last executing test programs: 53.877570696s ago: executing program 2 (id=833): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000001880)="b9", 0x1}], 0x1) 53.232391899s ago: executing program 3 (id=839): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x26, &(0x7f0000000640)={0x1, 0x0, 0x10000008, 0x6006}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x7, 0x10}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x2, 0x2, 0xc, 0xf05}) 53.142198476s ago: executing program 2 (id=841): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x130, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0xe0, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xcc, 0x6, [@m_mirred={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x29, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x70, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x41, 0x6, "216194e50e7faa7649d1c06839be3b59a7f1bb6c7fbd0e7344b4e9b561d4b406f4a7a0c7e6ebe935ccd4c10fd3ff9357cc52da0d5a0f390e738e2309da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 52.985296259s ago: executing program 3 (id=844): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0) 52.85542592s ago: executing program 2 (id=846): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x7}, 0x2) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 52.744280109s ago: executing program 3 (id=849): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c003a579da66b5c8b1eba83198de0855eeffdd30d734e2f8ae9290d5398a81393ef4b30b7050b551c2ef52a88c993b032d62634fe7877f07d881c98a580d3fdfeeedf901e5b45e43a5eeae8a314fd67dce3592212b2f38b3405da772948598507a55f7ebd1097370eb7412c24af39afb14d6de035be4de91b989e08177c2d75b64b8dd41197d24341d36a15980dd2a69888d9"], 0x1, 0x24b, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000080)='./bus\x00', 0x141bc2, 0x1c0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 52.601663061s ago: executing program 3 (id=851): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000004c0)={[], [{@uid_lt={'uid<', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x7, 0x4ad, &(0x7f0000000b40)="$eJzs3E9sFNUfAPDv7B9a4MeP/vghCqIW0dhobKGgcPCC0cSDJkY86LFpC0EKNbQmQoiWxODRkHg3Hr168KrejCcTr3jwYGJIiOECeBozuzPtdv+0tGy74H4+ydL3Zt7se99982bfztslgL41nP2TRPwnIq5HxM56dnmB4fqfO7cuT969dXkyFtL05F9JrdztLJ8rjtueZ0ZKEaXPkqYnrJu7eOnsxMzM9IU8PzZ/7sOxuYuXXjxzbuL09Onp8+PHjx89cvjYy+MvrT2oNvVlcd3e98ns/r1vvH/trclKsX0w/9sYR7cMx3C7ptQ82+3KemxHQzqp9LAhrEl2/pcjolob/zujHDoP+kWapulA590LabMrLVuAh1YSvW4B0BvFG332+bd4bNLU44Fw80RE9pEni/tO/qjvqUQpL1Nt+nzbTcMR8d7C319lj1jpPsTvG9QAAKDv/HCimAk2z/9Ksaeh3H/zNZShiPhfROyKiP9HxO6IeCSiVvbRiHisuYIkIl2h/t1N+db5T+nG/cS3mmz+90q+trV8/lfM/mKonOd2RBQT5ulD+WsyEtWBU2dmpg+vUMePr/36Rad9jfO/7JHVX8wF83bcqDTdoJuamJ9Yd8BNbl6J2Fdpjj+pZB1XrAQkEbE3Ivat4XmHGtJnnv9m/2Kmurzc6vHXpG3X0bqwVJF+HfFcvf8XYln/L9WYrLw+OTYYM9OHxrKz4FDbOn7+5erbnepfNf7v/mg+5PVj35+837AXZf2/reH8j2L9din+oSQiWVyvnVt7HVd/+7z2vMMHW/et9/zfkrxbS2/Jt308MT9/4XDEluTN1u3jS8cW+aJ8Fv/Iwfbjf1d+TPZKPB4R2Un8REQ8GRFP5W0/EBFPR0Sb0Bb99OozH3Tad4/n/4bJ4p9qe/1b1v9L6/XrSJTPHrh+t8PF4976/2gtNZJvaX/9S5ZdIu61gV14CQEAAOCBV4rad/9Lo4vpUml0tH4PaHdsK83Mzs2/cGr2o/NT9d8IDEW1VNzpqt8PribF/c+hhvx4U/5Ift/4y/LWWn50cnZmqtfBQ5/bXhvzScv4z/xZ7nXrgA3nJz/Qv1Yb/3uubVJDgE3n/R/6V8P4X+hQZME3ZeDfyfs/9K924//TdRwDPFxSYxn6mvEP/asS7yymSz1tCbDZvP9DX7qf3/WvnkgH2u8ajNbCMbgxzdjapq6eJLKZVU9q37qeo4r/TaFjmSit7QkHonVXObodcjUiVi18ek/XT/40/658t3vw200Zp+0SPbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdN0/AQAA///SQd2t") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) 52.431597695s ago: executing program 3 (id=852): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd26, 0x0, {{0x2}, {@void, @void}}, [@chandef_params]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 52.00079215s ago: executing program 3 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 51.653867488s ago: executing program 32 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 51.6290037s ago: executing program 2 (id=863): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000004c0)={[], [{@uid_lt={'uid<', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x7, 0x4ad, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) 51.300007487s ago: executing program 2 (id=866): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) 50.706164246s ago: executing program 2 (id=871): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '\xa9N\xff', 0x20, 0x1000}, 0x2f, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 50.310696158s ago: executing program 33 (id=871): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '\xa9N\xff', 0x20, 0x1000}, 0x2f, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 4.384041551s ago: executing program 0 (id=1282): setresgid(0xee00, 0xee01, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x444a, &(0x7f0000008c00)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 3.153666062s ago: executing program 1 (id=1293): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) 3.093328937s ago: executing program 5 (id=1294): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) recvmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x8040, 0x0) 3.021251253s ago: executing program 0 (id=1295): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf406307302079790102030109021209015f6560700904010800ff"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 2.9299332s ago: executing program 5 (id=1297): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x800, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.758091304s ago: executing program 5 (id=1298): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xdc, 0x7a, 0x22, 0x40, 0xac8, 0x321, 0xa1c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x20, 0x0, 0x63, 0x74, 0x11}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 2.577204389s ago: executing program 4 (id=1299): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(r0, &(0x7f0000000000)) 2.518193254s ago: executing program 1 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 2.419985382s ago: executing program 1 (id=1301): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 2.130302715s ago: executing program 4 (id=1302): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x7, r1, 0x0, &(0x7f00005ca000/0x2000)=nil, 0x2000}) 1.985277347s ago: executing program 4 (id=1303): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c000102030109022900010000000009040000000202010005020000"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 1.526985445s ago: executing program 1 (id=1304): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$eJzs3F1rHFUYAOB3pvmwqbpRqxdaMFLE4McmaUpssKCCl15Z/8CapCW6bWyzgi25qCD2B6g/QLysP8EL8U4QvClee6cUiqS9lpXZnU3GzW7M1zLafR44cN6ZWc68M7N7Ts4cEsDQmoqImxExFhEfRkQl357kJd5ql+y4B5sbS1lJotm88GfS2n9/c2MpCp/JnMiD6TQi/TyJ53q0u379xke1en3lWh7PNC5/PLN+/cZrq5drl1YurVyZn11cnJ0/t7C4cGS5/h63fjt/553Klz+f/vXHD95bSPL8oyuPozIVU1vXpFv1qBsr2c1CPRkp8UTYlzQijkXESOv7X4ljsX3zKvF9pdSTAwAGotl8sysGAB5+iT4fAIZM5+/++5sbS51SxjxEWe69HRGPtPPvvN9s7xnZehMy2j5kIKYi4ruvX38+KzGg95AAAEU/ZOOfc73Gf2mcKhx3PCIm8rVdj0bEYxHxeGG92EFNdcU7xz/p3UM2sats/He+sLbtQSH/3OSxPMpynozR5OJqfWU2z386RsezeG6XNk5deOavfvuK47+sZO13xoL5edwdGf/nZ5Zrjdphci6691nEsyO98k+2xr9JK++De+Pq7af77fv3/Aer+U3ESz3v//bKvWT39YkzredhpvNU7HTr5Rev9mu/7Pyz+z+xe/6TSXG95vr+2/jp7Oov/fYd9PkfS95v1cfybZ/WGo1rcxFjybs7t5/Z/mwn7hyf5T99uvf3/2RsX4knIuLJiHgqorW97wPdw6v1b184eP6DleW/vK/7v//KxBe37/Rrf2/3/2yrNp1v2cvv315P8DDXDgAAAP4v0tZ8bpJWt+ppWq2253lPxkRaX1tvvHJx7ZMry+1538kYTTszXZXCfOhcPkfYic90xfP5HMpX48dbcXVprb5cdvIAMKRO9On/M3+Ml312AMDADGpxOwDw36X/B4Dho/8HgOGj/weA4aP/B4Dho/8HgKFymP/rp6Ki8rBWyv5lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo198BAAD//z0j1cs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x3fffffffc00, 0x8000000003ff, 0x5, 0x6}) 1.253695898s ago: executing program 1 (id=1305): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10001, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x28, &(0x7f0000000100)="4c287bea56504901967e40dc8c55f811acf1642dfa32d5aa12d16735480878d2f5ecf26117b5d835"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 1.182155734s ago: executing program 1 (id=1306): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x40, 0xd, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.144979496s ago: executing program 5 (id=1307): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x1, @local, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x8}], 0x1c) 1.054166744s ago: executing program 5 (id=1308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x40400) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) 991.800989ms ago: executing program 5 (id=1309): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0x3, 0x4, &(0x7f0000000140)={0x21, "925aa8da002000cfa1fc694e22f8e24d9a00"}}) 832.506522ms ago: executing program 0 (id=1310): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 660.338986ms ago: executing program 0 (id=1311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x4, 0xafb7, 0xffffffff, r1}, 0x10) 600.640221ms ago: executing program 0 (id=1312): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x2, 0x62d2, &(0x7f0000000a40)="$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") io_uring_setup(0x73b6, &(0x7f0000000100)={0x0, 0x59e7, 0x4000, 0x3, 0x1c5}) r0 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 379.055479ms ago: executing program 4 (id=1313): unshare(0x2c060000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x2c020400) 236.244901ms ago: executing program 4 (id=1314): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0), 0x3f, 0x0) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 16.023599ms ago: executing program 0 (id=1315): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='tlb_flush\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6 [ 132.591982][ T7034] EXT4-fs (loop3): Remounting filesystem read-only [ 132.598810][ T7034] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1146: inode #18: comm syz.3.434: cleanup dec ref error -5 [ 132.612072][ T7034] EXT4-fs warning (device loop3): ext4_xattr_block_set:2202: inode #18: comm syz.3.434: dec ref error=-5 [ 132.623090][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 132.667873][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.735752][ T7039] loop3: detected capacity change from 0 to 1024 [ 132.747989][ T7039] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.774148][ T7039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.800384][ T55] apple 0003:05AC:0246.0007: unknown main item tag 0xd [ 132.813250][ T55] apple 0003:05AC:0246.0007: unexpected long global item [ 132.823075][ T55] apple 0003:05AC:0246.0007: parse failed [ 132.834577][ T55] apple: probe of 0003:05AC:0246.0007 failed with error -22 [ 132.851080][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.860954][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.876821][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.884042][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.891273][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.898569][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.905775][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.913161][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.920407][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.927645][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 132.934603][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 132.943642][ T55] usb 3-1: USB disconnect, device number 7 [ 132.956199][ T55] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 133.037127][ T5872] usb 2-1: USB disconnect, device number 4 [ 133.055839][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.065618][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.222636][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 133.301944][ T7053] loop3: detected capacity change from 0 to 64 [ 133.659977][ T7061] loop2: detected capacity change from 0 to 64 [ 133.809911][ T7064] netlink: 'syz.3.445': attribute type 10 has an invalid length. [ 133.862225][ T7066] loop2: detected capacity change from 0 to 1024 [ 133.867805][ T7064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.873885][ T7066] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.889868][ T7064] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.899213][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.910657][ T7068] netlink: 'syz.3.445': attribute type 10 has an invalid length. [ 133.920761][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.445'. [ 133.940142][ T7066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.944300][ T7068] batadv0: entered promiscuous mode [ 133.979988][ T7068] batadv0: entered allmulticast mode [ 133.987701][ T7068] bond0: (slave batadv0): Releasing backup interface [ 134.041792][ T7068] bridge0: port 3(batadv0) entered blocking state [ 134.056464][ T7068] bridge0: port 3(batadv0) entered disabled state [ 134.073881][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.104162][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.125709][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.137999][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 134.147417][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.164964][ T8] usb 2-1: config 0 descriptor?? [ 134.313630][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 134.458817][ T141] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 134.468799][ T141] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 134.610223][ T8] logitech-hidpp-device 0003:046D:C262.0008: unbalanced collection at end of report description [ 134.623739][ T8] logitech-hidpp-device 0003:046D:C262.0008: hidpp_probe:parse failed [ 134.632062][ T8] logitech-hidpp-device: probe of 0003:046D:C262.0008 failed with error -22 [ 134.756234][ T5790] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.831809][ T8] usb 2-1: USB disconnect, device number 5 [ 134.946209][ T5790] usb 3-1: Using ep0 maxpacket: 16 [ 134.953465][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.964437][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.974360][ T5790] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 134.983571][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.993434][ T5790] usb 3-1: config 0 descriptor?? [ 135.175204][ T7093] tap0: tun_chr_ioctl cmd 1074025681 [ 135.445409][ T5790] apple 0003:05AC:0246.0009: unknown main item tag 0xd [ 135.466798][ T5790] apple 0003:05AC:0246.0009: unexpected long global item [ 135.474727][ T5790] apple 0003:05AC:0246.0009: parse failed [ 135.490837][ T5790] apple: probe of 0003:05AC:0246.0009 failed with error -22 [ 135.704852][ T5787] usb 3-1: USB disconnect, device number 8 [ 136.000796][ T7095] loop0: detected capacity change from 0 to 40427 [ 136.015395][ T7095] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 136.026440][ T7095] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 136.068080][ T7095] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.153142][ T7095] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 136.166326][ T7095] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.204226][ T7098] loop1: detected capacity change from 0 to 40427 [ 136.214314][ T7098] F2FS-fs (loop1): Invalid segment/section count (31, 2328 x 1) [ 136.234217][ T7098] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 136.268239][ T7098] F2FS-fs (loop1): invalid crc value [ 136.299587][ T7098] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.400569][ T7098] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 136.416044][ T7098] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 136.855337][ T7121] loop2: detected capacity change from 0 to 512 [ 136.877066][ T7121] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.917369][ T7121] FAT-fs (loop2): FAT read failed (blocknr 1568) [ 136.923305][ T7107] loop3: detected capacity change from 0 to 32768 [ 136.933754][ T7107] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.461 (7107) [ 136.958714][ T7107] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 136.972214][ T7107] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 136.982409][ T7107] BTRFS info (device loop3): force zlib compression, level 3 [ 136.990353][ T7107] BTRFS info (device loop3): force clearing of disk cache [ 137.001884][ T7107] BTRFS info (device loop3): setting nodatasum [ 137.009302][ T7107] BTRFS info (device loop3): doing ref verification [ 137.021406][ T7107] BTRFS info (device loop3): allowing degraded mounts [ 137.028599][ T7107] BTRFS info (device loop3): enabling disk space caching [ 137.035671][ T7107] BTRFS info (device loop3): disk space caching is enabled [ 137.046356][ T5787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.090583][ T7107] BTRFS info (device loop3): enabling ssd optimizations [ 137.099290][ T7107] BTRFS info (device loop3): auto enabling async discard [ 137.114850][ T7107] BTRFS info (device loop3): rebuilding free space tree [ 137.146931][ T7107] BTRFS info (device loop3): disabling free space tree [ 137.156194][ T7107] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.181301][ T7107] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.251167][ T5787] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 137.273997][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.302332][ T5787] usb 1-1: config 0 descriptor?? [ 137.321239][ T5787] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 137.376497][ T7107] BTRFS info (device loop3): balance: start -d -m [ 137.397541][ T7107] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 137.481994][ T7107] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 137.689564][ T7107] BTRFS info (device loop3): found 9 extents, stage: move data extents [ 137.763339][ T7107] BTRFS info (device loop3): balance: canceled [ 137.842848][ T5784] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 138.147865][ T5787] gspca_sunplus: reg_w_riv err -71 [ 138.153221][ T5787] sunplus: probe of 1-1:0.0 failed with error -71 [ 138.195285][ T5787] usb 1-1: USB disconnect, device number 4 [ 138.201068][ T7158] loop1: detected capacity change from 0 to 512 [ 138.234027][ T7158] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.477: corrupted in-inode xattr: invalid ea_ino [ 138.254183][ T7158] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.477: couldn't read orphan inode 15 (err -117) [ 138.272019][ T7158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.342352][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.371672][ T7164] loop2: detected capacity change from 0 to 64 [ 138.623582][ T7176] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 138.676106][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.833180][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 138.890874][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 138.901812][ T8] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 138.912341][ T8] usb 2-1: config 0 has no interface number 0 [ 138.919047][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.931659][ T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 138.944180][ T8] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 138.955381][ T8] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 138.977833][ T8] usb 2-1: Product: syz [ 138.982064][ T8] usb 2-1: SerialNumber: syz [ 139.003801][ T8] usb 2-1: config 0 descriptor?? [ 139.006067][ T5872] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 139.013054][ T8] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 139.026709][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7 [ 139.078481][ T7191] loop2: detected capacity change from 0 to 1024 [ 139.216309][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.229806][ T48] hfsplus: b-tree write err: -5, ino 4 [ 139.237181][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.259613][ T5872] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 139.282809][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 139.286084][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.311862][ T5872] usb 4-1: config 0 descriptor?? [ 139.504213][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.513624][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.520893][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.528158][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.536296][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.543386][ T5790] usb 2-1: USB disconnect, device number 6 [ 139.549425][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 139.549445][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 139.578722][ T5790] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 139.779015][ T5872] uclogic 0003:28BD:0075.000A: interface is invalid, ignoring [ 139.841649][ T7199] loop0: detected capacity change from 0 to 40427 [ 139.850788][ T7199] F2FS-fs (loop0): Invalid segment count (1) [ 139.856904][ T7199] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 139.865517][ T7199] F2FS-fs (loop0): heap/no_heap options were deprecated [ 139.879589][ T7199] F2FS-fs (loop0): invalid crc value [ 139.888800][ T7199] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.924320][ T7199] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 139.932181][ T7199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 140.050898][ T5790] usb 4-1: USB disconnect, device number 8 [ 140.176158][ T7206] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 140.234802][ T7208] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 140.516035][ T5787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.608517][ T7223] loop1: detected capacity change from 0 to 1024 [ 140.719028][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.746004][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.756715][ T5787] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 140.765793][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.766543][ T1090] hfsplus: b-tree write err: -5, ino 4 [ 140.776755][ T5787] usb 1-1: config 0 descriptor?? [ 140.854553][ T7230] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.212134][ T5787] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 141.246254][ T5787] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 141.409783][ T5787] cp2112 0003:10C4:EA90.000B: error requesting version [ 141.427868][ T5787] cp2112: probe of 0003:10C4:EA90.000B failed with error -71 [ 141.451691][ T5787] usb 1-1: USB disconnect, device number 5 [ 141.478565][ T7234] loop1: detected capacity change from 0 to 40427 [ 141.486824][ T7234] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 141.494938][ T7234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.527695][ T7234] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.611429][ T7234] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 141.618677][ T7234] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.702428][ T7249] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 141.879151][ T7253] loop2: detected capacity change from 0 to 512 [ 141.918753][ T7253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.936215][ T7253] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.035183][ T7259] loop1: detected capacity change from 0 to 512 [ 142.054886][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.094209][ T7259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.137060][ T7259] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 142.152244][ T7259] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.514: invalid indirect mapped block 2683928664 (level 1) [ 142.180174][ T7259] EXT4-fs (loop1): Remounting filesystem read-only [ 142.207815][ T7259] EXT4-fs (loop1): 1 truncate cleaned up [ 142.214945][ T7259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.280883][ T7270] loop3: detected capacity change from 0 to 1024 [ 142.373734][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.442447][ T11] hfsplus: b-tree write err: -5, ino 4 [ 142.575242][ T7281] loop0: detected capacity change from 0 to 512 [ 142.585715][ T7281] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.602215][ T7281] FAT-fs (loop0): FAT read failed (blocknr 1568) [ 143.715987][ T8] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 143.891499][ T7306] loop0: detected capacity change from 0 to 1024 [ 143.917699][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.945959][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.955766][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 143.992832][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 144.006781][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.020974][ T8] usb 3-1: config 0 descriptor?? [ 144.055268][ T1090] hfsplus: b-tree write err: -5, ino 4 [ 144.433957][ T7323] netlink: 60 bytes leftover after parsing attributes in process `syz.1.542'. [ 144.443799][ T7323] netlink: 60 bytes leftover after parsing attributes in process `syz.1.542'. [ 144.459242][ T7320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.542'. [ 144.460043][ T8] wacom 0003:056A:005D.000C: unbalanced collection at end of report description [ 144.516845][ T8] wacom 0003:056A:005D.000C: parse failed [ 144.524825][ T8] wacom: probe of 0003:056A:005D.000C failed with error -22 [ 144.714314][ T8] usb 3-1: USB disconnect, device number 9 [ 145.214615][ T7333] loop1: detected capacity change from 0 to 32768 [ 145.223867][ T7333] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.550 (7333) [ 145.241523][ T7333] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.252533][ T7333] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 145.261549][ T7333] BTRFS info (device loop1): using free space tree [ 145.291142][ T7333] BTRFS info (device loop1): enabling ssd optimizations [ 145.326013][ T7333] BTRFS info (device loop1): auto enabling async discard [ 145.572448][ T5786] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.795833][ T7377] loop3: detected capacity change from 0 to 512 [ 145.862067][ T7377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.914402][ T7377] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.015444][ T7382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.559'. [ 146.044152][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.207266][ T7387] netlink: 44 bytes leftover after parsing attributes in process `syz.3.562'. [ 146.232571][ T7387] netlink: 31 bytes leftover after parsing attributes in process `syz.3.562'. [ 146.256193][ T7387] netlink: 'syz.3.562': attribute type 4 has an invalid length. [ 146.303544][ T7375] loop0: detected capacity change from 0 to 32768 [ 146.317940][ T7375] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.560 (7375) [ 146.355963][ T7375] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 146.373081][ T7375] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.383223][ T7375] BTRFS info (device loop0): force zlib compression, level 3 [ 146.399400][ T7375] BTRFS info (device loop0): force clearing of disk cache [ 146.408551][ T7375] BTRFS info (device loop0): setting nodatasum [ 146.414935][ T7375] BTRFS info (device loop0): doing ref verification [ 146.422206][ T7375] BTRFS info (device loop0): allowing degraded mounts [ 146.434311][ T7375] BTRFS info (device loop0): enabling disk space caching [ 146.442342][ T7375] BTRFS info (device loop0): disk space caching is enabled [ 146.548079][ T7396] loop3: detected capacity change from 0 to 4096 [ 146.555302][ T7375] BTRFS info (device loop0): enabling ssd optimizations [ 146.584681][ T7375] BTRFS info (device loop0): auto enabling async discard [ 146.615366][ T7375] BTRFS info (device loop0): rebuilding free space tree [ 146.669888][ T7375] BTRFS info (device loop0): disabling free space tree [ 146.674797][ T7385] loop1: detected capacity change from 0 to 32768 [ 146.685704][ T7385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.564 (7385) [ 146.690055][ T7375] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.711811][ T7375] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.712155][ T7385] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.733223][ T7385] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 146.742557][ T7385] BTRFS info (device loop1): using free space tree [ 146.813444][ T7375] BTRFS info (device loop0): balance: start -d -m [ 146.820971][ T7375] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 146.822643][ T7385] BTRFS info (device loop1): enabling ssd optimizations [ 146.838420][ T7385] BTRFS info (device loop1): auto enabling async discard [ 146.859301][ T7375] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 146.942646][ T7375] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 147.024453][ T5786] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.064416][ T7375] BTRFS info (device loop0): balance: canceled [ 147.136246][ T5783] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 147.306758][ T55] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 147.546699][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 147.558058][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.581084][ T55] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 147.610168][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.624829][ T55] usb 3-1: Product: syz [ 147.629408][ T55] usb 3-1: Manufacturer: syz [ 147.634060][ T55] usb 3-1: SerialNumber: syz [ 147.659251][ T55] usb 3-1: config 0 descriptor?? [ 147.686785][ T55] hub 3-1:0.0: bad descriptor, ignoring hub [ 147.692754][ T55] hub: probe of 3-1:0.0 failed with error -5 [ 147.712605][ T55] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 148.045805][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.581'. [ 148.090355][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.581'. [ 148.168115][ T8] usb 3-1: USB disconnect, device number 10 [ 148.585167][ T7448] loop1: detected capacity change from 0 to 32768 [ 148.593465][ T7448] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.580 (7448) [ 148.624209][ T7448] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 148.644822][ T7448] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 148.665065][ T7448] BTRFS info (device loop1): force zlib compression, level 3 [ 148.675170][ T7448] BTRFS info (device loop1): force clearing of disk cache [ 148.688835][ T7448] BTRFS info (device loop1): setting nodatasum [ 148.695068][ T7448] BTRFS info (device loop1): doing ref verification [ 148.702993][ T7448] BTRFS info (device loop1): allowing degraded mounts [ 148.711660][ T7448] BTRFS info (device loop1): enabling disk space caching [ 148.719378][ T7448] BTRFS info (device loop1): disk space caching is enabled [ 148.838439][ T7448] BTRFS info (device loop1): enabling ssd optimizations [ 148.855745][ T7448] BTRFS info (device loop1): auto enabling async discard [ 148.895023][ T7448] BTRFS info (device loop1): rebuilding free space tree [ 148.950345][ T7480] loop2: detected capacity change from 0 to 8192 [ 148.970273][ T7448] BTRFS info (device loop1): disabling free space tree [ 148.987631][ T7480] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.000808][ T7448] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.000840][ T7448] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.033437][ T7480] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 149.082622][ T7480] REISERFS (device loop2): using ordered data mode [ 149.105948][ T7480] reiserfs: using flush barriers [ 149.121256][ T7480] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.146783][ T7480] REISERFS (device loop2): checking transaction log (loop2) [ 149.184763][ T7448] BTRFS info (device loop1): balance: start -d -m [ 149.200358][ T7448] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 149.249622][ T7448] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 149.282498][ T7480] REISERFS (device loop2): Using tea hash to sort names [ 149.290211][ T7480] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 149.416794][ T7448] BTRFS info (device loop1): found 9 extents, stage: move data extents [ 149.518327][ T7448] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 149.581953][ T7448] BTRFS info (device loop1): balance: ended with status: 0 [ 149.674685][ T5786] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 149.728594][ T7482] loop0: detected capacity change from 0 to 32768 [ 149.765123][ T7482] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.589 (7482) [ 149.835328][ T7482] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.856323][ T7482] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 149.865085][ T7482] BTRFS info (device loop0): using free space tree [ 150.029377][ T7482] BTRFS info (device loop0): enabling ssd optimizations [ 150.060717][ T7482] BTRFS info (device loop0): auto enabling async discard [ 150.415259][ T5783] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.472010][ T7517] loop2: detected capacity change from 0 to 8192 [ 150.551697][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 150.551716][ T27] audit: type=1800 audit(1755185823.920:26): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.598" name="file1" dev="loop2" ino=1048606 res=0 errno=0 [ 151.025156][ T7540] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 151.495770][ T7545] loop2: detected capacity change from 0 to 32768 [ 151.540111][ T7545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.609 (7545) [ 151.586825][ T7545] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.605751][ T7545] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 151.633063][ T7545] BTRFS info (device loop2): using free space tree [ 151.662549][ T7550] loop3: detected capacity change from 0 to 8192 [ 151.703211][ T27] audit: type=1800 audit(1755185825.080:27): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.611" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 151.821259][ T7545] BTRFS info (device loop2): enabling ssd optimizations [ 151.831144][ T7545] BTRFS info (device loop2): auto enabling async discard [ 152.255352][ T7576] loop3: detected capacity change from 0 to 128 [ 152.277858][ T7576] EXT4-fs: Ignoring removed nobh option [ 152.297825][ T5785] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.314757][ T7576] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.346371][ T7576] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.452626][ T7576] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 152.582306][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.087104][ T7604] netlink: 46 bytes leftover after parsing attributes in process `syz.1.627'. [ 153.864913][ T7619] loop1: detected capacity change from 0 to 32768 [ 153.889876][ T7619] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.636 (7619) [ 153.936007][ T7619] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 153.957461][ T7619] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 153.977685][ T7619] BTRFS info (device loop1): force zlib compression, level 3 [ 153.985235][ T7619] BTRFS info (device loop1): force clearing of disk cache [ 154.015359][ T7619] BTRFS info (device loop1): setting nodatasum [ 154.028774][ T7638] Falling back ldisc for ttyS3. [ 154.034010][ T7619] BTRFS info (device loop1): doing ref verification [ 154.054185][ T7619] BTRFS info (device loop1): allowing degraded mounts [ 154.065978][ T7619] BTRFS info (device loop1): enabling disk space caching [ 154.083385][ T7619] BTRFS info (device loop1): disk space caching is enabled [ 154.236132][ T7619] BTRFS info (device loop1): enabling ssd optimizations [ 154.277331][ T7619] BTRFS info (device loop1): auto enabling async discard [ 154.303819][ T7619] BTRFS info (device loop1): rebuilding free space tree [ 154.345109][ T7619] BTRFS info (device loop1): disabling free space tree [ 154.356006][ T7619] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.366706][ T7619] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.443116][ T7619] BTRFS info (device loop1): balance: start -d -m [ 154.451837][ T7619] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 154.521876][ T7619] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 154.656788][ T7679] program syz.3.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.706646][ T7619] BTRFS info (device loop1): found 9 extents, stage: move data extents [ 154.824322][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.656'. [ 154.851630][ T7619] BTRFS info (device loop1): balance: canceled [ 154.930636][ T5786] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 155.363004][ T7705] loop2: detected capacity change from 0 to 64 [ 155.518533][ T7703] loop3: detected capacity change from 0 to 8192 [ 155.532075][ T7703] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.551479][ T7703] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 155.561483][ T7703] REISERFS (device loop3): using ordered data mode [ 155.573157][ T7703] reiserfs: using flush barriers [ 155.585616][ T7703] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.630006][ T7703] REISERFS (device loop3): checking transaction log (loop3) [ 155.638524][ T7714] loop2: detected capacity change from 0 to 128 [ 155.640270][ T7703] REISERFS (device loop3): Using r5 hash to sort names [ 155.656583][ T7703] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 156.066030][ T55] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.139004][ T7732] loop2: detected capacity change from 0 to 256 [ 156.256299][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 156.272744][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.295557][ T55] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 156.316155][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.334837][ T55] usb 2-1: Product: syz [ 156.339519][ T55] usb 2-1: Manufacturer: syz [ 156.344154][ T55] usb 2-1: SerialNumber: syz [ 156.369624][ T55] usb 2-1: config 0 descriptor?? [ 156.388321][ T55] hub 2-1:0.0: bad descriptor, ignoring hub [ 156.394302][ T55] hub: probe of 2-1:0.0 failed with error -5 [ 156.429223][ T55] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 156.793264][ T7734] loop0: detected capacity change from 0 to 32768 [ 156.797921][ T7749] loop2: detected capacity change from 0 to 8192 [ 156.807851][ T7734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.679 (7734) [ 156.827439][ T7734] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.837968][ T7734] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 156.846838][ T7734] BTRFS info (device loop0): force clearing of disk cache [ 156.854235][ T7734] BTRFS info (device loop0): enabling auto defrag [ 156.860939][ T7734] BTRFS info (device loop0): max_inline at 0 [ 156.867252][ T7734] BTRFS info (device loop0): enabling disk space caching [ 156.874319][ T7734] BTRFS info (device loop0): disk space caching is enabled [ 156.923517][ T7734] BTRFS info (device loop0): enabling ssd optimizations [ 156.935058][ T7734] BTRFS info (device loop0): rebuilding free space tree [ 156.951158][ T7734] BTRFS info (device loop0): disabling free space tree [ 156.958354][ T7734] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.968617][ T7734] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.016228][ T55] usb 2-1: USB disconnect, device number 7 [ 157.122631][ T5783] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.574042][ T7778] loop3: detected capacity change from 0 to 128 [ 157.949088][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'. [ 158.303448][ T7805] loop1: detected capacity change from 0 to 128 [ 158.527794][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 158.565463][ T7816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 158.860878][ T7825] loop3: detected capacity change from 0 to 4096 [ 158.923688][ T7825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.012149][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.135925][ T27] audit: type=1326 audit(1755185832.510:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a858ebe9 code=0x7ffc0000 [ 159.208420][ T27] audit: type=1326 audit(1755185832.510:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a858ebe9 code=0x7ffc0000 [ 159.285529][ T27] audit: type=1326 audit(1755185832.520:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a858ebe9 code=0x7ffc0000 [ 159.324504][ T27] audit: type=1326 audit(1755185832.520:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a858ebe9 code=0x7ffc0000 [ 159.346962][ T27] audit: type=1326 audit(1755185832.520:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a858ebe9 code=0x7ffc0000 [ 159.370899][ T27] audit: type=1326 audit(1755185832.520:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a858ebe9 code=0x7ffc0000 [ 159.416170][ T27] audit: type=1326 audit(1755185832.550:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a858ebe9 code=0x7ffc0000 [ 159.448789][ T27] audit: type=1326 audit(1755185832.580:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93a8585ba7 code=0x7ffc0000 [ 159.472097][ T27] audit: type=1326 audit(1755185832.580:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a852add9 code=0x7ffc0000 [ 159.502495][ T27] audit: type=1326 audit(1755185832.580:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.2.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93a8585ba7 code=0x7ffc0000 [ 159.781162][ T7855] loop1: detected capacity change from 0 to 4096 [ 159.803249][ T7855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.891163][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.916442][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.116753][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 160.128066][ T9] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 160.137325][ T9] usb 1-1: config 0 has no interface number 0 [ 160.143481][ T9] usb 1-1: config 0 interface 83 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 64 [ 160.154366][ T9] usb 1-1: config 0 interface 83 has no altsetting 0 [ 160.178910][ T9] usb 1-1: New USB device found, idVendor=19d2, idProduct=0092, bcdDevice=a6.22 [ 160.196803][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.210308][ T9] usb 1-1: Product: syz [ 160.214526][ T9] usb 1-1: Manufacturer: syz [ 160.227191][ T9] usb 1-1: SerialNumber: syz [ 160.235708][ T9] usb 1-1: config 0 descriptor?? [ 160.241800][ T7849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.254476][ T9] option 1-1:0.83: GSM modem (1-port) converter detected [ 160.315510][ T7859] loop2: detected capacity change from 0 to 32768 [ 160.332137][ T7859] XFS: noikeep mount option is deprecated. [ 160.344192][ T7859] XFS: noikeep mount option is deprecated. [ 160.401177][ T7859] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.500538][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 160.511656][ T5798] CPU: 0 PID: 5798 Comm: kworker/u5:5 Not tainted 6.6.101-syzkaller #0 [ 160.519944][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.527880][ T5872] usb 1-1: USB disconnect, device number 6 [ 160.530445][ T5798] Workqueue: hci0 hci_rx_work [ 160.540984][ T5798] Call Trace: [ 160.544288][ T5798] [ 160.547249][ T5798] dump_stack_lvl+0x16c/0x230 [ 160.551976][ T5798] ? show_regs_print_info+0x20/0x20 [ 160.557220][ T5798] ? load_image+0x3b0/0x3b0 [ 160.561794][ T5798] sysfs_create_dir_ns+0x256/0x280 [ 160.563097][ T5872] option 1-1:0.83: device disconnected [ 160.566945][ T5798] ? hci_rx_work+0x43a/0xd80 [ 160.566975][ T5798] ? sysfs_warn_dup+0xa0/0xa0 [ 160.567006][ T5798] ? do_raw_spin_unlock+0x121/0x230 [ 160.567036][ T5798] kobject_add_internal+0x6b8/0xc70 [ 160.567075][ T5798] kobject_add+0x156/0x220 [ 160.567102][ T5798] ? __rwlock_init+0x150/0x150 [ 160.567131][ T5798] ? kobject_init+0x1e0/0x1e0 [ 160.567160][ T5798] ? _raw_spin_unlock+0x28/0x40 [ 160.567194][ T5798] ? get_device_parent+0x366/0x390 [ 160.567227][ T5798] device_add+0x408/0xc20 [ 160.567258][ T5798] hci_conn_add_sysfs+0xd5/0x1e0 [ 160.567291][ T5798] le_conn_complete_evt+0xc37/0x1220 [ 160.567316][ T5798] ? hci_event_packet+0x4a7/0x1210 [ 160.567350][ T5798] ? trace_contention_end+0x39/0xe0 [ 160.567373][ T5798] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 160.567397][ T5798] ? __copy_skb_header+0xa7/0x550 [ 160.567438][ T5798] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 160.567468][ T5798] ? skb_pull_data+0xfb/0x200 [ 160.567503][ T5798] hci_le_conn_complete_evt+0x187/0x440 [ 160.607086][ T7859] XFS (loop2): Ending clean mount [ 160.611482][ T5798] ? hci_remote_host_features_evt+0x160/0x160 [ 160.654807][ T7859] XFS (loop2): Quotacheck needed: Please wait. [ 160.658422][ T5798] hci_event_packet+0x795/0x1210 [ 160.658473][ T5798] ? bis_list+0x290/0x290 [ 160.658505][ T5798] ? lockdep_hardirqs_on+0x98/0x150 [ 160.658536][ T5798] ? hci_send_to_monitor+0xd7/0x4f0 [ 160.658565][ T5798] hci_rx_work+0x43a/0xd80 [ 160.658602][ T5798] ? process_scheduled_works+0x957/0x15b0 [ 160.658627][ T5798] process_scheduled_works+0xa45/0x15b0 [ 160.658684][ T5798] ? assign_work+0x400/0x400 [ 160.658716][ T5798] ? assign_work+0x39e/0x400 [ 160.658746][ T5798] worker_thread+0xa55/0xfc0 [ 160.658802][ T5798] kthread+0x2fa/0x390 [ 160.658819][ T5798] ? pr_cont_work+0x560/0x560 [ 160.744327][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 160.748963][ T5798] ret_from_fork+0x48/0x80 [ 160.753433][ T5798] ? kthread_blkcg+0xd0/0xd0 [ 160.758061][ T5798] ret_from_fork_asm+0x11/0x20 [ 160.763062][ T5798] [ 160.769350][ T5798] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 160.783537][ T5798] Bluetooth: hci0: failed to register connection device [ 160.798448][ T7859] XFS (loop2): Quotacheck: Done. [ 160.866202][ T7883] loop3: detected capacity change from 0 to 4096 [ 160.980458][ T5785] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.596244][ T7908] netlink: 'syz.3.746': attribute type 11 has an invalid length. [ 161.612779][ T7908] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 161.626626][ T7908] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.746'. [ 161.924220][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 162.705488][ T7919] loop0: detected capacity change from 0 to 40427 [ 162.747639][ T7919] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 162.786973][ T7919] F2FS-fs (loop0): invalid crc value [ 162.793740][ T7937] loop1: detected capacity change from 0 to 4096 [ 162.806075][ T5798] Bluetooth: hci0: command tx timeout [ 162.820444][ T7919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.996305][ T7919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.038630][ T7934] loop2: detected capacity change from 0 to 32768 [ 163.062193][ T7934] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.758 (7934) [ 163.098526][ T7934] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 163.113045][ T7934] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 163.122802][ T7934] BTRFS info (device loop2): force zlib compression, level 3 [ 163.123277][ T5783] syz-executor: attempt to access beyond end of device [ 163.123277][ T5783] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.150278][ T7934] BTRFS info (device loop2): force clearing of disk cache [ 163.169440][ T7934] BTRFS info (device loop2): setting nodatasum [ 163.175768][ T7934] BTRFS info (device loop2): doing ref verification [ 163.186073][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 163.226711][ T7934] BTRFS info (device loop2): allowing degraded mounts [ 163.240973][ T7934] BTRFS info (device loop2): enabling disk space caching [ 163.256097][ T7934] BTRFS info (device loop2): disk space caching is enabled [ 163.356472][ T7938] loop3: detected capacity change from 0 to 40427 [ 163.368904][ T7938] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 163.386208][ T7938] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.400867][ T7938] F2FS-fs (loop3): invalid crc value [ 163.423134][ T7946] loop1: detected capacity change from 0 to 8192 [ 163.430293][ T7934] BTRFS info (device loop2): enabling ssd optimizations [ 163.448003][ T7938] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.454432][ T7934] BTRFS info (device loop2): auto enabling async discard [ 163.463925][ T7946] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.476411][ T7934] BTRFS info (device loop2): rebuilding free space tree [ 163.500635][ T7946] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 163.510801][ T7946] REISERFS (device loop1): using ordered data mode [ 163.521882][ T7934] BTRFS info (device loop2): disabling free space tree [ 163.523363][ T7946] reiserfs: using flush barriers [ 163.535744][ T7934] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.545758][ T7946] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.562822][ T7946] REISERFS (device loop1): checking transaction log (loop1) [ 163.564637][ T7934] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.590637][ T7946] REISERFS (device loop1): Using r5 hash to sort names [ 163.600806][ T7938] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 163.608781][ T7946] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 163.620331][ T7938] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.807887][ T7934] BTRFS info (device loop2): balance: start -d -m [ 163.842548][ T7934] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 163.995289][ T7934] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 164.093887][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 164.124347][ T7934] BTRFS info (device loop2): balance: canceled [ 164.211879][ T7974] process 'syz.1.765' launched './file0' with NULL argv: empty string added [ 164.247733][ T5785] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 164.657197][ T55] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.792741][ T7988] netlink: 428 bytes leftover after parsing attributes in process `syz.3.772'. [ 164.806201][ T7988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.772'. [ 164.816774][ T7986] loop2: detected capacity change from 0 to 2048 [ 164.830944][ T7986] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.860197][ T7991] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.867918][ T55] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.871389][ T7986] syz.2.767: attempt to access beyond end of device [ 164.871389][ T7986] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 164.886233][ T55] usb 1-1: config 0 has no interface number 0 [ 164.928981][ T55] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.946210][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.974648][ T55] usb 1-1: Product: syz [ 164.979677][ T55] usb 1-1: Manufacturer: syz [ 164.984817][ T55] usb 1-1: SerialNumber: syz [ 165.006706][ T55] usb 1-1: config 0 descriptor?? [ 165.044021][ T7990] loop1: detected capacity change from 0 to 8192 [ 165.076270][ T7990] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.100757][ T7990] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 165.112219][ T7990] REISERFS (device loop1): using ordered data mode [ 165.119527][ T7990] reiserfs: using flush barriers [ 165.145192][ T7990] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.163449][ T7990] REISERFS (device loop1): checking transaction log (loop1) [ 165.191271][ T7990] REISERFS (device loop1): Using r5 hash to sort names [ 165.221215][ T7990] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 165.226068][ T55] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 165.245126][ T55] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.256560][ T55] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 165.265033][ T55] usb 1-1: media controller created [ 165.300990][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.312101][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 165.312116][ T27] audit: type=1800 audit(1755185838.680:96): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.773" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 165.615130][ T8010] binder: 8009:8010 ioctl c018620c 200000000180 returned -1 [ 166.022602][ T8018] loop2: detected capacity change from 0 to 8192 [ 166.032519][ T8024] sctp: [Deprecated]: syz.3.789 (pid 8024) Use of int in maxseg socket option. [ 166.032519][ T8024] Use struct sctp_assoc_value instead [ 166.035911][ T8018] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.060776][ T8018] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 166.070149][ T8018] REISERFS (device loop2): using ordered data mode [ 166.076953][ T8018] reiserfs: using flush barriers [ 166.083799][ T8018] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.102242][ T8018] REISERFS (device loop2): checking transaction log (loop2) [ 166.117134][ T8018] REISERFS (device loop2): Using r5 hash to sort names [ 166.136552][ T8018] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 166.306339][ T8033] binder: 8032:8033 ioctl c018620c 200000000180 returned -1 [ 166.436973][ T55] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 166.489714][ T55] usb 1-1: USB disconnect, device number 7 [ 166.526039][ T5790] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.736189][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 166.744504][ T5790] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 166.752804][ T5790] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 166.763880][ T5790] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 166.775057][ T5790] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 166.788303][ T5790] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.800879][ T5790] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 166.810051][ T5790] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 166.818719][ T5790] usb 4-1: Product: syz [ 166.822981][ T5790] usb 4-1: Manufacturer: syz [ 166.827670][ T5790] usb 4-1: SerialNumber: syz [ 166.833942][ T5790] usb 4-1: config 0 descriptor?? [ 166.840968][ T5790] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 166.852180][ T5790] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 167.215816][ T8048] loop2: detected capacity change from 0 to 512 [ 167.238133][ T8048] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.249460][ T8048] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 167.274717][ T8048] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 167.287604][ T8048] System zones: 0-2, 18-18, 34-35 [ 167.295193][ T8048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.394484][ T8048] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 167.417561][ T8048] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 167.446263][ T8048] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 167.523839][ T8048] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.800: bg 0: block 353: padding at end of block bitmap is not set [ 167.564040][ T8061] misc userio: Can't change port type on an already running userio instance [ 167.622418][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.992217][ T8069] loop2: detected capacity change from 0 to 8192 [ 168.007631][ T8069] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.027522][ T8069] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 168.040858][ T8069] REISERFS (device loop2): using ordered data mode [ 168.049104][ T8069] reiserfs: using flush barriers [ 168.056541][ T8069] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.073587][ T8069] REISERFS (device loop2): checking transaction log (loop2) [ 168.084330][ T8069] REISERFS (device loop2): Using r5 hash to sort names [ 168.094306][ T8069] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 168.111227][ T8063] loop0: detected capacity change from 0 to 40427 [ 168.125825][ T8063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.128387][ T27] audit: type=1800 audit(1755185841.510:97): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.810" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 168.228714][ T8063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.291949][ T5783] syz-executor: attempt to access beyond end of device [ 168.291949][ T5783] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.306089][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 169.261108][ T6278] usb 4-1: USB disconnect, device number 9 [ 169.269741][ T6278] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 169.642313][ T8092] loop3: detected capacity change from 0 to 2048 [ 169.656310][ T8092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.902352][ T8102] loop0: detected capacity change from 0 to 64 [ 170.498693][ T8100] loop2: detected capacity change from 0 to 40427 [ 170.518491][ T8100] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 170.535975][ T8100] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 170.555570][ T8100] F2FS-fs (loop2): invalid crc value [ 170.587392][ T8100] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.728479][ T8100] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 170.748563][ T8100] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 171.404560][ T8115] loop0: detected capacity change from 0 to 40427 [ 171.417035][ T6278] kernel write not supported for file bpf-prog (pid: 6278 comm: kworker/1:5) [ 171.430194][ T8115] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 171.463053][ T8115] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 171.507730][ T8115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.575581][ T8135] loop1: detected capacity change from 0 to 512 [ 171.592849][ T8115] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 171.600091][ T8115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.688979][ T8115] syz.0.828: attempt to access beyond end of device [ 171.688979][ T8115] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 171.794172][ T5783] syz-executor: attempt to access beyond end of device [ 171.794172][ T5783] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.826552][ T5783] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 172.199487][ T8155] loop3: detected capacity change from 0 to 512 [ 172.349317][ T8160] loop3: detected capacity change from 0 to 512 [ 172.356795][ T8160] ext4: Unknown parameter 'uid<00000000000000060929' [ 173.000341][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.128374][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.223133][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.344079][ T8186] loop2: detected capacity change from 0 to 512 [ 173.353886][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.397127][ T8186] ext4: Unknown parameter 'uid<00000000000000060929' [ 173.972842][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.995453][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.004723][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.027263][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.035101][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.042694][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.147471][ T8198] loop0: detected capacity change from 0 to 1024 [ 174.166365][ T5798] Bluetooth: hci2: command tx timeout [ 174.793967][ T8194] chnl_net:caif_netlink_parms(): no params data found [ 174.933199][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.962795][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.971867][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.980191][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.989927][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.989988][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.000416][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.015119][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.017950][ T8194] bridge_slave_0: entered allmulticast mode [ 175.036673][ T8194] bridge_slave_0: entered promiscuous mode [ 175.047193][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.054392][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.061777][ T8194] bridge_slave_1: entered allmulticast mode [ 175.068912][ T8194] bridge_slave_1: entered promiscuous mode [ 175.117416][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.139319][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.235718][ T8194] team0: Port device team_slave_0 added [ 175.258201][ T8194] team0: Port device team_slave_1 added [ 175.318382][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.325420][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.351425][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.359407][ T8194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.375147][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.382212][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.408124][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.414414][ T8194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.512472][ T8194] hsr_slave_0: entered promiscuous mode [ 175.519258][ T8194] hsr_slave_1: entered promiscuous mode [ 175.525496][ T8194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.533915][ T8194] Cannot create hsr debugfs directory [ 175.622628][ T11] hsr_slave_0: left promiscuous mode [ 175.629414][ T11] hsr_slave_1: left promiscuous mode [ 175.635704][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.644067][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.654518][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.662798][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.673006][ T11] bridge0: port 3(batadv0) entered disabled state [ 175.682809][ T11] bridge_slave_1: left allmulticast mode [ 175.688645][ T11] bridge_slave_1: left promiscuous mode [ 175.694365][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.713447][ T11] bridge_slave_0: left allmulticast mode [ 175.719633][ T11] bridge_slave_0: left promiscuous mode [ 175.725305][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.757359][ T11] veth1_macvtap: left promiscuous mode [ 175.763380][ T11] veth0_macvtap: left promiscuous mode [ 175.770118][ T11] veth1_vlan: left promiscuous mode [ 175.775526][ T11] veth0_vlan: left promiscuous mode [ 176.090032][ T5798] Bluetooth: hci1: command tx timeout [ 176.341753][ T11] team0 (unregistering): Port device team_slave_1 removed [ 176.394228][ T11] team0 (unregistering): Port device team_slave_0 removed [ 176.443981][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.501771][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.049535][ T5798] Bluetooth: hci3: command tx timeout [ 177.075771][ T11] bond0 (unregistering): Released all slaves [ 177.385292][ T8208] chnl_net:caif_netlink_parms(): no params data found [ 177.497226][ T8194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.511086][ T8194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.522584][ T8194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.574934][ T8194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.589309][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.598020][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.605266][ T8208] bridge_slave_0: entered allmulticast mode [ 177.612962][ T8208] bridge_slave_0: entered promiscuous mode [ 177.621464][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.628829][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.636348][ T8208] bridge_slave_1: entered allmulticast mode [ 177.643138][ T8208] bridge_slave_1: entered promiscuous mode [ 177.707957][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.730762][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.779708][ T8208] team0: Port device team_slave_0 added [ 177.797079][ T8208] team0: Port device team_slave_1 added [ 177.832523][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.840100][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.866146][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.872560][ T8208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.890980][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.898228][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.924132][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.934478][ T8208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.009815][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.031754][ T8208] hsr_slave_0: entered promiscuous mode [ 178.038584][ T8208] hsr_slave_1: entered promiscuous mode [ 178.044641][ T8208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.052372][ T8208] Cannot create hsr debugfs directory [ 178.103222][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.165980][ T5798] Bluetooth: hci1: command tx timeout [ 178.190945][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.324014][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.370987][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.410654][ T8208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.424965][ T8208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.444143][ T8208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.458977][ T8208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.481111][ T8194] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.495672][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.502819][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.561401][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.568796][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.808429][ T8208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.884046][ T8208] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.932477][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.939669][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.004306][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.011534][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.103264][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.128298][ T5798] Bluetooth: hci3: command tx timeout [ 179.453714][ T8208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.477465][ T11] IPVS: stopping master sync thread 7176 ... [ 179.730718][ T11] hsr_slave_0: left promiscuous mode [ 179.739420][ T11] hsr_slave_1: left promiscuous mode [ 179.745648][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.755588][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.764718][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.772478][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.780572][ T11] bridge_slave_1: left allmulticast mode [ 179.786354][ T11] bridge_slave_1: left promiscuous mode [ 179.792048][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.801753][ T11] bridge_slave_0: left allmulticast mode [ 179.807998][ T11] bridge_slave_0: left promiscuous mode [ 179.813693][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.842550][ T11] veth1_macvtap: left promiscuous mode [ 179.850106][ T11] veth0_macvtap: left promiscuous mode [ 179.856441][ T11] veth1_vlan: left promiscuous mode [ 179.861843][ T11] veth0_vlan: left promiscuous mode [ 180.256140][ T5798] Bluetooth: hci1: command tx timeout [ 180.437995][ T11] team0 (unregistering): Port device team_slave_1 removed [ 180.490618][ T11] team0 (unregistering): Port device team_slave_0 removed [ 180.537276][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.590070][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.121970][ T11] bond0 (unregistering): Released all slaves [ 181.206171][ T5798] Bluetooth: hci3: command tx timeout [ 181.328055][ T8194] veth0_vlan: entered promiscuous mode [ 181.381216][ T8194] veth1_vlan: entered promiscuous mode [ 181.511664][ T8208] veth0_vlan: entered promiscuous mode [ 181.531930][ T8194] veth0_macvtap: entered promiscuous mode [ 181.548404][ T8194] veth1_macvtap: entered promiscuous mode [ 181.557791][ T8208] veth1_vlan: entered promiscuous mode [ 181.610468][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.624664][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.634859][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.645557][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.658497][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.669451][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.680267][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.692880][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.704840][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.716529][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.733353][ T8208] veth0_macvtap: entered promiscuous mode [ 181.743934][ T8208] veth1_macvtap: entered promiscuous mode [ 181.752915][ T8194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.762127][ T8194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.771365][ T8194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.780421][ T8194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.824140][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.835548][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.850162][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.860995][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.870949][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.881533][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.893014][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.927912][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.939505][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.950156][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.960767][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.971177][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.981704][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.992764][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.021203][ T8208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.031334][ T8208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.040494][ T8208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.049730][ T8208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.101110][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.114130][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.173599][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.181830][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.194749][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.220373][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.251760][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.264199][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.339792][ T5798] Bluetooth: hci1: command tx timeout [ 182.423510][ T5787] kernel write not supported for file bpf-prog (pid: 5787 comm: kworker/0:3) [ 182.705690][ T8270] loop5: detected capacity change from 0 to 512 [ 182.834059][ T8270] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.877: invalid block [ 182.871579][ T8270] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.877: invalid indirect mapped block 10 (level 1) [ 182.926117][ T8270] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.877: invalid indirect mapped block 8 (level 1) [ 182.979093][ T8270] EXT4-fs (loop5): 1 truncate cleaned up [ 182.997218][ T8270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.162635][ T8208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.286396][ T5798] Bluetooth: hci3: command tx timeout [ 183.340307][ T8257] loop4: detected capacity change from 0 to 40427 [ 183.351241][ T8257] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 183.359421][ T8257] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 183.387744][ T8257] F2FS-fs (loop4): invalid crc value [ 183.414216][ T8257] F2FS-fs (loop4): Found nat_bits in checkpoint [ 183.487213][ T8294] loop0: detected capacity change from 0 to 1024 [ 183.494668][ T8294] EXT4-fs: Ignoring removed bh option [ 183.532266][ T8294] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.549360][ T8257] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 183.560667][ T8257] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.561114][ T8298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.628163][ T8294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.778148][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.513026][ T8325] loop0: detected capacity change from 0 to 164 [ 185.255678][ T8342] loop5: detected capacity change from 0 to 8 [ 185.367049][ T5798] Bluetooth: hci3: command tx timeout [ 185.589968][ T8342] SQUASHFS error: Unable to read directory block [1d0:0] [ 185.615110][ T8352] loop0: detected capacity change from 0 to 2048 [ 185.651730][ T8352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.169990][ T8370] loop5: detected capacity change from 0 to 2048 [ 186.187641][ T8370] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 186.211808][ T8370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.273832][ T27] audit: type=1800 audit(1755185859.650:98): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.921" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 186.477317][ T8378] can0: slcan on ttyS3. [ 186.511121][ T8354] loop1: detected capacity change from 0 to 40427 [ 186.531641][ T8354] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 186.555134][ T8354] F2FS-fs (loop1): invalid crc value [ 186.564669][ T8354] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.572383][ T8378] can0 (unregistered): slcan off ttyS3. [ 186.582563][ T8378] Falling back ldisc for ttyS3. [ 186.681311][ T8354] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.835560][ T5786] syz-executor: attempt to access beyond end of device [ 186.835560][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.859331][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 187.035990][ T8393] Attempt to restore checkpoint with obsolete wellknown handles [ 187.264999][ T8387] loop0: detected capacity change from 0 to 32768 [ 187.287988][ T8387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.929 (8387) [ 187.320856][ T8387] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.346266][ T8387] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 187.368019][ T8387] BTRFS info (device loop0): metadata ratio 2 [ 187.374168][ T8387] BTRFS info (device loop0): allowing degraded mounts [ 187.406531][ T8387] BTRFS info (device loop0): force zlib compression, level 3 [ 187.414007][ T8387] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 187.443068][ T8387] BTRFS info (device loop0): use zstd compression, level 3 [ 187.473585][ T8387] BTRFS info (device loop0): force clearing of disk cache [ 187.491550][ T8387] BTRFS info (device loop0): using free space tree [ 187.568766][ T8387] BTRFS info (device loop0): enabling ssd optimizations [ 187.578659][ T8387] BTRFS info (device loop0): rebuilding free space tree [ 187.676039][ T5783] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.509342][ T27] audit: type=1326 audit(1755185861.890:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.5.949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f047a18ebe9 code=0x0 [ 188.764004][ T8445] loop1: detected capacity change from 0 to 32768 [ 189.121531][ T8461] netlink: 'syz.4.962': attribute type 12 has an invalid length. [ 189.130648][ T8461] netlink: 'syz.4.962': attribute type 11 has an invalid length. [ 189.139142][ T8461] netlink: 178840 bytes leftover after parsing attributes in process `syz.4.962'. [ 189.251679][ T8467] loop1: detected capacity change from 0 to 512 [ 189.286423][ T8467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.299837][ T8467] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.350013][ T27] audit: type=1800 audit(1755185862.730:100): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.956" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 189.412711][ T27] audit: type=1800 audit(1755185862.780:101): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.956" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 189.433155][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.489040][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.889859][ T8478] loop4: detected capacity change from 0 to 32768 [ 190.215969][ T27] audit: type=1326 audit(1755185863.590:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8496 comm="syz.0.970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6765f8ebe9 code=0x0 [ 190.551036][ T8503] loop4: detected capacity change from 0 to 512 [ 190.573714][ T8503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.589005][ T8503] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.630482][ T27] audit: type=1800 audit(1755185864.010:103): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.972" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 190.663150][ T5798] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 190.674680][ T5798] Bluetooth: hci1: Injecting HCI hardware error event [ 190.685149][ T5794] Bluetooth: hci1: hardware error 0x00 [ 190.729147][ T27] audit: type=1800 audit(1755185864.040:104): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.972" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 190.801997][ T8194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.126400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 191.664104][ T8518] loop4: detected capacity change from 0 to 32768 [ 191.719286][ T8518] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 191.881923][ T8194] ocfs2: Unmounting device (7,4) on (node local) [ 191.974057][ T8536] loop5: detected capacity change from 0 to 512 [ 191.976989][ T8537] loop1: detected capacity change from 0 to 128 [ 192.003617][ T8537] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.023521][ T8537] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.047625][ T8536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.077650][ T8536] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.087891][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 192.155552][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.184950][ T27] audit: type=1800 audit(1755185865.560:105): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.985" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 192.233421][ T27] audit: type=1800 audit(1755185865.590:106): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.985" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 192.293394][ T8208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.396629][ T27] audit: type=1326 audit(1755185865.770:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.4.989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ed838ebe9 code=0x0 [ 192.414242][ T8548] loop0: detected capacity change from 0 to 4096 [ 192.459478][ T8554] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.472326][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.990'. [ 192.607236][ T8558] loop1: detected capacity change from 0 to 2048 [ 192.614564][ T8558] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.628632][ T8558] EXT4-fs: Ignoring removed nobh option [ 192.658479][ T8558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.695487][ T8558] EXT4-fs (loop1): shut down requested (0) [ 192.756911][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.814461][ T5794] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 192.859403][ T8567] netlink: 'syz.1.996': attribute type 6 has an invalid length. [ 192.886037][ T6278] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 193.067638][ T6278] usb 6-1: not running at top speed; connect to a high speed hub [ 193.098181][ T6278] usb 6-1: config index 0 descriptor too short (expected 2322, got 18) [ 193.110272][ T6278] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 193.134166][ T6278] usb 6-1: config 95 has no interface number 0 [ 193.150869][ T6278] usb 6-1: config 95 interface 1 has no altsetting 0 [ 193.171349][ T6278] usb 6-1: string descriptor 0 read error: -22 [ 193.184938][ T6278] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 193.211960][ T6278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.361408][ T8575] loop4: detected capacity change from 0 to 512 [ 193.413826][ T8575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.431578][ T8575] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.603654][ T8194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.897911][ T5790] usb 6-1: USB disconnect, device number 2 [ 194.497019][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.503386][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.387004][ T8592] loop1: detected capacity change from 0 to 40427 [ 195.395532][ T8594] loop5: detected capacity change from 0 to 32768 [ 195.420761][ T8594] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.1008 (8594) [ 195.437692][ T8592] F2FS-fs (loop1): invalid crc value [ 195.451834][ T8594] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 195.473696][ T8592] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.475578][ T8594] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 195.494057][ T8594] BTRFS info (device loop5): using free space tree [ 195.596382][ T8592] F2FS-fs (loop1): Start checkpoint disabled! [ 195.600368][ T8594] BTRFS info (device loop5): enabling ssd optimizations [ 195.636176][ T8594] BTRFS info (device loop5): auto enabling async discard [ 195.646950][ T8592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 195.661895][ T8597] loop4: detected capacity change from 0 to 32768 [ 195.708338][ T8597] [ 195.708338][ T8597] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.708338][ T8597] [ 195.869460][ T8625] [ 195.869460][ T8625] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.869460][ T8625] [ 195.897022][ T8625] [ 195.897022][ T8625] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.897022][ T8625] [ 195.949962][ T8625] [ 195.949962][ T8625] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.949962][ T8625] [ 195.983485][ T8625] [ 195.983485][ T8625] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.983485][ T8625] [ 196.028884][ T112] [ 196.028884][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.028884][ T112] [ 196.057141][ T8208] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 196.143709][ T78] kworker/u4:4: attempt to access beyond end of device [ 196.143709][ T78] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 196.191904][ T78] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 196.203000][ T78] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 196.300521][ T8194] [ 196.300521][ T8194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.300521][ T8194] [ 196.341163][ T8194] [ 196.341163][ T8194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.341163][ T8194] [ 196.863041][ T8648] loop0: detected capacity change from 0 to 512 [ 196.900900][ T8648] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1025: invalid block [ 196.939515][ T8648] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1025: invalid indirect mapped block 10 (level 1) [ 196.959112][ T8648] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1025: invalid indirect mapped block 8 (level 1) [ 197.001908][ T8648] EXT4-fs (loop0): 1 truncate cleaned up [ 197.010839][ T8648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.192852][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.364039][ T8666] loop5: detected capacity change from 0 to 164 [ 197.384774][ T8665] loop1: detected capacity change from 0 to 136 [ 197.482201][ T8669] loop0: detected capacity change from 0 to 4096 [ 197.498684][ T8669] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 197.592485][ T8669] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 197.788120][ T8676] block device autoloading is deprecated and will be removed. [ 198.229736][ T8671] loop5: detected capacity change from 0 to 32768 [ 198.287324][ T8671] [ 198.287324][ T8671] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.287324][ T8671] [ 198.352573][ T27] audit: type=1800 audit(1755185871.730:108): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1036" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 198.456889][ T141] [ 198.456889][ T141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.456889][ T141] [ 198.486217][ T141] [ 198.486217][ T141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.486217][ T141] [ 198.510928][ T8208] [ 198.510928][ T8208] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.510928][ T8208] [ 198.543466][ T113] [ 198.543466][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.543466][ T113] [ 198.599804][ T8208] [ 198.599804][ T8208] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 198.599804][ T8208] [ 198.783051][ T8682] loop1: detected capacity change from 0 to 32768 [ 198.807113][ T8682] XFS: attr2 mount option is deprecated. [ 198.827257][ T8682] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 198.845988][ T5872] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 198.856309][ T8682] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.938759][ T8682] XFS (loop1): Ending clean mount [ 198.955445][ T8682] XFS (loop1): Quotacheck needed: Please wait. [ 199.013229][ T8682] XFS (loop1): Quotacheck: Done. [ 199.041052][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.061070][ T5872] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 199.092881][ T5872] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 41895, setting to 1024 [ 199.105381][ T5872] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024 [ 199.115665][ T5872] usb 1-1: config 1 interface 0 has no altsetting 0 [ 199.132856][ T5786] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.138003][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.176150][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.194759][ T5872] usb 1-1: Product: syz [ 199.204084][ T5872] usb 1-1: Manufacturer: syz [ 199.221635][ T5872] usb 1-1: SerialNumber: syz [ 199.244354][ T8699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 199.262488][ T8699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 199.275354][ T8719] loop4: detected capacity change from 0 to 1024 [ 199.284388][ T8719] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.297665][ T8719] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 199.321848][ T8719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.343593][ T8719] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 199.361290][ T8719] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.1053: missing EA_INODE flag [ 199.388356][ T8719] EXT4-fs (loop4): Remounting filesystem read-only [ 199.449999][ T8194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.512587][ T5872] usb 1-1: bad CDC descriptors [ 199.546549][ T5872] usb 1-1: USB disconnect, device number 8 [ 199.640918][ T8715] loop5: detected capacity change from 0 to 32768 [ 199.653268][ T8715] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.743999][ T8715] XFS (loop5): Ending clean mount [ 199.847942][ T8208] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.367934][ T8736] loop4: detected capacity change from 0 to 32768 [ 200.416909][ T8736] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1056 (8736) [ 200.458072][ T8736] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.475595][ T8736] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 200.485303][ T8736] BTRFS info (device loop4): force clearing of disk cache [ 200.536699][ T8736] BTRFS info (device loop4): enabling auto defrag [ 200.543260][ T8736] BTRFS info (device loop4): max_inline at 0 [ 200.562840][ T8736] BTRFS info (device loop4): enabling disk space caching [ 200.574990][ T8736] BTRFS info (device loop4): disk space caching is enabled [ 200.584852][ T8746] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1061'. [ 200.595375][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'. [ 200.623894][ T8748] netlink: 'syz.0.1062': attribute type 9 has an invalid length. [ 200.649226][ T8748] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1062'. [ 200.673342][ T8736] BTRFS info (device loop4): enabling ssd optimizations [ 200.687986][ T8736] BTRFS info (device loop4): rebuilding free space tree [ 200.721370][ T8736] BTRFS info (device loop4): disabling free space tree [ 200.728909][ T8736] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.746208][ T8736] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.839088][ T8771] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 200.856308][ T8772] loop0: detected capacity change from 0 to 256 [ 200.906454][ T8774] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 200.914320][ T8774] netlink: 'syz.1.1066': attribute type 2 has an invalid length. [ 200.991747][ T8772] FAT-fs (loop0): Directory bread(block 64) failed [ 201.006200][ T8772] FAT-fs (loop0): Directory bread(block 65) failed [ 201.021231][ T8772] FAT-fs (loop0): Directory bread(block 66) failed [ 201.025365][ T8194] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.036926][ T8772] FAT-fs (loop0): Directory bread(block 67) failed [ 201.044751][ T8772] FAT-fs (loop0): Directory bread(block 68) failed [ 201.058099][ T8772] FAT-fs (loop0): Directory bread(block 69) failed [ 201.074421][ T8772] FAT-fs (loop0): Directory bread(block 70) failed [ 201.102070][ T8772] FAT-fs (loop0): Directory bread(block 71) failed [ 201.146092][ T8772] FAT-fs (loop0): Directory bread(block 72) failed [ 201.153485][ T8772] FAT-fs (loop0): Directory bread(block 73) failed [ 201.686052][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 201.761233][ T8797] loop4: detected capacity change from 0 to 2048 [ 201.826325][ T8797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.887255][ T8797] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.008923][ T8797] fs-verity: sha256 using implementation "sha256-avx2" [ 202.056246][ T8797] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1078: bg 0: block 345: padding at end of block bitmap is not set [ 202.121030][ T8797] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0 [ 202.128015][ T8796] loop1: detected capacity change from 0 to 32768 [ 202.138702][ T8797] fs-verity (loop4, inode 13): Error -117 building Merkle tree [ 202.191423][ T8796] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.287740][ T8194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.351172][ T8796] XFS (loop1): Ending clean mount [ 202.378872][ T8796] XFS (loop1): Quotacheck needed: Please wait. [ 202.482094][ T8796] XFS (loop1): Quotacheck: Done. [ 202.573428][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.738394][ T8798] loop5: detected capacity change from 0 to 32768 [ 202.798427][ T8798] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.926474][ T8798] XFS (loop5): Ending clean mount [ 202.939433][ T8798] XFS (loop5): Quotacheck needed: Please wait. [ 203.060484][ T8798] XFS (loop5): Quotacheck: Done. [ 203.168390][ T8208] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.177501][ T8839] input: syz1 as /devices/virtual/input/input11 [ 203.516781][ T8847] mmap: syz.1.1092 (8847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.764060][ T8858] loop1: detected capacity change from 0 to 4096 [ 203.796240][ T5855] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 203.843564][ T8862] netlink: 'syz.0.1098': attribute type 14 has an invalid length. [ 203.884378][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1099'. [ 203.896350][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1099'. [ 203.985922][ T5855] usb 5-1: Using ep0 maxpacket: 32 [ 203.998358][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.009866][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.030033][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.045690][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.063254][ T5855] usb 5-1: config 0 descriptor?? [ 204.072313][ T5855] hub 5-1:0.0: USB hub found [ 204.295092][ T5855] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 204.515117][ T8880] sctp: [Deprecated]: syz.1.1106 (pid 8880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.515117][ T8880] Use struct sctp_sack_info instead [ 204.722630][ T5855] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 204.779958][ T8884] loop1: detected capacity change from 0 to 4096 [ 204.787682][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1109'. [ 204.810735][ T8884] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 204.825999][ T8886] bridge: RTM_NEWNEIGH with invalid ether address [ 205.062786][ T8884] syz.1.1108 (8884) used greatest stack depth: 20496 bytes left [ 205.146642][ T5855] usb 5-1: USB disconnect, device number 2 [ 205.329252][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 205.584781][ T8905] loop5: detected capacity change from 0 to 256 [ 205.705377][ T8909] loop4: detected capacity change from 0 to 512 [ 205.906212][ T5855] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 206.108041][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.128164][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.156209][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 206.162927][ T8919] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 206.192379][ T5855] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 206.219292][ T5855] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.228908][ T5855] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.252241][ T5855] usb 2-1: Manufacturer: syz [ 206.272379][ T5855] usb 2-1: config 0 descriptor?? [ 206.363426][ T8924] loop5: detected capacity change from 0 to 512 [ 206.398783][ T8924] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 206.408447][ T8925] loop4: detected capacity change from 0 to 1024 [ 206.472156][ T11] hfsplus: b-tree write err: -5, ino 4 [ 206.482914][ T8924] futex_wake_op: syz.5.1126 tries to shift op by 32; fix this program [ 206.565590][ T27] audit: type=1326 audit(1755185879.940:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8929 comm="syz.4.1129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ed838ebe9 code=0x0 [ 206.656327][ T5855] rc_core: IR keymap rc-hauppauge not found [ 206.667834][ T5855] Registered IR keymap rc-empty [ 206.674430][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 206.693058][ T8938] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 206.730191][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 206.772923][ T5855] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 206.795791][ T5855] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 206.834944][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 206.878433][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 206.920459][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 206.957175][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 206.996171][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.048121][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.097162][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.137603][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.182970][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.216982][ T5855] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 207.259214][ T5855] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 207.280517][ T5855] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 207.302469][ T5855] usb 2-1: USB disconnect, device number 8 [ 207.443649][ T8955] loop5: detected capacity change from 0 to 128 [ 207.497555][ T8955] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.524035][ T8955] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.603840][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1141'. [ 207.671383][ T8208] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.091380][ T8958] loop4: detected capacity change from 0 to 32768 [ 208.105717][ T8958] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 208.133611][ T8958] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 208.174276][ T8973] loop1: detected capacity change from 0 to 8192 [ 208.218684][ T27] audit: type=1800 audit(1755185881.600:110): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1140" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 208.250931][ T8958] syz.4.1140 (8958) used greatest stack depth: 18224 bytes left [ 208.369005][ T8194] ocfs2: Unmounting device (7,4) on (node local) [ 208.543499][ T8984] loop1: detected capacity change from 0 to 2048 [ 208.595887][ T8985] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.669802][ T8984] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '..' [ 208.690679][ T8984] Remounting filesystem read-only [ 208.728234][ T5786] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 208.740808][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 208.748268][ T5786] NILFS (loop1): discard dirty block: blocknr=0, size=2048 [ 208.755749][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=2048 [ 208.772003][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 208.779242][ T5786] NILFS (loop1): discard dirty block: blocknr=15, size=2048 [ 208.786825][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=2048 [ 208.797356][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 208.804169][ T5786] NILFS (loop1): discard dirty block: blocknr=26, size=2048 [ 208.812160][ T5786] NILFS (loop1): discard dirty block: blocknr=27, size=2048 [ 208.819905][ T5786] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 208.827245][ T5786] NILFS (loop1): discard dirty block: blocknr=28, size=2048 [ 208.836843][ T5786] NILFS (loop1): discard dirty block: blocknr=29, size=2048 [ 208.855019][ T5786] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 208.872458][ T5786] NILFS (loop1): discard dirty block: blocknr=33, size=2048 [ 208.887210][ T5786] NILFS (loop1): discard dirty block: blocknr=34, size=2048 [ 208.899311][ T5786] NILFS (loop1): discard dirty page: offset=135168, ino=3 [ 208.907001][ T5786] NILFS (loop1): discard dirty block: blocknr=0, size=2048 [ 208.921479][ T5786] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=2048 [ 209.017329][ T8980] loop5: detected capacity change from 0 to 40427 [ 209.047788][ T8980] F2FS-fs (loop5): Found nat_bits in checkpoint [ 209.145945][ T8980] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 209.199838][ T8980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 209.350590][ T8208] syz-executor: attempt to access beyond end of device [ 209.350590][ T8208] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.375035][ T8208] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 209.557020][ T9017] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1161'. [ 210.121217][ T9038] loop5: detected capacity change from 0 to 16 [ 210.151065][ T9038] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 210.328785][ T9045] Cannot find del_set index 1 as target [ 211.293460][ T9076] loop5: detected capacity change from 0 to 4096 [ 211.334166][ T9076] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 211.441596][ T9083] loop4: detected capacity change from 0 to 64 [ 211.458129][ T9076] ntfs3: loop5: ino=21, "memory.events.local" mmap(write) compressed not supported [ 211.787698][ T9089] loop4: detected capacity change from 0 to 2048 [ 211.857421][ T9089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.892393][ T9078] loop1: detected capacity change from 0 to 32768 [ 211.896070][ T9089] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.968815][ T8194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.026211][ T9078] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.166511][ T9078] XFS (loop1): Ending clean mount [ 212.187984][ T9078] XFS (loop1): Quotacheck needed: Please wait. [ 212.266088][ T9078] XFS (loop1): Quotacheck: Done. [ 212.435525][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.454575][ T9115] loop4: detected capacity change from 0 to 64 [ 212.469722][ T9115] hfs: unable to locate alternate MDB [ 212.475752][ T9115] hfs: continuing without an alternate MDB [ 212.519504][ T9096] loop0: detected capacity change from 0 to 32768 [ 212.536020][ T9096] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1180 (9096) [ 212.555071][ T9096] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.567634][ T9096] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 212.576747][ T9096] BTRFS info (device loop0): using free space tree [ 212.654145][ T9096] BTRFS info (device loop0): enabling ssd optimizations [ 212.664095][ T9096] BTRFS info (device loop0): auto enabling async discard [ 212.719654][ T27] audit: type=1800 audit(1755185886.100:111): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1180" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 212.818173][ T5783] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.923938][ T9152] loop4: detected capacity change from 0 to 512 [ 213.967659][ T9152] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 213.986424][ T9152] System zones: 0-2, 18-18, 34-35 [ 214.000300][ T9152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.006340][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 214.019656][ T5798] Bluetooth: hci4: command 0x1003 tx timeout [ 214.037202][ T9152] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.230305][ T8194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.338909][ T9164] loop0: detected capacity change from 0 to 2048 [ 214.375267][ T9164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.392385][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1200'. [ 214.403094][ T9164] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.463581][ T27] audit: type=1800 audit(1755185887.840:112): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1201" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 214.518639][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.553851][ T9174] overlayfs: failed to clone lowerpath [ 214.631963][ T9176] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1205'. [ 214.785991][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 214.979343][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 215.017147][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 215.041545][ T8] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 215.054311][ T8] usb 5-1: Product: syz [ 215.064172][ T8] usb 5-1: Manufacturer: syz [ 215.069077][ T8] usb 5-1: SerialNumber: syz [ 215.085177][ T8] usb 5-1: config 0 descriptor?? [ 215.097467][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 215.720842][ T8] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 216.003987][ T8] usb 5-1: USB disconnect, device number 3 [ 216.022006][ T9230] netlink: 'syz.1.1230': attribute type 25 has an invalid length. [ 216.046905][ T9230] netlink: 'syz.1.1230': attribute type 5 has an invalid length. [ 216.155033][ T9232] loop5: detected capacity change from 0 to 4096 [ 216.406458][ T9236] pimreg: tun_chr_ioctl cmd 1074025677 [ 216.412686][ T9236] pimreg: linktype set to 804 [ 216.426282][ T9222] loop0: detected capacity change from 0 to 32768 [ 216.463384][ T9222] add_index: next_index = 0. Resetting! [ 216.470488][ T9222] find_entry called with index >= next_index [ 216.477037][ T9222] find_entry called with index >= next_index [ 216.483059][ T9222] find_entry called with index >= next_index [ 216.489221][ T9222] find_entry called with index >= next_index [ 216.920033][ T9251] loop0: detected capacity change from 0 to 4096 [ 216.954042][ T9251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.114356][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.329406][ T9263] syz_tun: entered allmulticast mode [ 217.366633][ T9262] syz_tun: left allmulticast mode [ 217.511771][ T9267] loop0: detected capacity change from 0 to 64 [ 217.691974][ T9260] loop4: detected capacity change from 0 to 32768 [ 217.703947][ T9260] XFS: attr2 mount option is deprecated. [ 217.743509][ T9260] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 217.748658][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 217.769916][ T9260] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.795987][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 217.879373][ T9260] XFS (loop4): Ending clean mount [ 217.919694][ T9260] XFS (loop4): Quotacheck needed: Please wait. [ 218.035331][ T9260] XFS (loop4): Quotacheck: Done. [ 218.184553][ T27] audit: type=1800 audit(1755185891.550:113): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1243" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 218.266848][ T8194] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.613273][ T9306] Zero length message leads to an empty skb [ 218.930463][ T9297] loop0: detected capacity change from 0 to 32768 [ 218.981047][ T9297] JBD2: Ignoring recovery information on journal [ 219.038714][ T9297] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 219.059236][ T9314] loop5: detected capacity change from 0 to 128 [ 219.067365][ T9314] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.155927][ T5787] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 219.205309][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 219.367828][ T5787] usb 2-1: not running at top speed; connect to a high speed hub [ 219.399029][ T5787] usb 2-1: config index 0 descriptor too short (expected 2322, got 18) [ 219.415917][ T5787] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 219.426248][ T5787] usb 2-1: config 95 has no interface number 0 [ 219.432580][ T5787] usb 2-1: config 95 interface 1 has no altsetting 0 [ 219.443499][ T5787] usb 2-1: string descriptor 0 read error: -22 [ 219.451462][ T5787] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 219.460608][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.794774][ T9325] nbd0: detected capacity change from 0 to 549764202496 [ 219.804681][ T5794] block nbd0: Receive control failed (result -32) [ 219.850378][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 219.859774][ T9329] netlink: 'syz.4.1270': attribute type 20 has an invalid length. [ 219.868621][ T9329] netlink: 'syz.4.1270': attribute type 21 has an invalid length. [ 220.043117][ T5787] usb 2-1: USB disconnect, device number 9 [ 220.098748][ T9335] @: renamed from vlan0 (while UP) [ 220.406909][ T9343] block nbd1: Unsupported socket: shutdown callout must be supported. [ 220.848021][ T9363] loop4: detected capacity change from 0 to 256 [ 220.909867][ T9361] loop5: detected capacity change from 0 to 1024 [ 220.913374][ T9363] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 220.983941][ T9361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.165137][ T8208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.369784][ T9370] loop5: detected capacity change from 0 to 512 [ 221.404781][ T9353] loop0: detected capacity change from 0 to 32768 [ 221.411498][ T9370] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.1288: invalid block [ 221.453774][ T9370] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1288: invalid indirect mapped block 10 (level 1) [ 221.476090][ T9353] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 221.499761][ T9370] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1288: invalid indirect mapped block 8 (level 1) [ 221.542779][ T9370] EXT4-fs (loop5): 1 truncate cleaned up [ 221.554365][ T9378] loop1: detected capacity change from 0 to 128 [ 221.555891][ T9353] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 221.580073][ T9370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.616058][ T9353] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 221.626458][ T9353] OCFS2: File system is now read-only. [ 221.632950][ T9353] (syz.0.1282,9353,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 221.641652][ T9353] (syz.0.1282,9353,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 221.649730][ T9353] (syz.0.1282,9353,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 221.658926][ T9353] (syz.0.1282,9353,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 221.668100][ T9353] (syz.0.1282,9353,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 221.676685][ T9353] (syz.0.1282,9353,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 221.685185][ T9353] (syz.0.1282,9353,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 221.695964][ T9353] (syz.0.1282,9353,0):ocfs2_mknod:385 ERROR: status = -30 [ 221.703810][ T9353] (syz.0.1282,9353,0):ocfs2_mknod:502 ERROR: status = -30 [ 221.717105][ T9370] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.1288: unexpected EA_INODE flag [ 221.734029][ T5786] sysv_free_block: flc_count > flc_size [ 221.747166][ T9381] loop4: detected capacity change from 0 to 16 [ 221.763680][ T5786] sysv_free_block: flc_count > flc_size [ 221.778422][ T9381] erofs: (device loop4): mounted with root inode @ nid 36. [ 221.785756][ T5786] sysv_free_block: flc_count > flc_size [ 221.795511][ T8208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.802651][ T5786] sysv_free_block: flc_count > flc_size [ 221.814968][ T5786] sysv_free_block: flc_count > flc_size [ 221.821350][ T5786] sysv_free_block: flc_count > flc_size [ 221.841513][ T5786] sysv_free_block: flc_count > flc_size [ 221.848367][ T5786] sysv_free_block: flc_count > flc_size [ 221.854149][ T5786] sysv_free_block: flc_count > flc_size [ 221.874994][ T5786] sysv_free_block: flc_count > flc_size [ 221.883421][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 221.929750][ T5786] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 222.044825][ T5855] kernel write not supported for file /236/attr/sockcreate (pid: 5855 comm: kworker/1:3) [ 222.090874][ T9389] loop4: detected capacity change from 0 to 2048 [ 222.109578][ T9389] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.131439][ T9389] EXT4-fs: Ignoring removed nobh option [ 222.193617][ T9389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.254417][ T9389] EXT4-fs (loop4): shut down requested (0) [ 222.309236][ T8194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.546092][ T23] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 222.669848][ T5787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 222.756612][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 222.768368][ T23] usb 1-1: config index 0 descriptor too short (expected 2322, got 18) [ 222.777258][ T23] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 222.785488][ T23] usb 1-1: config 95 has no interface number 0 [ 222.792343][ T23] usb 1-1: config 95 interface 1 has no altsetting 0 [ 222.803049][ T23] usb 1-1: string descriptor 0 read error: -22 [ 222.810321][ T23] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 222.819736][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.882648][ T5787] usb 6-1: config 0 has an invalid interface number: 104 but max is 0 [ 222.895978][ T5787] usb 6-1: config 0 has no interface number 0 [ 222.909813][ T5787] usb 6-1: config 0 interface 104 has no altsetting 0 [ 222.919690][ T5787] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 222.931610][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.940920][ T5787] usb 6-1: Product: syz [ 222.945198][ T5787] usb 6-1: Manufacturer: syz [ 222.955638][ T5787] usb 6-1: SerialNumber: syz [ 222.964044][ T5787] usb 6-1: config 0 descriptor?? [ 222.973239][ T5787] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 223.182158][ T5787] gspca_vc032x: reg_r err -71 [ 223.188745][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.194168][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.199687][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.205182][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.212209][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.217686][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.222989][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.228377][ T5790] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 223.237353][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.242727][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.248667][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.253996][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.259543][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.264863][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.271749][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.277175][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.282503][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.295412][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.313436][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.324938][ T5787] gspca_vc032x: Unknown sensor... [ 223.356064][ T5787] vc032x: probe of 6-1:0.104 failed with error -22 [ 223.369570][ T5787] usb 6-1: USB disconnect, device number 3 [ 223.420452][ T9415] loop1: detected capacity change from 0 to 512 [ 223.433655][ T8] usb 1-1: USB disconnect, device number 9 [ 223.442917][ T9415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.474457][ T5790] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 223.475411][ T9415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.483261][ T5790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.525048][ T5790] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 223.536302][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.549822][ T5790] usb 5-1: Product: syz [ 223.553998][ T5790] usb 5-1: Manufacturer: syz [ 223.560344][ T5790] usb 5-1: SerialNumber: syz [ 223.568529][ T5790] usb 5-1: config 0 descriptor?? [ 223.577340][ T5790] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 223.583660][ T5790] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 223.633464][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.996082][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 224.024142][ T23] usb 5-1: USB disconnect, device number 4 [ 224.180674][ T8] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 224.192061][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.200393][ T5790] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 224.208050][ T8] usb 2-1: Product: syz [ 224.212241][ T8] usb 2-1: Manufacturer: syz [ 224.224421][ T8] usb 2-1: SerialNumber: syz [ 224.246589][ T8] usb 2-1: config 0 descriptor?? [ 224.258047][ T8] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 224.429064][ T5790] usb 6-1: Using ep0 maxpacket: 8 [ 224.441275][ T5790] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 224.454012][ T5790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.471834][ T5790] pvrusb2: Hardware description: Terratec Grabster AV400 [ 224.482060][ T5790] pvrusb2: ********** [ 224.487310][ T5790] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 224.506264][ T5790] pvrusb2: Important functionality might not be entirely working. [ 224.532273][ T5790] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 224.545041][ T5790] pvrusb2: ********** [ 224.699037][ T2318] pvrusb2: Invalid write control endpoint [ 224.727428][ T9437] loop0: detected capacity change from 0 to 32768 [ 224.761876][ T9437] [ 224.761876][ T9437] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.761876][ T9437] [ 224.800745][ T2318] pvrusb2: Invalid write control endpoint [ 224.815964][ T27] audit: type=1800 audit(1755185898.190:114): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1312" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 224.834534][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 224.847400][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 224.855022][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 224.868325][ T3434] [ 224.868325][ T3434] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.868325][ T3434] [ 224.876015][ T2318] pvrusb2: Device being rendered inoperable [ 224.891026][ T3434] [ 224.891026][ T3434] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.891026][ T3434] [ 224.905311][ T5783] [ 224.905311][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.905311][ T5783] [ 224.914080][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 224.933980][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 224.943203][ T5783] [ 224.943203][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.943203][ T5783] [ 224.957710][ T9428] pvrusb2: Attempted to execute control transfer when device not ok [ 224.969035][ T113] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 224.977928][ T5787] usb 6-1: USB disconnect, device number 4 [ 224.980777][ T113] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 224.980797][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted 6.6.101-syzkaller #0 [ 225.003028][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.013110][ T113] RIP: 0010:lmLogSync+0x139/0x9c0 [ 225.018248][ T113] Code: 85 b3 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 e5 63 dd fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 c9 63 dd fe 49 8b 3f e8 11 85 b3 fe [ 225.037896][ T113] RSP: 0018:ffffc90002d27c40 EFLAGS: 00010202 [ 225.044078][ T113] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 7fab10235cc5cb00 [ 225.052052][ T113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.060042][ T113] RBP: ffffc90002d27d48 R08: 0000000000000004 R09: 0000000000000004 [ 225.068039][ T113] R10: ffffc90002d27b64 R11: fffff520005a4f75 R12: ffff8880789b1000 [ 225.076031][ T113] R13: dffffc0000000000 R14: ffff888076d14438 R15: 0000000000000040 [ 225.084018][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 225.092990][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.099759][ T113] CR2: 0000001b34620ff8 CR3: 000000006d0a5000 CR4: 00000000003506e0 [ 225.107747][ T113] Call Trace: [ 225.111039][ T113] [ 225.113981][ T113] ? lmWriteRecord+0x1ac0/0x1ac0 [ 225.118935][ T113] ? __rwlock_init+0x150/0x150 [ 225.123715][ T113] jfs_syncpt+0x7b/0x90 [ 225.127876][ T113] txEnd+0x2e5/0x520 [ 225.131779][ T113] jfs_lazycommit+0x5a6/0xa60 [ 225.136473][ T113] ? txFreelock+0x5a0/0x5a0 [ 225.140977][ T113] ? do_task_dead+0xd0/0xd0 [ 225.145512][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 225.150470][ T113] kthread+0x2fa/0x390 [ 225.154547][ T113] ? txFreelock+0x5a0/0x5a0 [ 225.159068][ T113] ? kthread_blkcg+0xd0/0xd0 [ 225.163659][ T113] ret_from_fork+0x48/0x80 [ 225.168090][ T113] ? kthread_blkcg+0xd0/0xd0 [ 225.172732][ T113] ret_from_fork_asm+0x11/0x20 [ 225.177534][ T113] [ 225.180569][ T113] Modules linked in: [ 225.184532][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.192555][ T2318] pvrusb2: Attached sub-driver cx25840 [ 225.198537][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 225.206013][ T113] ---[ end trace 0000000000000000 ]--- [ 225.210809][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 225.219773][ T113] RIP: 0010:lmLogSync+0x139/0x9c0 [ 225.229955][ T8] gspca_sunplus: reg_r err -71 [ 225.234839][ T8] sunplus: probe of 2-1:0.0 failed with error -71 [ 225.248464][ T8] usb 2-1: USB disconnect, device number 10 [ 225.255232][ T113] Code: 85 b3 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 e5 63 dd fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 c9 63 dd fe 49 8b 3f e8 11 85 b3 fe [ 225.276413][ T113] RSP: 0018:ffffc90002d27c40 EFLAGS: 00010202 [ 225.283919][ T113] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 7fab10235cc5cb00 [ 225.295770][ T113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.309770][ T113] RBP: ffffc90002d27d48 R08: 0000000000000004 R09: 0000000000000004 [ 225.318664][ T113] R10: ffffc90002d27b64 R11: fffff520005a4f75 R12: ffff8880789b1000 [ 225.326974][ T113] R13: dffffc0000000000 R14: ffff888076d14438 R15: 0000000000000040 [ 225.334985][ T113] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 225.344006][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.350881][ T113] CR2: 0000001b2dc13ff8 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 225.359001][ T113] Kernel panic - not syncing: Fatal exception [ 225.365210][ T113] Kernel Offset: disabled [ 225.369529][ T113] Rebooting in 86400 seconds..