last executing test programs: 1m13.687846706s ago: executing program 1 (id=22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) 1m13.600572869s ago: executing program 1 (id=23): setreuid(0x0, 0xee00) r0 = fanotify_init(0x200, 0x0) setresuid(0x0, 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40000009, 0xffffffffffffffff, 0x0) 1m13.463557332s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/export_features\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 1m13.311421536s ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) 1m13.14156406s ago: executing program 1 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x200, 0x25dfdc01, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'hsr0\x00'}]}, 0x3c}}, 0x0) 1m12.707490681s ago: executing program 1 (id=30): unshare(0x26020480) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x1c) 1m12.485198376s ago: executing program 32 (id=30): unshare(0x26020480) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x1c) 22.311129768s ago: executing program 0 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="984e0600c16a010048001280110001006272696467655f736c617665000000003000058004001800050005000000000005001900ff"], 0x68}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 22.184370382s ago: executing program 0 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)="6ff6250a", 0x4) 22.022311965s ago: executing program 0 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802"], 0x3c}}, 0x0) 21.950096147s ago: executing program 0 (id=578): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3) 21.722098153s ago: executing program 0 (id=580): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127\xae0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 21.305322753s ago: executing program 0 (id=583): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0', 0x39) 21.00176816s ago: executing program 33 (id=583): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0', 0x39) 3.286882199s ago: executing program 2 (id=742): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.901358879s ago: executing program 2 (id=746): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000400)={0x0, 0xed83, 0x400, 0x2, 0x2e3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x4001, 0x1, {0x2}}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 2.744782402s ago: executing program 2 (id=748): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x0, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 2.743592372s ago: executing program 5 (id=749): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000600bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xd4}}, 0x0) 2.631409266s ago: executing program 5 (id=750): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e21, 0x8, 0x4e20, 0x7, 0xa, 0x80, 0x180, 0x11, 0x0, 0xee00}, {0xff, 0xa, 0x2b41459c, 0x0, 0x1, 0xeb69, 0x6, 0x8}, {0x6, 0x5, 0xc28, 0x6}, 0x1, 0x6e6bc0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d3, 0x32}, 0xa, @in6=@mcast1, 0x3503, 0x3, 0x0, 0x4, 0x6, 0x0, 0x30b}}, 0xe8) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 2.631278745s ago: executing program 2 (id=751): socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="5c00000014006b030231a6080c000af32c0cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1000000e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x10000) 2.616219146s ago: executing program 5 (id=752): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) unshare(0x28000600) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 2.576941707s ago: executing program 2 (id=753): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) r1 = dup2(r0, r0) read$FUSE(r1, 0x0, 0x0) 2.43547515s ago: executing program 4 (id=754): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e10500070088a800008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) 2.408036621s ago: executing program 4 (id=756): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0\x00') 1.61946093s ago: executing program 5 (id=761): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff"], 0x110) 1.499509263s ago: executing program 4 (id=762): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0xffffffffffffffda, 0x87, {0x2000000000000c, 0x3, 0x0, {0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x0, 0xfffffffffffff801, 0x4, 0xfffffffe, 0x6, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x400001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 1.396926696s ago: executing program 3 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000030a010800000000000000000a000007100008800800014000000001000000010900010073797a31000000000900030073797a30"], 0x64}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 1.323504147s ago: executing program 5 (id=765): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e26, 0x3, @private1, 0x1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) 1.296366268s ago: executing program 3 (id=766): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000000840), 0x0}, 0x20) 1.177714331s ago: executing program 3 (id=767): r0 = io_uring_setup(0x1890, &(0x7f0000000580)={0x0, 0xa1c5, 0x80, 0x4, 0x30f}) r1 = eventfd2(0x100, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 1.059703614s ago: executing program 3 (id=768): setfsgid(0xee00) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) kcmp(r0, r1, 0x7ffffffe, 0xffffffffffffffff, 0xffffffffffffffff) 1.026781865s ago: executing program 2 (id=769): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x2004880, &(0x7f00000001c0)=ANY=[], 0xfc, 0x60b0, &(0x7f00000196c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000001f780)='./file1\x00', 0xc4042, 0x17f) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f000001f7c0), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 943.450147ms ago: executing program 3 (id=770): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) unshare(0x28000600) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 942.236517ms ago: executing program 4 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0fc5:1227:dm', 0xc) 437.69556ms ago: executing program 5 (id=771): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000040)=[0x1000], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 437.62425ms ago: executing program 4 (id=772): r0 = open(&(0x7f0000000040)='./bus\x00', 0x4837e, 0x1a4) fallocate(r0, 0x0, 0x80000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="b8", 0x1) 2.83076ms ago: executing program 3 (id=773): fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./dev/ram0\x00', 0x0, 0xee01, 0x800) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 0s ago: executing program 4 (id=774): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xd}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) kernel console output (not intermixed with test programs): r on device team0 [ 80.657696][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.664901][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.702356][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.709572][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.731422][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.817372][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.861944][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.869137][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.934344][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.963286][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.970570][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.124039][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.173321][ T5781] veth0_vlan: entered promiscuous mode [ 81.213127][ T5781] veth1_vlan: entered promiscuous mode [ 81.268166][ T5781] veth0_macvtap: entered promiscuous mode [ 81.295560][ T5781] veth1_macvtap: entered promiscuous mode [ 81.356442][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.373107][ T5779] veth0_vlan: entered promiscuous mode [ 81.404308][ T5779] veth1_vlan: entered promiscuous mode [ 81.416377][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.449839][ T5790] Bluetooth: hci2: command tx timeout [ 81.452652][ T51] Bluetooth: hci0: command tx timeout [ 81.455278][ T5090] Bluetooth: hci1: command tx timeout [ 81.461734][ T5787] Bluetooth: hci3: command tx timeout [ 81.470768][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.493152][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.513858][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.523348][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.533145][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.543117][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.627346][ T5779] veth0_macvtap: entered promiscuous mode [ 81.642263][ T5779] veth1_macvtap: entered promiscuous mode [ 81.676994][ T5778] veth0_vlan: entered promiscuous mode [ 81.695337][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.714302][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.726369][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.736950][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.747798][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.758832][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.766561][ T5780] veth0_vlan: entered promiscuous mode [ 81.806652][ T5780] veth1_vlan: entered promiscuous mode [ 81.817307][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.826846][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.835771][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.844740][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.903308][ T5778] veth1_vlan: entered promiscuous mode [ 81.915293][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.950488][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.115990][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.129747][ T5778] veth0_macvtap: entered promiscuous mode [ 82.139420][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.154006][ T5780] veth0_macvtap: entered promiscuous mode [ 82.217573][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.221176][ T5780] veth1_macvtap: entered promiscuous mode [ 82.234651][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.257027][ T5778] veth1_macvtap: entered promiscuous mode [ 82.310798][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.318669][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.356383][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.372491][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.386057][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.404425][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.418616][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.491719][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.521953][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.531984][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.548477][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.564731][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.569420][ T5844] syz.1.2[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.576819][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.603938][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.617260][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.633521][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.644632][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.658717][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.670868][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.691771][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.715848][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.735912][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.759282][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.784494][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.808023][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.831030][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.843937][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.863501][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.876785][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.888024][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.928618][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.957860][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.977240][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995832][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.006309][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.187500][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.206427][ T5844] loop1: detected capacity change from 0 to 32768 [ 83.221521][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.279759][ T5844] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 83.296461][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.341278][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.442895][ T5844] XFS (loop1): Ending clean mount [ 83.457166][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.481198][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.533218][ T5787] Bluetooth: hci3: command tx timeout [ 83.538712][ T5787] Bluetooth: hci0: command tx timeout [ 83.544418][ T51] Bluetooth: hci1: command tx timeout [ 83.544997][ T5090] Bluetooth: hci2: command tx timeout [ 83.553677][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.585649][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.774609][ T5781] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 84.180842][ T5883] format_corename failed [ 84.185155][ T5883] Aborting core [ 84.620462][ T5891] loop0: detected capacity change from 0 to 8192 [ 84.662742][ T5891] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.900081][ T5881] loop3: detected capacity change from 0 to 40427 [ 84.930085][ T5881] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 84.946295][ T5881] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 84.966712][ T5881] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 85.006379][ T5881] F2FS-fs (loop3): invalid crc value [ 85.039770][ T5822] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.075284][ T5881] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.222058][ T5881] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 85.229959][ T5881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.272816][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.293699][ T5822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 85.331488][ T5822] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.349484][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.364315][ T5822] usb 3-1: Product: syz [ 85.376579][ T5822] usb 3-1: Manufacturer: syz [ 85.385346][ T5822] usb 3-1: SerialNumber: syz [ 85.397853][ T27] audit: type=1800 audit(1791883318.493:2): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 85.450251][ T5822] usb 3-1: selecting invalid altsetting 1 [ 85.537264][ T5779] syz-executor: attempt to access beyond end of device [ 85.537264][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.561307][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 85.616437][ T5090] Bluetooth: hci2: command tx timeout [ 85.622118][ T5790] Bluetooth: hci0: command tx timeout [ 85.622150][ T51] Bluetooth: hci3: command tx timeout [ 85.634614][ T5787] Bluetooth: hci1: command tx timeout [ 86.150108][ T5917] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.265142][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.298141][ T5919] overlayfs: workdir and upperdir must reside under the same mount [ 86.326903][ T5822] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 86.371666][ T5822] usb 3-1: selecting invalid altsetting 1 [ 86.377593][ T5822] cdc_ncm 3-1:1.0: bind() failure [ 86.392287][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.438427][ T5822] usb 3-1: USB disconnect, device number 2 [ 86.527361][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.553177][ T5924] loop3: detected capacity change from 0 to 256 [ 86.562428][ T5921] ima: policy update failed [ 86.579386][ T27] audit: type=1802 audit(1791883319.663:3): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.32" res=0 errno=0 [ 86.662163][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.928517][ T5928] loop3: detected capacity change from 0 to 128 [ 86.973788][ T3064] cfg80211: failed to load regulatory.db [ 87.019495][ T5928] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 87.142670][ T5928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.261843][ T5937] loop0: detected capacity change from 0 to 256 [ 87.283374][ T5937] ======================================================= [ 87.283374][ T5937] WARNING: The mand mount option has been deprecated and [ 87.283374][ T5937] and is ignored by this kernel. Remove the mand [ 87.283374][ T5937] option from the mount to silence this warning. [ 87.283374][ T5937] ======================================================= [ 87.353685][ T5928] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 87.366087][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.388545][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.395936][ T5928] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 87.398262][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.435412][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.443654][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.455839][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.464652][ T5937] FAT-fs (loop0): Directory bread(block 64) failed [ 87.509934][ T5937] FAT-fs (loop0): Directory bread(block 65) failed [ 87.566112][ T5937] FAT-fs (loop0): Directory bread(block 66) failed [ 87.623875][ T5937] FAT-fs (loop0): Directory bread(block 67) failed [ 87.660428][ T5937] FAT-fs (loop0): Directory bread(block 68) failed [ 87.667119][ T5937] FAT-fs (loop0): Directory bread(block 69) failed [ 87.698501][ T5937] FAT-fs (loop0): Directory bread(block 70) failed [ 87.718385][ T5937] FAT-fs (loop0): Directory bread(block 71) failed [ 87.738253][ T5937] FAT-fs (loop0): Directory bread(block 72) failed [ 87.755135][ T5937] FAT-fs (loop0): Directory bread(block 73) failed [ 87.944166][ T5937] syz.0.38: attempt to access beyond end of device [ 87.944166][ T5937] loop0: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 88.030409][ T5820] IPVS: starting estimator thread 0... [ 88.131339][ T5959] IPVS: using max 17 ests per chain, 40800 per kthread [ 88.454939][ T5970] loop0: detected capacity change from 0 to 128 [ 88.820696][ T5980] loop2: detected capacity change from 0 to 512 [ 88.924406][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 88.945891][ T5980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.975708][ T5980] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.050818][ T1143] hsr_slave_0: left promiscuous mode [ 89.067071][ T1143] hsr_slave_1: left promiscuous mode [ 89.085838][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.109650][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.139022][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.159992][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.178583][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.189342][ T1143] bridge_slave_1: left allmulticast mode [ 89.195037][ T1143] bridge_slave_1: left promiscuous mode [ 89.210348][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.236481][ T1143] bridge_slave_0: left allmulticast mode [ 89.243285][ T1143] bridge_slave_0: left promiscuous mode [ 89.250503][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.276655][ T5994] Bluetooth: MGMT ver 1.22 [ 89.352716][ T1143] veth1_macvtap: left promiscuous mode [ 89.359327][ T970] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.367637][ T1143] veth0_macvtap: left promiscuous mode [ 89.390205][ T1143] veth1_vlan: left promiscuous mode [ 89.395847][ T1143] veth0_vlan: left promiscuous mode [ 89.529282][ T51] Bluetooth: hci3: command tx timeout [ 89.563905][ T970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.597784][ T970] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 89.635633][ T970] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.648399][ T970] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.664183][ T970] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 89.681785][ T970] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 89.697140][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.718550][ T5989] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.733811][ T970] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 89.768695][ T970] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 89.785795][ T970] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 89.806546][ T970] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 89.822862][ T970] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 89.830827][ T970] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 89.856036][ T970] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 90.164211][ T970] usb 1-1: USB disconnect, device number 2 [ 90.198155][ T970] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 90.255219][ T970] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 90.284294][ T970] keyspan 1-1:1.0: device disconnected [ 90.421960][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 90.463529][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 90.501055][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.509504][ T5822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.544065][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.699622][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 90.722756][ T5822] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 90.743440][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.774345][ T5822] pvrusb2: Hardware description: Terratec Grabster AV400 [ 90.789401][ T5822] pvrusb2: ********** [ 90.795790][ T5822] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 90.810196][ T5822] pvrusb2: Important functionality might not be entirely working. [ 90.818048][ T5822] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 90.830827][ T5822] pvrusb2: ********** [ 90.845772][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 90.906764][ T1143] bond0 (unregistering): Released all slaves [ 91.013823][ T2322] pvrusb2: Invalid write control endpoint [ 91.142713][ T2322] pvrusb2: Invalid write control endpoint [ 91.148659][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 91.194763][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 91.195708][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.203226][ T6022] loop7: detected capacity change from 0 to 7 [ 91.230157][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 91.248136][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.256723][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.266537][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.276464][ T2322] pvrusb2: Device being rendered inoperable [ 91.285962][ T5939] bridge_slave_0: entered allmulticast mode [ 91.287712][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.301109][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.310952][ T5939] bridge_slave_0: entered promiscuous mode [ 91.318158][ T6013] pvrusb2: Attempted to execute control transfer when device not ok [ 91.319825][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.335545][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.345965][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 91.355035][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.357316][ T5820] usb 4-1: USB disconnect, device number 2 [ 91.371986][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.373019][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 91.381186][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.397446][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.404302][ T2322] pvrusb2: Attached sub-driver cx25840 [ 91.410235][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.410268][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.418003][ T5939] bridge_slave_1: entered allmulticast mode [ 91.421101][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 91.429210][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.434052][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 91.443917][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.475566][ T5939] bridge_slave_1: entered promiscuous mode [ 91.476855][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.490576][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.498458][ T6022] ldm_validate_partition_table(): Disk read failed. [ 91.510567][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.519790][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.527828][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.537069][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.548159][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.557452][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.579881][ T6022] Dev loop7: unable to read RDB block 0 [ 91.590529][ T6022] loop7: unable to read partition table [ 91.596336][ T6022] loop7: partition table beyond EOD, truncated [ 91.610838][ T51] Bluetooth: hci3: command tx timeout [ 91.629492][ T6022] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…cåæ©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 91.631839][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.663918][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.736183][ T5144] ldm_validate_partition_table(): Disk read failed. [ 91.744963][ T5939] team0: Port device team_slave_0 added [ 91.750457][ T5144] Dev loop7: unable to read RDB block 0 [ 91.772345][ T5939] team0: Port device team_slave_1 added [ 91.777003][ T5144] loop7: unable to read partition table [ 91.793528][ T5144] loop7: partition table beyond EOD, truncated [ 91.882844][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.900846][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.983102][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.012897][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.035931][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.105442][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.310561][ T5939] hsr_slave_0: entered promiscuous mode [ 92.339889][ T5939] hsr_slave_1: entered promiscuous mode [ 92.356654][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.372481][ T5939] Cannot create hsr debugfs directory [ 92.693544][ T968] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.745208][ T968] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.015267][ T5939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.047940][ T5939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.085286][ T5939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.121826][ T5939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.174900][ T6076] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by ""[6076] [ 93.353905][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.389503][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.403310][ T6084] loop0: detected capacity change from 0 to 256 [ 93.415793][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.422989][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.490881][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.498901][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.686412][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.700270][ T51] Bluetooth: hci3: command tx timeout [ 94.269150][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.030432][ T5939] veth0_vlan: entered promiscuous mode [ 95.072082][ T5939] veth1_vlan: entered promiscuous mode [ 95.142317][ T5939] veth0_macvtap: entered promiscuous mode [ 95.188741][ T5939] veth1_macvtap: entered promiscuous mode [ 95.248055][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.269240][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.279722][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.309277][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.329293][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.359278][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.372984][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.399161][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.414322][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.425231][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.437001][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.452324][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.463157][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.465744][ T6143] loop2: detected capacity change from 0 to 1024 [ 95.477708][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.512936][ T5939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.537623][ T5939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.549261][ T5939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.558015][ T5939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.770359][ T51] Bluetooth: hci3: command tx timeout [ 95.805789][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.836596][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.957311][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.977856][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.398868][ T6174] jffs2: notice: (6174) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.835963][ T6193] loop2: detected capacity change from 0 to 32768 [ 97.937788][ T6193] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.957695][ T6228] loop4: detected capacity change from 0 to 1024 [ 97.972328][ T6228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.985095][ T6228] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 98.000368][ T6228] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 98.083441][ T6228] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: comm syz.4.112: inode #1: comm syz.4.112: iget: illegal inode # [ 98.108913][ T6193] XFS (loop2): Ending clean mount [ 98.173307][ T6228] EXT4-fs (loop4): no journal found [ 98.178576][ T6228] EXT4-fs (loop4): can't get journal size [ 98.198136][ T5778] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.225172][ T6228] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e118, mo2=0002] [ 98.283095][ T6228] EXT4-fs (loop4): failed to initialize system zone (-22) [ 98.322154][ T6228] EXT4-fs (loop4): mount failed [ 98.599119][ T6209] loop0: detected capacity change from 0 to 40427 [ 98.646657][ T6209] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 98.678210][ T6209] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.719788][ T6209] F2FS-fs (loop0): Image doesn't support compression [ 98.756437][ T6209] F2FS-fs (loop0): Image doesn't support compression [ 98.812781][ T6209] F2FS-fs (loop0): invalid crc value [ 99.094796][ T6209] F2FS-fs (loop0): Start checkpoint disabled! [ 99.138217][ T6209] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.158459][ T6209] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 99.315511][ T6209] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0 [ 99.343416][ T6209] CPU: 1 PID: 6209 Comm: syz.0.108 Not tainted syzkaller #0 [ 99.350772][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.360868][ T6209] Call Trace: [ 99.364181][ T6209] [ 99.367134][ T6209] dump_stack_lvl+0x18c/0x250 [ 99.371853][ T6209] ? show_regs_print_info+0x20/0x20 [ 99.377073][ T6209] ? mark_lock+0x94/0x320 [ 99.381446][ T6209] ? __lock_acquire+0x135d/0x7eb0 [ 99.386513][ T6209] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 99.391913][ T6209] f2fs_map_blocks+0xc20/0x4080 [ 99.396816][ T6209] ? f2fs_get_block_locked+0xe0/0xe0 [ 99.402120][ T6209] ? xa_load+0x64/0x2e0 [ 99.406324][ T6209] ? xa_load+0x64/0x2e0 [ 99.410518][ T6209] ? xa_load+0x2b7/0x2e0 [ 99.414797][ T6209] ? xa_load+0x64/0x2e0 [ 99.418989][ T6209] ? page_index+0xe6/0x480 [ 99.423452][ T6209] f2fs_mpage_readpages+0xa0b/0x1eb0 [ 99.428794][ T6209] ? detach_page_private+0x4d0/0x4d0 [ 99.434154][ T6209] ? __mod_lruvec_page_state+0xa5/0x410 [ 99.439724][ T6209] ? f2fs_readahead+0x167/0x2f0 [ 99.444579][ T6209] ? f2fs_dirty_data_folio+0x830/0x830 [ 99.450049][ T6209] read_pages+0x18b/0x860 [ 99.454384][ T6209] ? __lock_acquire+0x7eb0/0x7eb0 [ 99.459421][ T6209] ? page_cache_ra_unbounded+0x740/0x740 [ 99.465063][ T6209] ? folio_add_lru+0x323/0xce0 [ 99.469827][ T6209] ? folio_add_lru+0x512/0xce0 [ 99.474591][ T6209] ? filemap_add_folio+0x190/0x3d0 [ 99.479705][ T6209] page_cache_ra_unbounded+0x661/0x740 [ 99.485173][ T6209] f2fs_readdir+0x498/0x970 [ 99.489690][ T6209] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 99.494889][ T6209] ? mutex_lock_nested+0x20/0x20 [ 99.499835][ T6209] ? iterate_dir+0xcb/0x590 [ 99.504348][ T6209] ? down_read_killable+0x1d0/0x340 [ 99.509547][ T6209] ? fsnotify_perm+0x271/0x5e0 [ 99.514319][ T6209] iterate_dir+0x1bd/0x590 [ 99.518763][ T6209] __se_sys_getdents64+0xf6/0x270 [ 99.523862][ T6209] ? __x64_sys_getdents64+0x80/0x80 [ 99.529078][ T6209] ? filldir+0x620/0x620 [ 99.533334][ T6209] ? lockdep_hardirqs_on+0x98/0x150 [ 99.538539][ T6209] do_syscall_64+0x55/0xb0 [ 99.542956][ T6209] ? clear_bhb_loop+0x40/0x90 [ 99.547637][ T6209] ? clear_bhb_loop+0x40/0x90 [ 99.552317][ T6209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.558233][ T6209] RIP: 0033:0x7f4b8119e2d9 [ 99.562648][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.582262][ T6209] RSP: 002b:00007f4b820ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 99.590772][ T6209] RAX: ffffffffffffffda RBX: 00007f4b81425fa0 RCX: 00007f4b8119e2d9 [ 99.598750][ T6209] RDX: 000000000000ff80 RSI: 9999999999999999 RDI: 0000000000000004 [ 99.606725][ T6209] RBP: 00007f4b81235888 R08: 0000000000000000 R09: 0000000000000000 [ 99.614701][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.622670][ T6209] R13: 00007f4b81426038 R14: 00007f4b81425fa0 R15: 00007ffcd43564a8 [ 99.630659][ T6209] [ 99.685162][ T6209] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0 [ 99.718348][ T6209] CPU: 0 PID: 6209 Comm: syz.0.108 Not tainted syzkaller #0 [ 99.725705][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.735781][ T6209] Call Trace: [ 99.739074][ T6209] [ 99.742023][ T6209] dump_stack_lvl+0x18c/0x250 [ 99.746730][ T6209] ? show_regs_print_info+0x20/0x20 [ 99.751953][ T6209] ? __asan_memset+0x22/0x40 [ 99.756580][ T6209] ? f2fs_lookup_read_extent_cache_block+0x231/0x430 [ 99.763301][ T6209] ? __lookup_extent_tree+0xb80/0xb80 [ 99.768707][ T6209] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 99.774120][ T6209] f2fs_get_read_data_page+0x3bb/0x5d0 [ 99.779621][ T6209] ? f2fs_reserve_block+0x240/0x240 [ 99.784967][ T6209] f2fs_find_data_page+0x9f/0x3a0 [ 99.790031][ T6209] f2fs_readdir+0x4c7/0x970 [ 99.794590][ T6209] ? f2fs_fill_dentries+0xbf0/0xbf0 [ 99.799825][ T6209] ? mutex_lock_nested+0x20/0x20 [ 99.804794][ T6209] ? iterate_dir+0xcb/0x590 [ 99.809320][ T6209] ? down_read_killable+0x1d0/0x340 [ 99.814553][ T6209] ? fsnotify_perm+0x271/0x5e0 [ 99.819370][ T6209] iterate_dir+0x1bd/0x590 [ 99.823820][ T6209] __se_sys_getdents64+0xf6/0x270 [ 99.828874][ T6209] ? __x64_sys_getdents64+0x80/0x80 [ 99.834095][ T6209] ? filldir+0x620/0x620 [ 99.838369][ T6209] ? lockdep_hardirqs_on+0x98/0x150 [ 99.843594][ T6209] do_syscall_64+0x55/0xb0 [ 99.848033][ T6209] ? clear_bhb_loop+0x40/0x90 [ 99.852735][ T6209] ? clear_bhb_loop+0x40/0x90 [ 99.857440][ T6209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.863369][ T6209] RIP: 0033:0x7f4b8119e2d9 [ 99.867807][ T6209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.887436][ T6209] RSP: 002b:00007f4b820ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 99.895878][ T6209] RAX: ffffffffffffffda RBX: 00007f4b81425fa0 RCX: 00007f4b8119e2d9 [ 99.903873][ T6209] RDX: 000000000000ff80 RSI: 9999999999999999 RDI: 0000000000000004 [ 99.911872][ T6209] RBP: 00007f4b81235888 R08: 0000000000000000 R09: 0000000000000000 [ 99.919866][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.927859][ T6209] R13: 00007f4b81426038 R14: 00007f4b81425fa0 R15: 00007ffcd43564a8 [ 99.935874][ T6209] [ 100.017673][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.096640][ T3464] kworker/u4:7: attempt to access beyond end of device [ 100.096640][ T3464] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.130862][ T3464] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.177364][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 100.395283][ T27] audit: type=1326 audit(1791883333.483:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.130" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fd3f9e2d9 code=0x0 [ 100.520879][ T6259] loop3: detected capacity change from 0 to 40427 [ 100.555055][ T6259] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 100.578779][ T6259] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.610149][ T6297] ip_tables: iptables: counters copy to user failed while replacing table [ 100.635853][ T6259] F2FS-fs (loop3): invalid crc value [ 100.641594][ T6259] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 100.714890][ T6259] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.853069][ T6259] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.867953][ T6259] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.915648][ T27] audit: type=1800 audit(1791883334.013:5): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.119" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 100.963937][ T6259] syz.3.119: attempt to access beyond end of device [ 100.963937][ T6259] loop3: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 101.051126][ T5779] syz-executor: attempt to access beyond end of device [ 101.051126][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.087341][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 101.400035][ T6317] loop0: detected capacity change from 0 to 2048 [ 101.429975][ T6317] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 101.481250][ T6317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.255159][ T6358] loop3: detected capacity change from 0 to 1024 [ 102.347391][ T6358] hfsplus: invalid catalog entry type [ 102.408487][ T6358] hfsplus: invalid catalog entry type [ 102.887095][ T8] kernel write not supported for file /amidi2 (pid: 8 comm: kworker/0:0) [ 102.943839][ T6391] ip_tables: iptables: counters copy to user failed while replacing table [ 103.317644][ T6407] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 103.337490][ T6407] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 103.344019][ T6410] loop2: detected capacity change from 0 to 128 [ 103.386366][ T6410] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 103.426189][ T6410] hpfs: filesystem error: improperly stopped [ 103.461619][ T6410] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 103.482128][ T6410] hpfs: You really don't want any checks? You are crazy... [ 103.504362][ T6410] hpfs: Code page index out of array [ 103.518483][ T6410] hpfs: code page support is disabled [ 103.545479][ T6410] hpfs: hpfs_map_4sectors(): unaligned read [ 103.555098][ T6410] hpfs: hpfs_map_4sectors(): unaligned read [ 103.567769][ T6410] hpfs: filesystem error: unable to find root dir [ 103.692327][ T6417] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.180'. [ 103.958352][ T27] audit: type=1400 audit(1791883337.053:6): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6426 comm="syz.2.185" name="unknown" offset=28 [ 104.127099][ T6438] overlayfs: invalid origin (0000) [ 104.317962][ T6449] process 'syz.2.195' launched './file0' with NULL argv: empty string added [ 104.489627][ T5853] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.560649][ T6462] loop7: detected capacity change from 0 to 7 [ 104.574001][ C1] blk_print_req_error: 25 callbacks suppressed [ 104.574018][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.599203][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.608409][ C1] buffer_io_error: 25 callbacks suppressed [ 104.608421][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.623097][ T6464] loop0: detected capacity change from 0 to 1024 [ 104.631548][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.639606][ T6460] loop2: detected capacity change from 0 to 8192 [ 104.640744][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.659214][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.668403][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.676848][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.679670][ T6460] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.686043][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.708312][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.717508][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.726134][ T6460] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 104.736288][ T6460] REISERFS (device loop2): using ordered data mode [ 104.743534][ T6460] reiserfs: using flush barriers [ 104.745340][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.757653][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.764580][ T6460] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.767969][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.790719][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.802937][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.807597][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 104.812141][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.830233][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.839472][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.839815][ T6460] REISERFS (device loop2): checking transaction log (loop2) [ 104.862084][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.884726][ T6462] ldm_validate_partition_table(): Disk read failed. [ 104.898782][ T6462] Dev loop7: unable to read RDB block 0 [ 104.909279][ T5853] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.940892][ T6462] loop7: unable to read partition table [ 104.942831][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.946752][ T6462] loop7: partition table beyond EOD, [ 104.964543][ T5853] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 104.977171][ T6462] truncated [ 105.011445][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.026861][ T6462] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 105.036039][ T5853] usb 5-1: config 0 descriptor?? [ 105.145910][ T6460] REISERFS (device loop2): Using tea hash to sort names [ 105.161762][ T6460] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 105.327288][ T6460] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=3171692, len=3 - odd [ 105.516052][ T5853] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 105.784184][ T6480] nbd0: detected capacity change from 0 to 127 [ 105.808362][ T51] block nbd0: Receive control failed (result -32) [ 105.812487][ T55] block nbd0: Send control failed (result -32) [ 105.822475][ T55] block nbd0: Request send failed, requeueing [ 105.830943][ T55] block nbd0: Dead connection, failed to find a fallback [ 105.838731][ T55] block nbd0: shutting down sockets [ 105.861054][ T5772] ldm_validate_partition_table(): Disk read failed. [ 105.884031][ T5772] Dev nbd0: unable to read RDB block 0 [ 105.910365][ T5772] nbd0: unable to read partition table [ 105.958870][ T6488] loop0: detected capacity change from 0 to 64 [ 105.977605][ T5772] ldm_validate_partition_table(): Disk read failed. [ 106.031471][ T5772] Dev nbd0: unable to read RDB block 0 [ 106.042318][ T970] usb 5-1: USB disconnect, device number 2 [ 106.049967][ T5772] nbd0: unable to read partition table [ 106.069788][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 106.271529][ T6497] mmap: syz.2.215 (6497) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.497825][ T6504] loop0: detected capacity change from 0 to 8192 [ 106.525883][ T6504] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.546897][ T6504] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 106.591108][ T6504] REISERFS (device loop0): using ordered data mode [ 106.597665][ T6504] reiserfs: using flush barriers [ 106.635155][ T6504] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.653247][ T6504] REISERFS (device loop0): checking transaction log (loop0) [ 106.666139][ T6504] REISERFS (device loop0): Using r5 hash to sort names [ 106.677124][ T6504] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 106.792832][ T6504] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 106.862116][ T6504] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 106.889499][ T6504] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 106.906784][ T6521] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3561, free_space(entry_count) 2 [ 106.964659][ T6521] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 106.986571][ T6521] REISERFS (device loop0): Remounting filesystem read-only [ 106.995309][ T6521] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 107.011326][ T6521] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3561, free_space(entry_count) 2 [ 107.028364][ T6521] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 107.044636][ T6521] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 107.069480][ T6521] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3561, free_space(entry_count) 2 [ 107.119647][ T6521] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 107.142074][ T6521] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 107.277616][ T6540] loop2: detected capacity change from 0 to 2048 [ 107.360342][ T6540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.489260][ T6551] loop3: detected capacity change from 0 to 16 [ 107.534273][ T6551] erofs: (device loop3): mounted with root inode @ nid 36. [ 107.758791][ T6563] capability: warning: `syz.0.248' uses deprecated v2 capabilities in a way that may be insecure [ 107.891528][ T6569] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.065327][ T27] audit: type=1400 audit(1791883341.163:7): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6577 comm="syz.2.247" name="p" offset=48 [ 108.171385][ T6581] loop0: detected capacity change from 0 to 128 [ 108.194271][ T6584] program syz.4.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.237317][ T6581] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.313834][ T6590] loop4: detected capacity change from 0 to 256 [ 108.321114][ T6581] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.349444][ T6590] exfat: Deprecated parameter 'namecase' [ 108.368558][ T6590] exfat: Deprecated parameter 'namecase' [ 108.374505][ T6590] exfat: Deprecated parameter 'namecase' [ 108.415452][ T6590] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 108.513756][ T5780] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.875993][ T27] audit: type=1326 audit(1791883341.973:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 108.910091][ T27] audit: type=1326 audit(1791883341.973:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 108.936287][ T27] audit: type=1326 audit(1791883341.973:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 108.964683][ T27] audit: type=1326 audit(1791883341.973:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 108.989693][ T27] audit: type=1326 audit(1791883341.973:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 109.014172][ T27] audit: type=1326 audit(1791883341.973:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 109.039055][ T27] audit: type=1326 audit(1791883341.973:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 109.072303][ T6618] loop2: detected capacity change from 0 to 128 [ 109.087000][ T6618] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.097206][ T27] audit: type=1326 audit(1791883341.983:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 109.177272][ T27] audit: type=1326 audit(1791883341.983:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.0.264" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8119e2d9 code=0x7ffc0000 [ 109.243085][ T6618] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 109.263184][ T6623] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 110.375330][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.281'. [ 110.524373][ T6655] loop4: detected capacity change from 0 to 4096 [ 110.537494][ T6655] EXT4-fs: inline encryption not supported [ 110.546800][ T6655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.564423][ T6655] EXT4-fs (loop4): Test dummy encryption mode enabled [ 110.586636][ T6655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.286015][ T6655] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 111.365293][ T5939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.459306][ T5820] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.527442][ T6701] loop2: detected capacity change from 0 to 256 [ 111.554581][ T6703] loop4: detected capacity change from 0 to 64 [ 111.680844][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 111.710923][ T5820] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.749266][ T5820] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.780500][ T5820] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.802223][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.812338][ T5820] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 111.863407][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.901513][ T5820] usb 1-1: config 0 descriptor?? [ 112.368271][ T5820] waltop 0003:172F:0032.0003: unknown main item tag 0x3 [ 112.379725][ T5820] waltop 0003:172F:0032.0003: unbalanced collection at end of report description [ 112.408328][ T5820] waltop: probe of 0003:172F:0032.0003 failed with error -22 [ 112.609271][ T5822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.646164][ T5820] usb 1-1: USB disconnect, device number 3 [ 112.831377][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.843658][ T5822] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 112.865083][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.914710][ T5822] as10x_usb: device has been detected [ 112.933787][ T5822] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 113.005002][ T5822] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 113.088968][ T5822] as10x_usb: error during firmware upload part1 [ 113.097167][ T5822] Registered device Abilis Systems DVB-Titan [ 113.499467][ T5822] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.605564][ T6778] loop0: detected capacity change from 0 to 1024 [ 113.711638][ T5822] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.725452][ T6778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.734046][ T5822] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.748074][ T5822] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.758210][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.770558][ T6763] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.784363][ T5822] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 113.806377][ T6778] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.882497][ T6778] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.314: bg 0: block 112: padding at end of block bitmap is not set [ 113.914132][ T6778] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 113.931427][ T6778] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.931427][ T6778] [ 113.975961][ T970] usb 4-1: USB disconnect, device number 3 [ 113.977862][ T6778] EXT4-fs (loop0): Total free blocks count 0 [ 114.040430][ T6778] EXT4-fs (loop0): Free/Dirty block details [ 114.048289][ T970] Unregistered device Abilis Systems DVB-Titan [ 114.050828][ T6778] EXT4-fs (loop0): free_blocks=0 [ 114.056180][ T970] as10x_usb: device has been disconnected [ 114.080438][ T6778] EXT4-fs (loop0): dirty_blocks=16 [ 114.085691][ T6778] EXT4-fs (loop0): Block reservation details [ 114.115368][ T6778] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 114.200694][ T5820] usb 3-1: USB disconnect, device number 3 [ 114.291605][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.400824][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'. [ 114.851797][ T6822] loop0: detected capacity change from 0 to 1024 [ 114.863598][ T6827] loop3: detected capacity change from 0 to 256 [ 114.913786][ T6827] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 114.936774][ T6822] hfsplus: b-tree write err: -5, ino 17 [ 115.023180][ T42] hfsplus: b-tree write err: -5, ino 4 [ 115.055081][ T42] hfsplus: b-tree write err: -5, ino 17 [ 115.469449][ T5822] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.494722][ T6849] loop0: detected capacity change from 0 to 512 [ 115.579355][ T6849] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.638346][ T6849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 115.677813][ T6849] System zones: 0-2, 18-18, 34-34 [ 115.679659][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 115.691356][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.709426][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.718778][ T5822] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 115.728079][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.749367][ T5822] usb 3-1: Product: syz [ 115.750512][ T6849] EXT4-fs (loop0): 1 orphan inode deleted [ 115.753550][ T5822] usb 3-1: Manufacturer: syz [ 115.770496][ T5822] usb 3-1: SerialNumber: syz [ 115.783454][ T5822] usb 3-1: config 0 descriptor?? [ 115.798473][ T6849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.823016][ T6849] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.995089][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.054920][ T970] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.061714][ T5822] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 116.261378][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.289300][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.315605][ T970] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 116.335479][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.350362][ T970] usb 5-1: config 0 descriptor?? [ 116.365851][ T6877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.409759][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 116.426217][ T5822] imon:send_packet: packet tx failed (-71) [ 116.473129][ T5822] imon 3-1:0.0: panel buttons/knobs setup failed [ 116.487032][ T6877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.596885][ T6877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.655254][ T5822] rc_core: IR keymap rc-imon-pad not found [ 116.661239][ T5822] Registered IR keymap rc-empty [ 116.666209][ T5822] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 116.678338][ T5822] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 116.691138][ T5822] imon:send_packet: packet tx failed (-71) [ 116.720306][ T5822] imon 3-1:0.0: remote input dev register failed [ 116.745131][ T5822] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 116.767950][ T6877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.796611][ T970] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 116.812437][ T970] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 116.830889][ T970] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 116.833129][ T5822] imon 3-1:0.0: unable to initialize intf0, err 0 [ 116.845071][ T970] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 116.845125][ T970] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 116.866018][ T970] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 116.909093][ T5822] imon:imon_probe: failed to initialize context! [ 116.919968][ T5822] imon 3-1:0.0: unable to register, err -19 [ 116.953257][ T5822] usb 3-1: USB disconnect, device number 4 [ 117.067296][ T6877] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.151878][ T6894] loop3: detected capacity change from 0 to 512 [ 117.177520][ T6877] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.193520][ T970] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 32: -71 [ 117.239681][ T970] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -71 [ 117.242227][ T6894] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.338: inode has both inline data and extents flags [ 117.259582][ T970] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 117.264003][ T6877] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.272216][ T970] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 117.292047][ T970] playstation: probe of 0003:054C:0DF2.0004 failed with error -71 [ 117.305181][ T970] usb 5-1: USB disconnect, device number 3 [ 117.353613][ T6877] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.406343][ T6894] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.338: couldn't read orphan inode 15 (err -117) [ 117.434261][ T6894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.560573][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.649148][ T6907] loop3: detected capacity change from 0 to 1024 [ 117.685435][ T6907] EXT4-fs: Ignoring removed orlov option [ 117.700991][ T6907] EXT4-fs: Ignoring removed i_version option [ 117.741974][ T6907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.950864][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.239651][ T6905] loop0: detected capacity change from 0 to 32768 [ 118.352456][ T6905] find_entry called with index >= next_index [ 118.358777][ T6905] find_entry called with index >= next_index [ 118.382559][ T6905] find_entry called with index >= next_index [ 118.391839][ T6905] find_entry called with index >= next_index [ 118.398790][ T6905] find_entry called with index >= next_index [ 118.412028][ T6905] add_index: next_index = 0. Resetting! [ 118.427888][ T6905] find_entry called with index >= next_index [ 118.439411][ T5995] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.457517][ T6905] find_entry called with index >= next_index [ 118.469360][ T6905] find_entry called with index >= next_index [ 118.532978][ T6905] non-latin1 character 0x3ff found in JFS file name [ 118.546015][ T6905] mount with iocharset=utf8 to access [ 118.566303][ T6938] pim6reg: entered allmulticast mode [ 118.612175][ T6937] pim6reg: left allmulticast mode [ 118.651845][ T5995] usb 4-1: config 0 has no interfaces? [ 118.657645][ T5995] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.686995][ T5995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.752651][ T5995] usb 4-1: config 0 descriptor?? [ 118.805429][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 118.927584][ T6948] loop2: detected capacity change from 0 to 256 [ 118.946226][ T6948] exfat: Bad value for 'uid' [ 118.992220][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.023009][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.056038][ T5820] usb 4-1: USB disconnect, device number 4 [ 119.184181][ T6952] loop0: detected capacity change from 0 to 2048 [ 119.218926][ T6952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none. [ 119.236268][ T6952] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.303664][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 119.303679][ T27] audit: type=1800 audit(1791883352.403:31): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.353" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 119.371063][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-00ff07000000. [ 119.412343][ T6946] loop4: detected capacity change from 0 to 32768 [ 119.439795][ T5822] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.493699][ T6946] JBD2: Ignoring recovery information on journal [ 119.564705][ T6946] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.639382][ T5820] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.647044][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 119.681089][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.710192][ T5822] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.724998][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.751792][ T5822] usb 3-1: config 0 descriptor?? [ 119.818551][ T5939] ocfs2: Unmounting device (7,4) on (node local) [ 119.839320][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 119.853427][ T5820] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 119.879536][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 119.896199][ T5820] usb 4-1: Product: syz [ 119.914584][ T5820] usb 4-1: Manufacturer: syz [ 119.920702][ T5820] usb 4-1: SerialNumber: syz [ 119.948099][ T5820] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 119.992988][ T6958] loop0: detected capacity change from 0 to 32768 [ 120.001034][ T5822] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 120.068084][ T6958] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.150777][ T5820] vp7045: USB control message 'out' went wrong. [ 120.157683][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.179794][ T6958] XFS (loop0): Ending clean mount [ 120.184493][ T5820] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 120.204360][ T5820] usb 4-1: media controller created [ 120.219706][ T6972] scsi_dev_info_list_add_str: bad dev info string 'Q^' '(null)' '(null)' [ 120.239448][ T5820] vp7045: USB control message 'out' went wrong. [ 120.247525][ T970] usb 3-1: USB disconnect, device number 5 [ 120.249653][ T5820] dvb-usb: MAC address reading failed. [ 120.331419][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.384302][ T5820] vp7045: USB control message 'out' went wrong. [ 120.393120][ T5820] vp7045: USB control message 'out' went wrong. [ 120.402920][ T5820] vp7045: USB control message 'out' went wrong. [ 120.415040][ T5820] usb 4-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 120.435818][ T5820] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 120.447658][ T5780] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.622356][ T5820] rc_core: IR keymap rc-twinhan1027 not found [ 120.636510][ T5820] Registered IR keymap rc-empty [ 120.660264][ T5820] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 120.697674][ T5820] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 120.757573][ T5820] dvb-usb: schedule remote query interval to 400 msecs. [ 120.774850][ T5820] vp7045: USB control message 'out' went wrong. [ 120.791246][ T5820] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 120.822514][ T5820] usb 4-1: USB disconnect, device number 5 [ 120.950445][ T5768] IPVS: starting estimator thread 0... [ 121.059312][ T6988] IPVS: using max 22 ests per chain, 52800 per kthread [ 121.090102][ T5820] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected. [ 121.248052][ T7000] loop2: detected capacity change from 0 to 512 [ 121.331700][ T7000] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 121.387337][ T7000] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.369: invalid indirect mapped block 256 (level 1) [ 121.429655][ T7000] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.369: invalid indirect mapped block 2683928664 (level 1) [ 121.454054][ T7000] EXT4-fs (loop2): 1 truncate cleaned up [ 121.460514][ T5768] IPVS: starting estimator thread 0... [ 121.461652][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.559883][ T7009] IPVS: using max 22 ests per chain, 52800 per kthread [ 121.568500][ T7000] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 121.596213][ T7000] EXT4-fs (loop2): can't enable nombcache during remount [ 121.671005][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.709460][ T5820] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.875328][ T7027] loop4: detected capacity change from 0 to 256 [ 121.889382][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 121.899916][ T5820] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 121.929494][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.957908][ T5820] usb 4-1: Product: syz [ 121.968033][ T5820] usb 4-1: Manufacturer: syz [ 121.985892][ T5820] usb 4-1: SerialNumber: syz [ 122.001031][ T5820] usb 4-1: config 0 descriptor?? [ 122.015574][ T5820] gspca_main: se401-2.14.0 probing 047d:5003 [ 122.222343][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 122.254876][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.387'. [ 122.278254][ T7040] erspan0: entered promiscuous mode [ 122.285203][ T7040] gretap0: entered promiscuous mode [ 122.438373][ T5820] gspca_se401: ExtraFeatures: 86 [ 122.443925][ T5820] gspca_se401: Too many frame sizes [ 122.741025][ T8] usb 4-1: USB disconnect, device number 6 [ 122.997954][ T7067] loop0: detected capacity change from 0 to 256 [ 123.039702][ T7067] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 123.318785][ T7059] loop4: detected capacity change from 0 to 32768 [ 123.959404][ T7101] loop3: detected capacity change from 0 to 256 [ 124.579069][ T7124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 124.802829][ T7107] loop4: detected capacity change from 0 to 32768 [ 124.856740][ T7107] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.132093][ T7107] XFS (loop4): Ending clean mount [ 125.222389][ T7156] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 125.314287][ T7154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.326504][ T5939] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.441656][ T7160] loop0: detected capacity change from 0 to 128 [ 125.456291][ T7160] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 125.587145][ T7154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.706192][ T7164] loop0: detected capacity change from 0 to 256 [ 125.764710][ T7154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.801274][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 125.926124][ T7154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.974754][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.186661][ T7154] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.218760][ T7154] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.276794][ T7154] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.304845][ T7154] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.614946][ T7176] loop4: detected capacity change from 0 to 32768 [ 126.665979][ T7176] find_entry called with index >= next_index [ 126.672846][ T7176] find_entry called with index >= next_index [ 126.684530][ T7176] find_entry called with index >= next_index [ 126.693281][ T7176] find_entry called with index >= next_index [ 126.703012][ T7176] find_entry called with index >= next_index [ 126.709385][ T7176] add_index: next_index = 0. Resetting! [ 126.720485][ T7176] find_entry called with index >= next_index [ 126.727272][ T7176] find_entry called with index >= next_index [ 126.734786][ T7176] find_entry called with index >= next_index [ 126.775319][ T7176] non-latin1 character 0x3ff found in JFS file name [ 126.798714][ T7176] mount with iocharset=utf8 to access [ 126.876692][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.027986][ T7204] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.460'. [ 127.039834][ T7204] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.460'. [ 127.171218][ T7211] loop2: detected capacity change from 0 to 64 [ 127.589489][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.791641][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 127.798261][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 127.807591][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.826300][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 127.833439][ T8] pvrusb2: ********** [ 127.837409][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 127.847965][ T8] pvrusb2: Important functionality might not be entirely working. [ 127.863811][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 127.876858][ T8] pvrusb2: ********** [ 128.026759][ T2322] pvrusb2: Invalid write control endpoint [ 128.071696][ T2322] pvrusb2: Invalid write control endpoint [ 128.077486][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 128.088925][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 128.096919][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 128.107085][ T2322] pvrusb2: Device being rendered inoperable [ 128.113472][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 128.129462][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 128.141294][ T2322] pvrusb2: Attached sub-driver cx25840 [ 128.147124][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 128.158158][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 128.259842][ T7215] pvrusb2: Attempted to execute control transfer when device not ok [ 128.269355][ T8] usb 3-1: USB disconnect, device number 6 [ 128.457915][ T7222] loop3: detected capacity change from 0 to 32768 [ 128.486055][ T7222] find_entry called with index >= next_index [ 128.492529][ T7222] find_entry called with index >= next_index [ 128.500402][ T7222] find_entry called with index >= next_index [ 128.506431][ T7222] find_entry called with index >= next_index [ 128.512964][ T7222] find_entry called with index >= next_index [ 128.518981][ T7222] add_index: next_index = 0. Resetting! [ 128.525320][ T7222] find_entry called with index >= next_index [ 128.531635][ T7222] find_entry called with index >= next_index [ 128.537726][ T7222] find_entry called with index >= next_index [ 128.553645][ T7222] non-latin1 character 0x3ff found in JFS file name [ 128.561277][ T7222] mount with iocharset=utf8 to access [ 129.251419][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.425380][ T7239] loop3: detected capacity change from 0 to 1024 [ 129.474527][ T7239] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 129.514875][ T7239] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 129.530891][ T7239] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.475: Failed to acquire dquot type 0 [ 129.546747][ T7239] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 129.567826][ T7239] EXT4-fs (loop3): 1 truncate cleaned up [ 129.575013][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.583628][ T7248] loop4: detected capacity change from 0 to 128 [ 129.620700][ T7239] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 129.631386][ T7239] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 129.641642][ T7239] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.475: Failed to acquire dquot type 0 [ 129.648882][ T7248] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 129.751425][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.754388][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.907915][ T27] audit: type=1800 audit(1791883363.003:32): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.480" name="dbroot" dev="configfs" ino=13440 res=0 errno=0 [ 129.909824][ T7254] loop2: detected capacity change from 0 to 1024 [ 129.953367][ T7254] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 129.969480][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 129.974160][ T7254] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.978248][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 130.003962][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.014923][ T7254] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: inode #32: comm syz.2.481: iget: special inode unallocated [ 130.052162][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 130.055036][ T7254] EXT4-fs (loop2): no journal found [ 130.073922][ T8] pvrusb2: ********** [ 130.077960][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 130.079997][ T7254] EXT4-fs (loop2): can't get journal size [ 130.110252][ T7254] EXT4-fs (loop2): filesystem is read-only [ 130.120301][ T8] pvrusb2: Important functionality might not be entirely working. [ 130.128780][ T7254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.142827][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 130.165734][ T8] pvrusb2: ********** [ 130.251958][ T2322] pvrusb2: Invalid write control endpoint [ 130.275103][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.331227][ T2322] pvrusb2: Invalid write control endpoint [ 130.337020][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 130.379888][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 130.387483][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 130.419008][ T7270] loop2: detected capacity change from 0 to 128 [ 130.426024][ T2322] pvrusb2: Device being rendered inoperable [ 130.439433][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 130.446548][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 130.469417][ T2322] pvrusb2: Attached sub-driver cx25840 [ 130.479653][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 130.490694][ T7270] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 130.522719][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 130.544715][ T7244] pvrusb2: Attempted to execute control transfer when device not ok [ 130.570853][ T5995] usb 1-1: USB disconnect, device number 4 [ 130.629095][ T7275] loop4: detected capacity change from 0 to 1024 [ 130.664596][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 130.760748][ T7279] hsr0: entered promiscuous mode [ 131.145644][ T8] kernel write not supported for file /media4 (pid: 8 comm: kworker/0:0) [ 131.166490][ T7295] netlink: 104 bytes leftover after parsing attributes in process `syz.4.500'. [ 131.337584][ T7304] loop4: detected capacity change from 0 to 1024 [ 131.641316][ T7316] tap0: tun_chr_ioctl cmd 1074025677 [ 131.645773][ T7318] loop0: detected capacity change from 0 to 1024 [ 131.653277][ T7316] tap0: linktype set to 6 [ 131.691992][ T7318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.716741][ T7323] loop4: detected capacity change from 0 to 1024 [ 131.720551][ T7318] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.896855][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.116834][ T7335] capability: warning: `syz.3.516' uses 32-bit capabilities (legacy support in use) [ 132.139919][ T7335] program syz.3.516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.295667][ T7345] loop2: detected capacity change from 0 to 1024 [ 132.302830][ T7341] input: syz1 as /devices/virtual/input/input12 [ 132.320863][ T7345] EXT4-fs: Ignoring removed orlov option [ 132.408378][ T7345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.618057][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.877257][ T7362] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.899640][ T7362] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 132.923673][ T7362] REISERFS (device loop4): using ordered data mode [ 132.928849][ T8] kernel write not supported for file /media4 (pid: 8 comm: kworker/0:0) [ 132.932155][ T7362] reiserfs: using flush barriers [ 132.947071][ T7362] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.964560][ T7362] REISERFS (device loop4): checking transaction log (loop4) [ 132.975986][ T7362] REISERFS (device loop4): Using r5 hash to sort names [ 132.990310][ T7362] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 133.060172][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067151][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.125253][ T7362] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 133.180849][ T7362] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 133.194381][ T7379] overlay: filesystem on ./file0 is read-only [ 133.269524][ T7362] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 133.298089][ T7381] REISERFS error (device loop4): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 133.317381][ T7381] REISERFS (device loop4): Remounting filesystem read-only [ 133.325235][ T7381] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 133.492139][ T7389] Illegal XDP return value 5 on prog (id 36) dev N/A, expect packet loss! [ 133.576667][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 133.639505][ T7396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 133.771957][ T7400] netlink: 104 bytes leftover after parsing attributes in process `syz.3.545'. [ 133.859339][ T5853] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 133.894375][ T7391] set_capacity_and_notify: 1 callbacks suppressed [ 133.894390][ T7391] loop2: detected capacity change from 0 to 32768 [ 133.936222][ T7391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.540 (7391) [ 133.942237][ T7406] loop4: detected capacity change from 0 to 64 [ 134.018323][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 134.022963][ T7391] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.033225][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 134.059582][ T7391] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 134.085169][ T5853] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 134.094946][ T7391] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 134.115094][ T7391] BTRFS info (device loop2): use lzo compression, level 0 [ 134.125474][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.130477][ T7391] BTRFS info (device loop2): force clearing of disk cache [ 134.149604][ T7391] BTRFS info (device loop2): turning on sync discard [ 134.166715][ T5853] usb 1-1: Product: syz [ 134.167207][ T7391] BTRFS warning (device loop2): excessive commit interval 43283 [ 134.189410][ T5853] usb 1-1: Manufacturer: syz [ 134.194059][ T5853] usb 1-1: SerialNumber: syz [ 134.215017][ T7391] BTRFS info (device loop2): enabling ssd optimizations [ 134.229413][ T7391] BTRFS info (device loop2): using spread ssd allocation scheme [ 134.256553][ T7391] BTRFS info (device loop2): not using ssd optimizations [ 134.273768][ T7391] BTRFS info (device loop2): not using spread ssd allocation scheme [ 134.286641][ T7391] BTRFS info (device loop2): using free space tree [ 134.452165][ T7391] BTRFS info (device loop2): rebuilding free space tree [ 134.484774][ T5853] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 134.541681][ T5853] usb 1-1: USB disconnect, device number 5 [ 134.587892][ T5853] usblp0: removed [ 134.877624][ T5778] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.102352][ T7446] loop0: detected capacity change from 0 to 1024 [ 135.151532][ T7448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.159371][ T7448] IPv6: NLM_F_CREATE should be set when creating new route [ 135.166661][ T7448] IPv6: NLM_F_CREATE should be set when creating new route [ 135.201783][ T7448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.226497][ T7446] hfsplus: xattr searching failed [ 135.244489][ T7448] Zero length message leads to an empty skb [ 135.262171][ T7446] hfsplus: xattr searching failed [ 135.428562][ T7452] loop2: detected capacity change from 0 to 1024 [ 135.654224][ T7459] loop3: detected capacity change from 0 to 1024 [ 135.682629][ T7459] EXT4-fs: Ignoring removed orlov option [ 135.765441][ T7459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.007838][ T7473] program syz.0.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.064581][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.183274][ T5853] wiimote 0005:057E:0330.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 136.193853][ T7475] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 136.199490][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.205289][ T5853] wiimote 0005:057E:0330.0005: New device registered [ 136.243741][ T7461] loop2: detected capacity change from 0 to 32768 [ 136.266709][ T7479] loop3: detected capacity change from 0 to 512 [ 136.297501][ T7479] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.360860][ T7461] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.439263][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 136.448071][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 136.484763][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.491779][ T7491] loop0: detected capacity change from 0 to 1024 [ 136.533538][ T7476] wiimote 0005:057E:0330.0005: Device removed [ 136.550031][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.565508][ T7461] XFS (loop2): Ending clean mount [ 136.575777][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.601964][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.625624][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.651709][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.693938][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'. [ 136.710817][ T5778] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.900676][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 136.906352][ T8] usbtmc 5-1:16.0: can't read capabilities [ 137.026911][ T7501] loop0: detected capacity change from 0 to 1024 [ 137.046555][ T7501] EXT4-fs: Ignoring removed bh option [ 137.057672][ T7501] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 137.099144][ T7501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.146566][ T8] usb 5-1: USB disconnect, device number 4 [ 137.223417][ T5780] EXT4-fs error (device loop0): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /150/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 137.253081][ T5780] EXT4-fs (loop0): Remounting filesystem read-only [ 137.294209][ T5853] wiimote 0005:057E:0330.0005: detected device: Nintendo Wii Remote Plus (Gen 2) [ 137.347703][ T5853] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input14 [ 137.400754][ T5853] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input15 [ 137.433386][ T5853] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input13 [ 137.596542][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.778983][ T7510] loop2: detected capacity change from 0 to 32768 [ 138.205684][ T7515] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x024dac45, utbl_chksum : 0xe619d30d) [ 138.444169][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.470182][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.482713][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.503441][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.512521][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.529895][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.758428][ T7530] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.861080][ T27] audit: type=1800 audit(1791883371.963:33): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.592" name="b_vendor_code" dev="configfs" ino=13936 res=0 errno=0 [ 138.911623][ T7516] chnl_net:caif_netlink_parms(): no params data found [ 139.030595][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.038509][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.064332][ T7516] bridge_slave_0: entered allmulticast mode [ 139.080186][ T7516] bridge_slave_0: entered promiscuous mode [ 139.089074][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.102579][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.119110][ T7516] bridge_slave_1: entered allmulticast mode [ 139.132173][ T7516] bridge_slave_1: entered promiscuous mode [ 139.215030][ T7516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.245996][ T7516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.323460][ T7516] team0: Port device team_slave_0 added [ 139.336813][ T7516] team0: Port device team_slave_1 added [ 139.370430][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.377663][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.413313][ T7516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.427595][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.440157][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.492777][ T7516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.518595][ T7549] set_capacity_and_notify: 1 callbacks suppressed [ 139.518610][ T7549] loop2: detected capacity change from 0 to 40427 [ 139.561807][ T5995] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.573286][ T7549] F2FS-fs (loop2): heap/no_heap options were deprecated [ 139.592487][ T7516] hsr_slave_0: entered promiscuous mode [ 139.599891][ T7516] hsr_slave_1: entered promiscuous mode [ 139.606053][ T7516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.613164][ T7549] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.614129][ T7516] Cannot create hsr debugfs directory [ 139.714749][ T7549] F2FS-fs (loop2): Start checkpoint disabled! [ 139.729578][ T7549] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 139.759568][ T5995] usb 5-1: Using ep0 maxpacket: 16 [ 139.778819][ T7549] syz.2.598: attempt to access beyond end of device [ 139.778819][ T7549] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 139.804646][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.814677][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.846381][ T5787] Bluetooth: hci3: adv larger than maximum supported [ 139.846464][ T5787] Bluetooth: hci3: Malformed LE Event: 0x0d [ 139.869690][ T5995] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.877511][ T5995] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 139.906554][ T5995] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 139.914525][ T5995] usb 5-1: can't read configurations, error -71 [ 139.981456][ T11] kworker/u4:0: attempt to access beyond end of device [ 139.981456][ T11] loop2: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 139.995872][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.003146][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.010975][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.018079][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.025396][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.107088][ T7516] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.121311][ T7516] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.148567][ T7516] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.178194][ T7516] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.303402][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.340256][ T7516] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.362723][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.369951][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.398076][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.405278][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.436404][ T7516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.447780][ T7516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.580695][ T5787] Bluetooth: hci0: command tx timeout [ 140.605894][ T7564] loop4: detected capacity change from 0 to 4096 [ 140.681542][ T7564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.774420][ T7570] kvm: kvm [7566]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 140.794325][ T7516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.080521][ T5939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.345446][ T7516] veth0_vlan: entered promiscuous mode [ 141.368789][ T7516] veth1_vlan: entered promiscuous mode [ 141.419887][ T7516] veth0_macvtap: entered promiscuous mode [ 141.436857][ T7516] veth1_macvtap: entered promiscuous mode [ 141.467104][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.491412][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.510506][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.526864][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.536126][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.611'. [ 141.546123][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.562451][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.579359][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.592237][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.603999][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.633649][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.648525][ T7594] bonding: bond0 is being created... [ 141.659241][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.669090][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.681039][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.696678][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.708412][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.724461][ T7516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.735223][ T7516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.747552][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.759113][ T7594] bonding: bond0 already exists [ 141.767628][ T7516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.777852][ T7516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.792832][ T7516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.801971][ T7516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.930349][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.945491][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.984630][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.993282][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.180695][ T7598] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 142.349104][ T7609] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.559457][ T5995] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 142.651819][ T5787] Bluetooth: hci0: command tx timeout [ 142.753017][ T5995] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 142.762283][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.770385][ T5995] usb 3-1: Product: syz [ 142.774563][ T5995] usb 3-1: Manufacturer: syz [ 142.779232][ T5995] usb 3-1: SerialNumber: syz [ 142.788187][ T5995] usb 3-1: config 0 descriptor?? [ 142.919379][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 143.014330][ T5995] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 007 [ 143.109636][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 143.116336][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.128270][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.137698][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.147694][ T9] usb 6-1: config 0 descriptor?? [ 143.207590][ T7607] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read) [ 143.217763][ T5995] usb 3-1: USB disconnect, device number 7 [ 143.387645][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 143.605556][ T5853] usb 6-1: USB disconnect, device number 2 [ 144.031748][ T7637] binder: 7635:7637 ioctl c0306201 200000004a40 returned -11 [ 144.406121][ T7651] loop2: detected capacity change from 0 to 2048 [ 144.480229][ T7651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.518784][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.636'. [ 144.729567][ T5787] Bluetooth: hci0: command tx timeout [ 144.815556][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 145.219438][ T5995] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.309583][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.329070][ T7693] loop3: detected capacity change from 0 to 512 [ 145.367502][ T7693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.381611][ T7693] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.411366][ T5995] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.429360][ T5995] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.439751][ T5995] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.448891][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.463904][ T7669] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 145.464200][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.477609][ T5995] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 145.519582][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 145.540902][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.567433][ T9] usb 5-1: config 0 has no interface number 0 [ 145.591952][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.617739][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.636375][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 145.646289][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.659831][ T9] usb 5-1: config 0 descriptor?? [ 145.722491][ T968] usb 6-1: USB disconnect, device number 3 [ 146.096882][ T7702] loop3: detected capacity change from 0 to 32768 [ 146.106547][ T7702] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.656 (7702) [ 146.134217][ T7702] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 146.144655][ T7702] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 146.154204][ T7702] BTRFS info (device loop3): enabling ssd optimizations [ 146.162162][ T7702] BTRFS info (device loop3): not using ssd optimizations [ 146.169691][ T7702] BTRFS info (device loop3): turning off barriers [ 146.176251][ T7702] BTRFS info (device loop3): use no compression [ 146.183276][ T7702] BTRFS info (device loop3): using free space tree [ 146.340510][ T9] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0006/input/input16 [ 146.460742][ T5779] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 146.535612][ T9] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0006/input/input17 [ 146.631792][ T9] uclogic 0003:28BD:0071.0006: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 146.711987][ T9] usb 5-1: USB disconnect, device number 7 [ 146.740951][ T5772] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop3 scanned by udevd (5772) [ 146.814094][ T5787] Bluetooth: hci0: command tx timeout [ 146.823275][ T7727] fido_id[7727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 146.866518][ T7730] kAFS: bad VL server IP address [ 147.117664][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 147.284331][ T27] audit: type=1400 audit(1791883380.383:34): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7737 comm="syz.4.665" name="unknown" offset=16 [ 147.429530][ T7723] loop5: detected capacity change from 0 to 32768 [ 147.520088][ T7723] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 147.641695][ T7723] XFS (loop5): Ending clean mount [ 147.724686][ T7516] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 147.780940][ T5822] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.960952][ T7762] loop4: detected capacity change from 0 to 2048 [ 147.983320][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 147.997326][ T5822] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 148.020293][ T5822] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.044188][ T5822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.055559][ T5822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.073031][ T7762] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 148.083310][ T7762] UDF-fs: Scanning with blocksize 512 failed [ 148.089746][ T5822] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.115196][ T7762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.126727][ T5822] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.136179][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.378240][ T5822] usb 4-1: GET_CAPABILITIES returned 0 [ 148.394864][ T5822] usbtmc 4-1:16.0: can't read capabilities [ 148.490887][ T7759] loop2: detected capacity change from 0 to 32768 [ 148.557988][ T7759] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 148.649533][ T9] usb 4-1: USB disconnect, device number 7 [ 148.740934][ T7759] XFS (loop2): Ending clean mount [ 148.874370][ T5778] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 149.246694][ T7786] loop4: detected capacity change from 0 to 1024 [ 149.281059][ T7786] EXT4-fs: Ignoring removed nobh option [ 149.287888][ T7786] EXT4-fs: Ignoring removed bh option [ 149.304714][ T7786] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 149.376094][ T7786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 149.408134][ T7786] System zones: 0-1, 3-12 [ 149.431855][ T7786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.527014][ T7786] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #12: block 7: comm syz.4.679: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 149.559586][ T7786] EXT4-fs (loop4): Remounting filesystem read-only [ 149.639989][ T5939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.769622][ T7622] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.959306][ T7622] usb 3-1: Using ep0 maxpacket: 8 [ 149.968323][ T7622] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 149.976900][ T7622] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.997247][ T7622] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.017612][ T7622] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.040633][ T7622] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.074483][ T7622] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.094710][ T7622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.165567][ T7818] loop5: detected capacity change from 0 to 512 [ 150.336054][ T7622] usb 3-1: GET_CAPABILITIES returned 0 [ 150.354593][ T7622] usbtmc 3-1:16.0: can't read capabilities [ 150.524324][ T7825] loop4: detected capacity change from 0 to 4096 [ 150.570966][ T7825] NILFS (loop4): invalid segment: Checksum error in segment payload [ 150.581894][ T7825] NILFS (loop4): trying rollback from an earlier position [ 150.594371][ T7622] usb 3-1: USB disconnect, device number 8 [ 150.656446][ T7825] NILFS (loop4): recovery complete [ 150.687585][ T7828] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.744369][ T7832] loop3: detected capacity change from 0 to 256 [ 150.770511][ T7832] exfat: Deprecated parameter 'utf8' [ 150.775873][ T7832] exfat: Deprecated parameter 'utf8' [ 150.828777][ T7832] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 150.831102][ T7833] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 4096 [ 150.893528][ T7833] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=12) [ 150.946260][ T7833] Remounting filesystem read-only [ 150.955535][ T7833] NILFS (loop4): error -5 cleaning segments [ 151.228121][ T7835] loop5: detected capacity change from 0 to 40427 [ 151.243788][ T7835] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 151.255690][ T7835] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 151.265615][ T7835] F2FS-fs (loop5): invalid crc value [ 151.273801][ T7835] F2FS-fs (loop5): Found nat_bits in checkpoint [ 151.286471][ T7833] NILFS (loop4): error -30 cleaning segments [ 151.408437][ T7840] loop2: detected capacity change from 0 to 1024 [ 151.410653][ T5939] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 151.449349][ T7835] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 151.456451][ T7835] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 151.461401][ T7840] hfsplus: bad catalog entry type [ 151.469569][ T5939] NILFS (loop4): discard dirty page: offset=0, ino=12 [ 151.469592][ T5939] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 151.469609][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.469626][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.469642][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.470269][ T5939] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 151.529509][ T5939] NILFS (loop4): discard dirty block: blocknr=5, size=1024 [ 151.537218][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.548210][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.570339][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.585569][ T5939] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 151.593868][ T42] hfsplus: b-tree write err: -5, ino 25 [ 151.599252][ T5939] NILFS (loop4): discard dirty block: blocknr=6, size=1024 [ 151.602083][ T42] hfsplus: b-tree write err: -5, ino 4 [ 151.606607][ T5939] NILFS (loop4): discard dirty block: blocknr=7, size=1024 [ 151.629585][ T5939] NILFS (loop4): discard dirty block: blocknr=8, size=1024 [ 151.631968][ T42] hfsplus: b-tree write err: -5, ino 2 [ 151.639360][ T5939] NILFS (loop4): discard dirty block: blocknr=9, size=1024 [ 151.650464][ T7516] syz-executor: attempt to access beyond end of device [ 151.650464][ T7516] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.653415][ T5939] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 151.682004][ T5939] NILFS (loop4): discard dirty block: blocknr=11, size=1024 [ 151.691437][ T7516] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 151.709270][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.724537][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.742331][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 151.770393][ T5939] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 151.777121][ T5939] NILFS (loop4): discard dirty block: blocknr=12, size=1024 [ 151.801952][ T5939] NILFS (loop4): discard dirty block: blocknr=13, size=1024 [ 151.819079][ T7846] binder: 7844:7846 ioctl c0306201 200000004a40 returned -11 [ 151.827288][ T5939] NILFS (loop4): discard dirty block: blocknr=14, size=1024 [ 151.841399][ T5939] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 152.456206][ T7847] loop3: detected capacity change from 0 to 32768 [ 152.505097][ T7847] (syz.3.707,7847,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.557854][ T7847] (syz.3.707,7847,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.636866][ T7847] JBD2: Ignoring recovery information on journal [ 152.737745][ T27] audit: type=1326 audit(1791883385.833:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 152.775093][ T27] audit: type=1326 audit(1791883385.833:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 152.799475][ T27] audit: type=1326 audit(1791883385.853:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 152.810904][ T7847] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.823409][ T27] audit: type=1326 audit(1791883385.863:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 152.823453][ T27] audit: type=1326 audit(1791883385.863:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 152.823490][ T27] audit: type=1326 audit(1791883385.863:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 153.006542][ T27] audit: type=1326 audit(1791883385.863:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 153.039919][ T27] audit: type=1326 audit(1791883385.863:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 153.102504][ T27] audit: type=1326 audit(1791883385.863:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ffd9e2d9 code=0x7ffc0000 [ 153.167264][ T27] audit: type=1326 audit(1791883385.863:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f84ffd9d147 code=0x7ffc0000 [ 153.168680][ T7847] (syz.3.707,7847,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 153.215670][ T7883] netlink: 48 bytes leftover after parsing attributes in process `syz.5.720'. [ 153.239951][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 153.385838][ T5779] ocfs2: Unmounting device (7,3) on (node local) [ 153.788639][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 153.859269][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.065093][ T9] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 154.082609][ T9] usb 6-1: config 0 has no interface number 0 [ 154.105696][ T9] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.156649][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 154.202347][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.231319][ T9] usb 6-1: Product: syz [ 154.251659][ T9] usb 6-1: Manufacturer: syz [ 154.271000][ T9] usb 6-1: SerialNumber: syz [ 154.294487][ T9] usb 6-1: config 0 descriptor?? [ 154.344628][ T9] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 154.419182][ C1] sched: RT throttling activated [ 154.514451][ T7892] loop2: detected capacity change from 0 to 131072 [ 154.535553][ T7892] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 154.543903][ T7892] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 154.558447][ T9] usb 6-1: USB disconnect, device number 4 [ 154.565526][ T7892] F2FS-fs (loop2): invalid crc value [ 154.583450][ T9] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 154.586657][ T7892] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.643143][ T7892] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 154.650371][ T7892] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 155.279593][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.479266][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 155.487315][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 155.509727][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.565285][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 155.591400][ T9] pvrusb2: ********** [ 155.595462][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 155.619334][ T9] pvrusb2: Important functionality might not be entirely working. [ 155.627557][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 155.643717][ T9] pvrusb2: ********** [ 155.747861][ T2322] pvrusb2: Invalid write control endpoint [ 155.954269][ T7622] usb 4-1: USB disconnect, device number 8 [ 155.982787][ T2322] pvrusb2: Invalid write control endpoint [ 155.996875][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 156.012067][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 156.028917][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 156.045919][ T2322] pvrusb2: Device being rendered inoperable [ 156.052019][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 156.064631][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 156.076611][ T2322] pvrusb2: Attached sub-driver cx25840 [ 156.092157][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 156.103603][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 156.679496][ T968] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.765728][ T7974] format_corename failed [ 156.781724][ T7974] Aborting core [ 156.871339][ T968] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.883741][ T968] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 156.908074][ T968] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.917681][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.935776][ T7964] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.950356][ T7971] loop4: detected capacity change from 0 to 40427 [ 156.964248][ T968] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 156.991871][ T7971] F2FS-fs (loop4): invalid crc value [ 157.014131][ T7971] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.154790][ T7971] F2FS-fs (loop4): Start checkpoint disabled! [ 157.229913][ T7971] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 157.322789][ T7622] usb 3-1: USB disconnect, device number 9 [ 157.519479][ T1124] kworker/u4:5: attempt to access beyond end of device [ 157.519479][ T1124] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.555196][ T1124] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 157.596329][ T7989] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 158.225135][ T8003] loop2: detected capacity change from 0 to 32768 [ 158.266914][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 158.266929][ T27] audit: type=1800 audit(1791883391.363:53): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.769" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 158.628602][ T8012] loop5: detected capacity change from 0 to 4096 [ 158.699501][ T8012] NILFS (loop5): invalid segment: Checksum error in segment payload [ 158.718450][ T8012] NILFS (loop5): trying rollback from an earlier position [ 158.792125][ T8003] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 158.792125][ T8003] [ 158.810594][ T8012] NILFS (loop5): recovery complete [ 158.815543][ T8003] ERROR: (device loop2): remounting filesystem as read-only [ 158.872156][ T8013] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.995320][ T8012] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 4096 [ 158.998736][ T8015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.774'. [ 159.014942][ T5778] ------------[ cut here ]------------ [ 159.021060][ T5778] kernel BUG at fs/jfs/inode.c:175! [ 159.026361][ T8012] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=12) [ 159.038360][ T5778] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 159.044467][ T5778] CPU: 0 PID: 5778 Comm: syz-executor Not tainted syzkaller #0 [ 159.052017][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.062078][ T5778] RIP: 0010:jfs_evict_inode+0x424/0x430 [ 159.067639][ T5778] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 66 3c df fe e9 16 fe ff ff e8 4c 5b 86 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54 [ 159.087341][ T5778] RSP: 0018:ffffc90004727b08 EFLAGS: 00010293 [ 159.093425][ T5778] RAX: ffffffff83013564 RBX: ffff88805b328d70 RCX: ffff8880221c8000 [ 159.101407][ T5778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805b328d70 [ 159.109472][ T5778] RBP: 0000000000000001 R08: ffffffff91ff1677 R09: 1ffffffff23fe2ce [ 159.110205][ T8012] Remounting filesystem read-only [ 159.117446][ T5778] R10: dffffc0000000000 R11: fffffbfff23fe2cf R12: dffffc0000000000 [ 159.117462][ T5778] R13: dffffc0000000000 R14: ffff88805b3289f8 R15: ffff88805b328da8 [ 159.117476][ T5778] FS: 000055557c154500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 159.124751][ T8012] NILFS (loop5): error -5 cleaning segments [ 159.130435][ T5778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.130451][ T5778] CR2: 000055557c16fa38 CR3: 0000000061145000 CR4: 00000000003506f0 [ 159.130465][ T5778] Call Trace: [ 159.130472][ T5778] [ 159.130479][ T5778] ? jfs_write_inode+0x220/0x220 [ 159.130500][ T5778] evict+0x4b7/0x8a0 [ 159.130518][ T5778] ? xa_load+0x64/0x2e0 [ 159.130542][ T5778] ? proc_nr_inodes+0x230/0x230 [ 159.191882][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 159.197118][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 159.202341][ T5778] evict_inodes+0x64a/0x6e0 [ 159.206861][ T5778] ? clear_inode+0x150/0x150 [ 159.211463][ T5778] ? dentry_kill+0xb8/0x290 [ 159.215990][ T5778] generic_shutdown_super+0x97/0x2b0 [ 159.221290][ T5778] kill_block_super+0x44/0x90 [ 159.225989][ T5778] deactivate_locked_super+0x97/0x100 [ 159.231377][ T5778] cleanup_mnt+0x3d7/0x460 [ 159.235809][ T5778] task_work_run+0x1d4/0x260 [ 159.240417][ T5778] ? task_work_cancel+0x220/0x220 [ 159.245464][ T5778] ? exit_to_user_mode_loop+0x3b/0x110 [ 159.250935][ T5778] exit_to_user_mode_loop+0xe6/0x110 [ 159.256223][ T5778] exit_to_user_mode_prepare+0xee/0x180 [ 159.261765][ T5778] syscall_exit_to_user_mode+0x1a/0x50 [ 159.267219][ T5778] do_syscall_64+0x61/0xb0 [ 159.271625][ T5778] ? clear_bhb_loop+0x40/0x90 [ 159.276294][ T5778] ? clear_bhb_loop+0x40/0x90 [ 159.280968][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.286860][ T5778] RIP: 0033:0x7f3fd3f9f517 [ 159.291282][ T5778] Code: a2 c7 05 dc 61 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 159.310883][ T5778] RSP: 002b:00007ffe4e5e0f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 159.319300][ T5778] RAX: 0000000000000000 RBX: 00007f3fd4034ccb RCX: 00007f3fd3f9f517 [ 159.327262][ T5778] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4e5e1020 [ 159.335221][ T5778] RBP: 00007ffe4e5e1020 R08: 00007ffe4e5e2020 R09: 00000000ffffffff [ 159.343186][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4e5e20b0 [ 159.351155][ T5778] R13: 00007f3fd4034ccb R14: 0000000000026c35 R15: 00007ffe4e5e20f0 [ 159.359124][ T5778] [ 159.362142][ T5778] Modules linked in: [ 159.377370][ T5778] ---[ end trace 0000000000000000 ]--- [ 159.383050][ T5778] RIP: 0010:jfs_evict_inode+0x424/0x430 [ 159.388725][ T5778] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 66 3c df fe e9 16 fe ff ff e8 4c 5b 86 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54 [ 159.409055][ T5778] RSP: 0018:ffffc90004727b08 EFLAGS: 00010293 [ 159.415410][ T5778] RAX: ffffffff83013564 RBX: ffff88805b328d70 RCX: ffff8880221c8000 [ 159.423701][ T5778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805b328d70 [ 159.431938][ T5778] RBP: 0000000000000001 R08: ffffffff91ff1677 R09: 1ffffffff23fe2ce [ 159.440762][ T5778] R10: dffffc0000000000 R11: fffffbfff23fe2cf R12: dffffc0000000000 [ 159.448794][ T5778] R13: dffffc0000000000 R14: ffff88805b3289f8 R15: ffff88805b328da8 [ 159.457246][ T5778] FS: 000055557c154500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 159.466515][ T5778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.473942][ T5778] CR2: 00007f0e64beb9c0 CR3: 0000000061145000 CR4: 00000000003526f0 [ 159.485711][ T5778] Kernel panic - not syncing: Fatal exception [ 159.491940][ T5778] Kernel Offset: disabled [ 159.496250][ T5778] Rebooting in 86400 seconds..