last executing test programs: 1m14.038226422s ago: executing program 3 (id=4): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e6e742c6e6f636173652c696f636861727365743d6575632d6a70000000000000000174653d312c73686f72746e616d653d6c6f7765722c757466383d302c696f636861727365743d6d6163696e7569742c757365667265652c636f6465706167653d3835302c6e6f6e756d7461496c3d302c726f6469722c6e6f6e756d7461696c3d302c757466383d302c00c322b162cd61df25b895def9502bee9e95009810e8069b28a1a7742c279b79301dcd7b7d3dade17faa92b0e638d8c3dc7702220fa1b0bf063436e87dd73b4ad42b74442db1876e699c757a57781457cf16140ae4101b69cd03670cd0f1b9894365143b2305ed3dc0ad22ee05d0725dab07a69e81dcbee809d71a613dab596c7b53341759ed5a2cdab6d8661110d7a1d2e30704bdf3584a5a8be23d241651970f8dda74906ceae015c894f9caede8bb661b19"], 0x1, 0x363, &(0x7f0000000c80)="$eJzs3U9oHFUYAPBvM/lbaJODUBSE0ZugoX/woKeUkkIxF5Wl6kFcbKqSjYUsLqaHbuNFPAoe9eRFPOjBQ88iKOLNg1crSFU8aG8Fi092d3Z3trtJU2Fbg7/fYfnyvffNe7OZZF8m2ZdXVmLj/ExcuHHjeszPV2J65fRK3KzEUmTRcyVGzY7JAQAHw82U4s/Utc+SyoSnBABMWOf1/7XDpcw7X+/VP3n1B4ADr/j5f2GvPvO7NVycyJQAgAkbuf//6FDz7PCv+qdLfxUAABxUz7/40jOn1iKey/P5iM13m9VmNZ4etJ+6EG9EPdbjWCzGrYjuQqH9UOk8njm7tnosz/NW/LIU1XZFsxqx2WpWuyuFU1mnfi6Ox2IsFfXFaiOllJ35Ym31eN4REVdanfFjs9KszsShYvwfD8V6nIg8Hhipjzi7tnoiLw5Q3ezVtyJ2Bvct2vNfjsX4/tW4GPU4v3AuUuota9ZWLx/P89Npbai+WZ2L8/1nYdc7IAAAAAAAAAAAAAAAAAAAAAAA8K8s531L/f1v0mD/nuXlMe2d/XG69cX+QDvd/YHSXIqU/nj7iep7WQztD3T7/jzN6nRM3d9TBwAAAAAAAAAAAAAAAAAAgP+MxvZs1Or19a3G9qWNctDaamxPRUQ78+a3n321EKN97hBMF2OUmvIidWmjlrJe55QN9SmCrD14L/Pp1f6My33m+mcxdhpzuzfV64cf+fnDQebhrHfkvwd9sqnx5dlt0ygHm0e6U7qbJ+rSySI4cYfO11JKux3n8sujVVGJmL77T9zeQWoH31x//cGTjaNPdjJfpq7HHl88d+2Dj3/bqNXbI7fVP5ndatxKG7Xi4/EX2+5BVrp+KtENKuUrYXqv8p3hTC374fcXHnr/u/2NnsqZt8b0ybqn8/lWY7tSfKV0mma7QTvXCab6VQv1s1nEbceZGXPxTyA4+tFK7erln37db1Xpm4SNOgAAAAAAAAAAAAAAAAAA4J4ovVe8ULzZd2avqqeenfzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODeGfz//1KwM5LZT/BXK0ab5ta3GhFH7vdpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/dPAAAA///fkWru") capset(0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|'], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x19) 1m13.011998944s ago: executing program 3 (id=9): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000005a80)={[{@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x84042, 0x1fb) 1m11.892937998s ago: executing program 3 (id=15): syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xff, 0xc57, &(0x7f0000001a00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1m10.884881929s ago: executing program 3 (id=19): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r0, 0x2020}], 0x1, 0xb8) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xd6e, 0x0, 0x6a9}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 1m10.492813831s ago: executing program 32 (id=19): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r0, 0x2020}], 0x1, 0xb8) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xd6e, 0x0, 0x6a9}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 4.928642802s ago: executing program 2 (id=372): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 4.539183034s ago: executing program 2 (id=374): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.110139967s ago: executing program 4 (id=383): mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 3.01208415s ago: executing program 4 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x6}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xf, 0xa1, 0x4}}, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x8}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.890252364s ago: executing program 4 (id=385): io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close(0x3) r0 = semget$private(0x0, 0x1, 0x3b1) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{}], 0x1) 2.726557809s ago: executing program 4 (id=387): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)={r1}) 2.636041482s ago: executing program 2 (id=388): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r0, 0x0, 0x9b1, 0x1001ed) fallocate(r0, 0x3, 0xf00, 0x10000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0x1, 0x3) 2.436958768s ago: executing program 4 (id=389): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xb3da8b2f) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r2, 0x4, 0x12000) splice(r0, 0x0, r3, 0x0, 0xffffffffffffffff, 0x0) 1.824148356s ago: executing program 1 (id=393): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.801378597s ago: executing program 2 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 1.632214901s ago: executing program 1 (id=395): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20048005) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x0, {0x53}}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.527970945s ago: executing program 2 (id=396): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="18c45d9979c9", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x8000, {[@timestamp={0x8, 0xa, 0xf4b}]}}}}}}}, 0x0) 1.455316167s ago: executing program 4 (id=397): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 1.391008159s ago: executing program 1 (id=398): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000040)="d84f7390", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000142, 0x0) 1.390487369s ago: executing program 2 (id=399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xc000) 1.232607993s ago: executing program 1 (id=401): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0xa7, @tick=0x20014}) 1.172938575s ago: executing program 0 (id=402): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="e9794cc63c2aaea7efe15f6c656e9cd9d95b8832a5c2e9ab992161b35e9ac9", 0x1f}, {&(0x7f0000001340)="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", 0x17a}], 0x2}}], 0x1, 0x0) 1.131163337s ago: executing program 0 (id=403): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0xa01, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.040547109s ago: executing program 0 (id=404): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7ca3, 0x1, 0x1, 0x8, 0x3, 0x8, 0xffffdce3, 0x101, r2}, &(0x7f0000001080)=0x20) 980.265211ms ago: executing program 1 (id=405): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000021c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, 0x0, 0x0) 881.061144ms ago: executing program 0 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 524.563264ms ago: executing program 0 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x48, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="3f2283"}, @crypto_settings=[@NL80211_ATTR_PMK={0x24, 0xfe, "03de2c185b6c6c232fb8c4c837104d179ed915a2dd55c3c1f7bc1c23ffad02b7"}]]}, 0x48}}, 0x80) 357.61266ms ago: executing program 0 (id=408): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 0s ago: executing program 1 (id=409): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 79.092020][ T5761] cgroup: Unknown subsys name 'net' [ 79.224279][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.981070][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.645368][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.653768][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.664000][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.672303][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.680664][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.689067][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.705586][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.725666][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.765495][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.774228][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.782609][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.789838][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.793783][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.800023][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.808542][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.819774][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.827667][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.835469][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.844712][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.855597][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.864210][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.875881][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.883693][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.891613][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.320274][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 83.434128][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.497759][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.558911][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.566950][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.574454][ T5773] bridge_slave_0: entered allmulticast mode [ 83.582220][ T5773] bridge_slave_0: entered promiscuous mode [ 83.590886][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.623168][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.630666][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.637944][ T5773] bridge_slave_1: entered allmulticast mode [ 83.644961][ T5773] bridge_slave_1: entered promiscuous mode [ 83.743784][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.751080][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.758362][ T5774] bridge_slave_0: entered allmulticast mode [ 83.765467][ T5774] bridge_slave_0: entered promiscuous mode [ 83.777851][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.801396][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.809428][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.819593][ T5774] bridge_slave_1: entered allmulticast mode [ 83.826785][ T5774] bridge_slave_1: entered promiscuous mode [ 83.836482][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.931884][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.939322][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.946613][ T5776] bridge_slave_0: entered allmulticast mode [ 83.953810][ T5776] bridge_slave_0: entered promiscuous mode [ 83.975099][ T5773] team0: Port device team_slave_0 added [ 83.994663][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.005103][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.012622][ T5776] bridge_slave_1: entered allmulticast mode [ 84.020378][ T5776] bridge_slave_1: entered promiscuous mode [ 84.030608][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.044420][ T5773] team0: Port device team_slave_1 added [ 84.050570][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.059958][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.067586][ T5778] bridge_slave_0: entered allmulticast mode [ 84.074564][ T5778] bridge_slave_0: entered promiscuous mode [ 84.083567][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.090915][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.098377][ T5778] bridge_slave_1: entered allmulticast mode [ 84.106514][ T5778] bridge_slave_1: entered promiscuous mode [ 84.126005][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.186711][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.193721][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.219907][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.235980][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.274508][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.281985][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.308136][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.328948][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.342664][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.358534][ T5774] team0: Port device team_slave_0 added [ 84.391431][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.402427][ T5774] team0: Port device team_slave_1 added [ 84.414858][ T5776] team0: Port device team_slave_0 added [ 84.464187][ T5776] team0: Port device team_slave_1 added [ 84.484272][ T5778] team0: Port device team_slave_0 added [ 84.518995][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.526165][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.552656][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.567790][ T5778] team0: Port device team_slave_1 added [ 84.574294][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.583715][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.613352][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.631067][ T5773] hsr_slave_0: entered promiscuous mode [ 84.637959][ T5773] hsr_slave_1: entered promiscuous mode [ 84.676241][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.683241][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.712327][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.736023][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.743035][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.769448][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.783516][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.790956][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.818056][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.849882][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.857282][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.883713][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.906622][ T5789] Bluetooth: hci2: command tx timeout [ 84.906641][ T5786] Bluetooth: hci1: command tx timeout [ 84.986040][ T5789] Bluetooth: hci3: command tx timeout [ 84.986063][ T5786] Bluetooth: hci0: command tx timeout [ 85.000772][ T5776] hsr_slave_0: entered promiscuous mode [ 85.007491][ T5776] hsr_slave_1: entered promiscuous mode [ 85.013759][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.021735][ T5776] Cannot create hsr debugfs directory [ 85.056624][ T5778] hsr_slave_0: entered promiscuous mode [ 85.063343][ T5778] hsr_slave_1: entered promiscuous mode [ 85.070295][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.077987][ T5778] Cannot create hsr debugfs directory [ 85.090255][ T5774] hsr_slave_0: entered promiscuous mode [ 85.097086][ T5774] hsr_slave_1: entered promiscuous mode [ 85.103251][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.110910][ T5774] Cannot create hsr debugfs directory [ 85.566820][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.580232][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.594869][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.606124][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.677814][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.697194][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.709683][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.734681][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.806530][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.821815][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.833367][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.844493][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.937827][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.949409][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.960983][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.981782][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.091871][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.128530][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.148759][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.178034][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.185483][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.212575][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.253830][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.261035][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.277768][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.284899][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.298086][ T5067] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.305263][ T5067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.365137][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.402095][ T5773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.413079][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.449454][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.469817][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.477070][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.540514][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.589159][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.596857][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.642809][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.692000][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.699248][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.759055][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.766299][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.917236][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.953368][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.971258][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.985928][ T5789] Bluetooth: hci2: command tx timeout [ 86.991390][ T5789] Bluetooth: hci1: command tx timeout [ 87.065526][ T5789] Bluetooth: hci0: command tx timeout [ 87.075778][ T5789] Bluetooth: hci3: command tx timeout [ 87.139730][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.170034][ T5773] veth0_vlan: entered promiscuous mode [ 87.283632][ T5773] veth1_vlan: entered promiscuous mode [ 87.425101][ T5776] veth0_vlan: entered promiscuous mode [ 87.439103][ T5773] veth0_macvtap: entered promiscuous mode [ 87.474440][ T5776] veth1_vlan: entered promiscuous mode [ 87.495264][ T5773] veth1_macvtap: entered promiscuous mode [ 87.547279][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.573829][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.591155][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.633324][ T5776] veth0_macvtap: entered promiscuous mode [ 87.678736][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.690574][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.699825][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.709942][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.724642][ T5776] veth1_macvtap: entered promiscuous mode [ 87.736134][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.847684][ T5778] veth0_vlan: entered promiscuous mode [ 87.870920][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.882985][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.896373][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.915398][ T5778] veth1_vlan: entered promiscuous mode [ 87.926559][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.938805][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.951266][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.030815][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.046482][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.055235][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.064286][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.149963][ T5774] veth0_vlan: entered promiscuous mode [ 88.167211][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.181839][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.202395][ T5778] veth0_macvtap: entered promiscuous mode [ 88.211978][ T5774] veth1_vlan: entered promiscuous mode [ 88.231086][ T5778] veth1_macvtap: entered promiscuous mode [ 88.319808][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.333766][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.342868][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.362097][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.391994][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.403268][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.413910][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.424911][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.447617][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.491152][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.502070][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.516838][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.527739][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.539701][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.550816][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.565702][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.574873][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.584241][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.593095][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.601910][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.618113][ T5774] veth0_macvtap: entered promiscuous mode [ 88.660165][ T5774] veth1_macvtap: entered promiscuous mode [ 88.805917][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.819845][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.838133][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.849427][ T5840] syz.3.4[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.856771][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.875707][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.894098][ T5840] loop3: detected capacity change from 0 to 256 [ 88.904780][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.926127][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.941989][ T5840] ======================================================= [ 88.941989][ T5840] WARNING: The mand mount option has been deprecated and [ 88.941989][ T5840] and is ignored by this kernel. Remove the mand [ 88.941989][ T5840] option from the mount to silence this warning. [ 88.941989][ T5840] ======================================================= [ 89.044179][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.069483][ T5789] Bluetooth: hci1: command tx timeout [ 89.069507][ T5786] Bluetooth: hci2: command tx timeout [ 89.102145][ T5840] FAT-fs (loop3): Directory bread(block 64) failed [ 89.110179][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.124538][ T5840] FAT-fs (loop3): Directory bread(block 65) failed [ 89.132315][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.145830][ T5786] Bluetooth: hci3: command tx timeout [ 89.147975][ T5789] Bluetooth: hci0: command tx timeout [ 89.163088][ T5840] FAT-fs (loop3): Directory bread(block 66) failed [ 89.170566][ T5840] FAT-fs (loop3): Directory bread(block 67) failed [ 89.187778][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.207959][ T5840] FAT-fs (loop3): Directory bread(block 68) failed [ 89.214559][ T5840] FAT-fs (loop3): Directory bread(block 69) failed [ 89.225447][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.241480][ T5840] FAT-fs (loop3): Directory bread(block 70) failed [ 89.255261][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.273541][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.299570][ T5840] FAT-fs (loop3): Directory bread(block 71) failed [ 89.323862][ T5840] FAT-fs (loop3): Directory bread(block 72) failed [ 89.334809][ T5840] FAT-fs (loop3): Directory bread(block 73) failed [ 89.338916][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.360245][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.370871][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.384951][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.424062][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.442546][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.616269][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.634047][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.725126][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.751370][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.879655][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.916541][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.058318][ T5859] loop3: detected capacity change from 0 to 1024 [ 90.076095][ T5859] EXT4-fs: Ignoring removed bh option [ 90.097845][ T5859] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 90.114222][ T5860] loop1: detected capacity change from 0 to 1024 [ 90.162872][ T5860] hfsplus: invalid length 32517 has been corrected to 255 [ 90.204639][ T5859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.414132][ T28] audit: type=1800 audit(1779043993.179:2): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10" name="cgroup" dev="loop1" ino=25 res=0 errno=0 [ 90.492860][ T5860] hfsplus: b-tree write err: -5, ino 25 [ 90.643027][ T1299] hfsplus: b-tree write err: -5, ino 4 [ 90.650853][ T1299] hfsplus: b-tree write err: -5, ino 2 [ 90.657983][ T1299] hfsplus: b-tree write err: -5, ino 25 [ 90.698191][ T5874] mmap: syz.0.13 (5874) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.714326][ T5859] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.9: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 90.773580][ T5859] EXT4-fs (loop3): Remounting filesystem read-only [ 90.935655][ T5859] syz.3.9 (5859) used greatest stack depth: 20040 bytes left [ 91.110469][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.152753][ T5789] Bluetooth: hci1: command tx timeout [ 91.152761][ T5786] Bluetooth: hci2: command tx timeout [ 91.219984][ T5871] loop2: detected capacity change from 0 to 32768 [ 91.227244][ T5789] Bluetooth: hci0: command tx timeout [ 91.250017][ T5871] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.12 (5871) [ 91.298443][ T5871] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.326037][ T5871] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 91.334871][ T5871] BTRFS info (device loop2): turning on sync discard [ 91.345042][ T5871] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 91.355976][ T5871] BTRFS info (device loop2): use zstd compression, level 3 [ 91.363249][ T5871] BTRFS info (device loop2): turning on async discard [ 91.395768][ T5871] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 91.427551][ T5871] BTRFS info (device loop2): trying to use backup root at mount time [ 91.442633][ T5871] BTRFS info (device loop2): enabling auto defrag [ 91.464749][ T5871] BTRFS info (device loop2): using free space tree [ 91.542509][ T5067] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 91.628573][ T5871] BTRFS error (device loop2): failed to load root extent [ 91.638402][ T5871] BTRFS warning (device loop2): try to load backup roots slot 1 [ 91.664917][ T5067] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 91.731383][ T5871] BTRFS warning (device loop2): couldn't read tree root [ 91.740488][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.744486][ T5871] BTRFS warning (device loop2): try to load backup roots slot 2 [ 91.765616][ T5901] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET) [ 91.772638][ T53] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 91.793998][ T5871] BTRFS warning (device loop2): couldn't read tree root [ 91.806908][ T5871] BTRFS warning (device loop2): try to load backup roots slot 3 [ 91.907395][ T5871] BTRFS info (device loop2): enabling ssd optimizations [ 91.935941][ T5871] BTRFS info (device loop2): rebuilding free space tree [ 92.037057][ T970] cfg80211: failed to load regulatory.db [ 92.056641][ T5871] BTRFS info (device loop2): checking UUID tree [ 92.401671][ T1299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.608604][ T1299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.781627][ T1299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.910259][ T1299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.944064][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.049578][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.060105][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.076955][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.096561][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.106673][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.114654][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.574650][ T5916] loop2: detected capacity change from 0 to 128 [ 93.610476][ T5916] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.626907][ T5916] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.685244][ T5916] EXT4-fs error (device loop2): make_indexed_dir:2333: inode #2: block 18: comm syz.2.22: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 93.809478][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.144331][ T5927] loop2: detected capacity change from 0 to 4096 [ 94.256499][ T5927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.493405][ T5941] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 94.531504][ T5944] loop0: detected capacity change from 0 to 512 [ 94.591688][ T5944] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.659665][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.703263][ T5911] chnl_net:caif_netlink_parms(): no params data found [ 95.151765][ T5789] Bluetooth: hci3: command tx timeout [ 95.275250][ T5948] loop2: detected capacity change from 0 to 32768 [ 95.294600][ T5948] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.29 (5948) [ 95.316318][ T5948] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.326614][ T5948] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.336568][ T5948] BTRFS info (device loop2): using free space tree [ 95.356655][ T5953] loop0: detected capacity change from 0 to 512 [ 95.415453][ T5953] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.445402][ T5953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.540750][ T5953] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.576573][ T5953] EXT4-fs (loop0): 1 truncate cleaned up [ 95.583889][ T5953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.597041][ T5948] BTRFS info (device loop2): enabling ssd optimizations [ 95.604098][ T5948] BTRFS info (device loop2): auto enabling async discard [ 95.765143][ T28] audit: type=1800 audit(1779043998.529:3): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.29" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 96.073010][ T5774] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.094063][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.212048][ T5954] loop1: detected capacity change from 0 to 32768 [ 96.343560][ T5954] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.524144][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.577144][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.635256][ T5911] bridge_slave_0: entered allmulticast mode [ 96.668178][ T5911] bridge_slave_0: entered promiscuous mode [ 96.687977][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.707896][ T5954] XFS (loop1): Ending clean mount [ 96.716957][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.730113][ T5911] bridge_slave_1: entered allmulticast mode [ 96.748488][ T5911] bridge_slave_1: entered promiscuous mode [ 96.798591][ T5954] XFS (loop1): Quotacheck needed: Please wait. [ 96.927901][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.980399][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.019648][ T5954] XFS (loop1): Quotacheck: Done. [ 97.100585][ T1299] hsr_slave_0: left promiscuous mode [ 97.121234][ T1299] hsr_slave_1: left promiscuous mode [ 97.133370][ T1299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.154816][ T1299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.188975][ T1299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.216964][ T1299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.225815][ T5789] Bluetooth: hci3: command tx timeout [ 97.256323][ T28] audit: type=1804 audit(1779044000.019:4): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.32" name="/newroot/11/file0/file1" dev="loop1" ino=9286 res=1 errno=0 [ 97.256371][ T1299] bridge_slave_1: left allmulticast mode [ 97.319719][ T28] audit: type=1804 audit(1779044000.079:5): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.32" name="/newroot/11/file0/file1" dev="loop1" ino=9286 res=1 errno=0 [ 97.386636][ T1299] bridge_slave_1: left promiscuous mode [ 97.393089][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.428151][ T1299] bridge_slave_0: left allmulticast mode [ 97.433875][ T1299] bridge_slave_0: left promiscuous mode [ 97.451893][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.504764][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.525299][ T1299] veth1_macvtap: left promiscuous mode [ 97.540643][ T1299] veth0_macvtap: left promiscuous mode [ 97.562782][ T1299] veth1_vlan: left promiscuous mode [ 97.581400][ T1299] veth0_vlan: left promiscuous mode [ 98.744174][ T1299] team0 (unregistering): Port device team_slave_1 removed [ 98.791867][ T1299] team0 (unregistering): Port device team_slave_0 removed [ 98.838686][ T1299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.885431][ T1299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.243786][ T1299] bond0 (unregistering): Released all slaves [ 99.306684][ T5789] Bluetooth: hci3: command tx timeout [ 99.361567][ T6011] batadv_slave_1: entered promiscuous mode [ 99.420786][ T5911] team0: Port device team_slave_0 added [ 99.430855][ T5911] team0: Port device team_slave_1 added [ 99.437304][ T6015] batadv_slave_1: left promiscuous mode [ 99.515975][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.563160][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.639913][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.678259][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.685515][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.733748][ T28] audit: type=1326 audit(1779044002.499:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b6b99ce59 code=0x0 [ 99.765254][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.862005][ T5911] hsr_slave_0: entered promiscuous mode [ 99.881169][ T5911] hsr_slave_1: entered promiscuous mode [ 99.894811][ T5911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.914811][ T5911] Cannot create hsr debugfs directory [ 99.962975][ T6029] loop1: detected capacity change from 0 to 8192 [ 100.004703][ T6029] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.046690][ T6029] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 100.056777][ T6029] REISERFS (device loop1): using ordered data mode [ 100.063436][ T6029] reiserfs: using flush barriers [ 100.076432][ T6029] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.095112][ T6029] REISERFS (device loop1): checking transaction log (loop1) [ 100.231101][ T6029] REISERFS (device loop1): Using tea hash to sort names [ 100.245919][ T6029] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 100.672150][ T6046] loop2: detected capacity change from 0 to 64 [ 100.706844][ T5911] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.752122][ T5911] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.812120][ T28] audit: type=1800 audit(1779044003.579:7): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.46" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 100.819762][ T5911] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.903729][ T28] audit: type=1800 audit(1779044003.659:8): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.46" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 100.950905][ T5911] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.117217][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.218444][ T5911] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.262936][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.270197][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.374021][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.381298][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.395528][ T5789] Bluetooth: hci3: command tx timeout [ 101.593344][ T6064] loop2: detected capacity change from 0 to 256 [ 101.646213][ T6064] exfat: Unknown parameter '017777777777777777777770x00000000ffffffff' [ 101.709921][ T6064] fuse: Invalid user_id [ 102.127689][ T6068] loop1: detected capacity change from 0 to 8192 [ 102.178888][ T6068] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 102.287098][ T6068] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 102.313626][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.334612][ T6068] REISERFS (device loop1): using ordered data mode [ 102.379910][ T6068] reiserfs: using flush barriers [ 102.421280][ T6068] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.483178][ T6068] REISERFS (device loop1): checking transaction log (loop1) [ 102.570419][ T6091] netlink: 'syz.2.56': attribute type 12 has an invalid length. [ 102.589900][ T6091] netlink: 'syz.2.56': attribute type 29 has an invalid length. [ 102.618960][ T6091] netlink: 148 bytes leftover after parsing attributes in process `syz.2.56'. [ 102.628736][ T6091] netlink: 'syz.2.56': attribute type 3 has an invalid length. [ 102.644347][ T6091] netlink: 'syz.2.56': attribute type 2 has an invalid length. [ 102.662515][ T6091] netlink: 35 bytes leftover after parsing attributes in process `syz.2.56'. [ 102.785018][ T6068] REISERFS (device loop1): Using tea hash to sort names [ 102.812642][ T6068] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 102.847787][ T6068] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 103.253278][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 103.295428][ T6106] netlink: 'syz.0.59': attribute type 20 has an invalid length. [ 103.336335][ T6106] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.345719][ T6106] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.354527][ T6106] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.363389][ T6106] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.554631][ T5911] veth0_vlan: entered promiscuous mode [ 103.599156][ T5911] veth1_vlan: entered promiscuous mode [ 103.711777][ T5911] veth0_macvtap: entered promiscuous mode [ 103.717556][ T6114] loop0: detected capacity change from 0 to 512 [ 103.745827][ T6114] EXT4-fs: Ignoring removed nobh option [ 103.769502][ T5911] veth1_macvtap: entered promiscuous mode [ 103.865425][ T6114] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 103.884137][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.930675][ T6114] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.62: attempt to clear invalid blocks 1 len 1 [ 103.965447][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.995570][ T6114] EXT4-fs (loop0): Remounting filesystem read-only [ 104.004947][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.020912][ T6114] EXT4-fs (loop0): 1 truncate cleaned up [ 104.043799][ T6114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.045463][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.077713][ T6114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.092957][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.108406][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.156503][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.234581][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.263045][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.267128][ T6114] overlay: ./file0 is not a directory [ 104.280300][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.294110][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.307512][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.320932][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.354325][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.392780][ T5911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.426024][ T5911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.473487][ T5911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.494859][ T5911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.521915][ T6125] syzkaller1: entered promiscuous mode [ 104.527800][ T6125] syzkaller1: entered allmulticast mode [ 104.876981][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.918204][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.018351][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.054625][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.061997][ T6109] loop2: detected capacity change from 0 to 40427 [ 105.113423][ T6109] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 105.140497][ T6109] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.219255][ T6109] F2FS-fs (loop2): invalid crc value [ 105.316491][ T6109] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.429788][ T6152] loop4: detected capacity change from 0 to 512 [ 105.469667][ T6152] EXT4-fs: inline encryption not supported [ 105.491485][ T6152] EXT4-fs: Ignoring removed i_version option [ 105.518353][ T6156] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.581202][ T6152] EXT4-fs (loop4): 1 orphan inode deleted [ 105.612310][ T6109] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.637985][ T6152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.677240][ T6109] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.899201][ T28] audit: type=1800 audit(1779044008.659:9): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.61" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 105.899528][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.043138][ T6109] syz.2.61: attempt to access beyond end of device [ 106.043138][ T6109] loop2: rw=34817, sector=77832, nr_sectors = 8 limit=40427 [ 106.135758][ T6166] loop1: detected capacity change from 0 to 4096 [ 106.393192][ T5774] syz-executor: attempt to access beyond end of device [ 106.393192][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.447773][ T6173] loop4: detected capacity change from 0 to 4096 [ 106.450649][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 106.676615][ T6181] loop5: detected capacity change from 0 to 7 [ 106.734756][ T6181] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 106.760885][ T6181] loop5: partition table partially beyond EOD, truncated [ 106.800626][ T6181] loop5: p1 size 487441168 extends beyond EOD, truncated [ 106.969357][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 107.337745][ T6189] loop0: detected capacity change from 0 to 4096 [ 109.095516][ T6231] loop4: detected capacity change from 0 to 256 [ 109.207651][ T6231] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 109.236867][ T28] audit: type=1326 audit(1779044012.009:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 109.327882][ T28] audit: type=1326 audit(1779044012.009:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 109.425854][ T28] audit: type=1326 audit(1779044012.049:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 109.515447][ T28] audit: type=1326 audit(1779044012.049:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 109.617097][ T28] audit: type=1326 audit(1779044012.059:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 109.695375][ T28] audit: type=1326 audit(1779044012.059:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 109.796012][ T28] audit: type=1326 audit(1779044012.089:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 109.829240][ T6251] loop2: detected capacity change from 0 to 128 [ 109.885410][ T28] audit: type=1326 audit(1779044012.089:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 109.957196][ T6251] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.004256][ T6251] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.020324][ T28] audit: type=1326 audit(1779044012.089:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.0.91" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b6b99ce59 code=0x7ffc0000 [ 110.170596][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.505181][ T6279] loop2: detected capacity change from 0 to 512 [ 110.512976][ T6279] EXT4-fs: Ignoring removed nobh option [ 110.565675][ T6279] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.669720][ T6279] EXT4-fs (loop2): 1 truncate cleaned up [ 110.702069][ T6279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.914055][ T6286] loop0: detected capacity change from 0 to 4096 [ 110.938510][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.979147][ T6291] netlink: 'syz.4.104': attribute type 12 has an invalid length. [ 111.075372][ T6293] netlink: 'syz.4.104': attribute type 12 has an invalid length. [ 111.138306][ T6294] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.281085][ T6301] loop1: detected capacity change from 0 to 512 [ 111.385555][ T6301] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.107: corrupted in-inode xattr: invalid ea_ino [ 111.422659][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 111.422676][ T28] audit: type=1800 audit(1779044014.179:24): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.103" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 111.463498][ T6301] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.107: couldn't read orphan inode 15 (err -117) [ 111.507996][ T6301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.528729][ T6297] loop2: detected capacity change from 0 to 4096 [ 111.559049][ T6307] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 111.619922][ T6297] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 111.812456][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.350479][ T6306] loop4: detected capacity change from 0 to 32768 [ 112.459750][ T6306] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 112.690837][ T6306] XFS (loop4): Ending clean mount [ 113.032276][ T5911] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 113.237459][ T6315] loop1: detected capacity change from 0 to 40427 [ 113.264518][ T6315] F2FS-fs (loop1): invalid crc value [ 113.274202][ T6315] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.433407][ T6315] F2FS-fs (loop1): Start checkpoint disabled! [ 113.500894][ T6315] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 113.521138][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 113.919437][ T5067] kworker/u4:10: attempt to access beyond end of device [ 113.919437][ T5067] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 113.956769][ T5067] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 113.974257][ T5067] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 114.589428][ T6365] loop4: detected capacity change from 0 to 1024 [ 114.629868][ T6365] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 114.664732][ T6367] smc: net device vcan0 applied user defined pnetid SYZ1 [ 114.701171][ T6367] smc: net device vcan0 erased user defined pnetid SYZ1 [ 114.737568][ T6365] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.116: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.837141][ T6365] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 114.850513][ T6371] loop1: detected capacity change from 0 to 256 [ 114.874361][ T6365] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.116: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.930065][ T6365] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 114.955232][ T6365] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.116: Failed to acquire dquot type 0 [ 114.968690][ T6365] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 114.996136][ T6365] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.116: mark_inode_dirty error [ 115.020512][ T6361] loop2: detected capacity change from 0 to 32768 [ 115.032653][ T6361] XFS: attr2 mount option is deprecated. [ 115.052364][ T6373] tipc: Started in network mode [ 115.061692][ T6365] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 115.085561][ T6373] tipc: Node identity ac1414aa, cluster identity 4711 [ 115.114834][ T6365] EXT4-fs (loop4): 1 orphan inode deleted [ 115.116070][ T6361] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.129320][ T4712] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.154300][ T4712] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 115.156479][ T6373] tipc: Enabled bearer , priority 10 [ 115.176622][ T6365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.213935][ T4712] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 115.272131][ T6365] EXT4-fs (loop4): shut down requested (2) [ 115.334059][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.402903][ T6361] XFS (loop2): Ending clean mount [ 115.500111][ T6361] XFS (loop2): Quotacheck needed: Please wait. [ 115.610809][ T6361] XFS (loop2): Quotacheck: Done. [ 115.915164][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.147488][ T27] tipc: Node number set to 2886997162 [ 116.471393][ T967] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.537894][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.548101][ T967] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.776339][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 116.822558][ T27] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 116.853674][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.880021][ T27] usb 5-1: Product: syz [ 116.892869][ T27] usb 5-1: Manufacturer: syz [ 116.935404][ T27] usb 5-1: SerialNumber: syz [ 116.973011][ T27] usb 5-1: config 0 descriptor?? [ 117.047219][ T27] gspca_main: spca508-2.14.0 probing 041e:4018 [ 117.226906][ T27] gspca_spca508: reg_read err -32 [ 117.243734][ T27] gspca_spca508: reg_read err -32 [ 117.276302][ T27] gspca_spca508: reg_read err -32 [ 117.485831][ T27] gspca_spca508: reg_read err -71 [ 117.500094][ T27] gspca_spca508: reg write: error -71 [ 117.526362][ T27] spca508: probe of 5-1:0.0 failed with error -71 [ 117.562062][ T27] usb 5-1: USB disconnect, device number 2 [ 117.718807][ T6417] loop1: detected capacity change from 0 to 32768 [ 117.740429][ T6417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.141 (6417) [ 117.783528][ T6417] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.800128][ T6417] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 117.833206][ T6417] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.849261][ T6417] BTRFS info (device loop1): trying to use backup root at mount time [ 117.874990][ T6417] BTRFS info (device loop1): setting nodatasum [ 117.882682][ T6417] BTRFS info (device loop1): enabling ssd optimizations [ 117.893363][ T6417] BTRFS info (device loop1): using spread ssd allocation scheme [ 117.911387][ T6417] BTRFS info (device loop1): turning on flush-on-commit [ 117.943100][ T6417] BTRFS info (device loop1): force zlib compression, level 3 [ 117.972509][ T6417] BTRFS info (device loop1): using free space tree [ 118.075384][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.243210][ T6464] capability: warning: `syz.4.148' uses deprecated v2 capabilities in a way that may be insecure [ 118.275355][ T28] audit: type=1800 audit(1779044021.039:25): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.141" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 118.296185][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 118.309508][ T6464] loop4: detected capacity change from 0 to 512 [ 118.327894][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.339347][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 118.373177][ T6464] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.148: inode has both inline data and extents flags [ 118.407868][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.456402][ T6464] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.148: couldn't read orphan inode 15 (err -117) [ 118.497321][ T6464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 118.526539][ T8] usb 1-1: config 0 descriptor?? [ 118.570782][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 118.704180][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.720869][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 118.798221][ T9] usb 1-1: USB disconnect, device number 2 [ 118.965533][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.053679][ T6004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (6004) [ 119.167378][ T8] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 119.195803][ T8] usb 3-1: config 0 has no interface number 0 [ 119.201997][ T8] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.241393][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 119.257145][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.265215][ T8] usb 3-1: Product: syz [ 119.274287][ T8] usb 3-1: Manufacturer: syz [ 119.279405][ T8] usb 3-1: SerialNumber: syz [ 119.305790][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.314516][ T8] usb 3-1: config 0 descriptor?? [ 119.354872][ T8] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 119.482249][ T6483] loop0: detected capacity change from 0 to 1024 [ 119.505658][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 119.521451][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.538594][ T6483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.552419][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.552481][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.576123][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 119.585447][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.593520][ T9] usb 5-1: Product: syz [ 119.598468][ T9] usb 5-1: Manufacturer: syz [ 119.603801][ T9] usb 5-1: SerialNumber: syz [ 119.612554][ T9] usb 5-1: config 0 descriptor?? [ 119.757857][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.044870][ T9] gs_usb 5-1:0.0: Configuring for 176 interfaces [ 120.208022][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'. [ 120.219631][ T5854] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.236155][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 120.237004][ T27] usb 3-1: USB disconnect, device number 2 [ 120.268262][ T27] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 120.411153][ T5854] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.422598][ T5854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.433634][ T5854] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.443411][ T5854] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 120.455448][ T5854] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 120.470683][ T5854] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 120.482283][ T5854] usb 1-1: config 1 interface 1 has no altsetting 0 [ 120.501797][ T5854] usb 1-1: string descriptor 0 read error: -22 [ 120.515628][ T5854] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 120.535378][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.689105][ T9] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 120.759837][ T9] gs_usb: probe of 5-1:0.0 failed with error -71 [ 120.788347][ T9] usb 5-1: USB disconnect, device number 3 [ 120.972606][ T5854] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 121.376067][ T6504] loop2: detected capacity change from 0 to 40427 [ 121.481200][ T6504] F2FS-fs (loop2): invalid crc value [ 121.550147][ T6504] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.873969][ T6504] F2FS-fs (loop2): Start checkpoint disabled! [ 121.952073][ T6504] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 122.261117][ T6504] syz.2.160: attempt to access beyond end of device [ 122.261117][ T6504] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.438519][ T6504] syz.2.160: attempt to access beyond end of device [ 122.438519][ T6504] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 122.556404][ T6506] loop1: detected capacity change from 0 to 131072 [ 122.564914][ T6506] XFS: ikeep mount option is deprecated. [ 122.581061][ T5854] usb 1-1: USB disconnect, device number 3 [ 122.647989][ T6506] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 122.785482][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.901656][ T6506] XFS (loop1): Starting recovery (logdev: internal) [ 122.950852][ T4712] kworker/u4:9: attempt to access beyond end of device [ 122.950852][ T4712] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 122.990877][ T4712] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 122.998072][ T6506] XFS (loop1): Ending recovery (logdev: internal) [ 123.005421][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 123.024358][ T4712] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.032445][ T8] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 123.059150][ T8] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 123.095367][ T8] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 123.139525][ T8] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 123.176053][ T8] usb 5-1: config 250 has no interface number 0 [ 123.182402][ T8] usb 5-1: config 250 interface 228 has no altsetting 0 [ 123.269738][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 123.289431][ T8] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 123.318978][ T8] usb 5-1: Product: syz [ 123.323211][ T8] usb 5-1: SerialNumber: syz [ 123.361472][ T8] hub 5-1:250.228: bad descriptor, ignoring hub [ 123.389380][ T8] hub: probe of 5-1:250.228 failed with error -5 [ 123.442484][ T6541] loop0: detected capacity change from 0 to 4096 [ 123.455098][ T5773] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 123.560597][ T6543] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.784815][ T28] audit: type=1800 audit(1779044026.539:26): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.167" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 124.008840][ T5854] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 124.496132][ T5854] usb 5-1: failed to restore interface 228 altsetting 255 (error=-71) [ 124.525986][ T5854] usb 5-1: USB disconnect, device number 4 [ 124.713092][ T6569] loop2: detected capacity change from 0 to 512 [ 125.675048][ T6582] loop1: detected capacity change from 0 to 32768 [ 125.726399][ T6582] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 125.735013][ T6582] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 125.761690][ T6582] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 125.780591][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 125.804849][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 125.896427][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms [ 125.896457][ T6596] input: syz0 as /devices/virtual/input/input6 [ 125.930079][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 125.942612][ T6582] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 126.144951][ T6582] gfs2: fsid=syz:syz.0: found 1 quota changes [ 126.263154][ T6609] loop2: detected capacity change from 0 to 2048 [ 126.371146][ T6614] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.412397][ T5773] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 126.412397][ T5773] inode = 11 2339 [ 126.412397][ T5773] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 126.510426][ T6618] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 126.517962][ T5773] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 126.518141][ T5773] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5773 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 126.518239][ T5773] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 126.518263][ T5773] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 126.570414][ T6619] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 126.586882][ T5773] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 126.602730][ T5773] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 126.639493][ T6619] Remounting filesystem read-only [ 126.646062][ T5773] gfs2: fsid=syz:syz.0: File system withdrawn [ 126.666554][ T5773] CPU: 0 PID: 5773 Comm: syz-executor Not tainted syzkaller #0 [ 126.674174][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.684302][ T5773] Call Trace: [ 126.687639][ T5773] [ 126.687939][ T6618] netlink: 'syz.4.186': attribute type 2 has an invalid length. [ 126.690594][ T5773] dump_stack_lvl+0x18c/0x250 [ 126.702964][ T5773] ? kobject_uevent_env+0x363/0x8b0 [ 126.708235][ T5773] ? show_regs_print_info+0x20/0x20 [ 126.713481][ T5773] ? load_image+0x420/0x420 [ 126.718047][ T5773] ? kobject_uevent_env+0x363/0x8b0 [ 126.723308][ T5773] gfs2_withdraw+0xb24/0x13d0 [ 126.728060][ T5773] ? gfs2_lm+0x240/0x240 [ 126.732374][ T5773] ? gfs2_consist_inode_i+0xf5/0x110 [ 126.737720][ T5773] gfs2_inode_refresh+0xc50/0x1160 [ 126.742894][ T5773] ? gfs2_inode_metasync+0xf0/0xf0 [ 126.748060][ T5773] ? gfs2_glock_nq+0xd4f/0x1420 [ 126.752980][ T5773] gfs2_instantiate+0x162/0x220 [ 126.757926][ T5773] gfs2_glock_wait+0x1d4/0x2a0 [ 126.762759][ T5773] do_sync+0x4c6/0xe50 [ 126.766886][ T5773] ? gfs2_quota_sync+0x411/0x5a0 [ 126.771874][ T5773] ? bh_get+0x760/0x760 [ 126.776083][ T5773] ? __lock_acquire+0x7d40/0x7d40 [ 126.781152][ T5773] ? do_raw_spin_lock+0x11f/0x2c0 [ 126.786231][ T5773] ? gfs2_quota_sync+0x411/0x5a0 [ 126.791217][ T5773] ? do_raw_spin_unlock+0x121/0x230 [ 126.796471][ T5773] gfs2_quota_sync+0x411/0x5a0 [ 126.801304][ T5773] gfs2_sync_fs+0x4c/0xb0 [ 126.805697][ T5773] sync_filesystem+0xea/0x220 [ 126.810430][ T5773] generic_shutdown_super+0x6f/0x2b0 [ 126.815778][ T5773] kill_block_super+0x44/0x90 [ 126.820512][ T5773] deactivate_locked_super+0x97/0x100 [ 126.825934][ T5773] cleanup_mnt+0x43b/0x4d0 [ 126.830402][ T5773] task_work_run+0x1d4/0x260 [ 126.835052][ T5773] ? task_work_cancel+0x220/0x220 [ 126.840139][ T5773] ? exit_to_user_mode_loop+0x3b/0x110 [ 126.845659][ T5773] exit_to_user_mode_loop+0xe6/0x110 [ 126.851001][ T5773] exit_to_user_mode_prepare+0xee/0x180 [ 126.856604][ T5773] syscall_exit_to_user_mode+0x1a/0x50 [ 126.862114][ T5773] do_syscall_64+0x61/0xb0 [ 126.866569][ T5773] ? clear_bhb_loop+0x40/0x90 [ 126.871293][ T5773] ? clear_bhb_loop+0x40/0x90 [ 126.876028][ T5773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.881982][ T5773] RIP: 0033:0x7f690099e097 [ 126.886460][ T5773] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 126.906121][ T5773] RSP: 002b:00007fff707ee968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 126.914592][ T5773] RAX: 0000000000000000 RBX: 00007f6900a321ca RCX: 00007f690099e097 [ 126.922617][ T5773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff707eea20 [ 126.930640][ T5773] RBP: 00007fff707eea20 R08: 00007fff707efa20 R09: 00000000ffffffff [ 126.938664][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff707efab0 [ 126.946684][ T5773] R13: 00007f6900a321ca R14: 000000000001ed04 R15: 00007fff707efaf0 [ 126.954718][ T5773] [ 127.074549][ T6619] NILFS (loop2): error -2 truncating bmap (ino=16) [ 127.103620][ T6609] syz.2.184 (6609) used greatest stack depth: 19760 bytes left [ 127.307953][ T5774] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 127.342310][ T5774] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 127.360403][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 127.384699][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 127.404273][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 127.427798][ T5774] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 127.458122][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 127.485487][ T5774] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 127.492857][ T5774] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 127.532811][ T5774] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 127.552691][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 127.565406][ T5774] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 127.582930][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 127.597142][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.622999][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 127.655324][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 127.683782][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 127.749485][ T6641] loop1: detected capacity change from 0 to 1024 [ 127.809128][ T27] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 127.836073][ T27] usb 1-1: config 0 has no interface number 0 [ 127.877895][ T27] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.921841][ T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 127.934566][ T6641] hfsplus: xattr searching failed [ 127.941011][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.953807][ T27] usb 1-1: Product: syz [ 127.959566][ T27] usb 1-1: Manufacturer: syz [ 127.964484][ T27] usb 1-1: SerialNumber: syz [ 127.979293][ T27] usb 1-1: config 0 descriptor?? [ 128.005225][ T27] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 128.045584][ T4712] hfsplus: b-tree write err: -5, ino 3 [ 128.165893][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.380049][ T8] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 128.406880][ T8] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 128.420435][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 128.437759][ T8] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 128.447495][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.456177][ T8] usb 3-1: Product: syz [ 128.457784][ T5850] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.460549][ T8] usb 3-1: Manufacturer: syz [ 128.475983][ T8] usb 3-1: SerialNumber: syz [ 128.499247][ T6647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 128.519607][ T6647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 128.665522][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 128.678625][ T5850] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 128.693721][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.730920][ T5850] usb 2-1: config 0 descriptor?? [ 128.802514][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 128.811740][ T5854] usb 1-1: USB disconnect, device number 4 [ 128.837913][ T5854] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 128.927455][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.954162][ T5850] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 128.971407][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.999777][ T5850] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 129.010945][ T5850] usb 2-1: media controller created [ 129.055199][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.125485][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 129.168730][ T27] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 129.191384][ T27] usb 5-1: config 0 has no interface number 0 [ 129.216429][ T27] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 129.236583][ T5850] DVB: Unable to find symbol dib7000p_attach() [ 129.243020][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.259223][ T5850] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 129.270015][ T27] usb 5-1: Product: syz [ 129.274336][ T27] usb 5-1: Manufacturer: syz [ 129.282511][ T27] usb 5-1: SerialNumber: syz [ 129.294965][ T27] usb 5-1: config 0 descriptor?? [ 129.309920][ T27] smsc95xx v2.0.0 [ 129.403479][ T5850] rc_core: IR keymap rc-dib0700-rc5 not found [ 129.415903][ T5850] Registered IR keymap rc-empty [ 129.421333][ T5850] dvb-usb: could not initialize remote control. [ 129.449693][ T5850] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 129.512465][ T5850] usb 2-1: USB disconnect, device number 2 [ 129.609289][ T5850] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 129.614125][ T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: b2:6b:5d:f3:86:d0 [ 129.681583][ T6679] loop0: detected capacity change from 0 to 2048 [ 129.684801][ T8] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 129.728971][ T27] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 129.747771][ T27] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.759729][ T8] usb 3-1: USB disconnect, device number 3 [ 129.770280][ T6679] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.186675][ T27] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 130.223170][ T27] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 130.250899][ T27] usb 5-1: USB disconnect, device number 5 [ 130.465375][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.693643][ T8] usb 1-1: config 0 has no interfaces? [ 130.710654][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 130.739872][ T8] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 130.753941][ T8] usb 1-1: Manufacturer: syz [ 130.773839][ T8] usb 1-1: config 0 descriptor?? [ 130.900011][ T6709] loop4: detected capacity change from 0 to 2048 [ 130.921770][ T6709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.270075][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.324111][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.374772][ T8] usb 1-1: USB disconnect, device number 5 [ 131.521220][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.204'. [ 131.714966][ T6726] overlay: Unexpected value for 'default_permissions' [ 131.819922][ T6706] loop2: detected capacity change from 0 to 32768 [ 131.882159][ T6706] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 131.940460][ T6738] Bluetooth: MGMT ver 1.22 [ 132.038514][ T6706] XFS (loop2): Ending clean mount [ 132.223197][ T6746] syzkaller1: entered promiscuous mode [ 132.262885][ T6746] syzkaller1: entered allmulticast mode [ 132.327621][ T6706] XFS (loop2): User initiated shutdown received. [ 132.334478][ T6706] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 132.363335][ T6706] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 132.565494][ T970] IPVS: starting estimator thread 0... [ 132.648450][ T6762] loop0: detected capacity change from 0 to 64 [ 132.675583][ T6760] IPVS: using max 19 ests per chain, 45600 per kthread [ 132.719294][ T6762] MINIX-fs: mounting file system with errors, running fsck is recommended [ 132.866809][ T28] audit: type=1800 audit(1779044035.639:27): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.212" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 132.911143][ T6767] process 'syz.1.213' launched '/dev/fd/4' with NULL argv: empty string added [ 133.003878][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.015390][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.026375][ T5774] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 133.695514][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.905383][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 133.915829][ T27] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 133.955378][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.963452][ T27] usb 3-1: Product: syz [ 134.020261][ T27] usb 3-1: Manufacturer: syz [ 134.024985][ T27] usb 3-1: SerialNumber: syz [ 134.072870][ T27] usb 3-1: config 0 descriptor?? [ 134.089641][ T27] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 134.125034][ T27] usb 3-1: Detected FT-X [ 134.223392][ T6799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.257598][ T6799] netlink: 43 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.269625][ T6799] netlink: 'syz.1.225': attribute type 6 has an invalid length. [ 134.285474][ T6799] netlink: 'syz.1.225': attribute type 5 has an invalid length. [ 134.322324][ T6799] netlink: 43 bytes leftover after parsing attributes in process `syz.1.225'. [ 134.340978][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 134.814931][ T27] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.039021][ T27] usb 3-1: USB disconnect, device number 4 [ 135.090064][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.111219][ T27] ftdi_sio 3-1:0.0: device disconnected [ 135.201181][ T6811] loop4: detected capacity change from 0 to 32768 [ 135.212735][ T6811] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.230 (6811) [ 135.247135][ T6811] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.258205][ T6811] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 135.273470][ T6811] BTRFS info (device loop4): using free space tree [ 135.335516][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.362180][ T6811] BTRFS info (device loop4): enabling ssd optimizations [ 135.379722][ T6811] BTRFS info (device loop4): auto enabling async discard [ 135.525409][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 135.548725][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 135.571280][ T9] usb 1-1: config 0 has no interface number 0 [ 135.593694][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.639816][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.667661][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.732987][ T9] usb 1-1: config 0 descriptor?? [ 135.855523][ T6841] loop1: detected capacity change from 0 to 2048 [ 135.899909][ T6841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.089858][ T5911] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.184395][ T9] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input2 [ 136.525502][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.596700][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.676577][ T9] usb 1-1: USB disconnect, device number 6 [ 136.726599][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 136.751355][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.773850][ T8] usb 3-1: config 140 has an invalid interface number: 182 but max is 1 [ 136.792644][ T8] usb 3-1: config 140 has no interface number 1 [ 136.802554][ T8] usb 3-1: config 140 interface 182 has no altsetting 0 [ 136.805644][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 136.822619][ T27] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 136.832661][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.840885][ T27] usb 2-1: Product: syz [ 136.845916][ T27] usb 2-1: Manufacturer: syz [ 136.850593][ T27] usb 2-1: SerialNumber: syz [ 136.856151][ T8] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 136.870708][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.879337][ T8] usb 3-1: Product: syz [ 136.883561][ T8] usb 3-1: Manufacturer: syz [ 136.890779][ T8] usb 3-1: SerialNumber: syz [ 137.151315][ T8] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 137.316879][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 137.344520][ T27] usb 2-1: USB disconnect, device number 3 [ 137.437692][ T140] Bluetooth: hci4: Frame reassembly failed (-84) [ 137.490632][ T6859] sock: sock_timestamping_bind_phc: sock not bind to device [ 137.713440][ T6865] TCP: MD5 Hash mismatch for [fe88::105]:20004->[fe80::aa]:20004 L3 index 0 [ 137.862712][ T8] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 138.023242][ T6869] bridge_slave_0: left allmulticast mode [ 138.034687][ T6869] bridge_slave_0: left promiscuous mode [ 138.047555][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.071273][ T6869] bridge_slave_1: left allmulticast mode [ 138.082962][ T6869] bridge_slave_1: left promiscuous mode [ 138.104408][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.115508][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.133714][ T8] usb 3-1: device firmware changed [ 138.150938][ T8] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 138.159640][ T6869] bond0: (slave bond_slave_0): Releasing backup interface [ 138.167631][ T8] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 138.189558][ T8] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 138.200229][ T8] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 138.208360][ T8] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 138.217755][ T5817] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 138.229160][ T5817] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 138.233238][ T6869] bond0: (slave bond_slave_1): Releasing backup interface [ 138.262996][ T8] usb 3-1: USB disconnect, device number 5 [ 138.279264][ T8] usb 3-1: [ueagle-atm] ADSL device removed [ 138.370156][ T6869] team0: Port device team_slave_0 removed [ 138.410290][ T6869] team0: Port device team_slave_1 removed [ 138.436677][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.454082][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.464046][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.477503][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.480591][ T6867] loop4: detected capacity change from 0 to 40427 [ 138.501615][ T6867] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff [ 138.525444][ T6867] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 138.534983][ T6867] F2FS-fs (loop4): invalid crc value [ 138.554089][ T6867] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.609265][ T6867] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 138.688236][ T6867] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.751769][ T6867] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 138.772356][ T6867] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x635/0x800 [ 138.859316][ T5911] syz-executor: attempt to access beyond end of device [ 138.859316][ T5911] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.886918][ T5911] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 138.986300][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.183380][ T6880] loop2: detected capacity change from 0 to 512 [ 139.200998][ T6880] EXT4-fs: Ignoring removed nobh option [ 139.215449][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 139.223790][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.245551][ T6880] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.256075][ T27] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.280307][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.298534][ T27] usb 2-1: config 0 descriptor?? [ 139.303669][ T6880] EXT4-fs (loop2): 1 truncate cleaned up [ 139.357325][ T6880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.466371][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 139.543932][ T27] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 139.562834][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.630340][ T6886] loop4: detected capacity change from 0 to 128 [ 139.663332][ T6886] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.677901][ T6886] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.748550][ T5911] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.012536][ T970] usb 2-1: USB disconnect, device number 4 [ 140.094594][ T6896] loop4: detected capacity change from 0 to 4096 [ 140.122937][ T6896] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 140.155465][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 140.209826][ T6896] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 140.234848][ T6896] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 140.251719][ T6896] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 140.270820][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.467457][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.483752][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.495135][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.512591][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.521846][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.547486][ T27] usb 3-1: config 0 descriptor?? [ 140.605505][ T6905] loop4: detected capacity change from 0 to 1024 [ 140.623658][ T6905] EXT4-fs: Ignoring removed bh option [ 140.671229][ T6905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.718030][ T28] audit: type=1800 audit(1779044043.489:28): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.262" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 140.746411][ T6905] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.262: bg 0: block 328: padding at end of block bitmap is not set [ 140.831840][ T5911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.989014][ T27] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 141.059067][ T27] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 141.353523][ T6917] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 141.566395][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.729505][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 141.755380][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 141.772278][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.784476][ T6925] Zero length message leads to an empty skb [ 141.797625][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.831472][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.868836][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.901851][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.928415][ T6930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.928872][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.958083][ T6930] loop0: detected capacity change from 0 to 256 [ 142.071301][ T6930] FAT-fs (loop0): Directory bread(block 64) failed [ 142.090885][ T6930] FAT-fs (loop0): Directory bread(block 65) failed [ 142.111319][ T6930] FAT-fs (loop0): Directory bread(block 66) failed [ 142.162509][ T6930] FAT-fs (loop0): Directory bread(block 67) failed [ 142.179628][ T6930] FAT-fs (loop0): Directory bread(block 68) failed [ 142.189949][ T6930] FAT-fs (loop0): Directory bread(block 69) failed [ 142.200371][ T6930] FAT-fs (loop0): Directory bread(block 70) failed [ 142.221088][ T6930] FAT-fs (loop0): Directory bread(block 71) failed [ 142.228845][ T6930] FAT-fs (loop0): Directory bread(block 72) failed [ 142.237025][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 142.242665][ T6930] FAT-fs (loop0): Directory bread(block 73) failed [ 142.249492][ T8] usbtmc 5-1:16.0: can't read capabilities [ 142.568297][ T5850] usb 5-1: USB disconnect, device number 6 [ 142.803896][ T6949] loop0: detected capacity change from 0 to 2048 [ 142.861899][ T6949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.003123][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.175782][ T6955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.188867][ T970] usb 3-1: USB disconnect, device number 6 [ 143.316420][ T6958] loop4: detected capacity change from 0 to 16 [ 143.361701][ T6958] erofs: (device loop4): mounted with root inode @ nid 36. [ 143.539663][ T6948] loop1: detected capacity change from 0 to 32768 [ 143.620047][ T6948] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.786031][ T6948] XFS (loop1): Ending clean mount [ 143.987571][ T5836] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 144.015426][ T5836] XFS (loop1): Unmount and run xfs_repair [ 144.021236][ T5836] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 144.042316][ T6979] loop0: detected capacity change from 0 to 164 [ 144.055520][ T5836] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 144.067216][ T6953] loop2: detected capacity change from 0 to 32768 [ 144.095570][ T6953] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.281 (6953) [ 144.118207][ T5836] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 144.156288][ T6953] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 144.165860][ T5836] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 144.205311][ T5836] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 144.214235][ T5836] 00000040: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 ................ [ 144.215741][ T6953] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 144.265534][ T6953] BTRFS info (device loop2): enabling disk space caching [ 144.274339][ T5836] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 144.298725][ T5836] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 144.303322][ T6953] BTRFS info (device loop2): force clearing of disk cache [ 144.352681][ T5836] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 144.353378][ T6953] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 144.371644][ T6948] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 144.420932][ T6948] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 144.455375][ T6953] BTRFS info (device loop2): use lzo compression, level 0 [ 144.470860][ T6953] BTRFS info (device loop2): disk space caching is enabled [ 144.481227][ T6948] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 144.546321][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.684594][ T6953] BTRFS info (device loop2): enabling ssd optimizations [ 144.714985][ T6953] BTRFS info (device loop2): auto enabling async discard [ 144.769823][ T6953] BTRFS info (device loop2): rebuilding free space tree [ 144.875218][ T6953] BTRFS info (device loop2): disabling free space tree [ 144.898813][ T6976] loop4: detected capacity change from 0 to 40427 [ 144.905765][ T6953] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.925696][ T6976] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 144.936054][ T6953] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.957827][ T6976] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.988734][ T6976] F2FS-fs (loop4): invalid crc value [ 145.014726][ T6976] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.210877][ T6976] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 145.237094][ T6976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 145.526230][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 145.646596][ T11] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 145.686580][ T11] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 145.705476][ T7012] loop0: detected capacity change from 0 to 4096 [ 145.764729][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.820601][ T7014] ªªªªªª: renamed from vlan0 (while UP) [ 145.985413][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 145.993775][ T5836] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.034731][ T5836] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.056555][ T5836] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.095338][ T5836] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.175930][ T5836] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.189020][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.466538][ T5836] usb 2-1: GET_CAPABILITIES returned 0 [ 146.472142][ T5836] usbtmc 2-1:16.0: can't read capabilities [ 146.713254][ T7024] syzkaller1: entered promiscuous mode [ 146.722654][ T9] usb 2-1: USB disconnect, device number 5 [ 146.731124][ T7024] syzkaller1: entered allmulticast mode [ 147.026408][ T7032] loop0: detected capacity change from 0 to 2048 [ 147.089404][ T7036] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.244736][ T7036] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 147.261232][ T7036] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 147.279809][ T7036] Remounting filesystem read-only [ 147.285064][ T5067] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 147.293841][ T5067] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 147.309012][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.319488][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.329194][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.339289][ T5067] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 147.346387][ T5067] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 147.354675][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.364043][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.373204][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.388831][ T5067] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 147.399029][ T5067] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 147.410194][ T5067] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 147.418800][ T5067] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 147.440053][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.453717][ T5067] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 147.461906][ T5067] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 147.473873][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.484589][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.497311][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.511475][ T5067] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.525033][ T5778] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 147.534759][ T5778] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 147.541659][ T5778] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.551289][ T5778] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.561686][ T5778] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 147.569542][ T5778] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 147.702558][ T27] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 147.730798][ T27] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 147.761279][ T27] usb 3-1: Product: syz [ 147.799312][ T27] usb 3-1: config 0 descriptor?? [ 147.822082][ T27] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 147.845744][ T27] usb 3-1: Detected FT232H [ 147.957291][ T7053] warning: `syz.0.309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.035729][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 148.248848][ T7061] loop0: detected capacity change from 0 to 2048 [ 148.269875][ T7061] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 148.296590][ T7061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.330798][ T28] audit: type=1800 audit(1779044051.089:29): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.314" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 148.478542][ T27] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.704024][ T7066] loop8: detected capacity change from 0 to 7 [ 148.724566][ T7066] loop8: [POWERTEC] p1 [ 148.739731][ T7066] loop8: p1 start 448 is beyond EOD, truncated [ 148.762874][ T9] usb 3-1: USB disconnect, device number 7 [ 148.780153][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.819368][ T9] ftdi_sio 3-1:0.0: device disconnected [ 149.903472][ T7093] loop1: detected capacity change from 0 to 1024 [ 149.946603][ T7093] EXT4-fs: Ignoring removed bh option [ 150.026340][ T7093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.136459][ T28] audit: type=1800 audit(1779044052.909:30): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.329" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 150.162935][ T7093] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.329: bg 0: block 328: padding at end of block bitmap is not set [ 150.262178][ T7093] syz.1.329 (7093) used greatest stack depth: 19664 bytes left [ 150.284250][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.451041][ T7109] loop1: detected capacity change from 0 to 512 [ 150.471051][ T7109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.484021][ T7109] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.587679][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.667686][ T7107] loop2: detected capacity change from 0 to 4096 [ 150.795203][ T7113] netlink: 'syz.1.335': attribute type 3 has an invalid length. [ 151.209903][ T7120] loop0: detected capacity change from 0 to 256 [ 151.371581][ T7120] FAT-fs (loop0): Directory bread(block 64) failed [ 151.405521][ T7120] FAT-fs (loop0): Directory bread(block 65) failed [ 151.438830][ T7120] FAT-fs (loop0): Directory bread(block 66) failed [ 151.495980][ T7120] FAT-fs (loop0): Directory bread(block 67) failed [ 151.520224][ T7120] FAT-fs (loop0): Directory bread(block 68) failed [ 151.553962][ T7120] FAT-fs (loop0): Directory bread(block 69) failed [ 151.603761][ T7120] FAT-fs (loop0): Directory bread(block 70) failed [ 151.657341][ T7120] FAT-fs (loop0): Directory bread(block 71) failed [ 151.702123][ T7120] FAT-fs (loop0): Directory bread(block 72) failed [ 151.732655][ T7120] FAT-fs (loop0): Directory bread(block 73) failed [ 152.045272][ C1] sched: RT throttling activated [ 152.297749][ T7116] loop1: detected capacity change from 0 to 131072 [ 152.316438][ T7116] F2FS-fs (loop1): invalid crc value [ 152.358589][ T7116] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.413499][ T7116] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 152.595647][ T5836] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 152.716245][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.779957][ T5836] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 152.810388][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.858605][ T5836] usb 5-1: config 0 descriptor?? [ 152.874242][ T5836] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 152.915610][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 152.931500][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.942927][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.952802][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.967951][ T9] usb 1-1: config 0 descriptor?? [ 153.082372][ T5836] gp8psk: usb in 128 operation failed. [ 153.226358][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 153.283352][ T7146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.349'. [ 153.307630][ T5836] gp8psk: usb in 146 operation failed. [ 153.313160][ T5836] gp8psk: failed to get FW version [ 153.335776][ T5836] gp8psk: FPGA Version = 32 [ 153.537162][ T5836] gp8psk: usb in 138 operation failed. [ 153.559415][ T5836] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 153.580413][ T7150] loop1: detected capacity change from 0 to 512 [ 153.595457][ T5836] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 153.605002][ T7150] EXT4-fs: Ignoring removed oldalloc option [ 153.633147][ T5836] usb 5-1: USB disconnect, device number 7 [ 153.663221][ T27] usb 1-1: USB disconnect, device number 7 [ 153.679306][ T7150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.714670][ T7150] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.758628][ T7150] EXT4-fs (loop1): shut down requested (0) [ 153.851718][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.022891][ T7161] loop1: detected capacity change from 0 to 512 [ 154.054622][ T7161] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 154.073541][ T7161] EXT4-fs (loop1): invalid journal inode [ 154.080105][ T7161] EXT4-fs (loop1): can't get journal size [ 154.090862][ T7161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 154.100186][ T7161] System zones: 1-12, 13-13 [ 154.145789][ T7161] EXT4-fs (loop1): 1 truncate cleaned up [ 154.159423][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.362120][ T28] audit: type=1800 audit(1779044057.129:31): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.353" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 154.476779][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.006960][ T7165] loop4: detected capacity change from 0 to 32768 [ 155.131033][ T7165] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.229510][ T7165] XFS (loop4): Ending clean mount [ 155.260250][ T7165] XFS (loop4): Quotacheck needed: Please wait. [ 155.433603][ T7165] XFS (loop4): Quotacheck: Done. [ 155.443378][ T7176] loop2: detected capacity change from 0 to 32768 [ 155.706840][ T5911] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.764730][ T7176] syz.2.358: attempt to access beyond end of device [ 155.764730][ T7176] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 155.820986][ T7176] metapage_write_end_io: I/O error [ 155.882278][ T113] blkno = 8ed2c, nblocks = 1 [ 155.900932][ T7176] blkno = 8ed2c, nblocks = 1 [ 155.903272][ T7179] loop1: detected capacity change from 0 to 32768 [ 155.922515][ T113] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 155.922515][ T113] [ 155.935395][ T7176] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 155.935395][ T7176] [ 155.996503][ T113] ERROR: (device loop2): remounting filesystem as read-only [ 155.999405][ T7176] ERROR: (device loop2): remounting filesystem as read-only [ 156.015495][ T7179] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.359 (7179) [ 156.040414][ T49] JFS: metapage_get_blocks failed [ 156.080661][ T7176] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 156.080661][ T7176] [ 156.114361][ T7176] jfs_mkdir: dtSearch returned -5 [ 156.150814][ T7179] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 156.200809][ T7179] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 156.208824][ T7176] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 156.208824][ T7176] [ 156.236212][ T7179] BTRFS info (device loop1): enabling disk space caching [ 156.243444][ T7179] BTRFS info (device loop1): force clearing of disk cache [ 156.250310][ T7176] jfs_readdir: unexpected rc = -5 from dtReadNext [ 156.290216][ T7179] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 156.325390][ T7179] BTRFS info (device loop1): use lzo compression, level 0 [ 156.356679][ T5774] syz-executor: attempt to access beyond end of device [ 156.356679][ T5774] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 156.366216][ T7179] BTRFS info (device loop1): disk space caching is enabled [ 156.404427][ T5774] metapage_write_end_io: I/O error [ 156.419819][ T5774] JFS: metapage_get_blocks failed [ 156.431243][ T5774] JFS: metapage_get_blocks failed [ 156.440604][ T5774] JFS: metapage_get_blocks failed [ 156.452422][ T5774] JFS: metapage_get_blocks failed [ 156.491389][ T7193] loop0: detected capacity change from 0 to 32768 [ 156.546096][ T7179] BTRFS info (device loop1): enabling ssd optimizations [ 156.572170][ T7179] BTRFS info (device loop1): auto enabling async discard [ 156.586248][ T7179] BTRFS info (device loop1): rebuilding free space tree [ 156.604941][ T7179] BTRFS info (device loop1): disabling free space tree [ 156.612057][ T7179] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.622572][ T7179] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.786364][ T7193] JBD2: Ignoring recovery information on journal [ 156.914777][ T7216] loop4: detected capacity change from 0 to 256 [ 156.919529][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 157.060811][ T7218] team1: entered promiscuous mode [ 157.068883][ T7193] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 157.087892][ T7218] team1: entered allmulticast mode [ 157.098074][ T7218] 8021q: adding VLAN 0 to HW filter on device team1 [ 157.130078][ T7216] FAT-fs (loop4): Directory bread(block 64) failed [ 157.168707][ T7216] FAT-fs (loop4): Directory bread(block 65) failed [ 157.205616][ T7216] FAT-fs (loop4): Directory bread(block 66) failed [ 157.212236][ T7216] FAT-fs (loop4): Directory bread(block 67) failed [ 157.247121][ T7216] FAT-fs (loop4): Directory bread(block 68) failed [ 157.253852][ T7216] FAT-fs (loop4): Directory bread(block 69) failed [ 157.300797][ T5773] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 157.307601][ T7216] FAT-fs (loop4): Directory bread(block 70) failed [ 157.368801][ T7216] FAT-fs (loop4): Directory bread(block 71) failed [ 157.378076][ T7216] FAT-fs (loop4): Directory bread(block 72) failed [ 157.384676][ T7216] FAT-fs (loop4): Directory bread(block 73) failed [ 157.544565][ T28] audit: type=1800 audit(1779044060.309:32): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.366" name="bus" dev="loop4" ino=1048617 res=0 errno=0 [ 157.729151][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.367'. [ 157.789308][ T7226] bond0: ARP target 8.4.0.0 is already present [ 157.805778][ T7226] bond0: option arp_ip_target: invalid value (1032) [ 157.815730][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 158.357421][ T5850] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.555501][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 158.564534][ T5850] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 158.573348][ T5850] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.594708][ T5850] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.605438][ T5836] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.615898][ T5850] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.634430][ T5850] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.659601][ T5850] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.670013][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.810044][ T5836] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.830595][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.844329][ T5836] usb 3-1: config 0 descriptor?? [ 158.857463][ T5836] cp210x 3-1:0.0: cp210x converter detected [ 158.893243][ T5850] usb 2-1: GET_CAPABILITIES returned 0 [ 158.899057][ T5850] usbtmc 2-1:16.0: can't read capabilities [ 159.061694][ T7251] loop4: detected capacity change from 0 to 1024 [ 159.074457][ T7251] hfsplus: invalid catalog max_key_len 715 [ 159.082229][ T7251] hfsplus: failed to load catalog file [ 159.118202][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.135691][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.144863][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.154002][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.163144][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 159.175353][ T9] usb 2-1: USB disconnect, device number 6 [ 159.503737][ T5836] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 159.512827][ T5836] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 159.530705][ T5836] usb 3-1: cp210x converter now attached to ttyUSB0 [ 159.550503][ T5836] usb 3-1: USB disconnect, device number 8 [ 159.582818][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.605142][ T5836] cp210x 3-1:0.0: device disconnected [ 160.118064][ T7260] loop0: detected capacity change from 0 to 32768 [ 160.209270][ T7260] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.220660][ T7268] loop1: detected capacity change from 0 to 4096 [ 160.335515][ T7260] XFS (loop0): Ending clean mount [ 160.358284][ T7260] XFS (loop0): Quotacheck needed: Please wait. [ 160.366651][ T7280] loop2: detected capacity change from 0 to 1024 [ 160.396204][ T7280] EXT4-fs: Ignoring removed orlov option [ 160.464604][ T7260] XFS (loop0): Quotacheck: Done. [ 160.509692][ T7280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.790226][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.819028][ T7290] block nbd1: NBD_DISCONNECT [ 160.973636][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.234989][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'. [ 161.256575][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'. [ 161.318973][ T7300] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.735369][ T5836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 161.786312][ T970] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 161.932225][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.953695][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.978718][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 161.983968][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.993119][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.018872][ T5836] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.026177][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.045405][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.046134][ T970] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.076816][ T5836] usb 5-1: config 0 descriptor?? [ 162.082288][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.115464][ T970] usb 3-1: config 0 descriptor?? [ 162.139186][ T970] hub 3-1:0.0: USB hub found [ 162.347039][ T970] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 162.468214][ T7319] loop1: detected capacity change from 0 to 32768 [ 162.524709][ T5836] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 162.553757][ T5836] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 162.622521][ T7326] loop0: detected capacity change from 0 to 4096 [ 162.664446][ T7328] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.830341][ T970] hid-generic 0003:046D:C31C.0005: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 163.195874][ T970] usb 3-1: USB disconnect, device number 9 [ 163.263992][ T113] ------------[ cut here ]------------ [ 163.270176][ T113] WARNING: CPU: 1 PID: 113 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 163.278993][ T113] Modules linked in: [ 163.282963][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 163.290576][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.301034][ T113] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 163.306543][ T113] Code: e8 cd bb db fe e9 5a ff ff ff e8 d3 80 83 fe eb 05 e8 cc 80 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b8 80 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 163.326942][ T113] RSP: 0018:ffffc90002cf7648 EFLAGS: 00010293 [ 163.333090][ T113] RAX: ffffffff8303a6e8 RBX: ffff888067069010 RCX: ffff888018f19e00 [ 163.341354][ T113] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 163.349420][ T113] RBP: 0000000000020056 R08: ffffea00019c1a47 R09: 1ffffd4000338348 [ 163.357484][ T113] R10: dffffc0000000000 R11: fffff94000338349 R12: ffff888067069018 [ 163.365560][ T113] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 163.373589][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 163.382647][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.389532][ T113] CR2: 00007fd454cee9d3 CR3: 000000001c7e5000 CR4: 00000000003506e0 [ 163.397614][ T113] Call Trace: [ 163.400949][ T113] [ 163.403930][ T113] ? lock_page+0x2a0/0x2a0 [ 163.408472][ T113] dbJoin+0x238/0x300 [ 163.412531][ T113] dbFreeBits+0x4e1/0xda0 [ 163.417009][ T113] dbFree+0x332/0x650 [ 163.421193][ T113] txFreeMap+0x9e6/0xde0 [ 163.425567][ T113] ? do_raw_spin_unlock+0x121/0x230 [ 163.431420][ T113] xtTruncate+0xd27/0x2ec0 [ 163.435919][ T7326] syz.0.408 (7326) used greatest stack depth: 19440 bytes left [ 163.443885][ T113] ? xtInitRoot+0x170/0x170 [ 163.448528][ T113] ? __lock_acquire+0x7d40/0x7d40 [ 163.453628][ T113] ? do_raw_spin_lock+0x11f/0x2c0 [ 163.458782][ T113] ? __asan_memset+0x22/0x40 [ 163.463432][ T113] ? __dquot_initialize+0x217/0xcd0 [ 163.469176][ T113] jfs_free_zero_link+0x35c/0x4c0 [ 163.474263][ T113] ? inode_wait_for_writeback+0x1e3/0x230 [ 163.480120][ T113] ? jfs_write_failed+0x190/0x190 [ 163.485205][ T113] ? sb_clear_inode_writeback+0x360/0x360 [ 163.491198][ T113] ? do_raw_spin_lock+0x11f/0x2c0 [ 163.496317][ T113] ? bit_waitqueue+0x30/0x30 [ 163.500961][ T113] jfs_evict_inode+0x35d/0x440 [ 163.505829][ T113] ? evict+0x4c4/0x8d0 [ 163.509954][ T113] ? jfs_write_inode+0x220/0x220 [ 163.514935][ T113] evict+0x4ca/0x8d0 [ 163.519028][ T113] ? proc_nr_inodes+0x230/0x230 [ 163.523932][ T113] ? do_raw_spin_unlock+0x121/0x230 [ 163.529968][ T113] ? _raw_spin_unlock+0x28/0x40 [ 163.534897][ T113] ? iput+0x706/0x920 [ 163.539180][ T113] jfs_lazycommit+0x429/0xa70 [ 163.543925][ T113] ? txFreelock+0x5a0/0x5a0 [ 163.548583][ T113] ? do_task_dead+0xd0/0xd0 [ 163.553143][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 163.558199][ T113] kthread+0x2fa/0x390 [ 163.562323][ T113] ? txFreelock+0x5a0/0x5a0 [ 163.566937][ T113] ? kthread_blkcg+0xd0/0xd0 [ 163.571584][ T113] ret_from_fork+0x48/0x80 [ 163.576161][ T113] ? kthread_blkcg+0xd0/0xd0 [ 163.580806][ T113] ret_from_fork_asm+0x11/0x20 [ 163.585673][ T113] [ 163.588735][ T113] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 163.596043][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 163.603289][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.613392][ T113] Call Trace: [ 163.616712][ T113] [ 163.619682][ T113] dump_stack_lvl+0x18c/0x250 [ 163.624410][ T113] ? show_regs_print_info+0x20/0x20 [ 163.629682][ T113] ? load_image+0x420/0x420 [ 163.634259][ T113] panic+0x2dc/0x730 [ 163.638219][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 163.642788][ T113] ? ret_from_fork_asm+0x11/0x20 [ 163.647784][ T113] __warn+0x2e0/0x470 [ 163.651806][ T113] ? dbAdjTree+0x448/0x4d0 [ 163.656264][ T113] ? dbAdjTree+0x448/0x4d0 [ 163.660709][ T113] report_bug+0x2be/0x4f0 [ 163.665068][ T113] ? dbAdjTree+0x448/0x4d0 [ 163.669515][ T113] ? dbAdjTree+0x448/0x4d0 [ 163.673967][ T113] ? dbAdjTree+0x44a/0x4d0 [ 163.678420][ T113] handle_bug+0xcf/0x120 [ 163.682695][ T113] exc_invalid_op+0x1a/0x50 [ 163.687226][ T113] asm_exc_invalid_op+0x1a/0x20 [ 163.692113][ T113] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 163.697174][ T113] Code: e8 cd bb db fe e9 5a ff ff ff e8 d3 80 83 fe eb 05 e8 cc 80 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b8 80 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 163.716821][ T113] RSP: 0018:ffffc90002cf7648 EFLAGS: 00010293 [ 163.722922][ T113] RAX: ffffffff8303a6e8 RBX: ffff888067069010 RCX: ffff888018f19e00 [ 163.730926][ T113] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 163.738926][ T113] RBP: 0000000000020056 R08: ffffea00019c1a47 R09: 1ffffd4000338348 [ 163.746924][ T113] R10: dffffc0000000000 R11: fffff94000338349 R12: ffff888067069018 [ 163.754921][ T113] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 163.762926][ T113] ? dbAdjTree+0x448/0x4d0 [ 163.767422][ T113] ? dbAdjTree+0x448/0x4d0 [ 163.771888][ T113] ? lock_page+0x2a0/0x2a0 [ 163.776361][ T113] dbJoin+0x238/0x300 [ 163.780388][ T113] dbFreeBits+0x4e1/0xda0 [ 163.784807][ T113] dbFree+0x332/0x650 [ 163.788850][ T113] txFreeMap+0x9e6/0xde0 [ 163.793151][ T113] ? do_raw_spin_unlock+0x121/0x230 [ 163.798406][ T113] xtTruncate+0xd27/0x2ec0 [ 163.802963][ T113] ? xtInitRoot+0x170/0x170 [ 163.807542][ T113] ? __lock_acquire+0x7d40/0x7d40 [ 163.812616][ T113] ? do_raw_spin_lock+0x11f/0x2c0 [ 163.817685][ T113] ? __asan_memset+0x22/0x40 [ 163.822306][ T113] ? __dquot_initialize+0x217/0xcd0 [ 163.827540][ T113] jfs_free_zero_link+0x35c/0x4c0 [ 163.832609][ T113] ? inode_wait_for_writeback+0x1e3/0x230 [ 163.838377][ T113] ? jfs_write_failed+0x190/0x190 [ 163.843617][ T113] ? sb_clear_inode_writeback+0x360/0x360 [ 163.849379][ T113] ? do_raw_spin_lock+0x11f/0x2c0 [ 163.854456][ T113] ? bit_waitqueue+0x30/0x30 [ 163.859083][ T113] jfs_evict_inode+0x35d/0x440 [ 163.863881][ T113] ? evict+0x4c4/0x8d0 [ 163.867986][ T113] ? jfs_write_inode+0x220/0x220 [ 163.873066][ T113] evict+0x4ca/0x8d0 [ 163.877035][ T113] ? proc_nr_inodes+0x230/0x230 [ 163.882137][ T113] ? do_raw_spin_unlock+0x121/0x230 [ 163.887533][ T113] ? _raw_spin_unlock+0x28/0x40 [ 163.892428][ T113] ? iput+0x706/0x920 [ 163.896452][ T113] jfs_lazycommit+0x429/0xa70 [ 163.901174][ T113] ? txFreelock+0x5a0/0x5a0 [ 163.905708][ T113] ? do_task_dead+0xd0/0xd0 [ 163.910245][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 163.915217][ T113] kthread+0x2fa/0x390 [ 163.919317][ T113] ? txFreelock+0x5a0/0x5a0 [ 163.923850][ T113] ? kthread_blkcg+0xd0/0xd0 [ 163.928468][ T113] ret_from_fork+0x48/0x80 [ 163.933007][ T113] ? kthread_blkcg+0xd0/0xd0 [ 163.937632][ T113] ret_from_fork_asm+0x11/0x20 [ 163.942439][ T113] [ 163.945627][ T113] Kernel Offset: disabled [ 163.950065][ T113] Rebooting in 86400 seconds..