last executing test programs: 1m41.289351761s ago: executing program 3 (id=549): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc010000000000000000000000fba20000000000000000000000000000000001242081000000000000000800000086dd080088be86dd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m40.315700088s ago: executing program 3 (id=556): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010711e102000000000000109022d0001000060020904001005030059000921050036012205000905810300000c00070905020320"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 1m38.025353336s ago: executing program 3 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 1m37.609529036s ago: executing program 3 (id=576): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000600)='./file0\x00', 0x801, &(0x7f0000000640)=ANY=[], 0x2, 0x17d, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000940)=""/28, 0x1c) 1m36.941456476s ago: executing program 3 (id=579): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4007, @fd, 0x13, 0x20000000, 0x8001, 0x0, 0x0, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 1m35.983614504s ago: executing program 3 (id=588): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x8}) 1m35.306289481s ago: executing program 32 (id=588): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x8}) 6.70343071s ago: executing program 0 (id=1217): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) 6.499036261s ago: executing program 0 (id=1220): r0 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 6.232468453s ago: executing program 0 (id=1224): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000340)={0x25, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x200}]) 5.707603162s ago: executing program 0 (id=1230): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd3}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 5.563637932s ago: executing program 0 (id=1233): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000408"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.664698118s ago: executing program 6 (id=1249): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r0) 3.416807096s ago: executing program 0 (id=1252): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000100)={0x2, 0x0, {0x40, @usage, 0x0, 0x6, 0xfffffffffffffff9, 0xdc, 0x2, 0x448, 0x411, @usage=0x3, 0x6, 0x5, [0x5f3661d8, 0x101, 0x3d4f3f0b, 0xa9, 0xff, 0x5e6]}, {0x0, @usage=0x3, 0x0, 0x100000000, 0x8, 0x3, 0x100000000, 0xad, 0xc0, @struct={0x224, 0x5}, 0x2, 0x1, [0x10, 0x5c, 0xfffffffffffffff9, 0xc, 0xd, 0x7ff]}, {0x9, @struct={0x0, 0xfec}, 0x0, 0x81, 0x1, 0x2, 0x7f, 0x7, 0x460, @usage=0x1, 0x0, 0x63d1, [0x5, 0x7, 0x4, 0x9, 0x8001, 0x430000000]}, {0x0, 0x4, 0x7}}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x4}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 3.037794459s ago: executing program 5 (id=1253): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x7, 0xf, 0x0, [@empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @rand_addr, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 2.983576238s ago: executing program 6 (id=1254): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.809687909s ago: executing program 6 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) 2.523614801s ago: executing program 5 (id=1258): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3274, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x71, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x1, {0x3}}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 2.496959719s ago: executing program 6 (id=1259): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000100)='./file1\x00') 1.917766996s ago: executing program 1 (id=1262): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9d9bdf3737"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.859842318s ago: executing program 6 (id=1263): mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f00000009c0)='./file0\x00', 0x8702, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.6676193s ago: executing program 5 (id=1264): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 1.662900545s ago: executing program 2 (id=1265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080003"], 0x48}}, 0x0) 1.548267604s ago: executing program 1 (id=1266): io_setup(0x2, &(0x7f0000000140)=0x0) io_destroy(r0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000003c0)='./bus\x00', 0x2010000, &(0x7f0000000340)=ANY=[], 0x23, 0x6ce, &(0x7f0000001040)="$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") io_destroy(r0) 1.446690628s ago: executing program 4 (id=1267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x20}}, 0x0) 1.44601038s ago: executing program 2 (id=1268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="ce6d", 0x2}, {&(0x7f0000000000)="e6cbfcf6a357c8b40d250b4a1466af81c8c088977c3cba100bf90417b36ba9ef4d60be4b9cdaa69514a2fba09688d266ccb6afb93812354c63d59e21eda949fb1ae0565ee03b", 0x46}], 0x2}}], 0x1, 0x48000) 1.323545798s ago: executing program 5 (id=1269): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) 1.323302274s ago: executing program 2 (id=1270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1de4, &(0x7f0000000440)={0x0, 0x1, 0x400, 0x0, 0xfffffffe}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x16, 0x20000002, 0x0) 1.229648787s ago: executing program 2 (id=1271): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000eeffffff0700000000008000000000000048d5a5839c904555c2"], 0x48) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf250100"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x4040000) 1.139117234s ago: executing program 1 (id=1272): unshare(0x2c020400) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 1.08840286s ago: executing program 4 (id=1273): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000700)="ab", 0x1, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 1.087820044s ago: executing program 5 (id=1274): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x800000000000f9b8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setreuid(0x0, r1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000010400001e"]) 960.348769ms ago: executing program 2 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000001040)=0x4, 0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c0995df14c8f98f2b6265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0xfffffcd0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1}, 0x0) 847.628362ms ago: executing program 1 (id=1276): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x3c0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x390, 0x2, [@TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0x104, 0x3, "bc36617e3f5bd536cabe3adff40f316299b9d93110de5ecc19b02375366598d37159e29612c009d44c22e4549d5a868d1c4d76e55503b1bb4c2a2ad8b5b0e63a0de641e37396d70cd0537243fcef1cbcac648d77944064a7b8605f7826043b6e1b5dc6e4eef98813adb37a543f0e38bcc33f64013df0346a3c082873dcea96d49850d12794eb350db3f737030106e3c587b15080f4d4b9975e81f52826f010ffd08ae0136a6dba02f1e9284aa9d8c0cd6fabc346dbf6d1870a1c8ea6b3627124167d375119d370b866f15bfcba311d9c0290def3399a9a65d1a5edfb6069bd96e38706702756abd6d07bdb4623f00613831bdbfb43b7cf2013a592298a297679"}, @TCA_GRED_MAX_P, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x5a}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x3c0}}, 0x0) 846.953629ms ago: executing program 4 (id=1277): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}], 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x8) 797.9178ms ago: executing program 5 (id=1278): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) truncate(&(0x7f0000000140)='./file2\x00', 0x80000002328) 646.99748ms ago: executing program 6 (id=1279): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',ignoreqv,accelient,afi000000000000000,cache=fscache,posixacl']) 571.634342ms ago: executing program 2 (id=1280): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r0, 0x8926, 0x4000000000000) 524.22883ms ago: executing program 1 (id=1281): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./bus\x00', 0x4400, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x1, 0xa1b, &(0x7f0000006fc0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 478.908644ms ago: executing program 4 (id=1282): r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "cb76ee129b6e687d0337a3221ccdb7e4964c81edff950dca343f73a39dc7da8925f0de685d24fdcc040bb6b8ee923be79c28cbfcd4fa35f1185535ecd17bfff2", 0x24}, 0x48, r0) keyctl$setperm(0x5, r1, 0x800) add_key$fscrypt_v1(&(0x7f0000001840), &(0x7f0000001880)={'fscrypt:', @desc2}, &(0x7f00000018c0)={0x0, "2136cd6e61a7f7335b786429fe6f639bfcf7b49e4979d93410d0ea29ca1d7e641f64cebd63c79fcc763767b766055d8110e0852755e199f3b9e3027070834c97", 0x40}, 0x48, r0) 343.589113ms ago: executing program 4 (id=1283): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 298.172µs ago: executing program 1 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x8500, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 4 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) kernel console output (not intermixed with test programs): descriptor?? [ 171.688918][ T5822] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 171.731342][ T7493] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 171.737738][ T5829] syz-executor: attempt to access beyond end of device [ 171.737738][ T5829] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.793492][ T7493] bcachefs (loop4): initializing new filesystem [ 171.838751][ T7493] bcachefs (loop4): going read-write [ 171.873027][ T5829] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 171.889843][ T7493] bcachefs (loop4): marking superblocks [ 172.032995][ T7493] bcachefs (loop4): initializing freespace [ 172.101046][ T7493] bcachefs (loop4): done initializing freespace [ 172.139328][ T7493] bcachefs (loop4): reading snapshots table [ 172.198231][ T7493] bcachefs (loop4): reading snapshots done [ 172.331745][ T7493] bcachefs (loop4): done starting filesystem [ 172.544109][ T5822] gspca_ov534_9: reg_w failed -71 [ 172.686709][ T5837] bcachefs (loop4): shutting down [ 172.691812][ T5837] bcachefs (loop4): going read-only [ 172.704473][ T7535] loop0: detected capacity change from 0 to 4096 [ 172.705976][ T5837] bcachefs (loop4): finished waiting for writes to stop [ 172.778107][ T7535] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 172.778330][ T5837] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 172.843393][ T5822] gspca_ov534_9: Unknown sensor 0000 [ 172.843487][ T5822] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 172.905552][ T5822] usb 4-1: USB disconnect, device number 6 [ 172.942647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 172.954256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 173.008780][ T7535] ntfs3(loop0): ino=19, mi_enum_attr [ 173.051073][ T7535] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 173.311458][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'. [ 173.467283][ T5837] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 8 [ 173.525636][ T5837] bcachefs (loop4): clean shutdown complete, journal seq 9 [ 173.574881][ T5837] bcachefs (loop4): marking filesystem clean [ 173.633585][ T7551] syz.0.550 uses obsolete (PF_INET,SOCK_PACKET) [ 173.790600][ T5837] bcachefs (loop4): shutdown complete [ 173.904850][ T7554] syz.2.552: attempt to access beyond end of device [ 173.904850][ T7554] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 174.064010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.163636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.563398][ T5822] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.773426][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 174.783815][ T5822] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.809269][ T5822] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 174.853476][ T5822] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.943493][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.984603][ T5822] usb 4-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 175.012830][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.043184][ T5822] usb 4-1: config 0 descriptor?? [ 175.492654][ T5822] nzxt-smart2 0003:1E71:2010.0005: unknown main item tag 0x0 [ 175.530822][ T5822] nzxt-smart2 0003:1E71:2010.0005: unknown main item tag 0x0 [ 175.583537][ T5822] nzxt-smart2 0003:1E71:2010.0005: unknown main item tag 0x0 [ 175.602456][ T5822] nzxt-smart2 0003:1E71:2010.0005: unknown main item tag 0x0 [ 175.652445][ T5822] nzxt-smart2 0003:1E71:2010.0005: unknown main item tag 0x0 [ 175.700483][ T5822] nzxt-smart2 0003:1E71:2010.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.3-1/input0 [ 175.747058][ T7590] loop5: detected capacity change from 0 to 256 [ 175.774577][ T7590] vfat: Bad value for 'fmask' [ 175.793218][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.5.569'. [ 175.893719][ T5822] usb 4-1: USB disconnect, device number 7 [ 176.231315][ T7595] loop5: detected capacity change from 0 to 512 [ 176.293643][ T7595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.418487][ T7595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.449403][ T7595] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.762983][ T7566] loop2: detected capacity change from 0 to 32768 [ 176.774252][ T7582] loop0: detected capacity change from 0 to 32768 [ 176.794527][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.801706][ T7582] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.565 (7582) [ 176.923925][ T7582] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 176.987113][ T7582] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 177.049418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 177.085898][ T7582] BTRFS info (device loop0): using free-space-tree [ 177.105281][ T7607] loop3: detected capacity change from 0 to 8 [ 177.254306][ C1] bridge0: received packet on gretap1 with own address as source address (addr:be:a9:4b:92:2e:94, vlan:0) [ 177.362789][ T7566] JBD2: journal reset failed [ 177.433830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.442278][ T7566] (syz.2.557,7566,1):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 177.561307][ T7566] (syz.2.557,7566,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 177.585497][ T5840] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 177.631134][ T5840] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 177.737656][ T7634] loop1: detected capacity change from 0 to 256 [ 177.785329][ T7634] exfat: Deprecated parameter 'namecase' [ 177.791099][ T7634] exfat: Deprecated parameter 'utf8' [ 177.837137][ T7634] exfat: Deprecated parameter 'namecase' [ 177.867218][ T5838] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 177.880642][ T7634] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 177.893416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 178.407066][ T5840] syz-executor (5840) used greatest stack depth: 12592 bytes left [ 178.667870][ T7644] netlink: 'syz.5.586': attribute type 31 has an invalid length. [ 178.933874][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.364913][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.475048][ T7660] loop2: detected capacity change from 0 to 128 [ 179.501646][ T7660] FAT-fs (loop2): bogus number of reserved sectors [ 179.579326][ T7660] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 179.692588][ T7660] FAT-fs (loop2): Can't find a valid FAT filesystem [ 179.765383][ T7664] loop5: detected capacity change from 0 to 64 [ 179.850678][ T7664] hfs: keylen 94 too large [ 179.876011][ T7660] program syz.2.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.977596][ T7665] program syz.2.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.063791][ T7665] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 180.208287][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.5.598'. [ 180.512795][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.523088][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.534359][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.542667][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.577862][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 180.593063][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.667079][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.829712][ T7683] loop1: detected capacity change from 0 to 64 [ 180.879128][ T29] audit: type=1800 audit(1738746347.431:12): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.604" name="bus" dev="loop1" ino=21 res=0 errno=0 [ 180.927005][ T7683] hfs: request for non-existent node 131072 in B*Tree [ 180.963330][ T7683] hfs: request for non-existent node 131072 in B*Tree [ 181.184978][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.403442][ T5892] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.603799][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 181.643955][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.702952][ T7700] loop5: detected capacity change from 0 to 2048 [ 181.735394][ T5892] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 181.765626][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.780569][ T35] bridge_slave_1: left allmulticast mode [ 181.833741][ T5892] usb 1-1: Product: syz [ 181.837987][ T5892] usb 1-1: Manufacturer: syz [ 181.854438][ T7704] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.863323][ T35] bridge_slave_1: left promiscuous mode [ 181.873488][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.903292][ T5892] usb 1-1: SerialNumber: syz [ 181.939696][ T5892] usb 1-1: config 0 descriptor?? [ 181.984947][ T35] bridge_slave_0: left allmulticast mode [ 181.993544][ T35] bridge_slave_0: left promiscuous mode [ 182.013752][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.364786][ T5892] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 182.499253][ T7717] input: syz1 as /devices/virtual/input/input7 [ 182.567428][ T7692] loop4: detected capacity change from 0 to 32768 [ 182.606311][ T7692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.607 (7692) [ 182.694319][ T5831] Bluetooth: hci5: command tx timeout [ 182.718665][ T7692] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.770690][ T5892] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 182.784696][ T5892] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 182.804874][ T7692] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 182.818996][ T7692] BTRFS info (device loop4): using free-space-tree [ 182.845475][ T5892] usb 1-1: USB disconnect, device number 5 [ 183.034138][ T29] audit: type=1326 audit(1738746349.581:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 183.137497][ T29] audit: type=1326 audit(1738746349.581:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 183.193548][ T29] audit: type=1326 audit(1738746349.621:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 183.251190][ T29] audit: type=1326 audit(1738746349.631:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 183.335943][ T29] audit: type=1326 audit(1738746349.641:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.5.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 183.379679][ T5837] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.401785][ T7706] loop1: detected capacity change from 0 to 32768 [ 183.456767][ T7706] XFS: noikeep mount option is deprecated. [ 183.546098][ T7706] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 183.625647][ T7706] XFS (loop1): Ending clean mount [ 183.643012][ T7706] XFS (loop1): Quotacheck needed: Please wait. [ 183.735433][ T7706] XFS (loop1): Quotacheck: Done. [ 183.789569][ T29] audit: type=1800 audit(1738746350.331:18): pid=7706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.614" name="file1" dev="loop1" ino=1062 res=0 errno=0 [ 183.870687][ T29] audit: type=1800 audit(1738746350.331:19): pid=7706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.614" name="file1" dev="loop1" ino=1062 res=0 errno=0 [ 184.002312][ T5829] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 184.037109][ T7760] loop5: detected capacity change from 0 to 128 [ 184.068555][ T7760] EXT4-fs: Ignoring removed nobh option [ 184.123411][ T7760] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.152336][ T7760] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.298540][ T7760] fscrypt (loop5, inode 12): Reserved bits set in encryption policy [ 184.425572][ T5833] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.525133][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.554143][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.581495][ T35] bond0 (unregistering): Released all slaves [ 184.773662][ T5831] Bluetooth: hci5: command tx timeout [ 184.791930][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 184.864837][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 185.446060][ T7672] chnl_net:caif_netlink_parms(): no params data found [ 185.829903][ T5898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.093527][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 186.102553][ T5898] usb 1-1: config 0 has no interfaces? [ 186.111023][ T5898] usb 1-1: New USB device found, idVendor=0cdd, idProduct=00b3, bcdDevice=2d.ee [ 186.121761][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.140797][ T5898] usb 1-1: Product: syz [ 186.145577][ T5898] usb 1-1: Manufacturer: syz [ 186.162961][ T5898] usb 1-1: SerialNumber: syz [ 186.181115][ T5898] usb 1-1: config 0 descriptor?? [ 186.260173][ T35] hsr_slave_0: left promiscuous mode [ 186.284109][ T35] hsr_slave_1: left promiscuous mode [ 186.294650][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.317128][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.374946][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.416735][ T5844] usb 1-1: USB disconnect, device number 6 [ 186.432983][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.555279][ T35] veth1_macvtap: left promiscuous mode [ 186.581740][ T35] veth0_macvtap: left promiscuous mode [ 186.601863][ T35] veth1_vlan: left promiscuous mode [ 186.621052][ T35] veth0_vlan: left promiscuous mode [ 186.859321][ T5835] Bluetooth: hci5: command tx timeout [ 187.242003][ T7818] loop5: detected capacity change from 0 to 32768 [ 187.325458][ T7818] read_mapping_page failed! [ 187.360692][ T7818] ERROR: (device loop5): txCommit: [ 187.360692][ T7818] [ 187.477500][ T7825] loop4: detected capacity change from 0 to 32768 [ 187.546368][ T1155] read_mapping_page failed! [ 187.562048][ T1155] ERROR: (device loop5): txCommit: [ 187.562048][ T1155] [ 187.588087][ T1155] jfs_write_inode: jfs_commit_inode failed! [ 187.948568][ T7834] loop2: detected capacity change from 0 to 32768 [ 187.976391][ T7834] XFS: ikeep mount option is deprecated. [ 187.982159][ T7834] XFS: noikeep mount option is deprecated. [ 188.105681][ T7834] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 188.143680][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.649'. [ 188.272044][ T7834] XFS (loop2): Ending clean mount [ 188.294661][ T7852] loop4: detected capacity change from 0 to 256 [ 188.340246][ T7834] XFS (loop2): Quotacheck needed: Please wait. [ 188.500109][ T7834] XFS (loop2): Quotacheck: Done. [ 188.565351][ T7840] loop0: detected capacity change from 0 to 40427 [ 188.614377][ T7840] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 188.627868][ T5839] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 188.632346][ T7840] F2FS-fs (loop0): Image doesn't support compression [ 188.665424][ T7840] F2FS-fs (loop0): heap/no_heap options were deprecated [ 188.683384][ T7840] F2FS-fs (loop0): Image doesn't support compression [ 188.710252][ T7840] F2FS-fs (loop0): invalid crc value [ 188.758320][ T35] team0 (unregistering): Port device team_slave_1 removed [ 188.767651][ T7840] F2FS-fs (loop0): Found nat_bits in checkpoint [ 188.943884][ T5835] Bluetooth: hci5: command tx timeout [ 188.965866][ T7840] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 189.015469][ T35] team0 (unregistering): Port device team_slave_0 removed [ 189.017973][ T7840] syz.0.648: attempt to access beyond end of device [ 189.017973][ T7840] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.104331][ T7840] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 190.111334][ T7859] loop2: detected capacity change from 0 to 32768 [ 190.154605][ T7859] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.652 (7859) [ 190.258686][ T7859] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 190.291661][ T7859] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 190.323723][ T7859] BTRFS info (device loop2): using free-space-tree [ 190.898870][ T5839] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 191.067840][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.097267][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.132429][ T7672] bridge_slave_0: entered allmulticast mode [ 191.151994][ T7672] bridge_slave_0: entered promiscuous mode [ 191.264732][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.287005][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.355626][ T7672] bridge_slave_1: entered allmulticast mode [ 191.423483][ T7672] bridge_slave_1: entered promiscuous mode [ 191.804508][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.807312][ T7895] loop2: detected capacity change from 0 to 4096 [ 191.904651][ T7899] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 191.931783][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.137289][ T7895] overlayfs: failed to resolve './file0': -36 [ 192.233701][ T7672] team0: Port device team_slave_0 added [ 192.288407][ T7672] team0: Port device team_slave_1 added [ 192.529228][ T7886] loop0: detected capacity change from 0 to 40427 [ 192.586349][ T7905] loop1: detected capacity change from 0 to 4096 [ 192.622394][ T7886] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 192.662401][ T7905] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 192.684166][ T7886] F2FS-fs (loop0): invalid crc value [ 192.706253][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.720575][ T7886] F2FS-fs (loop0): Found nat_bits in checkpoint [ 192.725456][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.878210][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.903560][ T7905] ntfs3(loop1): Failed to load $Extend (-22). [ 192.932318][ T7920] loop4: detected capacity change from 0 to 64 [ 192.934600][ T7905] ntfs3(loop1): Failed to initialize $Extend. [ 192.941364][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.961378][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.048101][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.071811][ T7886] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 193.080044][ T6002] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 193.247176][ T7886] syz.0.657: attempt to access beyond end of device [ 193.247176][ T7886] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 193.263315][ T6002] usb 3-1: Using ep0 maxpacket: 16 [ 193.285511][ T7672] hsr_slave_0: entered promiscuous mode [ 193.292006][ T7672] hsr_slave_1: entered promiscuous mode [ 193.316077][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.322819][ T7672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.347813][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.398893][ T6002] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 193.407182][ T7672] Cannot create hsr debugfs directory [ 193.449369][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.495646][ T6002] usb 3-1: config 0 descriptor?? [ 193.537389][ T5838] syz-executor: attempt to access beyond end of device [ 193.537389][ T5838] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.599794][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 193.946105][ T6002] lua 0003:1E7D:2C2E.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 193.988612][ T7935] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff' [ 194.062447][ T7912] loop5: detected capacity change from 0 to 32768 [ 194.130064][ T6002] usb 3-1: USB disconnect, device number 3 [ 194.141856][ T7912] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.667 (7912) [ 194.273838][ T7912] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.318271][ T7912] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 194.389917][ T7672] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 194.443903][ T7672] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 194.514060][ T7672] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.614424][ T7672] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 194.643007][ T7912] BTRFS info (device loop5): rebuilding free space tree [ 194.719348][ T7912] BTRFS info (device loop5): disabling free space tree [ 194.753488][ T7912] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.763201][ T7912] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.098378][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.170482][ T7981] loop1: detected capacity change from 0 to 1024 [ 195.220001][ T7672] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.289871][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.297104][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.393736][ T5833] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.395505][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.411158][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.518294][ T7987] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.527899][ T7987] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.537048][ T7987] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.545927][ T7987] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.651162][ T7987] vxlan0: entered promiscuous mode [ 195.670713][ T7987] vxlan0: entered allmulticast mode [ 195.824610][ T7672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.520058][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.981573][ T8025] loop5: detected capacity change from 0 to 1024 [ 197.130720][ T8025] hfsplus: bad catalog entry type [ 197.311191][ T35] hfsplus: b-tree write err: -5, ino 4 [ 197.617623][ T7672] veth0_vlan: entered promiscuous mode [ 197.620207][ T8020] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 197.686201][ T7672] veth1_vlan: entered promiscuous mode [ 197.723218][ T8042] loop5: detected capacity change from 0 to 4096 [ 197.771796][ T8042] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.792282][ T8048] loop2: detected capacity change from 0 to 256 [ 197.854622][ T8042] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 197.867352][ T7672] veth0_macvtap: entered promiscuous mode [ 197.898200][ T6906] udevd[6906]: incorrect nilfs2 checksum on /dev/loop5 [ 197.915614][ T7672] veth1_macvtap: entered promiscuous mode [ 197.943877][ T8048] FAT-fs (loop2): Directory bread(block 64) failed [ 197.963502][ T6002] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 197.974421][ T8048] FAT-fs (loop2): Directory bread(block 65) failed [ 197.981121][ T8048] FAT-fs (loop2): Directory bread(block 66) failed [ 197.992774][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.009060][ T8052] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.035483][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.042416][ T8048] FAT-fs (loop2): Directory bread(block 67) failed [ 198.073338][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.074273][ T8048] FAT-fs (loop2): Directory bread(block 68) failed [ 198.103374][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.105940][ T8048] FAT-fs (loop2): Directory bread(block 69) failed [ 198.146246][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.153597][ T8048] FAT-fs (loop2): Directory bread(block 70) failed [ 198.173407][ T6002] usb 1-1: Using ep0 maxpacket: 32 [ 198.181630][ T8048] FAT-fs (loop2): Directory bread(block 71) failed [ 198.192433][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.209161][ T8048] FAT-fs (loop2): Directory bread(block 72) failed [ 198.224139][ T6002] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 198.231849][ T8048] FAT-fs (loop2): Directory bread(block 73) failed [ 198.253340][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.291855][ T6002] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 198.301507][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.322388][ T6002] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 198.363303][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.378446][ T6002] usb 1-1: Product: syz [ 198.382670][ T6002] usb 1-1: Manufacturer: syz [ 198.387721][ T6002] usb 1-1: SerialNumber: syz [ 198.393451][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.416444][ T6002] usb 1-1: config 0 descriptor?? [ 198.425000][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.436838][ T8044] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.521567][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.592272][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.626296][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.655070][ T8028] loop1: detected capacity change from 0 to 32768 [ 198.662744][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.677534][ T8028] XFS: attr2 mount option is deprecated. [ 198.684754][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.703785][ T8028] XFS: ikeep mount option is deprecated. [ 198.713739][ T8028] XFS: noikeep mount option is deprecated. [ 198.722479][ T6002] usb 1-1: USB disconnect, device number 7 [ 198.728919][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.759423][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.788524][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.809108][ T8028] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 198.836475][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.880430][ T7672] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.910554][ T7672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.925509][ T7672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.963635][ T7672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.016726][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.023094][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.053603][ T8028] XFS (loop1): Ending clean mount [ 199.062978][ T8066] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 199.146108][ T8028] XFS (loop1): Quotacheck needed: Please wait. [ 199.209176][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.273361][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.297627][ T8028] XFS (loop1): Quotacheck: Done. [ 199.393485][ T8050] loop4: detected capacity change from 0 to 32768 [ 199.418013][ T8050] XFS: ikeep mount option is deprecated. [ 199.443613][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.483343][ T8080] loop5: detected capacity change from 0 to 256 [ 199.501215][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.524055][ T8050] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.704755][ T5898] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 199.734092][ T5829] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 199.826336][ T8050] XFS (loop4): Ending clean mount [ 199.873558][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 199.878637][ T8050] XFS (loop4): Quotacheck needed: Please wait. [ 199.915090][ T5898] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.968009][ T5898] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.971287][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x8 [ 200.039209][ T5898] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 200.051526][ T8] XFS (loop4): Unmount and run xfs_repair [ 200.079928][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 200.087430][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.099294][ T5898] hub 3-1:4.0: USB hub found [ 200.130653][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 200.162905][ T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 200.191264][ T8] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 200.263730][ T8] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 200.318208][ T5898] hub 3-1:4.0: 2 ports detected [ 200.323181][ T5898] usb 3-1: selecting invalid altsetting 1 [ 200.332786][ T8] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 200.363429][ T5898] hub 3-1:4.0: Using single TT (err -22) [ 200.382877][ T8] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 200.422605][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 200.453150][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 200.475435][ T8103] loop0: detected capacity change from 0 to 1024 [ 200.520337][ T12] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 4 error 74 [ 200.528521][ T5898] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 200.582727][ T5898] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 200.601417][ T8050] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 200.627889][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.709'. [ 200.734948][ T5898] usb 3-1: USB disconnect, device number 4 [ 200.784897][ T8111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.799466][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x8 [ 200.813604][ T1155] hfsplus: b-tree write err: -5, ino 4 [ 200.885377][ T8] XFS (loop4): Unmount and run xfs_repair [ 200.901582][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 200.935351][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 200.957024][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 200.986868][ T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 201.014056][ T8] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 201.032942][ T8] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 201.053086][ T8] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 201.097217][ T8] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 201.146022][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 201.168242][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.182213][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 201.222312][ T8050] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 4 error 74 [ 201.231450][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.327346][ T46] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 201.356153][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.391172][ T46] usb 2-1: SerialNumber: syz [ 201.412360][ T8] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_cntbt block 0x8 [ 201.433685][ T8] XFS (loop4): Unmount and run xfs_repair [ 201.467620][ T8124] loop2: detected capacity change from 0 to 2048 [ 201.472349][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 201.483909][ T8] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 201.492811][ T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 201.522827][ T8124] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.552740][ T8] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 201.604228][ T8] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 201.628619][ T46] usb 2-1: 0:2 : does not exist [ 201.658193][ T8] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 201.693513][ T8] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 201.707808][ T46] usb 2-1: USB disconnect, device number 6 [ 201.748227][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 201.792583][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 201.836551][ T8131] loop0: detected capacity change from 0 to 1024 [ 201.846163][ T1150] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 4 error 74 [ 201.865638][ T8131] EXT4-fs: Ignoring removed orlov option [ 201.875612][ T8133] netlink: 128 bytes leftover after parsing attributes in process `syz.5.720'. [ 201.889745][ T1150] XFS (loop4): page discard on page ffffea00018c4980, inode 0x244b, pos 0. [ 201.895920][ T8131] EXT4-fs: Ignoring removed bh option [ 201.946393][ T8131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.961435][ T5837] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.982807][ T5837] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 202.004008][ T6906] udevd[6906]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.075196][ T8131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.189204][ T8143] loop5: detected capacity change from 0 to 64 [ 202.202806][ T8141] tap0: tun_chr_ioctl cmd 1074025677 [ 202.231983][ T8141] tap0: linktype set to 778 [ 202.338056][ T8143] hfs: request for non-existent node 131072 in B*Tree [ 202.353402][ T8143] hfs: request for non-existent node 131072 in B*Tree [ 202.534562][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.844931][ T8121] loop6: detected capacity change from 0 to 32768 [ 202.973061][ T29] audit: type=1800 audit(1738746369.521:20): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.714" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 203.006809][ T8154] loop5: detected capacity change from 0 to 4096 [ 203.015647][ T8154] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 203.073088][ T8154] ntfs3(loop5): ino=19, mi_enum_attr [ 203.116848][ T8154] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 203.224761][ T8154] ntfs3(loop5): failed to convert "c46c" to cp865 [ 203.268608][ T8154] ntfs3(loop5): ino=20, mi_enum_attr [ 203.435653][ T8172] netlink: 96 bytes leftover after parsing attributes in process `syz.1.730'. [ 204.051640][ T8186] netlink: 888 bytes leftover after parsing attributes in process `syz.0.737'. [ 204.114152][ T8186] netlink: 137 bytes leftover after parsing attributes in process `syz.0.737'. [ 204.145500][ T8186] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 204.262118][ T8190] kernel profiling enabled (shift: 9) [ 204.324017][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.738'. [ 205.617561][ T8226] loop2: detected capacity change from 0 to 1024 [ 205.764869][ T8226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.942848][ T8198] loop1: detected capacity change from 0 to 32768 [ 205.988670][ T8198] XFS: ikeep mount option is deprecated. [ 206.059040][ T8198] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 206.123996][ T8226] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 206.338539][ T8198] XFS (loop1): Ending clean mount [ 206.348607][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.379079][ T8198] XFS (loop1): Quotacheck needed: Please wait. [ 206.388924][ T8214] loop6: detected capacity change from 0 to 32768 [ 206.497661][ T8198] XFS (loop1): Quotacheck: Done. [ 206.559282][ T8222] loop4: detected capacity change from 0 to 32768 [ 206.588314][ T8222] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.747 (8222) [ 206.661454][ T8249] loop5: detected capacity change from 0 to 512 [ 206.698795][ T8219] loop0: detected capacity change from 0 to 32768 [ 206.722046][ T8222] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.734973][ T8214] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 206.785672][ T8249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.811640][ T8222] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 206.841774][ T8222] BTRFS info (device loop4): using free-space-tree [ 206.844741][ T8214] bcachefs (loop6): initializing new filesystem [ 206.883059][ T5829] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 206.939849][ T8214] bcachefs (loop6): going read-write [ 206.960620][ T8249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.022099][ T8249] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.038755][ T8214] bcachefs (loop6): marking superblocks [ 207.171980][ T29] audit: type=1800 audit(1738746373.721:21): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.752" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 207.205058][ T29] audit: type=1800 audit(1738746373.731:22): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.752" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 207.261410][ T8214] bcachefs (loop6): initializing freespace [ 207.301600][ T8282] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 207.315524][ T8214] bcachefs (loop6): done initializing freespace [ 207.362154][ T8214] bcachefs (loop6): reading snapshots table [ 207.385268][ T8222] BTRFS info (device loop4): balance: start -susage=0..4076,limit=1,limit=1..0 [ 207.414517][ T8214] bcachefs (loop6): reading snapshots done [ 207.466187][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.563672][ T8214] bcachefs (loop6): done starting filesystem [ 207.693689][ T8222] BTRFS info (device loop4): relocating block group 1048576 flags system [ 207.802184][ T7672] bcachefs (loop6): shutting down [ 207.841328][ T7672] bcachefs (loop6): going read-only [ 207.872228][ T7672] bcachefs (loop6): finished waiting for writes to stop [ 207.903340][ T8222] BTRFS info (device loop4): balance: ended with status: 0 [ 207.925303][ T7672] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3 [ 208.018349][ T7672] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3 [ 208.044708][ T7672] bcachefs (loop6): clean shutdown complete, journal seq 4 [ 208.053998][ T7672] bcachefs (loop6): marking filesystem clean [ 208.144619][ T7672] bcachefs (loop6): shutdown complete [ 208.258551][ T8257] loop2: detected capacity change from 0 to 32768 [ 208.521242][ T5837] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.234138][ T8291] loop1: detected capacity change from 0 to 32768 [ 209.493612][ T8291] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.768578][ T8291] XFS (loop1): Ending clean mount [ 210.223967][ T5829] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.818255][ T8306] loop2: detected capacity change from 0 to 32768 [ 210.882994][ T8343] loop0: detected capacity change from 0 to 2048 [ 210.960744][ T8343] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 210.993626][ T29] audit: type=1326 audit(1738746377.531:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 211.111657][ T6906] udevd[6906]: incorrect nilfs2 checksum on /dev/loop0 [ 211.141267][ T8354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.156347][ T29] audit: type=1326 audit(1738746377.531:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 211.258472][ T29] audit: type=1800 audit(1738746377.811:25): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.767" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 211.295120][ T8306] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 211.326989][ T8356] loop6: detected capacity change from 0 to 4096 [ 211.342608][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 211.349345][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 211.355469][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 211.361957][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 211.373556][ T8306] bcachefs (loop2): initializing new filesystem [ 211.422669][ T8306] bcachefs (loop2): going read-write [ 211.483391][ T8364] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.531680][ T8306] bcachefs (loop2): marking superblocks [ 211.590394][ T8306] bcachefs (loop2): initializing freespace [ 211.619368][ T8306] bcachefs (loop2): done initializing freespace [ 211.715077][ T8306] bcachefs (loop2): reading snapshots table [ 211.721134][ T8306] bcachefs (loop2): reading snapshots done [ 211.739000][ T8368] loop5: detected capacity change from 0 to 256 [ 211.882890][ T8306] bcachefs (loop2): done starting filesystem [ 212.122239][ T8376] netlink: 32 bytes leftover after parsing attributes in process `syz.0.771'. [ 212.229637][ T5839] bcachefs (loop2): shutting down [ 212.263415][ T5839] bcachefs (loop2): going read-only [ 212.268670][ T5839] bcachefs (loop2): finished waiting for writes to stop [ 212.352272][ T5839] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 212.588893][ T5839] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 212.643806][ T5839] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 212.664450][ T5839] bcachefs (loop2): marking filesystem clean [ 212.745264][ T5839] bcachefs (loop2): shutdown complete [ 213.176542][ T8406] loop1: detected capacity change from 0 to 256 [ 213.238712][ T8406] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18bdb, utbl_chksum : 0xe619d30d) [ 213.256710][ T8371] loop4: detected capacity change from 0 to 32768 [ 213.389097][ T8404] loop5: detected capacity change from 0 to 32768 [ 213.398977][ T8404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.787 (8404) [ 213.428723][ T8404] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.439370][ T8404] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 213.447932][ T8404] BTRFS info (device loop5): using free-space-tree [ 213.750279][ T8404] BTRFS info (device loop5): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 213.956447][ T5833] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.230676][ T8440] loop0: detected capacity change from 0 to 1024 [ 214.357006][ T8440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.843486][ T5844] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.870741][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.052706][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.084230][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.109061][ T5844] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.125374][ T5844] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 215.140847][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.180640][ T5844] usb 7-1: config 0 descriptor?? [ 215.266251][ T8469] loop5: detected capacity change from 0 to 256 [ 215.288294][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 215.455729][ T5844] usbhid 7-1:0.0: can't add hid device: -71 [ 215.480605][ T5844] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 215.513691][ T5844] usb 7-1: USB disconnect, device number 2 [ 215.557410][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 215.777767][ T8478] Bluetooth: MGMT ver 1.23 [ 215.790970][ T8439] loop1: detected capacity change from 0 to 32768 [ 215.820926][ T8439] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.796 (8439) [ 215.914916][ T8439] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 215.985121][ T8439] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 216.043376][ T8439] BTRFS info (device loop1): using free-space-tree [ 216.126399][ T8489] netlink: 1156 bytes leftover after parsing attributes in process `syz.5.809'. [ 216.301621][ T8502] loop6: detected capacity change from 0 to 128 [ 216.401021][ T8506] loop2: detected capacity change from 0 to 2048 [ 216.408620][ T8439] BTRFS info (device loop1): rebuilding free space tree [ 216.557528][ T8506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.321614][ T5829] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 217.368807][ T8530] netlink: 44 bytes leftover after parsing attributes in process `syz.5.821'. [ 217.401305][ T29] audit: type=1800 audit(1738746383.940:26): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.777" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 217.651161][ T8530] netlink: 40 bytes leftover after parsing attributes in process `syz.5.821'. [ 217.696312][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.696664][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.173513][ T5822] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 218.224614][ T8548] loop1: detected capacity change from 0 to 64 [ 218.238599][ T8544] loop6: detected capacity change from 0 to 2048 [ 218.279474][ T8544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.373814][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 218.390419][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 218.461763][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 218.534876][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 218.584596][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 218.646206][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.734179][ T5822] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 218.793372][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.801956][ T5822] usb 1-1: Product: syz [ 218.840322][ T5822] usb 1-1: Manufacturer: syz [ 218.852880][ T5822] usb 1-1: SerialNumber: syz [ 218.909429][ T5822] usb 1-1: config 0 descriptor?? [ 219.235100][ T5822] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 219.311851][ T5822] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 219.418738][ T8577] bridge0: port 3(syz_tun) entered blocking state [ 219.486758][ T5898] usb 1-1: USB disconnect, device number 8 [ 219.505016][ T8577] bridge0: port 3(syz_tun) entered disabled state [ 219.512101][ T8577] syz_tun: entered allmulticast mode [ 219.585340][ T8577] syz_tun: entered promiscuous mode [ 219.612609][ T8577] bridge0: port 3(syz_tun) entered blocking state [ 219.620031][ T8577] bridge0: port 3(syz_tun) entered forwarding state [ 219.775357][ T8540] loop2: detected capacity change from 0 to 32768 [ 219.830282][ T8540] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.054645][ T8540] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 220.287621][ T8540] XFS (loop2): Starting recovery (logdev: internal) [ 220.395611][ T8540] XFS (loop2): Ending recovery (logdev: internal) [ 220.655006][ T5839] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.468609][ T8635] loop0: detected capacity change from 0 to 4096 [ 221.502974][ T8642] loop2: detected capacity change from 0 to 1024 [ 221.508988][ T8635] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 221.596256][ T8601] loop1: detected capacity change from 0 to 32768 [ 221.645912][ T8601] btrfs: Unknown parameter 'permit_directio' [ 221.651067][ T8635] ntfs3(loop0): Failed to load $Extend (-22). [ 221.683850][ T8635] ntfs3(loop0): Failed to initialize $Extend. [ 221.902245][ T29] audit: type=1800 audit(1738746388.450:27): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.852" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 221.999799][ T29] audit: type=1804 audit(1738746388.500:28): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.852" name=2F6E6577726F6F742F3134382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop0" ino=30 res=1 errno=0 [ 222.054387][ T8655] loop4: detected capacity change from 0 to 64 [ 222.198803][ T29] audit: type=1800 audit(1738746388.690:29): pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.859" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 222.439208][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 222.736435][ T8667] netlink: 'syz.5.862': attribute type 2 has an invalid length. [ 223.131907][ T8685] loop0: detected capacity change from 0 to 256 [ 223.275769][ T8685] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 223.549998][ T5831] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 224.075604][ T8719] loop4: detected capacity change from 0 to 256 [ 224.150793][ T8719] exfat: Deprecated parameter 'utf8' [ 224.249971][ T8719] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 224.621184][ C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.837693][ T8743] loop2: detected capacity change from 0 to 128 [ 224.947397][ T8743] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 225.037354][ T8743] sysv_free_block: trying to free block not in datazone [ 225.284641][ T5839] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 225.561632][ T8764] loop2: detected capacity change from 0 to 1024 [ 225.583931][ T5831] Bluetooth: hci4: command tx timeout [ 225.622165][ T8764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.643159][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 226.221726][ T8788] loop6: detected capacity change from 0 to 512 [ 226.281929][ T8788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.367853][ T8794] loop0: detected capacity change from 0 to 64 [ 226.439900][ T8788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 226.494560][ T8794] hfs: request for non-existent node 131072 in B*Tree [ 226.501394][ T8794] hfs: request for non-existent node 131072 in B*Tree [ 226.534388][ T8788] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.662773][ T8788] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 226.720503][ T8788] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 226.794856][ T8788] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.906: Failed to acquire dquot type 0 [ 227.082403][ T7672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.533386][ T8776] loop1: detected capacity change from 0 to 32768 [ 227.550017][ T8820] loop0: detected capacity change from 0 to 512 [ 227.593592][ T8820] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 227.606560][ T8823] loop2: detected capacity change from 0 to 64 [ 227.657169][ T8820] EXT4-fs (loop0): 1 orphan inode deleted [ 227.663002][ T8820] EXT4-fs (loop0): 1 truncate cleaned up [ 227.663340][ T5831] Bluetooth: hci4: command tx timeout [ 227.683604][ T8776] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.713451][ T5822] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 227.714472][ T8820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.766080][ T8820] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.0.913: path /161/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 227.792586][ T8820] EXT4-fs (loop0): Remounting filesystem read-only [ 227.862209][ T8781] loop4: detected capacity change from 0 to 40427 [ 227.878305][ T8781] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 227.879606][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.896684][ T8781] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 227.913773][ T5822] usb 7-1: Using ep0 maxpacket: 8 [ 227.947559][ T5822] usb 7-1: unable to get BOS descriptor or descriptor too short [ 227.963462][ T8781] F2FS-fs (loop4): invalid crc value [ 227.990058][ T8776] XFS (loop1): Ending clean mount [ 227.996469][ T5822] usb 7-1: config 128 has an invalid interface number: 44 but max is 0 [ 228.002548][ T8781] F2FS-fs (loop4): Found nat_bits in checkpoint [ 228.047551][ T5822] usb 7-1: config 128 has no interface number 0 [ 228.094013][ T5822] usb 7-1: config 128 interface 44 has no altsetting 0 [ 228.131250][ T5822] usb 7-1: New USB device found, idVendor=19d2, idProduct=1115, bcdDevice=ea.8e [ 228.163901][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.183735][ T5822] usb 7-1: Product: syz [ 228.190282][ T5822] usb 7-1: Manufacturer: syz [ 228.203548][ T29] audit: type=1800 audit(1738746394.760:30): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.914" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 228.233249][ T8781] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 228.243407][ T5822] usb 7-1: SerialNumber: syz [ 228.279882][ T8787] loop5: detected capacity change from 0 to 40427 [ 228.305210][ T8787] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 228.321788][ T8787] F2FS-fs (loop5): Image doesn't support compression [ 228.368790][ T8787] F2FS-fs (loop5): Image doesn't support compression [ 228.395417][ T8781] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 228.404806][ T8781] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 228.418467][ T8787] F2FS-fs (loop5): invalid crc value [ 228.451022][ T5829] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.477846][ T8787] F2FS-fs (loop5): Found nat_bits in checkpoint [ 228.488882][ T5822] hub 7-1:128.44: bad descriptor, ignoring hub [ 228.540485][ T5822] hub 7-1:128.44: probe with driver hub failed with error -5 [ 228.608602][ T5822] option 7-1:128.44: GSM modem (1-port) converter detected [ 228.675059][ T5822] usb 7-1: USB disconnect, device number 3 [ 228.682457][ T5822] option 7-1:128.44: device disconnected [ 228.692823][ T8848] syz.4.903: attempt to access beyond end of device [ 228.692823][ T8848] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 228.735153][ T8787] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 228.834122][ T8787] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x195/0xb80 [ 228.955302][ T5833] syz-executor: attempt to access beyond end of device [ 228.955302][ T5833] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 228.982224][ T5833] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 228.991839][ T5833] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 229.087360][ T8855] loop0: detected capacity change from 0 to 1024 [ 229.111973][ T8856] loop1: detected capacity change from 0 to 512 [ 229.148816][ T8855] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (18359!=20869) [ 229.174197][ T8855] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 229.207778][ T8855] JBD2: no valid journal superblock found [ 229.234160][ T8855] EXT4-fs (loop0): Could not load journal inode [ 229.242431][ T8856] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 229.349518][ T8856] EXT4-fs (loop1): 1 truncate cleaned up [ 229.390026][ T8856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.598337][ T8856] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #14: comm syz.1.918: attempt to clear invalid blocks 1886221359 len 1 [ 229.614373][ T8862] loop6: detected capacity change from 0 to 2048 [ 229.634049][ T8866] loop0: detected capacity change from 0 to 128 [ 229.652986][ T8856] EXT4-fs (loop1): Remounting filesystem read-only [ 229.684213][ T8862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.846326][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.506925][ T8878] dvmrp5: entered allmulticast mode [ 230.554788][ T29] audit: type=1800 audit(1738746397.110:31): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.925" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 230.575135][ T8876] dvmrp5: left allmulticast mode [ 231.008986][ T8870] syz.2.927 (8870): drop_caches: 2 [ 231.127666][ T8883] loop4: detected capacity change from 0 to 32768 [ 231.184240][ T7672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.339577][ T8883] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 231.359344][ T8883] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 231.367642][ T8883] bcachefs (loop4): Version upgrade required: [ 231.367642][ T8883] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 231.367642][ T8883] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 231.367642][ T8883] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 231.439856][ T8883] bcachefs (loop4): dropping and reconstructing all alloc info [ 231.516254][ T8883] bcachefs (loop4): accounting_read... done [ 231.548005][ T8883] bcachefs (loop4): alloc_read... done [ 231.553725][ T8883] bcachefs (loop4): stripes_read... done [ 231.559449][ T8883] bcachefs (loop4): snapshots_read... done [ 231.567348][ T8883] bcachefs (loop4): done starting filesystem [ 231.683468][ T8903] loop5: detected capacity change from 0 to 1024 [ 231.704818][ T8906] loop0: detected capacity change from 0 to 2048 [ 231.780976][ T8911] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.814132][ T5837] bcachefs (loop4): shutting down [ 231.986133][ T5837] bcachefs (loop4): shutdown complete [ 232.017269][ T8911] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 232.084816][ T8916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.088764][ T8911] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16) [ 232.129279][ T8911] Remounting filesystem read-only [ 232.264320][ T5838] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 232.718414][ T8928] loop0: detected capacity change from 0 to 16 [ 232.756443][ T8928] erofs (device loop0): mounted with root inode @ nid 36. [ 232.812941][ T8928] erofs (device loop0): readahead error at folio 37 @ nid 36 [ 232.833168][ T8928] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 232.851343][ T8928] erofs (device loop0): readahead error at folio 35 @ nid 36 [ 232.894672][ T8928] erofs (device loop0): readahead error at folio 34 @ nid 36 [ 232.902226][ T29] audit: type=1326 audit(1738746399.450:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 232.954088][ T8928] erofs (device loop0): readahead error at folio 33 @ nid 36 [ 232.961615][ T8928] erofs (device loop0): readahead error at folio 32 @ nid 36 [ 233.007618][ T29] audit: type=1326 audit(1738746399.450:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 233.053364][ T8928] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 233.071384][ T8928] erofs (device loop0): readahead error at folio 30 @ nid 36 [ 233.103518][ T8928] erofs (device loop0): readahead error at folio 29 @ nid 36 [ 233.105783][ T29] audit: type=1326 audit(1738746399.450:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 233.121831][ T8928] erofs (device loop0): readahead error at folio 28 @ nid 36 [ 233.193388][ T8928] erofs (device loop0): readahead error at folio 27 @ nid 36 [ 233.210575][ T29] audit: type=1326 audit(1738746399.560:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 233.220601][ T8935] loop2: detected capacity change from 0 to 4096 [ 233.239259][ T8928] erofs (device loop0): readahead error at folio 26 @ nid 36 [ 233.239294][ T8928] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 233.303193][ T29] audit: type=1326 audit(1738746399.560:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc80e383da7 code=0x7ffc0000 [ 233.345980][ T8935] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 233.360156][ T8928] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 233.414773][ T8928] erofs (device loop0): readahead error at folio 23 @ nid 36 [ 233.424600][ T8928] erofs (device loop0): readahead error at folio 22 @ nid 36 [ 233.448159][ T29] audit: type=1326 audit(1738746399.560:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc80e328fb9 code=0x7ffc0000 [ 233.467214][ T8928] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 233.497767][ T8928] erofs (device loop0): readahead error at folio 18 @ nid 36 [ 233.519412][ T8928] erofs (device loop0): readahead error at folio 17 @ nid 36 [ 233.546191][ T29] audit: type=1326 audit(1738746399.560:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc80e383da7 code=0x7ffc0000 [ 233.548159][ T8928] erofs (device loop0): readahead error at folio 16 @ nid 36 [ 233.569309][ T29] audit: type=1326 audit(1738746399.560:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc80e328fb9 code=0x7ffc0000 [ 233.569377][ T29] audit: type=1326 audit(1738746399.560:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc80e383da7 code=0x7ffc0000 [ 233.647818][ T8928] erofs (device loop0): readahead error at folio 15 @ nid 36 [ 233.674340][ T8928] erofs (device loop0): readahead error at folio 14 @ nid 36 [ 233.682411][ T8935] ntfs3(loop2): ino=1a, mi_enum_attr [ 233.688046][ T8935] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 233.703917][ T8928] erofs (device loop0): readahead error at folio 13 @ nid 36 [ 233.715991][ T8935] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 233.751253][ T8935] netlink: zone id is out of range [ 233.763636][ T8928] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 233.781357][ T29] audit: type=1326 audit(1738746399.560:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8930 comm="syz.5.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc80e328fb9 code=0x7ffc0000 [ 233.784458][ T8935] netlink: zone id is out of range [ 233.833354][ T8928] erofs (device loop0): readahead error at folio 11 @ nid 36 [ 233.840831][ T8928] erofs (device loop0): readahead error at folio 10 @ nid 36 [ 233.868168][ T8935] netlink: zone id is out of range [ 233.883715][ T8935] netlink: zone id is out of range [ 233.910615][ T5831] erofs (device loop0): failed to decompress -32 in[46, 4050] out[9215] [ 233.923413][ T8935] netlink: zone id is out of range [ 233.943595][ T8935] netlink: zone id is out of range [ 233.948846][ T8935] netlink: zone id is out of range [ 234.013412][ T8935] netlink: zone id is out of range [ 234.018614][ T8935] netlink: zone id is out of range [ 234.054429][ T8935] netlink: zone id is out of range [ 234.741628][ T8966] loop0: detected capacity change from 0 to 512 [ 234.775344][ T5898] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.795290][ T8966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.839277][ T8966] EXT4-fs (loop0): 1 truncate cleaned up [ 234.867398][ T8966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.973319][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 235.001383][ T5898] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 235.033557][ T5898] usb 6-1: config 0 has no interface number 0 [ 235.059137][ T5898] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.078612][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.105248][ T5898] usb 6-1: Product: syz [ 235.119119][ T5898] usb 6-1: Manufacturer: syz [ 235.136921][ T5898] usb 6-1: SerialNumber: syz [ 235.172004][ T8964] could not allocate digest TFM handle crct10dif [ 235.184340][ T5898] usb 6-1: config 0 descriptor?? [ 235.196576][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.216010][ T5898] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 235.403878][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.969'. [ 235.470605][ T5898] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 235.499728][ T8946] loop1: detected capacity change from 0 to 40427 [ 235.518699][ T5898] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 235.567710][ T8946] F2FS-fs (loop1): heap/no_heap options were deprecated [ 235.620873][ T8946] F2FS-fs (loop1): invalid crc value [ 235.656132][ T8946] F2FS-fs (loop1): Found nat_bits in checkpoint [ 235.856812][ T8946] F2FS-fs (loop1): Start checkpoint disabled! [ 235.887791][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 235.896981][ T5898] usb 6-1: USB disconnect, device number 2 [ 235.934146][ T5898] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 235.956520][ T8946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 235.981319][ T5898] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 236.024443][ T5898] quatech2 6-1:0.51: device disconnected [ 236.196315][ T8993] loop6: detected capacity change from 0 to 4096 [ 236.224770][ T1150] kworker/u8:6: attempt to access beyond end of device [ 236.224770][ T1150] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 236.289924][ T1150] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 236.310845][ T1150] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 236.611960][ T8977] loop4: detected capacity change from 0 to 40427 [ 236.645920][ T8977] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 236.681364][ T9000] loop5: detected capacity change from 0 to 2048 [ 236.694400][ T8977] F2FS-fs (loop4): invalid crc value [ 236.719523][ T9000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.753936][ T8977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.762223][ T8979] loop2: detected capacity change from 0 to 40427 [ 236.806679][ T8979] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 236.838179][ T8979] F2FS-fs (loop2): Image doesn't support compression [ 236.878732][ T8979] F2FS-fs (loop2): invalid crc value [ 236.922694][ T8977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 236.931627][ T8979] F2FS-fs (loop2): Found nat_bits in checkpoint [ 237.090697][ T8979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 237.109248][ T8977] syz.4.941: attempt to access beyond end of device [ 237.109248][ T8977] loop4: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 237.157813][ T8977] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_do_write_data_page+0x87a/0x17c0 [ 237.203868][ T8977] syz.4.941: attempt to access beyond end of device [ 237.203868][ T8977] loop4: rw=2049, sector=45184, nr_sectors = 40 limit=40427 [ 237.247334][ T8977] syz.4.941: attempt to access beyond end of device [ 237.247334][ T8977] loop4: rw=2049, sector=45096, nr_sectors = 72 limit=40427 [ 237.268256][ T8979] F2FS-fs (loop2): inject orphan in f2fs_acquire_orphan_inode of __f2fs_tmpfile+0x1d0/0x3b0 [ 237.485621][ T5837] syz-executor: attempt to access beyond end of device [ 237.485621][ T5837] loop4: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 237.516177][ T5839] syz-executor: attempt to access beyond end of device [ 237.516177][ T5839] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 237.534442][ T5837] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 237.553603][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 237.563895][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 237.663857][ T5822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 237.813974][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 237.822354][ T5822] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.836367][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.876150][ T5822] usb 2-1: config 0 descriptor?? [ 238.153508][ T5822] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 238.190122][ T9027] loop6: detected capacity change from 0 to 4096 [ 238.201392][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 238.228706][ T5822] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 238.248983][ T9027] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 238.263392][ T5822] usb 2-1: media controller created [ 238.280781][ T9027] ntfs3(loop6): It is recommened to use chkdsk. [ 238.321734][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.781963][ T5822] az6027: usb out operation failed. (-71) [ 238.793443][ T5822] stb0899_attach: Driver disabled by Kconfig [ 238.813942][ T5822] az6027: no front-end attached [ 238.813942][ T5822] [ 238.833416][ T5822] az6027: usb out operation failed. (-71) [ 238.839210][ T5822] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 238.884424][ T5822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 238.939398][ T5822] dvb-usb: schedule remote query interval to 400 msecs. [ 238.969686][ T5822] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 239.009470][ T5822] usb 2-1: USB disconnect, device number 7 [ 239.284370][ T5822] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 239.827699][ T9066] loop1: detected capacity change from 0 to 256 [ 239.963510][ T9038] loop5: detected capacity change from 0 to 32768 [ 240.053079][ T9038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.991 (9038) [ 240.091708][ T9038] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.175911][ T9038] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 240.231764][ T9038] BTRFS info (device loop5): disk space caching is enabled [ 240.254580][ T9038] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 240.410852][ T9091] input: syz1 as /devices/virtual/input/input9 [ 240.434044][ T9038] BTRFS info (device loop5): rebuilding free space tree [ 240.465043][ T9038] BTRFS info (device loop5): disabling free space tree [ 240.476453][ T9038] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.509408][ T9038] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 240.520830][ T9093] loop6: detected capacity change from 0 to 1024 [ 240.561181][ T9093] EXT4-fs: Ignoring removed nobh option [ 240.573979][ T9093] EXT4-fs: Ignoring removed bh option [ 240.664425][ T9093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.675108][ T9102] loop1: detected capacity change from 0 to 256 [ 240.706852][ T9056] loop0: detected capacity change from 0 to 32768 [ 240.741450][ T9102] FAT-fs (loop1): bogus number of FAT sectors [ 240.749458][ T9102] FAT-fs (loop1): Can't find a valid FAT filesystem [ 240.930789][ T1155] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 241.022125][ T9116] loop1: detected capacity change from 0 to 512 [ 241.030634][ T9116] EXT4-fs: Ignoring removed nobh option [ 241.055745][ T9056] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 241.060990][ T5833] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.083905][ T9056] bcachefs (loop0): initializing new filesystem [ 241.107706][ T9116] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 241.133392][ T9056] bcachefs (loop0): going read-write [ 241.162611][ T7672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.211930][ T9116] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1014: invalid indirect mapped block 8 (level 2) [ 241.233023][ T9056] bcachefs (loop0): marking superblocks [ 241.280322][ T9116] EXT4-fs (loop1): Remounting filesystem read-only [ 241.323656][ T9116] EXT4-fs (loop1): 1 truncate cleaned up [ 241.364546][ T9116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.444034][ T9056] bcachefs (loop0): initializing freespace [ 241.501012][ T9056] bcachefs (loop0): done initializing freespace [ 241.564087][ T9056] bcachefs (loop0): reading snapshots table [ 241.576100][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.581519][ T9056] bcachefs (loop0): reading snapshots done [ 241.723835][ T9056] bcachefs (loop0): done starting filesystem [ 241.943802][ T9099] loop2: detected capacity change from 0 to 32768 [ 242.000260][ T9099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1010 (9099) [ 242.017199][ T5838] bcachefs (loop0): shutting down [ 242.043011][ T5838] bcachefs (loop0): going read-only [ 242.063407][ T5838] bcachefs (loop0): finished waiting for writes to stop [ 242.067892][ T9099] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.123952][ T9099] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 242.132805][ T9099] BTRFS info (device loop2): disk space caching is enabled [ 242.162019][ T5838] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 242.171720][ T9099] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 242.285416][ T5838] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 242.333921][ T5838] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 242.345856][ T5838] bcachefs (loop0): marking filesystem clean [ 242.399400][ T9099] BTRFS info (device loop2): rebuilding free space tree [ 242.451317][ T5838] bcachefs (loop0): shutdown complete [ 242.479311][ T9099] BTRFS info (device loop2): disabling free space tree [ 242.492430][ T9160] xt_CT: No such helper "snmp" [ 242.522753][ T9099] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 242.581429][ T9099] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 243.042096][ T5839] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.084981][ T9187] loop2: detected capacity change from 0 to 4096 [ 244.168015][ T9188] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.207765][ T9182] loop5: detected capacity change from 0 to 40427 [ 244.287941][ T9182] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 244.297523][ T9179] loop6: detected capacity change from 0 to 32768 [ 244.323328][ T9182] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 244.329161][ T9179] JBD2: Ignoring recovery information on journal [ 244.399162][ T9179] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 244.417907][ T9182] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 244.584918][ T9182] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 244.592256][ T9182] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 244.656692][ T7672] ocfs2: Unmounting device (7,6) on (node local) [ 244.705390][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 244.705417][ T29] audit: type=1804 audit(1738746411.240:101): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1035" name="/newroot/215/file1/file1" dev="loop5" ino=10 res=1 errno=0 [ 244.758866][ T9196] loop4: detected capacity change from 0 to 4096 [ 244.809927][ T9196] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 244.858655][ T5833] syz-executor: attempt to access beyond end of device [ 244.858655][ T5833] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 244.896612][ T5833] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 244.968167][ T9196] ntfs3(loop4): ino=19, mi_enum_attr [ 244.986216][ T9196] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 245.074359][ T9196] ntfs3(loop4): failed to convert "c46c" to cp1251 [ 245.095559][ C1] net_ratelimit: 211 callbacks suppressed [ 245.095586][ C1] bridge0: received packet on gretap1 with own address as source address (addr:be:a9:4b:92:2e:94, vlan:0) [ 245.141812][ T9196] ntfs3(loop4): ino=20, mi_enum_attr [ 245.194981][ T9204] loop0: detected capacity change from 0 to 16 [ 245.272024][ T9204] erofs (device loop0): mounted with root inode @ nid 36. [ 245.335157][ T9207] sit0: entered promiscuous mode [ 245.366226][ T9207] netlink: 'syz.6.1040': attribute type 1 has an invalid length. [ 245.400827][ T9207] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1040'. [ 245.766252][ T9216] vlan2: entered allmulticast mode [ 245.801124][ T9216] dummy0: entered allmulticast mode [ 245.867381][ T9222] loop4: detected capacity change from 0 to 256 [ 245.868934][ T9216] dummy0: left allmulticast mode [ 245.943386][ T9222] exfat: Deprecated parameter 'utf8' [ 245.983455][ T9222] exfat: Deprecated parameter 'namecase' [ 245.989201][ T9222] exfat: Deprecated parameter 'utf8' [ 246.100863][ T9222] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 246.146536][ T9225] netem: unknown loss type 0 [ 246.151721][ T9225] netem: change failed [ 246.488764][ T9230] loop1: detected capacity change from 0 to 2048 [ 246.562652][ T9230] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 246.603042][ T9230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.864565][ T9244] loop6: detected capacity change from 0 to 512 [ 246.890338][ T9244] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 246.952981][ T9244] EXT4-fs (loop6): 1 truncate cleaned up [ 247.005624][ T9244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.152462][ T9251] loop1: detected capacity change from 0 to 1024 [ 247.183890][ T9251] EXT4-fs: Ignoring removed orlov option [ 247.228839][ T9251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.279431][ T9227] loop5: detected capacity change from 0 to 32768 [ 247.368570][ T9227] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 247.457457][ T9227] XFS (loop5): Ending clean mount [ 247.475512][ T9234] loop0: detected capacity change from 0 to 32768 [ 247.591325][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.605559][ T9227] XFS (loop5): Quotacheck needed: Please wait. [ 247.670982][ T7672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.762981][ T9227] XFS (loop5): Quotacheck: Done. [ 247.914605][ T5833] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.428886][ T9284] loop4: detected capacity change from 0 to 2048 [ 248.499378][ T9284] Alternate GPT is invalid, using primary GPT. [ 248.506863][ T9284] loop4: p1 p2 p3 [ 248.513354][ T5898] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 248.714417][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.747222][ T5898] usb 3-1: config 127 has an invalid interface number: 241 but max is 1 [ 248.766887][ T5898] usb 3-1: config 127 has an invalid interface number: 24 but max is 1 [ 248.793470][ T5898] usb 3-1: config 127 has no interface number 0 [ 248.820272][ T5898] usb 3-1: config 127 has no interface number 1 [ 248.843397][ T5898] usb 3-1: config 127 interface 241 has no altsetting 0 [ 248.874900][ T5898] usb 3-1: config 127 interface 24 has no altsetting 0 [ 248.899535][ T9274] loop6: detected capacity change from 0 to 32768 [ 248.921378][ T5898] usb 3-1: string descriptor 0 read error: -22 [ 248.935487][ T5898] usb 3-1: New USB device found, idVendor=0403, idProduct=9e90, bcdDevice=b2.9b [ 248.939439][ T9296] loop5: detected capacity change from 0 to 2048 [ 248.956101][ T9274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1064 (9274) [ 248.973625][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.998007][ T9274] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.014201][ T5898] ftdi_sio 3-1:127.241: FTDI USB Serial Device converter detected [ 249.028724][ T9274] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 249.038289][ T5898] ftdi_sio ttyUSB0: unknown device type: 0xb29b [ 249.045178][ T9274] BTRFS info (device loop6): using free-space-tree [ 249.055267][ T5898] ftdi_sio 3-1:127.24: FTDI USB Serial Device converter detected [ 249.064833][ T5898] ftdi_sio ttyUSB1: unknown device type: 0xb29b [ 249.067999][ T9296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.250009][ T5898] usb 3-1: USB disconnect, device number 5 [ 249.280097][ T5898] ftdi_sio 3-1:127.241: device disconnected [ 249.312966][ T9320] BTRFS info (device loop6): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 249.314987][ T5898] ftdi_sio 3-1:127.24: device disconnected [ 249.488293][ T9274] BTRFS info (device loop6): balance: start -susage=0..4076,limit=1,limit=1..0 [ 249.528598][ T9323] netlink: 'syz.0.1078': attribute type 12 has an invalid length. [ 249.551167][ T9274] BTRFS info (device loop6): relocating block group 1048576 flags system [ 249.784894][ T9288] loop1: detected capacity change from 0 to 40427 [ 249.805521][ T9288] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 249.823559][ T9288] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 249.872973][ T9288] F2FS-fs (loop1): invalid crc value [ 249.890513][ T9274] BTRFS info (device loop6): balance: ended with status: 0 [ 249.902219][ T29] audit: type=1800 audit(1738746416.450:102): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1075" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 249.970650][ T9331] loop0: detected capacity change from 0 to 512 [ 249.981113][ T9288] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.011008][ T9331] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 250.060788][ T9331] EXT4-fs (loop0): 1 truncate cleaned up [ 250.074534][ T9331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.161503][ T9288] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 250.203441][ T9288] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 250.262158][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.371456][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.539253][ T1126] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 250.607240][ T1126] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 250.657689][ T7672] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.818137][ T9345] loop5: detected capacity change from 0 to 128 [ 251.271343][ T9333] loop4: detected capacity change from 0 to 32768 [ 251.279749][ T9333] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1082 (9333) [ 251.333515][ T9333] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 251.393415][ T9333] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 251.408192][ T9352] team0: No ports can be present during mode change [ 251.437771][ T9333] BTRFS info (device loop4): disk space caching is enabled [ 251.471342][ T9333] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 251.503433][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 251.533728][ T9339] loop2: detected capacity change from 0 to 32768 [ 251.567232][ T9339] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1084 (9339) [ 251.617863][ T9339] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.634595][ T9339] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 251.685754][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 251.705566][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.723530][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.741560][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.770646][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.814881][ T9333] BTRFS info (device loop4): rebuilding free space tree [ 251.824255][ T8] usb 6-1: config 0 descriptor?? [ 251.844693][ T8] hub 6-1:0.0: USB hub found [ 251.861802][ T9333] BTRFS info (device loop4): disabling free space tree [ 251.876431][ T9347] loop0: detected capacity change from 0 to 32768 [ 251.881026][ T9384] tipc: Started in network mode [ 251.883888][ T9333] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 251.889876][ T9384] tipc: Node identity ff, cluster identity 4711 [ 251.907765][ T9384] tipc: Enabling of bearer rejected, failed to enable media [ 251.920994][ T9339] BTRFS info (device loop2): rebuilding free space tree [ 251.941719][ T9333] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 251.969969][ T9347] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 251.996405][ T9339] BTRFS info (device loop2): disabling free space tree [ 252.024499][ T9339] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 252.034848][ T9339] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 252.045390][ T8] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 252.237849][ T5837] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 252.275665][ T5838] ocfs2: Unmounting device (7,0) on (node local) [ 252.444522][ T5839] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.480535][ T8] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 252.524184][ T8] hid-generic 0003:046D:C31C.0007: probe with driver hid-generic failed with error -22 [ 252.775074][ T6002] usb 6-1: USB disconnect, device number 3 [ 253.384053][ T9414] loop6: detected capacity change from 0 to 16 [ 253.432591][ T9414] erofs (device loop6): mounted with root inode @ nid 36. [ 253.529244][ T9414] erofs (device loop6): corrupted dir block 8200 @ nid 36 [ 253.572555][ T9414] syz.6.1102: attempt to access beyond end of device [ 253.572555][ T9414] loop6: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 254.501576][ T9436] netlink: 452 bytes leftover after parsing attributes in process `syz.6.1112'. [ 254.708322][ T9412] loop2: detected capacity change from 0 to 32768 [ 254.758388][ T9412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1101 (9412) [ 254.807553][ T9412] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.830863][ T9412] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 254.858273][ T5822] IPVS: starting estimator thread 0... [ 254.873153][ T9412] BTRFS info (device loop2): using free-space-tree [ 254.953473][ T9447] IPVS: using max 16 ests per chain, 38400 per kthread [ 255.125126][ T6002] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 255.140250][ T9473] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 255.149307][ T9412] BTRFS info (device loop2): balance: start -susage=0..4076,limit=1,limit=1..0 [ 255.207555][ T9412] BTRFS info (device loop2): relocating block group 1048576 flags system [ 255.232931][ T9474] loop1: detected capacity change from 0 to 2048 [ 255.285315][ T9474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.331146][ T9412] BTRFS info (device loop2): balance: ended with status: 0 [ 255.339432][ T6002] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.370557][ T9438] loop0: detected capacity change from 0 to 32768 [ 255.382432][ T6002] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.432492][ T9438] [ 255.432492][ T9438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.432492][ T9438] [ 255.475732][ T6002] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.486761][ T29] audit: type=1800 audit(1738746422.040:103): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1113" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 255.501293][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.565801][ T6002] usb 5-1: Product: syz [ 255.570066][ T6002] usb 5-1: Manufacturer: syz [ 255.618912][ T6002] usb 5-1: SerialNumber: syz [ 255.663994][ T9487] [ 255.663994][ T9487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.663994][ T9487] [ 255.703315][ T9487] [ 255.703315][ T9487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.703315][ T9487] [ 255.727594][ T9487] [ 255.727594][ T9487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.727594][ T9487] [ 255.751795][ T9487] [ 255.751795][ T9487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.751795][ T9487] [ 255.803572][ T9487] [ 255.803572][ T9487] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.803572][ T9487] [ 255.903545][ T9438] [ 255.903545][ T9438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.903545][ T9438] [ 255.933487][ T9438] [ 255.933487][ T9438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.933487][ T9438] [ 255.990206][ T9438] [ 255.990206][ T9438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 255.990206][ T9438] [ 256.053603][ T29] audit: type=1800 audit(1738746422.600:104): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1120" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 256.083840][ T5898] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 256.124365][ T6002] usb 5-1: 0:2 : does not exist [ 256.133046][ T5838] [ 256.133046][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.133046][ T5838] [ 256.156337][ T5838] [ 256.156337][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 256.156337][ T5838] [ 256.195221][ T5839] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.274230][ C0] Illegal XDP return value 16128 on prog (id 100) dev veth1_to_team, expect packet loss! [ 256.318169][ T5898] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.353938][ T5898] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.370672][ T5898] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.393804][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.458983][ T9492] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 256.490090][ T5898] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.528539][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.577183][ T6002] usb 5-1: USB disconnect, device number 4 [ 256.847171][ T8] usb 7-1: USB disconnect, device number 4 [ 256.886467][ T9500] loop1: detected capacity change from 0 to 1024 [ 256.949592][ T9500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.022414][ T29] audit: type=1804 audit(1738746423.570:105): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1131" name="/newroot/191/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 257.085871][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.226104][ T5822] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 257.395306][ T5822] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.425021][ T5822] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 257.466858][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 257.493557][ T5822] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 257.523107][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.569923][ T5822] usb 6-1: config 0 descriptor?? [ 257.585704][ T9509] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.720256][ T9527] loop4: detected capacity change from 0 to 2048 [ 257.788014][ T9527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.052595][ T5822] logitech 0003:046D:C24F.0008: unbalanced collection at end of report description [ 258.087826][ T5822] logitech 0003:046D:C24F.0008: parse failed [ 258.105708][ T5822] logitech 0003:046D:C24F.0008: probe with driver logitech failed with error -22 [ 258.256254][ T6002] usb 6-1: USB disconnect, device number 4 [ 258.310003][ T9515] loop2: detected capacity change from 0 to 40427 [ 258.364695][ T9515] F2FS-fs (loop2): invalid crc value [ 258.414994][ T9515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.597100][ T9550] loop6: detected capacity change from 0 to 64 [ 258.619765][ T9515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 258.632436][ T29] audit: type=1800 audit(1738746425.190:106): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1144" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 258.891943][ T5839] syz-executor: attempt to access beyond end of device [ 258.891943][ T5839] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 258.944613][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 258.990980][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.103037][ T9558] geneve2: entered promiscuous mode [ 259.123397][ T9558] geneve2: entered allmulticast mode [ 259.231255][ T9535] loop0: detected capacity change from 0 to 32768 [ 259.282082][ T9535] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 259.440127][ T9535] XFS (loop0): Ending clean mount [ 259.489636][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 259.511053][ T9535] XFS (loop0): Quotacheck needed: Please wait. [ 259.733607][ T9535] XFS (loop0): Quotacheck: Done. [ 259.791736][ T9535] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 260.491097][ T9567] loop6: detected capacity change from 0 to 32768 [ 260.491289][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.513323][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.603315][ T29] audit: type=1800 audit(1738746427.150:107): pid=9567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1160" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 261.117176][ T9604] tipc: Started in network mode [ 261.152397][ T9604] tipc: Node identity ac14140f, cluster identity 4711 [ 261.191903][ T9604] tipc: New replicast peer: 10.1.1.2 [ 261.214331][ T9585] loop1: detected capacity change from 0 to 32768 [ 261.222028][ T9604] tipc: Enabled bearer , priority 10 [ 261.232671][ T9585] XFS: ikeep mount option is deprecated. [ 261.250765][ T9584] loop4: detected capacity change from 0 to 40427 [ 261.252246][ T9585] XFS: noikeep mount option is deprecated. [ 261.284900][ T9584] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 261.323638][ T9584] F2FS-fs (loop4): heap/no_heap options were deprecated [ 261.343108][ T9584] F2FS-fs (loop4): invalid crc value [ 261.349999][ T9585] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 261.400516][ T9584] F2FS-fs (loop4): Found nat_bits in checkpoint [ 261.472785][ T9595] loop5: detected capacity change from 0 to 32768 [ 261.503840][ T9595] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1170 (9595) [ 261.549258][ T9585] XFS (loop1): Ending clean mount [ 261.557298][ T9585] XFS (loop1): Quotacheck needed: Please wait. [ 261.603504][ T9595] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.614147][ T9584] F2FS-fs (loop4): Start checkpoint disabled! [ 261.653737][ T9585] XFS (loop1): Quotacheck: Done. [ 261.663446][ T9595] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 261.704185][ T9584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 261.829792][ T5829] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 261.883473][ T9602] loop2: detected capacity change from 0 to 32768 [ 261.892369][ T9584] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xb9/0x9b0 [ 261.922858][ T9602] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1173 (9602) [ 261.993800][ T9595] BTRFS info (device loop5): rebuilding free space tree [ 262.008899][ T9602] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 262.055323][ T9595] BTRFS info (device loop5): disabling free space tree [ 262.063431][ T9602] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 262.063483][ T9602] BTRFS info (device loop2): using free-space-tree [ 262.124752][ T9595] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.188131][ T9595] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.233656][ T6002] tipc: Node number set to 2886997007 [ 262.256743][ T9649] loop1: detected capacity change from 0 to 128 [ 262.335547][ T9602] BTRFS error (device loop2): target device 3GK2ڵ_Қ:S1s~o$M8v_A,Jalk29:vv2]r0Ǎ}]_3AlʍϏcNLVJf'mX7bJ8\)?:}]^w*7d~\%;L߮MخMWlpLg\+Ս~ m{uj+/d`6J[}gB#g,J?3_iIg#\]ˏfǧٹCG::uX<L­N72j_DujݑԪJEWe7<`?푴զ is invalid! [ 262.352264][ T1126] kworker/u8:5: attempt to access beyond end of device [ 262.352264][ T1126] loop4: rw=1, sector=53248, nr_sectors = 16 limit=40427 [ 262.399533][ T9649] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.415572][ T1126] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 262.418316][ T9649] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.424045][ T1126] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 262.434337][ T9595] fs-verity: sha512 using implementation "sha512-avx2" [ 262.457546][ T9595] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 262.526690][ T5839] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 262.615006][ T5833] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 262.964990][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.276601][ T9666] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1182'. [ 263.400396][ T9614] loop0: detected capacity change from 0 to 40427 [ 263.458468][ T9614] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 263.493794][ T9614] F2FS-fs (loop0): invalid crc value [ 263.536157][ T9614] F2FS-fs (loop0): Found nat_bits in checkpoint [ 263.806327][ T9614] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 263.863517][ T9652] loop6: detected capacity change from 0 to 32768 [ 264.122496][ T5838] syz-executor: attempt to access beyond end of device [ 264.122496][ T5838] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 264.165784][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 265.134891][ T9699] loop5: detected capacity change from 0 to 256 [ 265.217586][ T9702] loop0: detected capacity change from 0 to 256 [ 265.221870][ T9699] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 265.289893][ T9702] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe7bb9f7b, utbl_chksum : 0xe619d30d) [ 265.431904][ T9708] loop4: detected capacity change from 0 to 512 [ 265.541490][ T9708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.541615][ T9708] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.645310][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 12: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 265.647341][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 13: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 265.792615][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 14: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 265.795312][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 15: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 265.893140][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 265.914773][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 17: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 265.919788][ T9708] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 18: comm syz.4.1198: lblock 23 mapped to illegal pblock 18 (length 1) [ 265.925352][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 19: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 265.927687][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 20: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 265.969746][ T9708] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 21: comm syz.4.1198: path /189/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 266.005714][ T9721] loop0: detected capacity change from 0 to 2048 [ 266.019889][ T9724] syz_tun: entered allmulticast mode [ 266.035222][ T9723] syz_tun: left allmulticast mode [ 266.035636][ T9725] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 3, id = 0 [ 266.043032][ T9721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.311654][ T9732] loop5: detected capacity change from 0 to 2048 [ 266.374595][ T9732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.416924][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.433396][ T5822] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 266.583383][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 266.590839][ T5822] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.599376][ T5822] usb 2-1: config 0 has no interface number 0 [ 266.607060][ T5822] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.607103][ T5822] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.607150][ T5822] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 266.671036][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.687456][ T5822] usb 2-1: config 0 descriptor?? [ 266.824282][ T29] audit: type=1800 audit(1738746433.380:108): pid=9721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1203" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 266.898296][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.963412][ T29] audit: type=1326 audit(1738746433.510:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.010163][ T29] audit: type=1326 audit(1738746433.510:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.010232][ T29] audit: type=1326 audit(1738746433.520:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.010317][ T29] audit: type=1326 audit(1738746433.520:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.010368][ T29] audit: type=1326 audit(1738746433.520:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.010449][ T29] audit: type=1326 audit(1738746433.520:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.012425][ T29] audit: type=1326 audit(1738746433.550:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.293342][ T29] audit: type=1326 audit(1738746433.560:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.371314][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1214'. [ 267.376292][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.389738][ T29] audit: type=1326 audit(1738746433.560:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9738 comm="syz.4.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34a98cde9 code=0x7ffc0000 [ 267.395237][ T5822] uclogic 0003:28BD:0071.0009: pen parameters not found [ 267.432405][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1214'. [ 267.461527][ T5822] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 267.509349][ T5822] usb 2-1: USB disconnect, device number 8 [ 267.999894][ T9743] loop5: detected capacity change from 0 to 32768 [ 268.020509][ T9743] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1210 (9743) [ 268.064405][ T9743] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.089762][ T9743] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 268.143475][ T9743] BTRFS info (device loop5): using free-space-tree [ 268.346800][ T9781] loop0: detected capacity change from 0 to 256 [ 268.427610][ T9781] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 268.451198][ T9788] BTRFS info (device loop5): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 268.475951][ T9743] BTRFS info (device loop5): balance: start -susage=0..4076,limit=1,limit=1..0 [ 268.586478][ T9743] BTRFS info (device loop5): relocating block group 1048576 flags system [ 268.710282][ T9743] BTRFS info (device loop5): balance: ended with status: 0 [ 269.213722][ T5844] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 269.399806][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 269.430725][ T5844] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 269.462456][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.476232][ T5833] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.502221][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.523373][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 269.539855][ T5844] usb 1-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 269.549346][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.606483][ T5844] usb 1-1: config 0 descriptor?? [ 269.734403][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 269.923568][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 269.944967][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.983981][ T8] usb 2-1: config 0 has no interface number 0 [ 269.993828][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1242'. [ 270.016107][ T8] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 270.035901][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.063334][ T8] usb 2-1: Product: syz [ 270.077884][ T8] usb 2-1: Manufacturer: syz [ 270.082629][ T8] usb 2-1: SerialNumber: syz [ 270.123924][ T8] usb 2-1: config 0 descriptor?? [ 270.142751][ T8] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 270.190767][ T5844] wacom 0003:056A:00FB.000A: unknown main item tag 0x0 [ 270.208250][ T5844] wacom 0003:056A:00FB.000A: unknown main item tag 0x0 [ 270.238100][ T5844] wacom 0003:056A:00FB.000A: unknown main item tag 0x0 [ 270.253380][ T5844] wacom 0003:056A:00FB.000A: unknown main item tag 0x0 [ 270.290992][ T5844] wacom 0003:056A:00FB.000A: unknown main item tag 0x0 [ 270.313718][ T5844] wacom 0003:056A:00FB.000A: unknown main item tag 0x0 [ 270.320759][ T5844] wacom 0003:056A:00FB.000A: unknown main item tag 0x0 [ 270.333747][ T9826] loop5: detected capacity change from 0 to 736 [ 270.371071][ T5844] wacom 0003:056A:00FB.000A: hidraw0: USB HID v0.00 Device [HID 056a:00fb] on usb-dummy_hcd.0-1/input0 [ 270.437661][ T5844] usb 1-1: USB disconnect, device number 9 [ 270.524834][ T9826] rock: directory entry would overflow storage [ 270.552076][ T9826] rock: sig=0x3b10, size=4, remaining=3 [ 270.904438][ T9822] loop4: detected capacity change from 0 to 32768 [ 270.911979][ T9822] XFS: attr2 mount option is deprecated. [ 270.957983][ T8] gspca_spca1528: reg_w err -71 [ 270.973472][ T8] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 270.982185][ T9822] XFS: ikeep mount option is deprecated. [ 271.003294][ T9822] XFS: noikeep mount option is deprecated. [ 271.006779][ T9844] loop5: detected capacity change from 0 to 164 [ 271.013700][ T8] usb 2-1: USB disconnect, device number 9 [ 271.082344][ T9844] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 271.105687][ T9822] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 271.464716][ T9853] loop2: detected capacity change from 0 to 40427 [ 271.484396][ T9853] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 271.492185][ T9853] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 271.525964][ T9853] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.589207][ T9853] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 271.596777][ T9853] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 271.693709][ T9822] XFS (loop4): Ending clean mount [ 271.701237][ T9822] XFS (loop4): Quotacheck needed: Please wait. [ 271.865982][ T9822] XFS (loop4): Quotacheck: Done. [ 272.073427][ T5837] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 272.107768][ T9868] loop6: detected capacity change from 0 to 512 [ 272.151127][ T9868] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 272.179630][ T9872] loop1: detected capacity change from 0 to 1024 [ 272.283556][ T9868] EXT4-fs (loop6): 1 truncate cleaned up [ 272.336106][ T9868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.601808][ T7672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.693575][ T9852] loop0: detected capacity change from 0 to 32768 [ 272.713079][ T9852] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1252 (9852) [ 272.800981][ T9852] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.863454][ T9852] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 272.901750][ T9852] BTRFS info (device loop0): using free-space-tree [ 272.946743][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 273.058066][ T9921] loop1: detected capacity change from 0 to 1024 [ 273.206581][ T9852] BTRFS info (device loop0): balance: start -susage=0..4076,limit=1,limit=1..0 [ 273.225393][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 273.225414][ T29] audit: type=1326 audit(1738746439.780:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 273.247884][ T9935] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 273.318253][ T9852] BTRFS info (device loop0): relocating block group 1048576 flags system [ 273.332233][ T29] audit: type=1326 audit(1738746439.780:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 273.404696][ T29] audit: type=1326 audit(1738746439.780:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 273.487145][ T9943] program syz.5.1274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.522534][ T29] audit: type=1326 audit(1738746439.780:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 273.600168][ T29] audit: type=1326 audit(1738746439.780:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80e38cde9 code=0x7ffc0000 [ 273.673318][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 273.710484][ T9852] BTRFS info (device loop0): balance: ended with status: 0 [ 273.768113][ T9951] netlink: 632 bytes leftover after parsing attributes in process `syz.1.1276'. [ 273.799115][ T9954] loop5: detected capacity change from 0 to 2048 [ 273.871473][ T9954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.021520][ T9961] loop1: detected capacity change from 0 to 1024 [ 274.060281][ T9963] sp0: Synchronizing with TNC [ 274.081229][ T9961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.120144][ T9968] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1283'. [ 274.662849][ T9880] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 321.908390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.514198][ C1] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.264737][ C1] bridge0: received packet on gretap1 with own address as source address (addr:be:a9:4b:92:2e:94, vlan:0) [ 379.153176][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 379.160266][ C1] rcu: 0-...!: (0 ticks this GP) idle=5294/1/0x4000000000000000 softirq=33156/33156 fqs=0 [ 379.172795][ C1] rcu: (detected by 1, t=10502 jiffies, g=34305, q=276 ncpus=2) [ 379.180550][ C1] Sending NMI from CPU 1 to CPUs 0: [ 379.180592][ C0] NMI backtrace for cpu 0 [ 379.180606][ C0] CPU: 0 UID: 0 PID: 9962 Comm: syz.2.1280 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 379.180634][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 379.180649][ C0] RIP: 0010:__lock_acquire+0x99f/0x2100 [ 379.180691][ C0] Code: 81 c3 c6 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 a5 00 00 00 80 3b 02 74 30 49 ff c6 48 8b 44 24 30 0f b6 04 10 <84> c0 75 6a 48 8b 04 24 48 63 00 49 83 c7 28 49 83 c5 28 41 ff c4 [ 379.180712][ C0] RSP: 0018:ffffc900000078f0 EFLAGS: 00000003 [ 379.180734][ C0] RAX: 0000000000000000 RBX: ffffffff93c76c26 RCX: 0000000000000002 [ 379.180751][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff942f9848 [ 379.180769][ C0] RBP: 0000000000000002 R08: ffffffff942f984f R09: 1ffffffff285f309 [ 379.180786][ C0] R10: dffffc0000000000 R11: fffffbfff285f30a R12: 0000000000000003 [ 379.180803][ C0] R13: ffff8880778ee588 R14: 0000000000000004 R15: ffff8880778ee588 [ 379.180825][ C0] FS: 000055555d43f500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 379.180847][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.180865][ C0] CR2: 000000110c362554 CR3: 0000000027c40000 CR4: 0000000000350ef0 [ 379.180884][ C0] Call Trace: [ 379.180895][ C0] [ 379.180905][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 379.180934][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 379.180969][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 379.181006][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 379.181036][ C0] ? nmi_handle+0x151/0x5a0 [ 379.181074][ C0] ? nmi_handle+0x2a/0x5a0 [ 379.181112][ C0] ? __lock_acquire+0x99f/0x2100 [ 379.181145][ C0] ? default_do_nmi+0x63/0x160 [ 379.181171][ C0] ? exc_nmi+0x123/0x1f0 [ 379.181194][ C0] ? end_repeat_nmi+0xf/0x53 [ 379.181237][ C0] ? __lock_acquire+0x99f/0x2100 [ 379.181271][ C0] ? __lock_acquire+0x99f/0x2100 [ 379.181306][ C0] ? __lock_acquire+0x99f/0x2100 [ 379.181344][ C0] [ 379.181352][ C0] [ 379.181371][ C0] lock_acquire+0x1ed/0x550 [ 379.181403][ C0] ? debug_object_activate+0x17f/0x580 [ 379.181436][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 379.181468][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.181507][ C0] ? __lock_acquire+0x1397/0x2100 [ 379.181551][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 379.181580][ C0] ? debug_object_activate+0x17f/0x580 [ 379.181607][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 379.181641][ C0] debug_object_activate+0x17f/0x580 [ 379.181670][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.181698][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 379.181725][ C0] ? advance_sched+0xa02/0xca0 [ 379.181755][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.181793][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 379.181821][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 379.181852][ C0] enqueue_hrtimer+0x30/0x3c0 [ 379.181878][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 379.181928][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 379.181967][ C0] ? sched_clock+0x4a/0x70 [ 379.181995][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.182034][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 379.182070][ C0] hrtimer_interrupt+0x403/0xa40 [ 379.182123][ C0] __sysvec_apic_timer_interrupt+0x112/0x420 [ 379.182163][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 379.182195][ C0] [ 379.182203][ C0] [ 379.182213][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.182249][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 379.182282][ C0] Code: 2b 00 74 08 4c 89 f7 e8 fa 3b 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 379.182302][ C0] RSP: 0018:ffffc90003e978c0 EFLAGS: 00000206 [ 379.182329][ C0] RAX: 0000000000000001 RBX: 1ffff920007d2f24 RCX: ffff8880778ee4e8 [ 379.182346][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ab8e0 RDI: ffffffff8c608a00 [ 379.182365][ C0] RBP: ffffc90003e97a08 R08: ffffffff96b9987f R09: 1ffffffff2d7330f [ 379.182384][ C0] R10: dffffc0000000000 R11: fffffbfff2d73310 R12: 1ffff920007d2f20 [ 379.182403][ C0] R13: dffffc0000000000 R14: ffffc90003e97920 R15: 0000000000000246 [ 379.182434][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 379.182469][ C0] ? __pfx___might_resched+0x10/0x10 [ 379.182501][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.182540][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.182584][ C0] __mutex_lock+0x19c/0x1010 [ 379.182616][ C0] ? unregister_netdev+0x17/0x30 [ 379.182646][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.182687][ C0] ? unregister_netdev+0x17/0x30 [ 379.182711][ C0] ? mark_lock+0x9a/0x360 [ 379.182747][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 379.182780][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.182819][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.182855][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.182892][ C0] ? _raw_write_unlock_irq+0x23/0x50 [ 379.182924][ C0] unregister_netdev+0x17/0x30 [ 379.182949][ C0] sixpack_close+0x1df/0x280 [ 379.182978][ C0] tty_ldisc_kill+0xa3/0x1a0 [ 379.183011][ C0] tty_ldisc_release+0x1a1/0x200 [ 379.183043][ C0] tty_release_struct+0x2b/0xe0 [ 379.183075][ C0] tty_release+0xd06/0x12c0 [ 379.183111][ C0] ? __pfx_tty_release+0x10/0x10 [ 379.183140][ C0] __fput+0x3eb/0x9f0 [ 379.183176][ C0] task_work_run+0x251/0x310 [ 379.183214][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.183252][ C0] ? _raw_spin_unlock+0x28/0x50 [ 379.183281][ C0] ? __pfx_task_work_run+0x10/0x10 [ 379.183326][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 379.183361][ C0] syscall_exit_to_user_mode+0x13f/0x340 [ 379.183396][ C0] do_syscall_64+0x100/0x230 [ 379.183433][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.183467][ C0] RIP: 0033:0x7f9dc5f8cde9 [ 379.183488][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.183508][ C0] RSP: 002b:00007ffce3c011a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 379.183532][ C0] RAX: 0000000000000000 RBX: 0000000000042e24 RCX: 00007f9dc5f8cde9 [ 379.183549][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 379.183564][ C0] RBP: 00007f9dc61a7ba0 R08: 0000000000000001 R09: 00000004e3c0149f [ 379.183581][ C0] R10: 00007f9dc5e00000 R11: 0000000000000246 R12: 00007f9dc61a5fac [ 379.183597][ C0] R13: 00007f9dc61a5fa0 R14: ffffffffffffffff R15: 00007ffce3c012c0 [ 379.183625][ C0] [ 379.184583][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g34305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 379.836537][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=21624 [ 379.844453][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g34305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 379.855842][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 379.865826][ C1] rcu: RCU grace-period kthread stack dump: [ 379.871729][ C1] task:rcu_preempt state:I stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 379.883703][ C1] Call Trace: [ 379.887001][ C1] [ 379.889958][ C1] __schedule+0x190e/0x4c90 [ 379.894503][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 379.900454][ C1] ? __pfx___schedule+0x10/0x10 [ 379.905342][ C1] ? __pfx_lock_release+0x10/0x10 [ 379.910410][ C1] ? __pfx___mod_timer+0x10/0x10 [ 379.915380][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.921753][ C1] ? schedule+0x90/0x320 [ 379.926033][ C1] schedule+0x14b/0x320 [ 379.930312][ C1] schedule_timeout+0x15a/0x290 [ 379.935194][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 379.940777][ C1] ? __pfx_process_timeout+0x10/0x10 [ 379.946096][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 379.951772][ C1] ? prepare_to_swait_event+0x330/0x350 [ 379.957360][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 379.962609][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 379.967516][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 379.972840][ C1] ? rcu_gp_init+0x1256/0x1630 [ 379.977652][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 379.982623][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 379.988560][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 379.993882][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 379.999810][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.005482][ C1] ? finish_swait+0xd4/0x1e0 [ 380.010108][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.015346][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 380.019978][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.025300][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.031226][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.036912][ C1] ? __kthread_parkme+0x169/0x1d0 [ 380.041975][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.047300][ C1] kthread+0x7ab/0x920 [ 380.051407][ C1] ? __pfx_kthread+0x10/0x10 [ 380.056040][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 380.061280][ C1] ? __pfx_kthread+0x10/0x10 [ 380.065904][ C1] ? __pfx_kthread+0x10/0x10 [ 380.070536][ C1] ? __pfx_kthread+0x10/0x10 [ 380.075166][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.080397][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 380.086071][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 380.091356][ C1] ? __pfx_kthread+0x10/0x10 [ 380.096044][ C1] ret_from_fork+0x4d/0x80 [ 380.100591][ C1] ? __pfx_kthread+0x10/0x10 [ 380.105229][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.110046][ C1]