ 1158.671961][T13020] vivid-007: Enable Output Cropping: true [ 1158.677988][T13020] vivid-007: Enable Output Composing: true [ 1158.683970][T13020] vivid-007: Enable Output Scaler: true [ 1158.689697][T13020] vivid-007: Tx RGB Quantization Range: Automatic [ 1158.696395][T13020] vivid-007: Transmit Mode: HDMI [ 1158.701446][T13020] vivid-007: Display Present: true inactive [ 1158.707680][T13020] vivid-007: Hotplug Present: 0x00000001 [ 1158.724923][T13020] vivid-007: RxSense Present: 0x00000001 [ 1158.730840][T13020] vivid-007: EDID Present: 0x00000001 [ 1158.737206][T13020] vivid-007: ================== END STATUS ================== [ 1159.101775][T11978] Bluetooth: hci3: command 0x0c1a tx timeout [ 1159.181657][T11978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1159.421625][T11978] Bluetooth: hci5: command 0x0c1a tx timeout [ 1159.751687][T11978] Bluetooth: hci2: command 0x0406 tx timeout [ 1161.191647][T11978] Bluetooth: hci3: command 0x0406 tx timeout [ 1161.261635][T11978] Bluetooth: hci4: command 0x0406 tx timeout [ 1161.501606][T11978] Bluetooth: hci5: command 0x0406 tx timeout [ 1162.787650][T13038] vivid-007: ================= START STATUS ================= [ 1162.795706][T13038] vivid-007: Enable Output Cropping: true [ 1162.801860][T13038] vivid-007: Enable Output Composing: true [ 1162.808394][T13038] vivid-007: Enable Output Scaler: true [ 1162.814366][T13038] vivid-007: Tx RGB Quantization Range: Automatic [ 1162.821050][T13038] vivid-007: Transmit Mode: HDMI [ 1162.826375][T13038] vivid-007: Display Present: true inactive [ 1162.832785][T13038] vivid-007: Hotplug Present: 0x00000001 [ 1163.136876][T13038] vivid-007: RxSense Present: 0x00000001 [ 1163.142952][T13038] vivid-007: EDID Present: 0x00000001 [ 1163.148695][T13038] vivid-007: ================== END STATUS ================== [ 1166.976330][T13052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1167.042134][T13052] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1167.264453][T13052] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1167.338698][T13052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1167.358147][T13052] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1167.403796][T13052] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1167.440418][T13052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1167.454517][T13052] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1167.470885][T13052] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1167.794841][T13052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1167.809111][T13052] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1167.833163][T13052] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1167.845091][T13052] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1167.864349][T13052] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1167.886731][T13052] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1168.097139][T13079] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1168.392631][T13081] vivid-007: ================= START STATUS ================= [ 1168.401064][T13081] vivid-007: Enable Output Cropping: true [ 1168.407153][T13081] vivid-007: Enable Output Composing: true [ 1168.413219][T13081] vivid-007: Enable Output Scaler: true [ 1168.418943][T13081] vivid-007: Tx RGB Quantization Range: Automatic [ 1168.425621][T13081] vivid-007: Transmit Mode: HDMI [ 1168.430747][T13081] vivid-007: Display Present: true inactive [ 1168.436827][T13081] vivid-007: Hotplug Present: 0x00000001 [ 1168.451316][T13081] vivid-007: RxSense Present: 0x00000001 [ 1168.457290][T13081] vivid-007: EDID Present: 0x00000001 [ 1168.462923][T13081] vivid-007: ================== END STATUS ================== [ 1169.341652][T11978] Bluetooth: hci2: command 0x0c1a tx timeout [ 1169.503410][T11978] Bluetooth: hci3: command 0x0c1a tx timeout [ 1169.821683][T11978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1169.911646][T11978] Bluetooth: hci5: command 0x0c1a tx timeout [ 1170.381659][T11978] Bluetooth: hci0: command 0x0406 tx timeout [ 1170.389425][T13080] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1170.932561][T13080] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1170.949150][T13080] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1171.491682][T11978] Bluetooth: hci2: command 0x0406 tx timeout [ 1171.581595][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 1171.694668][T13080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1172.202591][T11978] Bluetooth: hci4: command 0x0406 tx timeout [ 1172.208919][T11978] Bluetooth: hci5: command 0x0406 tx timeout [ 1172.216502][T13080] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1172.247705][T13080] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1172.332509][T13080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1172.344207][T13080] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1172.350196][T13080] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1172.358606][T13080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1172.377656][T13080] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1172.397668][T13080] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1172.411866][T13080] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1172.418902][T13080] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1172.461766][T11978] Bluetooth: hci0: command 0x0c1a tx timeout [ 1172.474910][T13080] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1173.741633][T11978] Bluetooth: hci2: command 0x0c1a tx timeout [ 1174.381661][T11978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1174.387785][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1174.461616][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 1174.541610][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 1176.152776][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 1176.484321][T11978] Bluetooth: hci4: command 0x0406 tx timeout [ 1176.490830][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 1176.541729][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 1177.187409][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.294659][T13144] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1179.417168][T13148] vivid-007: ================= START STATUS ================= [ 1179.425191][T13148] vivid-007: Enable Output Cropping: true [ 1179.431239][T13148] vivid-007: Enable Output Composing: true [ 1179.437453][T13148] vivid-007: Enable Output Scaler: true [ 1179.443381][T13148] vivid-007: Tx RGB Quantization Range: Automatic [ 1179.450055][T13148] vivid-007: Transmit Mode: HDMI [ 1179.455262][T13148] vivid-007: Display Present: true inactive [ 1179.461578][T13148] vivid-007: Hotplug Present: 0x00000001 [ 1179.492297][T13148] vivid-007: RxSense Present: 0x00000001 [ 1179.499593][T13148] vivid-007: EDID Present: 0x00000001 [ 1179.505569][T13148] vivid-007: ================== END STATUS ================== [ 1183.100584][T13158] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1184.781602][T11532] Bluetooth: hci0: command 0x0c1a tx timeout [ 1185.073348][T13158] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1185.151013][T13158] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1185.285646][T13158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1185.364267][T13158] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1185.370304][T13158] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1185.531344][T13158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1185.595626][T13158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1185.667162][T13158] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1185.718732][T13158] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1185.739141][T13158] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1185.747295][T13158] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1185.765328][T13158] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1185.776540][T13158] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1185.819206][T13158] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1186.381475][T13187] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1186.559142][T13187] loop4: detected capacity change from 0 to 512 [ 1187.101646][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 1187.341616][T11532] Bluetooth: hci2: command 0x0c1a tx timeout [ 1187.581647][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1187.741734][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 1187.821784][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 1188.297183][T13193] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2180' sets config #0 [ 1188.327320][T13191] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2180' sets config #1 [ 1188.672297][T13187] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1188.704232][T13187] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 1188.815931][T13200] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 1189.397843][T13202] vivid-007: ================= START STATUS ================= [ 1189.405694][T13202] vivid-007: Enable Output Cropping: true [ 1189.411835][T13202] vivid-007: Enable Output Composing: true [ 1189.417814][T13202] vivid-007: Enable Output Scaler: true [ 1189.423640][T13202] vivid-007: Tx RGB Quantization Range: Automatic [ 1189.430629][T13202] vivid-007: Transmit Mode: HDMI [ 1189.431617][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 1189.442653][T13202] vivid-007: Display Present: true inactive [ 1189.457487][T13202] vivid-007: Hotplug Present: 0x00000001 [ 1189.463652][T13202] vivid-007: RxSense Present: 0x00000001 [ 1189.469595][T13202] vivid-007: EDID Present: 0x00000001 [ 1189.475368][T13202] vivid-007: ================== END STATUS ================== [ 1189.672428][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 1189.823660][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 1189.901742][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 1190.916648][T13232] loop0: detected capacity change from 0 to 256 [ 1191.027900][T13232] exfat: Deprecated parameter 'utf8' [ 1191.207781][T13232] exfat: Deprecated parameter 'namecase' [ 1191.217919][T13232] exfat: Bad value for 'gid' [ 1194.016471][T13245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 Stopping sshd: [ 1194.072204][T13245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1194.084871][T13245] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1194.126398][T13266] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1194.133986][T13245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1194.212041][T13245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1194.223936][T13267] loop5: detected capacity change from 0 to 512 [ 1194.228361][T13245] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1194.271066][T13245] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1194.301283][T13267] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 stopped /usr/sbin/sshd (pid 4028[ 1194.334974][T13245] Bluetooth: hci3: Opcode 0x0406 failed: -4 ) [ 1194.336990][T13269] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 OK [ 1194.392656][T13245] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1194.400269][T13266] UDF-fs: error (device loop5): udf_read_inode: (ino 19) failed ident=264 [ 1194.426824][T13245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1194.490865][T13271] vivid-007: ================= START STATUS ================= [ 1194.498943][T13271] vivid-007: Enable Output Cropping: true [ 1194.504914][T13271] vivid-007: Enable Output Composing: true [ 1194.510841][T13271] vivid-007: Enable Output Scaler: true [ 1194.516557][T13271] vivid-007: Tx RGB Quantization Range: Automatic [ 1194.523230][T13271] vivid-007: Transmit Mode: HDMI [ 1194.528343][T13271] vivid-007: Display Present: true inactive [ 1194.534493][T13271] vivid-007: Hotplug Present: 0x00000001 [ 1194.540262][T13271] vivid-007: RxSense Present: 0x00000001 [ 1194.555580][T13271] vivid-007: EDID Present: 0x00000001 [ 1194.561211][T13271] vivid-007: ================== END STATUS ================== [ 1194.781617][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 1195.198911][T13245] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1195.208620][T13245] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1195.216459][T13245] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1195.555241][T13245] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1195.561271][T13245] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1196.151619][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 1196.301652][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1196.491746][ T4277] Bluetooth: hci4: command 0x0c1a tx timeout [ 1196.871828][T11532] Bluetooth: hci0: command 0x0406 tx timeout Stopping crond: [ 1197.261779][ T4277] Bluetooth: hci5: command 0x0c1a tx timeout [ 1197.531749][ T26] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1197.792050][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 1197.838071][ T26] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1197.865168][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1197.874237][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1197.881818][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1198.009538][T13307] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1198.016109][T13307] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1198.035809][T13307] vhci_hcd vhci_hcd.0: Device attached stopped /usr/sbin/crond (pid 4011)[ 1198.049520][T13308] vhci_hcd: connection closed [ 1198.050423][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.050627][ T4349] vhci_hcd: stop threads [ 1198.103997][ T26] usb 6-1: Product: syz OK [ 1198.117346][ T26] usb 6-1: Manufacturer: syz [ 1198.122384][ T26] usb 6-1: SerialNumber: syz [ 1198.129654][ T26] usb 6-1: config 0 descriptor?? [ 1198.148995][ T26] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1198.221652][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 1198.391641][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 1198.421588][ T4344] usb 41-1: new high-speed USB device number 7 using vhci_hcd [ 1198.541662][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 1199.062870][ T4349] vhci_hcd: release socket [ 1199.068077][ T4349] vhci_hcd: disconnect device [ 1199.341670][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 1200.566391][T13327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1200.584078][T13327] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1200.594276][T13327] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1200.641935][T13327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1200.684467][T13327] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1200.690554][T13327] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1200.765204][T13327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1200.984061][T13337] vxfs: WRONG superblock magic 00000000 at 1 [ 1200.990880][T13337] vxfs: WRONG superblock magic 00000000 at 8 [ 1200.997025][T13337] vxfs: can't find superblock. [ 1201.003586][T13327] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1201.011798][ T26] gspca_stk1135: reg_w 0x203 err -71 [ 1201.018340][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.024883][ T26] gspca_stk1135: Sensor write failed [ 1201.030377][T13327] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1201.037654][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.044449][ T26] gspca_stk1135: Sensor write failed [ 1201.049871][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.056472][ T26] gspca_stk1135: Sensor read failed [ 1201.061867][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.068393][ T26] gspca_stk1135: Sensor read failed [ 1201.071745][T13327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1201.073896][ T26] gspca_stk1135: Detected sensor type unknown (0x0) [ 1201.086485][T13327] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1201.092822][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.099327][ T26] gspca_stk1135: Sensor read failed [ 1201.105432][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.112032][ T26] gspca_stk1135: Sensor read failed [ 1201.117374][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.121754][T13327] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1201.123972][ T26] gspca_stk1135: Sensor write failed [ 1201.131328][T13327] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1201.136468][ T26] gspca_stk1135: serial bus timeout: status=0x00 [ 1201.149032][ T26] gspca_stk1135: Sensor write failed [ 1201.154535][ T26] stk1135: probe of 6-1:0.0 failed with error -71 [ 1201.163626][ T26] usb 6-1: USB disconnect, device number 10 [ 1201.177301][T13327] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1201.186339][T13327] Bluetooth: hci5: Suspend notifier action (1) failed: -4 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3933) [ 1201.581685][ T4277] Bluetooth: hci0: command 0x0c1a tx timeout [ 1202.701611][ T4277] Bluetooth: hci2: command 0x0c1a tx timeout [ 1202.783598][ T4277] Bluetooth: hci3: command 0x0c1a tx timeout [ 1202.845651][ T4277] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 1202.870219][T13370] netlink: 'syz.0.2220': attribute type 4 has an invalid length. serialport: VM disconnected.