last executing test programs: 4.155573589s ago: executing program 0 (id=608): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)={[{@gid={'gid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x10000007}}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x400}}, {@discard}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) 3.539316321s ago: executing program 0 (id=611): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785a1292fcb8c1d3079a00db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8430a19f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33fe226c944bc76be40d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e02200b95941d34ac81fd48f9b7314ffa730017f3d37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080c4adf75a0a108585e9b2000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089b"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) 3.320879175s ago: executing program 0 (id=613): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 3.295705706s ago: executing program 2 (id=614): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) 3.096361729s ago: executing program 2 (id=616): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x4, {}, {}, @raw32={[0x0, 0x8]}}], 0x1c) 3.003667812s ago: executing program 0 (id=617): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x132, &(0x7f0000000600)=ANY=[], 0x0) 2.905353633s ago: executing program 2 (id=619): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.671631948s ago: executing program 0 (id=621): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x6e}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@rodir}, {@shortname_win95}]}, 0x2a, 0x33c, &(0x7f0000000a40)="$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") 2.669317108s ago: executing program 2 (id=622): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.59757168s ago: executing program 1 (id=624): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.409766543s ago: executing program 3 (id=625): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 2.08067846s ago: executing program 3 (id=626): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0xf7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.598889229s ago: executing program 3 (id=627): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=""/17, 0x11}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x80, @mcast1}, 0x1c) 1.475242791s ago: executing program 1 (id=628): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.285119225s ago: executing program 1 (id=629): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) 1.276533815s ago: executing program 3 (id=630): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4e84}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1.04657941s ago: executing program 1 (id=631): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x3, 0x5eb, &(0x7f0000000600)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 1.00943982s ago: executing program 3 (id=632): r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 811.623094ms ago: executing program 3 (id=633): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000340)='./file1\x00', 0x8488, &(0x7f00000002c0), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) write(r0, &(0x7f0000000180)="ab", 0x1) 585.430499ms ago: executing program 2 (id=634): syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000140021052bbd7000fbdbdf250a4000fe", @ANYRES32=r2, @ANYBLOB="08000a00040000000800080086060000140006000200000008000000010000000800000014000200ff"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44080) 273.868795ms ago: executing program 1 (id=635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 148.594497ms ago: executing program 2 (id=636): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x4018}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 846.52µs ago: executing program 0 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93c8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=638): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.205' (ED25519) to the list of known hosts. [ 82.423436][ T5777] cgroup: Unknown subsys name 'net' [ 82.595116][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.403717][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.565687][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.565686][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.567006][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.590326][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.590802][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.606252][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.607172][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.627566][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.635680][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.645489][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.653835][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.657785][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.662313][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.669889][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.678128][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.685135][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.691436][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.698884][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.707151][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.712937][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.719680][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.733757][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.735304][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.750008][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.301962][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.319627][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.493950][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 87.732860][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.741977][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.754860][ T5788] bridge_slave_0: entered allmulticast mode [ 87.762748][ T5788] bridge_slave_0: entered promiscuous mode [ 87.794860][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.805533][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.813382][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.820897][ T5788] bridge_slave_1: entered allmulticast mode [ 87.828849][ T5788] bridge_slave_1: entered promiscuous mode [ 87.903622][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.911176][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.918664][ T5786] bridge_slave_0: entered allmulticast mode [ 87.925975][ T5786] bridge_slave_0: entered promiscuous mode [ 87.945565][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.953225][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.960563][ T5787] bridge_slave_0: entered allmulticast mode [ 87.968605][ T5787] bridge_slave_0: entered promiscuous mode [ 87.977473][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.984870][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.993162][ T5787] bridge_slave_1: entered allmulticast mode [ 88.000812][ T5787] bridge_slave_1: entered promiscuous mode [ 88.030819][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.040546][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.048476][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.056260][ T5786] bridge_slave_1: entered allmulticast mode [ 88.063618][ T5786] bridge_slave_1: entered promiscuous mode [ 88.091717][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.162389][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.203249][ T5788] team0: Port device team_slave_0 added [ 88.212448][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.225253][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.263791][ T5788] team0: Port device team_slave_1 added [ 88.272397][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.293473][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.301463][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.308855][ T5789] bridge_slave_0: entered allmulticast mode [ 88.316333][ T5789] bridge_slave_0: entered promiscuous mode [ 88.366619][ T5787] team0: Port device team_slave_0 added [ 88.373338][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.380783][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.388784][ T5789] bridge_slave_1: entered allmulticast mode [ 88.396003][ T5789] bridge_slave_1: entered promiscuous mode [ 88.422914][ T5786] team0: Port device team_slave_0 added [ 88.431932][ T5787] team0: Port device team_slave_1 added [ 88.452176][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.459879][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.486396][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.501334][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.508513][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.541305][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.555120][ T5786] team0: Port device team_slave_1 added [ 88.595302][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.634797][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.642358][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.668860][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.686399][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.709888][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.717400][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.744448][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.756803][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.763807][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.791195][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.791249][ T5801] Bluetooth: hci1: command tx timeout [ 88.803133][ T51] Bluetooth: hci3: command tx timeout [ 88.836713][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.844030][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.870956][ T5801] Bluetooth: hci2: command tx timeout [ 88.876038][ T5801] Bluetooth: hci0: command tx timeout [ 88.877397][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.932070][ T5788] hsr_slave_0: entered promiscuous mode [ 88.939357][ T5788] hsr_slave_1: entered promiscuous mode [ 88.979852][ T5789] team0: Port device team_slave_0 added [ 88.991102][ T5787] hsr_slave_0: entered promiscuous mode [ 88.998757][ T5787] hsr_slave_1: entered promiscuous mode [ 89.005579][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.013857][ T5787] Cannot create hsr debugfs directory [ 89.036926][ T5789] team0: Port device team_slave_1 added [ 89.133416][ T5786] hsr_slave_0: entered promiscuous mode [ 89.140619][ T5786] hsr_slave_1: entered promiscuous mode [ 89.147669][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.155643][ T5786] Cannot create hsr debugfs directory [ 89.228020][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.235024][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.262058][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.306370][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.313497][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.340178][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.549612][ T5789] hsr_slave_0: entered promiscuous mode [ 89.556633][ T5789] hsr_slave_1: entered promiscuous mode [ 89.563218][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.574045][ T5789] Cannot create hsr debugfs directory [ 89.736419][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.749582][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.776141][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.808555][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.875080][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.896108][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.931039][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.958833][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.004461][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.030587][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.042805][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.053995][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.178197][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.189098][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.218557][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.239265][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.349166][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.391529][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.423867][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.452347][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.460146][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.485264][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.492677][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.505321][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.541693][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.548898][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.574107][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.604613][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.612256][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.665766][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.682206][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.720997][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.728572][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.764530][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.787588][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.794843][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.846657][ T5801] Bluetooth: hci1: command tx timeout [ 90.846666][ T51] Bluetooth: hci3: command tx timeout [ 90.908034][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.915330][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.926456][ T5801] Bluetooth: hci0: command tx timeout [ 90.926677][ T51] Bluetooth: hci2: command tx timeout [ 90.981056][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.988723][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.225229][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.404388][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.429693][ T5787] veth0_vlan: entered promiscuous mode [ 91.503538][ T5787] veth1_vlan: entered promiscuous mode [ 91.595453][ T5788] veth0_vlan: entered promiscuous mode [ 91.655499][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.671933][ T5788] veth1_vlan: entered promiscuous mode [ 91.681455][ T5787] veth0_macvtap: entered promiscuous mode [ 91.693225][ T5787] veth1_macvtap: entered promiscuous mode [ 91.751492][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.769379][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.848177][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.868994][ T5788] veth0_macvtap: entered promiscuous mode [ 91.881856][ T5788] veth1_macvtap: entered promiscuous mode [ 91.915656][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.925626][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.935618][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.944859][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.969230][ T5786] veth0_vlan: entered promiscuous mode [ 91.984305][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.995200][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.008399][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.032091][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.043682][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.058065][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.070483][ T5786] veth1_vlan: entered promiscuous mode [ 92.087271][ T5789] veth0_vlan: entered promiscuous mode [ 92.104580][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.116050][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.125452][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.140664][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.230182][ T5789] veth1_vlan: entered promiscuous mode [ 92.314739][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.325406][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.354145][ T5786] veth0_macvtap: entered promiscuous mode [ 92.372141][ T8] cfg80211: failed to load regulatory.db [ 92.416741][ T5786] veth1_macvtap: entered promiscuous mode [ 92.429239][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.439583][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.458642][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.466324][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.502624][ T5789] veth0_macvtap: entered promiscuous mode [ 92.517944][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.535169][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.545666][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.558734][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.572029][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.605057][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.606001][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.630468][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.637036][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.649312][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.660686][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.674011][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.695435][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.704849][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.714546][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.723801][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.769619][ T5789] veth1_macvtap: entered promiscuous mode [ 92.860322][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.874494][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.889979][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.905292][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.916245][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.927508][ T51] Bluetooth: hci3: command tx timeout [ 92.936516][ T5801] Bluetooth: hci1: command tx timeout [ 92.961232][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.973330][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.006317][ T51] Bluetooth: hci2: command tx timeout [ 93.006332][ T5801] Bluetooth: hci0: command tx timeout [ 93.033931][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.073102][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.095249][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.124425][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.149996][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.166807][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.182796][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.245487][ T5887] syz.1.6[5887]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.253251][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.257439][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.277238][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.290039][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.298333][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.314231][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.333846][ T5887] loop1: detected capacity change from 0 to 2048 [ 93.526911][ T5890] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.547452][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.587414][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.635709][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.682935][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.721759][ T5890] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 93.740121][ T5890] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 93.766670][ T5890] Remounting filesystem read-only [ 93.829527][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.852824][ T5788] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 93.866890][ T5788] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 93.873147][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.900912][ T5788] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 93.946769][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.969528][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 93.995121][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.015069][ T5788] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 94.029296][ T5788] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 94.041355][ T5788] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 94.054582][ T5788] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 94.081416][ T5788] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 94.108468][ T5788] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 94.118524][ T5788] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 94.140983][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.176467][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.189046][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.211001][ T5788] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 94.220615][ T5788] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 94.231356][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.250171][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.261616][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.278113][ T5788] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 94.290908][ T5788] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 94.305273][ T5899] loop0: detected capacity change from 0 to 512 [ 94.312441][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.323292][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.335217][ T5899] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.342361][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.352496][ T5899] ext4: Unknown parameter 'seclabel' [ 94.360096][ T5788] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 94.385489][ T5788] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 94.425904][ T5788] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 94.458237][ T5788] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 94.465651][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.497943][ T5788] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 94.515897][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.525620][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.555763][ T5788] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 94.615956][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.976798][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.994298][ T28] audit: type=1326 audit(1759423274.496:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.3.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b18b8eec9 code=0x7ffc0000 [ 95.016450][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.028734][ T5801] Bluetooth: hci1: command tx timeout [ 95.034416][ T51] Bluetooth: hci3: command tx timeout [ 95.048619][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.087128][ T5801] Bluetooth: hci2: command tx timeout [ 95.093464][ T51] Bluetooth: hci0: command tx timeout [ 95.226165][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 95.250362][ T5836] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.275430][ T5836] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.295026][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.314040][ T5836] usb 1-1: Product: syz [ 95.327326][ T5836] usb 1-1: Manufacturer: syz [ 95.332289][ T5836] usb 1-1: SerialNumber: syz [ 95.350449][ T5836] usb 1-1: config 0 descriptor?? [ 95.368500][ T5906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.382189][ T5836] hub 1-1:0.0: bad descriptor, ignoring hub [ 95.389324][ T5836] hub: probe of 1-1:0.0 failed with error -5 [ 95.416218][ T1188] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.621457][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.643307][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.680604][ T1188] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 95.696257][ T1188] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 95.715814][ T1188] usb 3-1: Manufacturer: syz [ 95.725503][ T1188] usb 3-1: config 0 descriptor?? [ 96.140312][ T8] usb 1-1: USB disconnect, device number 2 [ 96.199347][ T1188] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 96.229530][ T1188] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 96.269633][ T1188] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 96.287748][ T1188] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 96.311506][ T1188] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 96.347530][ T1188] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 96.404680][ T1188] usb 3-1: USB disconnect, device number 2 [ 96.549164][ T5836] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.678391][ T5940] fido_id[5940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 96.777928][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.789212][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.820494][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.865935][ T5836] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.886089][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.909960][ T5836] usb 2-1: config 0 descriptor?? [ 97.185878][ T51] Bluetooth: hci2: command tx timeout [ 97.355037][ T5836] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 97.408909][ T5836] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 97.767512][ T1188] usb 2-1: USB disconnect, device number 2 [ 98.276242][ T5998] capability: warning: `syz.0.30' uses deprecated v2 capabilities in a way that may be insecure [ 98.974123][ T6025] warning: `syz.2.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.276136][ T6034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.313644][ T6034] syz_tun: entered promiscuous mode [ 99.346769][ T6034] syz_tun: left promiscuous mode [ 100.127705][ T6032] loop3: detected capacity change from 0 to 32768 [ 100.189180][ T6032] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.408531][ T6032] XFS (loop3): Ending clean mount [ 100.610021][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.851612][ T6051] loop0: detected capacity change from 0 to 32768 [ 100.895087][ T6051] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 100.931593][ T6051] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.978895][ T6080] loop3: detected capacity change from 0 to 128 [ 100.989026][ T6080] ======================================================= [ 100.989026][ T6080] WARNING: The mand mount option has been deprecated and [ 100.989026][ T6080] and is ignored by this kernel. Remove the mand [ 100.989026][ T6080] option from the mount to silence this warning. [ 100.989026][ T6080] ======================================================= [ 101.052540][ T6080] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.098893][ T6080] hpfs: filesystem error: improperly stopped [ 101.105237][ T6080] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.113460][ T6080] hpfs: You really don't want any checks? You are crazy... [ 101.122179][ T6080] hpfs: hpfs_map_sector(): read error [ 101.131547][ T6080] hpfs: code page support is disabled [ 101.138918][ T6080] hpfs: hpfs_map_4sectors(): unaligned read [ 101.147792][ T6080] hpfs: hpfs_map_4sectors(): unaligned read [ 101.171405][ T6080] hpfs: filesystem error: unable to find root dir [ 101.195083][ T6051] XFS (loop0): Ending clean mount [ 101.263559][ T6051] XFS (loop0): Quotacheck needed: Please wait. [ 101.299321][ T6084] loop1: detected capacity change from 0 to 2048 [ 101.310427][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 101.336728][ T6086] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 101.357488][ T6086] Zero length message leads to an empty skb [ 101.395019][ T6051] XFS (loop0): Quotacheck: Done. [ 101.470052][ T6084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.668909][ T6084] EXT4-fs (loop1): shut down requested (1) [ 101.712857][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 101.752620][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.014676][ T6102] loop1: detected capacity change from 0 to 1024 [ 102.030992][ T6102] EXT4-fs: Ignoring removed nobh option [ 102.044117][ T6102] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.086738][ T6102] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.53: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 102.118186][ T6102] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.53: couldn't read orphan inode 11 (err -117) [ 102.157338][ T6102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.175984][ T8] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 102.301824][ T6102] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.53: Invalid block bitmap block 0 in block_group 0 [ 102.321409][ T6102] Quota error (device loop1): write_blk: dquota write failed [ 102.333098][ T6102] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 102.347068][ T6102] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.53: Failed to acquire dquot type 0 [ 102.404259][ T6102] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.53: Invalid block bitmap block 21474836480 in block_group 0 [ 102.408444][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.456476][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.488052][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.499156][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.499740][ T6003] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm kworker/u4:17: Invalid inode table block 8589934593 in block_group 0 [ 102.538005][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.586105][ T5791] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.673121][ T6115] loop1: detected capacity change from 0 to 128 [ 102.743459][ T6115] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.772256][ T6115] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.786465][ T8] usb 4-1: usb_control_msg returned -32 [ 102.792209][ T8] usbtmc 4-1:16.0: can't read capabilities [ 102.812696][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 102.826516][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.838607][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.848742][ T5791] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.862083][ T5791] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.873447][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.886695][ T5791] usb 3-1: config 0 descriptor?? [ 103.003836][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.193521][ T6120] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 103.219965][ T5836] usb 4-1: USB disconnect, device number 2 [ 103.311457][ T5791] HID 045e:07da: Invalid code 65791 type 1 [ 103.318587][ T6118] loop0: detected capacity change from 0 to 32768 [ 103.357604][ T5791] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input5 [ 103.445737][ T5791] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 103.496771][ T6118] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.611958][ T5791] usb 3-1: USB disconnect, device number 3 [ 103.753399][ T6128] fido_id[6128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 103.961934][ T6130] syz.0.59 (6130) used greatest stack depth: 19248 bytes left [ 104.101787][ T5786] (syz-executor,5786,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 104.139359][ T6140] 9pnet: p9_errstr2errno: server reported unknown error @cF [ 104.152232][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 104.449167][ T6146] loop1: detected capacity change from 0 to 2048 [ 104.502785][ T6148] loop2: detected capacity change from 0 to 16 [ 104.532694][ T6148] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.546322][ T6146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.573701][ T965] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.793245][ T965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.826772][ T965] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 104.854297][ T965] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.864446][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.906403][ T965] usb 4-1: Product: syz [ 104.921272][ T965] usb 4-1: Manufacturer: syz [ 104.931189][ T965] usb 4-1: SerialNumber: syz [ 104.977463][ T965] cdc_mbim 4-1:1.0: skipping garbage [ 105.206522][ T6142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.229494][ T6158] loop0: detected capacity change from 0 to 4096 [ 105.241172][ T6158] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 105.347859][ T6158] ntfs3: loop0: MFT: r=18, expect seq=1 instead of 0! [ 105.357479][ T6158] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 105.371803][ T6158] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 105.406289][ T5791] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.612844][ T5791] usb 3-1: Using ep0 maxpacket: 8 [ 105.637347][ T5791] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.670413][ T5791] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.696037][ T5791] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.719819][ T5791] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.754514][ T5791] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.785073][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.834347][ T6142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.872190][ T965] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 105.899642][ T965] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 105.954067][ T965] wwan wwan0: port wwan0mbim0 attached [ 105.995153][ T965] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 4a:59:97:78:e8:78 [ 106.064785][ T5791] usb 3-1: GET_CAPABILITIES returned 0 [ 106.080849][ T5791] usbtmc 3-1:16.0: can't read capabilities [ 106.273469][ T1188] usb 4-1: USB disconnect, device number 3 [ 106.290889][ T1188] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 106.338630][ T6161] cdc_mbim 4-1:1.0: Error submitting int urb - -19 [ 106.368396][ T5791] usb 3-1: USB disconnect, device number 4 [ 106.477370][ T1188] wwan wwan0: port wwan0mbim0 disconnected [ 107.889715][ T6222] 9p: Unknown uid 00000000004294967295 [ 108.485841][ C1] sched: RT throttling activated [ 108.760103][ T6215] loop0: detected capacity change from 0 to 131072 [ 108.778500][ T6215] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 108.787862][ T6215] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.815196][ T6215] F2FS-fs (loop0): invalid crc value [ 108.850080][ T6239] loop2: detected capacity change from 0 to 512 [ 108.865642][ T6215] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.954138][ T6215] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.961631][ T6215] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 108.987023][ T6239] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.115752][ T6239] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 109.170613][ T6239] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 110.749560][ T6266] process 'syz.3.108' launched './file0' with NULL argv: empty string added [ 111.233582][ T6264] loop2: detected capacity change from 0 to 32768 [ 111.532252][ T5836] kernel write not supported for file /91/attr/exec (pid: 5836 comm: kworker/1:4) [ 111.736809][ T6275] loop0: detected capacity change from 0 to 32768 [ 111.841287][ T6275] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.937603][ T6275] (syz.0.101,6275,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 111.962940][ T6275] (syz.0.101,6275,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 112.073752][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 112.887054][ T1188] delete_channel: no stack [ 113.043225][ T6304] syz.1.123 uses obsolete (PF_INET,SOCK_PACKET) [ 113.452953][ T6312] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004DB|0xffffffffffffffff [ 114.476832][ T6309] loop2: detected capacity change from 0 to 131072 [ 114.486141][ T6309] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 114.494479][ T6309] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 114.515650][ T6309] F2FS-fs (loop2): invalid crc value [ 114.572533][ T6309] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.666060][ T6309] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 114.673276][ T6309] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 114.758104][ T6313] loop3: detected capacity change from 0 to 32768 [ 114.815018][ T6313] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.053102][ T6315] loop1: detected capacity change from 0 to 40427 [ 115.097038][ T6315] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 115.138415][ T6313] XFS (loop3): Ending clean mount [ 115.169634][ T6315] F2FS-fs (loop1): invalid crc value [ 115.199727][ T6315] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.207336][ T6313] XFS (loop3): Quotacheck needed: Please wait. [ 115.304786][ T6313] XFS (loop3): Quotacheck: Done. [ 115.452666][ T6315] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.590448][ T28] audit: type=1804 audit(1759423295.076:3): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.128" name="/newroot/27/file0/file1" dev="loop3" ino=9286 res=1 errno=0 [ 115.695093][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.834859][ T5788] syz-executor: attempt to access beyond end of device [ 115.834859][ T5788] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.877764][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 116.489109][ T6351] loop3: detected capacity change from 0 to 4096 [ 116.527750][ T6351] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 116.560547][ T6351] ntfs3: loop3: It is recommened to use chkdsk. [ 117.494503][ T6377] netlink: 'syz.0.149': attribute type 12 has an invalid length. [ 117.643396][ T6383] kernel read not supported for file /묥 (pid: 6383 comm: syz.2.153) [ 117.658391][ T28] audit: type=1800 audit(1759423297.166:4): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.153" name=EBACA503 dev="mqueue" ino=9028 res=0 errno=0 [ 118.036140][ T5791] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.051310][ T6394] gre0: Master is either lo or non-ether device [ 118.172834][ T6398] loop3: detected capacity change from 0 to 256 [ 118.195998][ T6398] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.215003][ T6398] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 118.248042][ T5791] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 118.258117][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.267593][ T6398] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 118.280739][ T5791] usb 2-1: Product: syz [ 118.285074][ T5791] usb 2-1: Manufacturer: syz [ 118.305895][ T5791] usb 2-1: SerialNumber: syz [ 118.322494][ T5791] usb 2-1: config 0 descriptor?? [ 119.084406][ T6411] loop0: detected capacity change from 0 to 64 [ 119.213079][ T6411] Trying to free block not in datazone [ 119.231701][ T6411] Trying to free block not in datazone [ 119.271480][ T6404] loop3: detected capacity change from 0 to 32768 [ 119.300446][ T6411] Trying to free block not in datazone [ 119.376851][ T5791] usb 2-1: Firmware version (0.0) predates our first public release. [ 119.397320][ T5791] usb 2-1: Please update to version 0.2 or newer [ 119.527764][ T5791] usb 2-1: USB disconnect, device number 3 [ 120.085468][ T6426] loop1: detected capacity change from 0 to 256 [ 120.195320][ T6426] FAT-fs (loop1): Directory bread(block 64) failed [ 120.229965][ T6426] FAT-fs (loop1): Directory bread(block 65) failed [ 120.269738][ T6426] FAT-fs (loop1): Directory bread(block 66) failed [ 120.293217][ T6426] FAT-fs (loop1): Directory bread(block 67) failed [ 120.308258][ T6426] FAT-fs (loop1): Directory bread(block 68) failed [ 120.316927][ T6426] FAT-fs (loop1): Directory bread(block 69) failed [ 120.331697][ T6426] FAT-fs (loop1): Directory bread(block 70) failed [ 120.341263][ T6426] FAT-fs (loop1): Directory bread(block 71) failed [ 120.369590][ T6426] FAT-fs (loop1): Directory bread(block 72) failed [ 120.384674][ T6426] FAT-fs (loop1): Directory bread(block 73) failed [ 120.413363][ T6433] loop2: detected capacity change from 0 to 2048 [ 120.459091][ T6435] loop8: detected capacity change from 0 to 8 [ 120.467495][ T6433] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.496013][ T6435] Dev loop8: unable to read RDB block 8 [ 120.502979][ T6435] loop8: unable to read partition table [ 120.520923][ T6435] loop8: partition table beyond EOD, truncated [ 120.544627][ T6435] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 120.786281][ T6000] kworker/u4:16: attempt to access beyond end of device [ 120.786281][ T6000] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 120.933588][ T6442] loop0: detected capacity change from 0 to 1024 [ 120.986297][ T6442] EXT4-fs: Ignoring removed orlov option [ 121.063783][ T6442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.227450][ T28] audit: type=1800 audit(1759423300.736:5): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.177" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 121.310330][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.438494][ T6456] loop0: detected capacity change from 0 to 8 [ 121.486350][ T2178] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.694275][ T2178] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 121.716700][ T2178] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 121.741317][ T2178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.779458][ T2178] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.811080][ T2178] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.836263][ T2178] usb 2-1: Product: syz [ 121.840501][ T2178] usb 2-1: Manufacturer: syz [ 121.845151][ T2178] usb 2-1: SerialNumber: syz [ 121.896765][ T2178] usb 2-1: config 0 descriptor?? [ 121.913687][ T2178] hub 2-1:0.0: bad descriptor, ignoring hub [ 121.932065][ T2178] hub: probe of 2-1:0.0 failed with error -5 [ 121.984557][ T2178] usb 2-1: selecting invalid altsetting 0 [ 122.068237][ T6473] loop2: detected capacity change from 0 to 128 [ 122.183187][ T6473] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.218981][ T6473] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.248330][ T2178] usb 2-1: USB disconnect, device number 4 [ 122.366113][ T965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.481271][ T28] audit: type=1326 audit(1759423301.986:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b18b8eec9 code=0x0 [ 122.522457][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.559534][ T965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.576371][ T965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.599961][ T965] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.612320][ T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.621193][ T965] usb 1-1: SerialNumber: syz [ 122.640071][ T6485] Illegal XDP return value 3457 on prog (id 24) dev syz_tun, expect packet loss! [ 122.855609][ T965] usb 1-1: 0:2 : does not exist [ 122.856212][ T2178] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.911788][ T965] usb 1-1: USB disconnect, device number 3 [ 122.964084][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.060398][ T6494] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 123.072787][ T6494] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 123.084308][ T2178] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 123.107920][ T2178] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 123.123150][ T2178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.143986][ T2178] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.154712][ T2178] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.184712][ T2178] usb 2-1: Product: syz [ 123.191885][ T2178] usb 2-1: Manufacturer: syz [ 123.199211][ T2178] usb 2-1: SerialNumber: syz [ 123.212075][ T2178] usb 2-1: config 0 descriptor?? [ 123.237374][ T2178] hub 2-1:0.0: bad descriptor, ignoring hub [ 123.243384][ T2178] hub: probe of 2-1:0.0 failed with error -5 [ 123.274494][ T2178] usb 2-1: selecting invalid altsetting 0 [ 123.395661][ T6496] loop2: detected capacity change from 0 to 4096 [ 123.581867][ T6500] loop3: detected capacity change from 0 to 1024 [ 123.855971][ T28] audit: type=1800 audit(1759423303.356:7): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.200" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 123.990975][ T6003] hfsplus: found bad thread record in catalog [ 124.836286][ T5836] usb 2-1: USB disconnect, device number 5 [ 125.195397][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 125.233697][ T6515] geneve0: entered promiscuous mode [ 125.267165][ T6515] geneve0: entered allmulticast mode [ 125.535317][ T6538] vxcan1: tx drop: invalid sa for name 0x0000000000000005 [ 125.900054][ T6541] loop1: detected capacity change from 0 to 4096 [ 126.486074][ T5836] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 126.678005][ T5836] usb 4-1: descriptor type invalid, skip [ 126.684985][ T5836] usb 4-1: not running at top speed; connect to a high speed hub [ 126.716918][ T5836] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 126.745901][ T5836] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 126.768721][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.804245][ T5836] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.819270][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.859338][ T5836] usb 4-1: Product: syz [ 126.864139][ T5836] usb 4-1: Manufacturer: syz [ 126.880636][ T5836] usb 4-1: SerialNumber: syz [ 126.929737][ T6536] loop0: detected capacity change from 0 to 32768 [ 126.995752][ T6536] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.210 (6536) [ 127.132153][ T5836] usb 4-1: 0:2 : does not exist [ 127.204659][ T5836] usb 4-1: USB disconnect, device number 4 [ 127.270617][ T6536] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 127.359472][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.380972][ T6536] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 127.412019][ T6536] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 127.454286][ T6536] BTRFS info (device loop0): use zstd compression, level 3 [ 127.577051][ T6536] BTRFS info (device loop0): using free space tree [ 127.796046][ T6536] BTRFS info (device loop0): enabling ssd optimizations [ 127.815425][ T6536] BTRFS info (device loop0): auto enabling async discard [ 127.836278][ T965] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.056927][ T965] usb 3-1: Using ep0 maxpacket: 32 [ 128.109963][ T965] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 128.134500][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.153380][ T965] usb 3-1: Product: syz [ 128.162499][ T965] usb 3-1: Manufacturer: syz [ 128.176061][ T965] usb 3-1: SerialNumber: syz [ 128.195232][ T965] usb 3-1: config 0 descriptor?? [ 128.577814][ T6595] loop1: detected capacity change from 0 to 1024 [ 128.646381][ T965] airspy 3-1:0.0: Board ID: 00 [ 128.651433][ T965] airspy 3-1:0.0: Firmware version: [ 128.675288][ T28] audit: type=1800 audit(1759423308.176:8): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.226" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 128.798165][ T12] hfsplus: found bad thread record in catalog [ 128.971575][ T5786] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 129.268042][ T965] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 129.310113][ T965] airspy 3-1:0.0: Registered as swradio24 [ 129.337238][ T965] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 129.399238][ T965] usb 3-1: USB disconnect, device number 5 [ 129.463136][ T6605] loop1: detected capacity change from 0 to 512 [ 129.530732][ T6605] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.576140][ T6605] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.648442][ T6605] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.677542][ T6605] EXT4-fs (loop1): 1 truncate cleaned up [ 129.684890][ T6605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.823263][ T28] audit: type=1800 audit(1759423309.326:9): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.232" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 130.012495][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.898933][ T6638] loop0: detected capacity change from 0 to 2048 [ 131.006855][ T6638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.090867][ T6642] loop3: detected capacity change from 0 to 1024 [ 131.364603][ T28] audit: type=1800 audit(1759423310.866:10): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.247" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 131.385108][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.592760][ T12] hfsplus: b-tree write err: -5, ino 4 [ 131.611274][ T6654] loop1: detected capacity change from 0 to 2048 [ 131.661399][ T6654] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 131.766707][ T6657] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.879585][ T6654] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 131.938664][ T6654] Remounting filesystem read-only [ 132.419292][ T6674] syzkaller1: entered promiscuous mode [ 132.429101][ T6674] syzkaller1: entered allmulticast mode [ 132.507365][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.705898][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 132.718363][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 132.742565][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 132.774547][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 132.784380][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.851244][ T8] usb 1-1: config 0 descriptor?? [ 133.013770][ T6682] loop3: detected capacity change from 0 to 2048 [ 133.039645][ T6682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.296450][ T5791] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.330508][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.343557][ T8] wacom 0003:056A:00E6.0004: unknown main item tag 0x0 [ 133.351504][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.376000][ T8] wacom 0003:056A:00E6.0004: unknown main item tag 0x0 [ 133.384696][ T8] wacom 0003:056A:00E6.0004: unknown main item tag 0x0 [ 133.403608][ T8] wacom 0003:056A:00E6.0004: hidraw0: USB HID v0.00 Device [HID 056a:00e6] on usb-dummy_hcd.0-1/input0 [ 133.530600][ T5791] usb 2-1: Using ep0 maxpacket: 16 [ 133.560591][ T5791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.602057][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.625492][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.637299][ T8] usb 1-1: USB disconnect, device number 4 [ 133.662811][ T5791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.692299][ T5791] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.719580][ T5791] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.745881][ T5791] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.754489][ T5791] usb 2-1: Manufacturer: syz [ 133.791825][ T5791] usb 2-1: config 0 descriptor?? [ 134.186019][ T5791] rc_core: IR keymap rc-hauppauge not found [ 134.192368][ T5791] Registered IR keymap rc-empty [ 134.211286][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.255785][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.312427][ T5791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 134.358648][ T5791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 134.401408][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.420031][ T6710] Bluetooth: MGMT ver 1.22 [ 134.467537][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.527256][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.557532][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.586337][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.621711][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.660175][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.716097][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.744662][ T6708] loop0: detected capacity change from 0 to 32768 [ 134.760899][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.777222][ T6708] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 134.788552][ T6708] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.816370][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.873024][ T5791] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 134.882719][ T6708] XFS (loop0): Ending clean mount [ 134.893999][ T5791] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 134.912446][ T6708] XFS (loop0): Quotacheck needed: Please wait. [ 134.942781][ T5791] usb 2-1: USB disconnect, device number 6 [ 135.046861][ T6708] XFS (loop0): Quotacheck: Done. [ 135.191778][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.570703][ T6725] loop1: detected capacity change from 0 to 2048 [ 135.610461][ T6725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.736156][ T965] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.946588][ T965] usb 3-1: Using ep0 maxpacket: 16 [ 135.957962][ T965] usb 3-1: config 0 has no interfaces? [ 135.973390][ T965] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.000631][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.038585][ T965] usb 3-1: config 0 descriptor?? [ 136.244179][ T6721] loop3: detected capacity change from 0 to 40427 [ 136.273241][ T6721] F2FS-fs (loop3): invalid crc value [ 136.321823][ T6721] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.360856][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.413644][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.456751][ T965] usb 3-1: USB disconnect, device number 6 [ 136.496657][ T6721] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.757818][ T5789] syz-executor: attempt to access beyond end of device [ 136.757818][ T5789] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 136.794294][ T5789] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 136.813268][ T5789] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 137.015932][ T2178] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.227677][ T2178] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.246319][ T2178] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 137.249878][ T6753] syzkaller1: entered promiscuous mode [ 137.265933][ T2178] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.272717][ T2178] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 137.282195][ T6753] syzkaller1: entered allmulticast mode [ 137.311077][ T6747] loop1: detected capacity change from 0 to 32768 [ 137.320629][ T2178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.351682][ T2178] usb 3-1: config 0 descriptor?? [ 137.385568][ T2178] yurex 3-1:0.0: Could not submitting URB [ 137.417711][ T6747] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 137.426492][ T2178] yurex: probe of 3-1:0.0 failed with error -5 [ 137.593567][ T6765] loop3: detected capacity change from 0 to 1024 [ 137.615449][ T2178] usbhid 3-1:0.0: can't add hid device: -71 [ 137.627061][ T6747] XFS (loop1): Ending clean mount [ 137.646176][ T2178] usbhid: probe of 3-1:0.0 failed with error -71 [ 137.663881][ T6747] XFS (loop1): Quotacheck needed: Please wait. [ 137.666294][ T6765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.683159][ T2178] usb 3-1: USB disconnect, device number 7 [ 137.780408][ T6747] XFS (loop1): Quotacheck: Done. [ 137.992592][ T6747] XFS (loop1): User initiated shutdown received. [ 138.001473][ T6764] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 138.024287][ T6747] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 138.031630][ T6764] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 28 with error 28 [ 138.040060][ T6747] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 138.063905][ T6764] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.063905][ T6764] [ 138.077683][ T6764] EXT4-fs (loop3): Total free blocks count 0 [ 138.084245][ T6764] EXT4-fs (loop3): Free/Dirty block details [ 138.090512][ T6764] EXT4-fs (loop3): free_blocks=68451041280 [ 138.098235][ T6764] EXT4-fs (loop3): dirty_blocks=32 [ 138.103562][ T6764] EXT4-fs (loop3): Block reservation details [ 138.109917][ T6764] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 138.162994][ T5788] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 138.188811][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.172242][ T6776] loop3: detected capacity change from 0 to 32768 [ 139.255458][ T6776] [ 139.255458][ T6776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.255458][ T6776] [ 139.307154][ T6776] ERROR: (device loop3): diWrite: ixpxd invalid [ 139.307154][ T6776] [ 139.336432][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.351382][ T6776] ERROR: (device loop3): txCommit: [ 139.351382][ T6776] [ 139.439794][ T6800] ERROR: (device loop3): diWrite: ixpxd invalid [ 139.439794][ T6800] [ 139.468173][ T6800] ERROR: (device loop3): txCommit: [ 139.468173][ T6800] [ 139.499699][ T6776] [ 139.499699][ T6776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.499699][ T6776] [ 139.515210][ T6776] [ 139.515210][ T6776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.515210][ T6776] [ 139.544020][ T6776] ERROR: (device loop3): diWrite: ixpxd invalid [ 139.544020][ T6776] [ 139.559601][ T6776] ERROR: (device loop3): txCommit: [ 139.559601][ T6776] [ 139.576447][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 139.596292][ T27] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 139.606902][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 139.619086][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 139.639358][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 139.646110][ T5789] ERROR: (device loop3): diFree: wmap shows inode already free [ 139.646110][ T5789] [ 139.651176][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 139.679957][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.681414][ T5789] [ 139.681414][ T5789] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.681414][ T5789] [ 139.702363][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.713991][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.724606][ T5789] [ 139.724606][ T5789] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.724606][ T5789] [ 139.954755][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 139.981401][ T27] usbtmc 2-1:16.0: can't read capabilities [ 140.231861][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 140.243921][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 140.254243][ T6792] usbtmc 2-1:16.0: Unable to send data, error -71 [ 140.313381][ T2178] usb 2-1: USB disconnect, device number 7 [ 140.373611][ T6817] loop3: detected capacity change from 0 to 64 [ 140.409728][ T6819] loop0: detected capacity change from 0 to 512 [ 140.454716][ T6819] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.312: casefold flag without casefold feature [ 140.472290][ T6819] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.312: couldn't read orphan inode 15 (err -117) [ 140.518548][ T6819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.991654][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.419179][ T6841] loop3: detected capacity change from 0 to 2048 [ 141.439889][ T6841] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 142.259629][ T6859] loop2: detected capacity change from 0 to 1024 [ 142.276977][ T6859] EXT4-fs: Ignoring removed oldalloc option [ 142.283171][ T6859] EXT4-fs: Ignoring removed bh option [ 142.296036][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.319559][ T6857] loop3: detected capacity change from 0 to 1764 [ 142.330224][ T6859] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.381754][ T6859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.402452][ T5908] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.516097][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 142.537531][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 142.572129][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.602153][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.619291][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.673599][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.694640][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.711170][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.717416][ T6864] loop3: detected capacity change from 0 to 2048 [ 142.784855][ T6864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.833928][ T6864] EXT4-fs (loop3): shut down requested (0) [ 142.850602][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.956687][ T27] usb 2-1: usb_control_msg returned -32 [ 142.977552][ T27] usbtmc 2-1:16.0: can't read capabilities [ 143.078617][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.793660][ T6871] loop3: detected capacity change from 0 to 32768 [ 143.820860][ T6871] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.875662][ T6871] XFS (loop3): Ending clean mount [ 143.922246][ T6871] XFS (loop3): Quotacheck needed: Please wait. [ 144.014524][ T6871] XFS (loop3): Quotacheck: Done. [ 144.180050][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 144.838329][ T6885] loop2: detected capacity change from 0 to 32768 [ 145.022267][ T8] usb 2-1: USB disconnect, device number 8 [ 145.422596][ T6889] support for the xor transformation has been removed. [ 146.102814][ T6902] loop3: detected capacity change from 0 to 128 [ 146.397276][ T6891] loop2: detected capacity change from 0 to 32768 [ 146.493261][ T6891] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 146.616187][ T6891] XFS (loop2): Ending clean mount [ 146.658979][ T6891] XFS (loop2): Quotacheck needed: Please wait. [ 146.831539][ T6891] XFS (loop2): Quotacheck: Done. [ 146.902345][ T6891] XFS (loop2): User initiated shutdown received. [ 146.911606][ T6891] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 146.931910][ T6891] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 147.030888][ T5787] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 147.458904][ T6911] loop3: detected capacity change from 0 to 32768 [ 147.500370][ T6911] (syz.3.342,6911,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 147.582752][ T6911] (syz.3.342,6911,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 147.730250][ T6911] JBD2: Ignoring recovery information on journal [ 147.779773][ T6928] capability: warning: `syz.1.349' uses 32-bit capabilities (legacy support in use) [ 147.928570][ T6911] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 148.520717][ T6911] (syz.3.342,6911,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 148.662653][ T6911] syz.3.342 (6911) used greatest stack depth: 18736 bytes left [ 148.858476][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 149.096165][ T5791] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.316144][ T5791] usb 3-1: Using ep0 maxpacket: 32 [ 149.328405][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.359771][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.405934][ T5791] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 149.415237][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.477134][ T5791] usb 3-1: config 0 descriptor?? [ 149.808385][ T6970] loop1: detected capacity change from 0 to 64 [ 149.938388][ T5791] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 150.320925][ T5836] usb 3-1: USB disconnect, device number 8 [ 150.361903][ T6978] loop3: detected capacity change from 0 to 2048 [ 150.420904][ T6978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.255233][ T6999] loop0: detected capacity change from 0 to 128 [ 151.329843][ T6999] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.359587][ T6999] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.451491][ T6999] syz.0.366 (pid 6999) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 151.615370][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.870366][ T5928] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.072295][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 152.093761][ T5928] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 152.106671][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.128866][ T5928] usb 2-1: Product: syz [ 152.133399][ T5928] usb 2-1: Manufacturer: syz [ 152.150269][ T5928] usb 2-1: SerialNumber: syz [ 152.172000][ T5928] usb 2-1: config 0 descriptor?? [ 152.197999][ T5928] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 152.520497][ T7022] netlink: 64 bytes leftover after parsing attributes in process `syz.3.375'. [ 153.032806][ T7030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.379'. [ 153.219498][ T7020] loop2: detected capacity change from 0 to 40427 [ 153.229606][ T5928] ssu100: probe of 2-1:0.0 failed with error -71 [ 153.257550][ T5928] usb 2-1: USB disconnect, device number 9 [ 153.275982][ T7020] F2FS-fs (loop2): invalid crc value [ 153.342071][ T7020] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.386318][ T7038] loop3: detected capacity change from 0 to 1024 [ 153.472873][ T7020] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 153.572140][ T7042] loop0: detected capacity change from 0 to 256 [ 153.612025][ T28] audit: type=1800 audit(1759423333.106:11): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.373" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 153.690990][ T28] audit: type=1800 audit(1759423333.146:12): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.373" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 153.694451][ T49] hfsplus: b-tree write err: -5, ino 4 [ 153.736474][ T5787] syz-executor: attempt to access beyond end of device [ 153.736474][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.769602][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 153.782638][ T7042] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 154.154675][ T7050] loop0: detected capacity change from 0 to 512 [ 154.212520][ T7050] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.387: casefold flag without casefold feature [ 154.230510][ T7050] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.387: couldn't read orphan inode 15 (err -117) [ 154.297862][ T7050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.462623][ T28] audit: type=1804 audit(1759423333.966:13): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.387" name="/newroot/84/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 154.545982][ T28] audit: type=1800 audit(1759423333.996:14): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.387" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 154.604600][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.787727][ T7064] loop3: detected capacity change from 0 to 64 [ 155.036847][ T5789] hfs: node 4:3 still has 1 user(s)! [ 155.173895][ T7072] loop3: detected capacity change from 0 to 128 [ 155.283913][ T7072] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.441329][ T7058] loop1: detected capacity change from 0 to 32768 [ 156.130152][ T7075] loop2: detected capacity change from 0 to 32768 [ 156.172286][ T7077] loop0: detected capacity change from 0 to 32768 [ 156.193647][ T7075] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.230174][ T7077] ERROR: (device loop0): diRead: i_ino != di_number [ 156.230174][ T7077] [ 156.246123][ T7077] ERROR: (device loop0): remounting filesystem as read-only [ 156.405981][ T2178] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.508608][ T7075] XFS (loop2): Ending clean mount [ 156.536820][ T7075] XFS (loop2): Quotacheck needed: Please wait. [ 156.617599][ T2178] usb 4-1: Using ep0 maxpacket: 8 [ 156.641530][ T2178] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 156.653067][ T7075] XFS (loop2): Quotacheck: Done. [ 156.679737][ T2178] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 156.708468][ T2178] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.737500][ T2178] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.793361][ T2178] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.822796][ T2178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.985470][ T7075] XFS (loop2): User initiated shutdown received. [ 156.992380][ T7075] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 157.007802][ T7075] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 157.060972][ T2178] usb 4-1: GET_CAPABILITIES returned 0 [ 157.067973][ T2178] usbtmc 4-1:16.0: can't read capabilities [ 157.096080][ T5791] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.110512][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.310250][ T5791] usb 1-1: Using ep0 maxpacket: 32 [ 157.317792][ T5791] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 157.317869][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 157.335940][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.339969][ T7084] usbtmc 4-1:16.0: Unable to send data, error -71 [ 157.360997][ T5928] usb 4-1: USB disconnect, device number 5 [ 157.386658][ T5791] usb 1-1: config 0 descriptor?? [ 157.428132][ T5791] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 157.472984][ T7101] loop1: detected capacity change from 0 to 32768 [ 157.491779][ T7101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.404 (7101) [ 157.524099][ T7101] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.537764][ T7101] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 157.561841][ T7101] BTRFS info (device loop1): enabling disk space caching [ 157.585251][ T7101] BTRFS info (device loop1): doing ref verification [ 157.592624][ T7101] BTRFS info (device loop1): use zlib compression, level 3 [ 157.613906][ T7101] BTRFS info (device loop1): force clearing of disk cache [ 157.622426][ T7101] BTRFS info (device loop1): setting nodatacow, compression disabled [ 157.641015][ T7101] BTRFS info (device loop1): turning on async discard [ 157.654994][ T7101] BTRFS info (device loop1): disk space caching is enabled [ 157.713064][ T7101] BTRFS info (device loop1): enabling ssd optimizations [ 157.734722][ T7101] BTRFS info (device loop1): rebuilding free space tree [ 157.910534][ T7101] BTRFS info (device loop1): disabling free space tree [ 157.932923][ T7101] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.946299][ T7101] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.099118][ T7127] netlink: 'syz.3.408': attribute type 39 has an invalid length. [ 158.185997][ T5788] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.429941][ T5791] gspca_nw80x: reg_w err -71 [ 158.435704][ T5791] nw80x: probe of 1-1:0.0 failed with error -71 [ 158.454792][ T5791] usb 1-1: USB disconnect, device number 5 [ 158.661674][ T7131] syzkaller1: entered promiscuous mode [ 158.672439][ T7131] syzkaller1: entered allmulticast mode [ 159.267136][ T6010] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 159.324364][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.351923][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.879606][ T7161] loop2: detected capacity change from 0 to 128 [ 159.953312][ T7161] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 160.051665][ T7161] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.088793][ T7153] loop0: detected capacity change from 0 to 32768 [ 160.150927][ T7167] netlink: 'syz.3.425': attribute type 2 has an invalid length. [ 160.169181][ T7153] JBD2: Ignoring recovery information on journal [ 160.196759][ T28] audit: type=1800 audit(1759423339.696:15): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.423" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 160.254982][ T7153] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.326211][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.587050][ T7153] (syz.0.419,7153,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 160.639586][ T7153] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #64 has an invalid fs_generation of #3923116032 [ 160.683920][ T7153] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 160.735693][ T7153] OCFS2: File system is now read-only. [ 160.761673][ T7153] (syz.0.419,7153,1):ocfs2_test_suballoc_bit:2782 ERROR: read group 64 failed -30 [ 160.805382][ T7153] (syz.0.419,7153,1):ocfs2_test_suballoc_bit:2793 ERROR: status = -30 [ 160.834117][ T7153] (syz.0.419,7153,1):ocfs2_test_inode_bit:2855 ERROR: test suballoc bit failed -30 [ 160.874442][ T7153] (syz.0.419,7153,1):ocfs2_test_inode_bit:2864 ERROR: status = -30 [ 160.906946][ T7153] (syz.0.419,7153,1):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 161.022469][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 161.982758][ T7209] overlayfs: invalid origin (00000079006e736e7320286c696d6974203130303030303029206d61785f7374617465735f7065725f696e736e203020746f74616c5f73746174657320302070) [ 162.844697][ T7231] loop1: detected capacity change from 0 to 512 [ 162.868063][ T7231] EXT4-fs (loop1): Test dummy encryption mode enabled [ 162.897153][ T7231] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.978709][ T7231] EXT4-fs (loop1): 1 truncate cleaned up [ 163.011206][ T7231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.246354][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.292718][ T7226] loop0: detected capacity change from 0 to 40427 [ 163.318918][ T7226] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 163.345016][ T7226] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 163.369451][ T7226] F2FS-fs (loop0): invalid crc value [ 163.409939][ T7226] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.415090][ T7243] input: syz1 as /devices/virtual/input/input10 [ 163.424891][ T7243] input: failed to attach handler leds to device input10, error: -6 [ 163.460224][ T7239] pim6reg1: entered allmulticast mode [ 163.652049][ T7226] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 163.675904][ T7226] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.868508][ T7226] syz.0.449: attempt to access beyond end of device [ 163.868508][ T7226] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 163.951444][ T7226] syz.0.449: attempt to access beyond end of device [ 163.951444][ T7226] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.171211][ T5786] syz-executor: attempt to access beyond end of device [ 164.171211][ T5786] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 164.217466][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 164.435968][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.567533][ T7261] netlink: 'syz.3.464': attribute type 11 has an invalid length. [ 164.637879][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 164.652681][ T8] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 164.671813][ T8] usb 2-1: config 0 has no interface number 0 [ 164.684996][ T8] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 164.704753][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.747465][ T8] usb 2-1: Product: syz [ 164.751721][ T8] usb 2-1: Manufacturer: syz [ 164.766165][ T8] usb 2-1: SerialNumber: syz [ 164.777076][ T8] usb 2-1: config 0 descriptor?? [ 165.421428][ T8] mos7840 2-1:0.225: required endpoints missing [ 165.444534][ T8] usb 2-1: USB disconnect, device number 10 [ 165.730676][ T7270] loop0: detected capacity change from 0 to 4096 [ 166.496253][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.735204][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.761631][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.783981][ T7282] GUP no longer grows the stack in syz.3.473 (7282): 200000004000-20000000a000 (200000002000) [ 166.792986][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.819278][ T7282] CPU: 1 PID: 7282 Comm: syz.3.473 Not tainted syzkaller #0 [ 166.826920][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.827240][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.837444][ T7282] Call Trace: [ 166.837565][ T7282] [ 166.837582][ T7282] dump_stack_lvl+0x16c/0x230 [ 166.837622][ T7282] ? show_regs_print_info+0x20/0x20 [ 166.837650][ T7282] ? load_image+0x3b0/0x3b0 [ 166.837672][ T7282] ? find_vma+0x12e/0x1b0 [ 166.837711][ T7282] __get_user_pages+0xfb9/0x1470 [ 166.877836][ T7282] ? populate_vma_page_range+0x370/0x370 [ 166.882913][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.883553][ T7282] get_user_pages_remote+0x3de/0xc10 [ 166.897095][ T7282] ? get_dump_page+0x200/0x200 [ 166.901929][ T7282] __access_remote_vm+0x1ff/0x570 [ 166.907275][ T7282] ? generic_access_phys+0x650/0x650 [ 166.912969][ T7282] ? alloc_pages+0x4dc/0x740 [ 166.917816][ T7282] ? do_raw_spin_unlock+0x121/0x230 [ 166.923080][ T7282] proc_pid_cmdline_read+0x551/0x830 [ 166.928511][ T7282] ? schedule+0xc7/0x170 [ 166.931005][ T8] usb 1-1: config 0 descriptor?? [ 166.932801][ T7282] ? comm_show+0x150/0x150 [ 166.942578][ T7282] ? common_file_perm+0x170/0x1f0 [ 166.947768][ T7282] ? fsnotify_perm+0x271/0x5e0 [ 166.952623][ T7282] do_iter_read+0x506/0xc80 [ 166.957211][ T7282] ? comm_show+0x150/0x150 [ 166.961774][ T7282] ? vfs_iter_read+0xa0/0xa0 [ 166.966430][ T7282] ? __import_iovec+0x5f2/0x860 [ 166.971451][ T7282] ? import_iovec+0x73/0xa0 [ 166.976118][ T7282] do_preadv+0x1fa/0x330 [ 166.980621][ T7282] ? do_writev+0x410/0x410 [ 166.985733][ T7282] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 166.992042][ T7282] ? lock_chain_count+0x20/0x20 [ 166.997053][ T7282] ? lockdep_hardirqs_on+0x98/0x150 [ 167.002406][ T7282] do_syscall_64+0x55/0xb0 [ 167.007061][ T7282] ? clear_bhb_loop+0x40/0x90 [ 167.011800][ T7282] ? clear_bhb_loop+0x40/0x90 [ 167.017146][ T7282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.023526][ T7282] RIP: 0033:0x7f8b18b8eec9 [ 167.028111][ T7282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.048394][ T7282] RSP: 002b:00007f8b19a01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 167.057358][ T7282] RAX: ffffffffffffffda RBX: 00007f8b18de5fa0 RCX: 00007f8b18b8eec9 [ 167.065877][ T7282] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 167.074259][ T7282] RBP: 00007f8b18c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.082378][ T7282] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 167.090929][ T7282] R13: 00007f8b18de6038 R14: 00007f8b18de5fa0 R15: 00007ffe3fead4f8 [ 167.098973][ T7282] [ 167.180496][ T7274] loop1: detected capacity change from 0 to 40427 [ 167.196885][ T7274] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 167.203743][ T7274] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 167.237105][ T7274] F2FS-fs (loop1): invalid crc value [ 167.368331][ T8] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 167.436632][ T8] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 167.485605][ T7274] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 167.497878][ T7274] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.658193][ T8] usb 1-1: USB disconnect, device number 6 [ 167.684382][ T7274] syz.1.469: attempt to access beyond end of device [ 167.684382][ T7274] loop1: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 167.713783][ T7289] fido_id[7289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 167.802364][ T5788] syz-executor: attempt to access beyond end of device [ 167.802364][ T5788] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.823609][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 167.996416][ T5928] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.214502][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.227714][ T5928] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 168.246367][ T5928] usb 4-1: config 6 has no interface number 0 [ 168.275957][ T5928] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 168.335962][ T5928] usb 4-1: config 6 interface 200 has no altsetting 0 [ 168.377061][ T5928] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 168.396258][ T5928] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 168.434841][ T5928] usb 4-1: Product: syz [ 168.446304][ T5928] usb 4-1: Manufacturer: syz [ 168.454754][ T7304] binder: 7303:7304 ioctl c018620c 200000000080 returned -1 [ 168.462563][ T5928] usb 4-1: SerialNumber: syz [ 168.554366][ T7302] loop2: detected capacity change from 0 to 4096 [ 168.575982][ T7302] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 168.650967][ T7302] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 168.709930][ T7306] loop1: detected capacity change from 0 to 512 [ 168.788614][ T7306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.829702][ T5928] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 168.889653][ T5928] dvb-usb: bulk message failed: -71 (3/0) [ 168.974816][ T5787] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 168.983254][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.003334][ T5928] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 169.008208][ T7300] loop0: detected capacity change from 0 to 32768 [ 169.049941][ T5928] usb 4-1: media controller created [ 169.115193][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.160010][ T7311] loop2: detected capacity change from 0 to 128 [ 169.174177][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.219089][ T7311] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.255324][ T7311] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.262003][ T5928] dvb-usb: bulk message failed: -71 (6/0) [ 169.499565][ T5928] dvb-usb: bulk message failed: -71 (6/0) [ 169.501629][ T7317] fuse: Invalid user_id [ 169.505698][ T5928] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 169.524944][ T7311] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 20: comm syz.2.483: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 169.566226][ T5928] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 169.579351][ T7311] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem [ 169.627187][ T5928] dvb-usb: schedule remote query interval to 150 msecs. [ 169.676837][ T5928] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 169.703768][ T5928] usb 4-1: USB disconnect, device number 6 [ 169.816145][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.886230][ T7319] loop3: detected capacity change from 0 to 2048 [ 169.932738][ T7319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.066464][ T7323] loop0: detected capacity change from 0 to 64 [ 170.113364][ T7325] loop2: detected capacity change from 0 to 1024 [ 170.122026][ T5928] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 170.282013][ T7325] hfsplus: xattr search failed [ 170.608441][ T6000] hfsplus: b-tree write err: -5, ino 3 [ 171.170736][ T6014] tipc: Subscription rejected, illegal request [ 171.225454][ T7356] sctp: [Deprecated]: syz.2.499 (pid 7356) Use of int in maxseg socket option. [ 171.225454][ T7356] Use struct sctp_assoc_value instead [ 171.294519][ T7359] loop0: detected capacity change from 0 to 128 [ 171.339871][ T7359] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.373237][ T7359] hpfs: filesystem error: improperly stopped [ 171.423734][ T7359] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 171.466560][ T7359] hpfs: You really don't want any checks? You are crazy... [ 171.490018][ T7359] hpfs: hpfs_map_sector(): read error [ 171.505679][ T7359] hpfs: code page support is disabled [ 171.514979][ T7359] hpfs: hpfs_map_4sectors(): unaligned read [ 171.532033][ T7359] hpfs: hpfs_map_4sectors(): unaligned read [ 171.547243][ T7359] hpfs: filesystem error: unable to find root dir [ 171.609338][ T7359] hpfs: hpfs_map_4sectors(): unaligned read [ 171.946289][ T7377] loop3: detected capacity change from 0 to 128 [ 171.987767][ T7377] FAT-fs (loop3): bogus number of reserved sectors [ 172.017495][ T7377] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 172.048946][ T7377] FAT-fs (loop3): Can't find a valid FAT filesystem [ 172.107907][ T7381] 9pnet_fd: Insufficient options for proto=fd [ 173.204898][ T7391] loop2: detected capacity change from 0 to 32768 [ 173.246333][ T7391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.514 (7391) [ 173.317416][ T7391] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.356009][ T7391] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 173.386861][ T7391] BTRFS info (device loop2): doing ref verification [ 173.394956][ T7391] BTRFS info (device loop2): max_inline at 0 [ 173.414055][ T7391] BTRFS info (device loop2): force clearing of disk cache [ 173.435904][ T7391] BTRFS info (device loop2): turning on sync discard [ 173.442699][ T7391] BTRFS info (device loop2): using free space tree [ 173.465996][ T7391] workqueue: max_active 4096 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 173.527558][ T7391] workqueue: max_active 4096 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 173.553600][ T7397] loop3: detected capacity change from 0 to 32768 [ 173.588632][ T7395] loop0: detected capacity change from 0 to 32768 [ 173.598754][ T7391] workqueue: max_active 4096 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 173.616935][ T7391] workqueue: max_active 4096 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 173.634945][ T7395] XFS: noikeep mount option is deprecated. [ 173.669933][ T7391] workqueue: max_active 4096 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 173.718355][ T7391] workqueue: max_active 4096 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 173.731345][ T7395] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.813275][ T7391] workqueue: max_active 4096 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 174.002535][ T7391] BTRFS info (device loop2): enabling ssd optimizations [ 174.063426][ T7391] BTRFS info (device loop2): rebuilding free space tree [ 174.106511][ T7395] XFS (loop0): Ending clean mount [ 174.147271][ T7395] XFS (loop0): Quotacheck needed: Please wait. [ 174.345423][ T7395] XFS (loop0): Quotacheck: Done. [ 174.697789][ T5787] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.938537][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.986000][ T5928] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.989632][ T7460] loop3: detected capacity change from 0 to 1024 [ 176.012831][ T7460] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.067028][ T7460] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 176.089621][ T7460] EXT4-fs (loop3): orphan cleanup on readonly fs [ 176.103408][ T7460] EXT4-fs error (device loop3): ext4_free_blocks:6676: comm syz.3.532: Freeing blocks not in datazone - block = 0, count = 4096 [ 176.133039][ T7460] EXT4-fs (loop3): 1 orphan inode deleted [ 176.157709][ T7460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.166007][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 176.188705][ T5928] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 176.206975][ T5928] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 176.221221][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.229503][ T5928] usb 1-1: Product: syz [ 176.233721][ T5928] usb 1-1: Manufacturer: syz [ 176.238695][ T5928] usb 1-1: SerialNumber: syz [ 176.295149][ T5928] usb 1-1: config 0 descriptor?? [ 176.320796][ T5928] usb 1-1: bad CDC descriptors [ 176.326097][ T7465] loop1: detected capacity change from 0 to 2048 [ 176.347180][ T5928] usb 1-1: unsupported MDLM descriptors [ 176.379001][ T7465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.382182][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.533475][ T5928] usb 1-1: USB disconnect, device number 7 [ 176.732326][ T7469] loop3: detected capacity change from 0 to 512 [ 176.775387][ T7469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.861253][ T7463] loop2: detected capacity change from 0 to 40427 [ 176.876929][ T7463] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 176.923683][ T7463] F2FS-fs (loop2): invalid crc value [ 176.993983][ T7463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.074485][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.142801][ T7463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.235946][ T1188] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.432764][ T5787] syz-executor: attempt to access beyond end of device [ 177.432764][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.445991][ T1188] usb 2-1: Using ep0 maxpacket: 16 [ 177.456041][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.459951][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 177.475961][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.500957][ T1188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.528475][ T1188] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.559647][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.608474][ T1188] usb 2-1: config 0 descriptor?? [ 177.666249][ T5928] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 177.868661][ T5928] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 177.895970][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.916429][ T5928] usb 1-1: config 0 descriptor?? [ 178.064524][ T1188] HID 045e:07da: Invalid code 65791 type 1 [ 178.064966][ T7489] loop3: detected capacity change from 0 to 32768 [ 178.118613][ T1188] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input12 [ 178.194960][ T7489] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 178.236170][ T1188] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 178.282198][ T7489] (syz.3.543,7489,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 178.306839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.341052][ T1188] usb 2-1: USB disconnect, device number 11 [ 178.458417][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 178.583080][ T7495] fido_id[7495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 178.936115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.981744][ T7499] loop3: detected capacity change from 0 to 1024 [ 178.983099][ T5928] pegasus: probe of 1-1:0.0 failed with error -71 [ 179.029251][ T7499] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 179.051262][ T5928] usb 1-1: USB disconnect, device number 8 [ 179.060355][ T7499] EXT4-fs (loop3): group descriptors corrupted! [ 179.125075][ T7502] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 179.323192][ T7508] loop1: detected capacity change from 0 to 128 [ 179.377796][ T7508] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 179.430508][ T7508] sysv_count_free_blocks: >flc_size entries in free-list block [ 179.518328][ T7508] sysv_count_free_inodes: unable to read inode table [ 179.535942][ T7508] sysv_count_free_blocks: >flc_size entries in free-list block [ 179.544501][ T7508] sysv_count_free_inodes: unable to read inode table [ 179.666655][ T5788] sysv_free_block: flc_count > flc_size [ 179.673989][ T5788] sysv_free_block: flc_count > flc_size [ 179.703990][ T5788] sysv_free_block: flc_count > flc_size [ 179.730712][ T5788] sysv_free_block: flc_count > flc_size [ 179.743297][ T5788] sysv_free_block: flc_count > flc_size [ 179.754113][ T5788] sysv_free_block: flc_count > flc_size [ 179.763969][ T5788] sysv_free_block: flc_count > flc_size [ 179.774184][ T5788] sysv_free_block: flc_count > flc_size [ 179.783884][ T5788] sysv_free_block: flc_count > flc_size [ 179.792369][ T5788] sysv_free_block: flc_count > flc_size [ 179.817117][ T5788] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 179.996097][ T7526] loop2: detected capacity change from 0 to 64 [ 180.240875][ T7530] overlayfs: upper fs does not support tmpfile. [ 180.579658][ T7542] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 180.695230][ T7545] loop0: detected capacity change from 0 to 256 [ 180.728149][ T7545] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.755941][ T7545] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 180.772424][ T7549] loop1: detected capacity change from 0 to 64 [ 180.791874][ T7545] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 180.902562][ T7549] syz.1.567: attempt to access beyond end of device [ 180.902562][ T7549] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 180.936497][ T7549] Buffer I/O error on dev loop1, logical block 512, async page read [ 180.966036][ T7549] syz.1.567: attempt to access beyond end of device [ 180.966036][ T7549] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 181.029765][ T7549] Buffer I/O error on dev loop1, logical block 56576, async page read [ 181.052610][ T7551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 181.536105][ T5836] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 181.719100][ T5836] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.748856][ T5836] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.759640][ T7570] loop1: detected capacity change from 0 to 128 [ 181.784033][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.801376][ T5836] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 181.826387][ T7570] FAT-fs (loop1): Directory bread(block 32) failed [ 181.831188][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.854802][ T7570] FAT-fs (loop1): Directory bread(block 33) failed [ 181.871901][ T7570] FAT-fs (loop1): Directory bread(block 34) failed [ 181.879905][ T5836] usb 1-1: config 0 descriptor?? [ 181.904163][ T7570] FAT-fs (loop1): Directory bread(block 35) failed [ 181.927227][ T7570] FAT-fs (loop1): Directory bread(block 36) failed [ 181.933843][ T7570] FAT-fs (loop1): Directory bread(block 37) failed [ 181.944524][ T7570] FAT-fs (loop1): Directory bread(block 38) failed [ 181.953499][ T7570] FAT-fs (loop1): Directory bread(block 39) failed [ 181.962688][ T7570] FAT-fs (loop1): Directory bread(block 40) failed [ 181.973381][ T7570] FAT-fs (loop1): Directory bread(block 41) failed [ 182.170554][ T7570] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 182.198514][ T7570] FAT-fs (loop1): Filesystem has been set read-only [ 182.234412][ T7570] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 182.519982][ T5836] usb 1-1: string descriptor 0 read error: -22 [ 182.923390][ T5836] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 182.943850][ T5836] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 182.960731][ T5836] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 182.969345][ T5836] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 182.977392][ T5836] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 182.995083][ T5836] usb 1-1: USB disconnect, device number 9 [ 183.104517][ T7577] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.578'. [ 183.120621][ T7577] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 184.066512][ T7584] loop1: detected capacity change from 0 to 32768 [ 184.102395][ T7584] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 184.162959][ T7584] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 184.214642][ T6010] (kworker/u4:19,6010,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 184.335456][ T7584] (syz.1.580,7584,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 184.395712][ T7584] (syz.1.580,7584,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 184.410599][ T7584] (syz.1.580,7584,1):ocfs2_orphan_del:2382 ERROR: status = -117 [ 184.419126][ T7584] (syz.1.580,7584,1):ocfs2_orphan_del:2404 ERROR: status = -117 [ 184.433379][ T7584] (syz.1.580,7584,1):ocfs2_remove_inode:676 ERROR: status = -117 [ 184.443874][ T7584] (syz.1.580,7584,1):ocfs2_wipe_inode:821 ERROR: status = -117 [ 184.469953][ T7584] (syz.1.580,7584,1):ocfs2_delete_inode:1082 ERROR: status = -117 [ 184.568299][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 184.918527][ T7604] loop3: detected capacity change from 0 to 2048 [ 184.959622][ T7604] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 185.024863][ T7609] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.589834][ T7620] pim6reg: entered allmulticast mode [ 185.623621][ T7620] pim6reg: left allmulticast mode [ 186.571676][ T7625] loop3: detected capacity change from 0 to 32768 [ 186.624792][ T7625] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.927654][ T7625] XFS (loop3): Ending clean mount [ 186.951504][ T7657] loop0: detected capacity change from 0 to 2048 [ 186.991805][ T7657] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.053664][ T7658] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.066309][ T7657] syz.0.606: attempt to access beyond end of device [ 187.066309][ T7657] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 187.175382][ T7657] syz.0.606: attempt to access beyond end of device [ 187.175382][ T7657] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 187.208830][ T7657] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 187.220904][ T7657] NILFS (loop0): error -5 reading inode: ino=12 [ 187.247830][ T7659] syz.0.606: attempt to access beyond end of device [ 187.247830][ T7659] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 187.276093][ T7659] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 187.307043][ T7659] NILFS (loop0): error -5 reading inode: ino=15 [ 187.333874][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.344123][ T27] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 187.359234][ T27] XFS (loop3): Unmount and run xfs_repair [ 187.375964][ T27] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 187.383732][ T27] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 187.393516][ T27] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 187.403342][ T27] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 187.413557][ T27] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 187.425343][ T27] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 187.441543][ T27] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 187.452704][ T27] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 187.462197][ T27] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 187.472417][ T27] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 187.492179][ T27] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 187.560348][ T27] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 187.615289][ T7663] loop0: detected capacity change from 0 to 256 [ 187.647045][ T7663] exfat: Deprecated parameter 'utf8' [ 187.848478][ T7663] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 187.960004][ T7655] loop1: detected capacity change from 0 to 32768 [ 188.162689][ T7655] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 188.462212][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 188.482847][ T7682] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 188.521863][ T7681] IPVS: stopping master sync thread 7682 ... [ 189.291939][ T7703] loop0: detected capacity change from 0 to 256 [ 189.378260][ T5836] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 189.507667][ T7703] FAT-fs (loop0): Directory bread(block 64) failed [ 189.531695][ T7703] FAT-fs (loop0): Directory bread(block 65) failed [ 189.548073][ T7703] FAT-fs (loop0): Directory bread(block 66) failed [ 189.555083][ T7703] FAT-fs (loop0): Directory bread(block 67) failed [ 189.582580][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 189.600640][ T7703] FAT-fs (loop0): Directory bread(block 68) failed [ 189.611422][ T5836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.623071][ T5836] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.628259][ T7703] FAT-fs (loop0): Directory bread(block 69) failed [ 189.673808][ T7703] FAT-fs (loop0): Directory bread(block 70) failed [ 189.674090][ T5836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.674142][ T7711] input: syz1 as /devices/virtual/input/input14 [ 189.699459][ T7703] FAT-fs (loop0): Directory bread(block 71) failed [ 189.711808][ T7703] FAT-fs (loop0): Directory bread(block 72) failed [ 189.715397][ T5836] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 189.737394][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.745976][ T7703] FAT-fs (loop0): Directory bread(block 73) failed [ 189.776058][ T5836] usb 3-1: config 0 descriptor?? [ 189.884666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 189.925888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 189.996342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 190.213902][ T5836] hid (null): global environment stack underflow [ 190.222383][ T5836] hid (null): report_id 0 is invalid [ 190.233400][ T5836] hid (null): global environment stack underflow [ 190.244578][ T5836] hid (null): report_id 0 is invalid [ 190.251942][ T5836] hid (null): report_id 0 is invalid [ 190.258124][ T5836] hid (null): global environment stack underflow [ 190.423681][ T27] usb 3-1: USB disconnect, device number 9 [ 190.893732][ T7724] loop1: detected capacity change from 0 to 1024 [ 190.927444][ T7724] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 190.941690][ T7724] EXT4-fs (loop1): group descriptors corrupted! [ 191.227567][ T7728] loop3: detected capacity change from 0 to 8192 [ 191.257273][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'. [ 191.271345][ T7728] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 191.286556][ T7728] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 191.296320][ T7728] REISERFS (device loop3): using ordered data mode [ 191.313356][ T7728] reiserfs: using flush barriers [ 191.334751][ T7728] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 191.359719][ T7728] REISERFS (device loop3): checking transaction log (loop3) [ 191.367719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 191.476558][ T7728] REISERFS (device loop3): Using r5 hash to sort names [ 191.543026][ T7728] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 191.717285][ T7738] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 191.828956][ T7741] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 293, free_space(entry_count) 2 [ 191.848211][ T7741] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 191.860191][ T7741] REISERFS (device loop3): Remounting filesystem read-only [ 191.868397][ T7741] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 191.884216][ T7728] ------------[ cut here ]------------ [ 191.890653][ T7728] WARNING: CPU: 0 PID: 7728 at fs/reiserfs/journal.c:3400 journal_end+0x1f1/0x2b0 [ 191.900352][ T7728] Modules linked in: [ 191.904493][ T7728] CPU: 0 PID: 7728 Comm: syz.3.633 Not tainted syzkaller #0 [ 191.911965][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.922450][ T7728] RIP: 0010:journal_end+0x1f1/0x2b0 [ 191.927818][ T7728] Code: 38 00 00 00 48 89 de e8 ed 58 b6 ff 43 0f b6 04 27 84 c0 0f 85 a7 00 00 00 48 8b 04 24 c7 00 00 00 00 00 eb 30 e8 6f fe 5e ff <0f> 0b b8 fb ff ff ff eb 24 e8 61 fe 5e ff 48 89 df 31 f6 48 83 c4 [ 191.948181][ T7728] RSP: 0018:ffffc9001a32f998 EFLAGS: 00010283 [ 191.954702][ T7728] RAX: ffffffff82268c81 RBX: ffffc9001a32fa60 RCX: 0000000000080000 [ 191.963657][ T7728] RDX: ffffc9000d68c000 RSI: 000000000002981f RDI: 0000000000029820 [ 191.972349][ T7728] RBP: 0000000000000000 R08: ffffc9001a32fa97 R09: 0000000000000000 [ 191.980506][ T7728] R10: ffffc9001a32fa60 R11: fffff52003465f53 R12: ffffc9001a32fa74 [ 191.988745][ T7728] R13: 1ffff11004f8660d R14: ffff888027c33068 R15: 1ffff92003465f4e [ 191.997321][ T7728] FS: 00007f8b19a016c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 192.007020][ T7728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.013942][ T7728] CR2: 00007f2c0b77ef98 CR3: 0000000030519000 CR4: 00000000003506f0 [ 192.022308][ T7728] Call Trace: [ 192.025654][ T7728] [ 192.028855][ T7728] reiserfs_truncate_file+0x385/0x7c0 [ 192.034304][ T7728] ? reiserfs_new_symlink+0x560/0x560 [ 192.039963][ T7728] ? unmap_mapping_range+0xdf/0x170 [ 192.045335][ T7728] ? setattr_prepare+0x1e6/0xac0 [ 192.050802][ T7728] reiserfs_setattr+0xc0c/0x11a0 [ 192.055977][ T7728] ? reiserfs_commit_write+0x590/0x590 [ 192.062397][ T7728] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 192.068960][ T7728] ? current_time+0x1b7/0x270 [ 192.073803][ T7728] ? inode_set_ctime_current+0x2d0/0x2d0 [ 192.079800][ T7728] ? evm_inode_setattr+0x94/0x6a0 [ 192.084970][ T7728] ? bpf_lsm_inode_setattr+0x9/0x10 [ 192.090324][ T7728] ? try_break_deleg+0x79/0x120 [ 192.095258][ T7728] ? reiserfs_commit_write+0x590/0x590 [ 192.101134][ T7728] notify_change+0xb0d/0xe10 [ 192.105989][ T7728] do_truncate+0x19b/0x220 [ 192.110561][ T7728] ? put_page_bootmem+0x2c0/0x2c0 [ 192.116118][ T7728] ? bpf_lsm_path_truncate+0x9/0x10 [ 192.121585][ T7728] vfs_truncate+0x266/0x300 [ 192.126741][ T7728] do_sys_truncate+0xe0/0x1a0 [ 192.131772][ T7728] ? break_lease+0xd0/0xd0 [ 192.136620][ T7728] ? lockdep_hardirqs_on+0x98/0x150 [ 192.142505][ T7728] do_syscall_64+0x55/0xb0 [ 192.148264][ T7728] ? clear_bhb_loop+0x40/0x90 [ 192.153460][ T7728] ? clear_bhb_loop+0x40/0x90 [ 192.159653][ T7728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.166858][ T7728] RIP: 0033:0x7f8b18b8eec9 [ 192.171761][ T7728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.192422][ T7728] RSP: 002b:00007f8b19a01038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 192.201468][ T7728] RAX: ffffffffffffffda RBX: 00007f8b18de5fa0 RCX: 00007f8b18b8eec9 [ 192.209820][ T7728] RDX: 0000000000000000 RSI: 00000000003a6000 RDI: 0000200000000080 [ 192.218030][ T7728] RBP: 00007f8b18c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.226229][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.234350][ T7728] R13: 00007f8b18de6038 R14: 00007f8b18de5fa0 R15: 00007ffe3fead4f8 [ 192.242618][ T7728] [ 192.246019][ T7728] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.253701][ T7728] CPU: 0 PID: 7728 Comm: syz.3.633 Not tainted syzkaller #0 [ 192.261211][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.271511][ T7728] Call Trace: [ 192.274851][ T7728] [ 192.277936][ T7728] dump_stack_lvl+0x16c/0x230 [ 192.282703][ T7728] ? show_regs_print_info+0x20/0x20 [ 192.288000][ T7728] ? load_image+0x3b0/0x3b0 [ 192.292576][ T7728] panic+0x2c0/0x710 [ 192.296562][ T7728] ? bpf_jit_dump+0xd0/0xd0 [ 192.301166][ T7728] __warn+0x2e0/0x470 [ 192.305321][ T7728] ? journal_end+0x1f1/0x2b0 [ 192.309980][ T7728] ? journal_end+0x1f1/0x2b0 [ 192.314607][ T7728] report_bug+0x2be/0x4f0 [ 192.319055][ T7728] ? journal_end+0x1f1/0x2b0 [ 192.323693][ T7728] ? journal_end+0x1f1/0x2b0 [ 192.328329][ T7728] ? journal_end+0x1f3/0x2b0 [ 192.333037][ T7728] handle_bug+0xcf/0x120 [ 192.337390][ T7728] exc_invalid_op+0x1a/0x50 [ 192.341927][ T7728] asm_exc_invalid_op+0x1a/0x20 [ 192.346922][ T7728] RIP: 0010:journal_end+0x1f1/0x2b0 [ 192.352158][ T7728] Code: 38 00 00 00 48 89 de e8 ed 58 b6 ff 43 0f b6 04 27 84 c0 0f 85 a7 00 00 00 48 8b 04 24 c7 00 00 00 00 00 eb 30 e8 6f fe 5e ff <0f> 0b b8 fb ff ff ff eb 24 e8 61 fe 5e ff 48 89 df 31 f6 48 83 c4 [ 192.371968][ T7728] RSP: 0018:ffffc9001a32f998 EFLAGS: 00010283 [ 192.378068][ T7728] RAX: ffffffff82268c81 RBX: ffffc9001a32fa60 RCX: 0000000000080000 [ 192.386088][ T7728] RDX: ffffc9000d68c000 RSI: 000000000002981f RDI: 0000000000029820 [ 192.394085][ T7728] RBP: 0000000000000000 R08: ffffc9001a32fa97 R09: 0000000000000000 [ 192.402169][ T7728] R10: ffffc9001a32fa60 R11: fffff52003465f53 R12: ffffc9001a32fa74 [ 192.410250][ T7728] R13: 1ffff11004f8660d R14: ffff888027c33068 R15: 1ffff92003465f4e [ 192.418255][ T7728] ? journal_end+0x1f1/0x2b0 [ 192.422972][ T7728] ? journal_end+0x1f1/0x2b0 [ 192.427593][ T7728] reiserfs_truncate_file+0x385/0x7c0 [ 192.432996][ T7728] ? reiserfs_new_symlink+0x560/0x560 [ 192.438382][ T7728] ? unmap_mapping_range+0xdf/0x170 [ 192.443632][ T7728] ? setattr_prepare+0x1e6/0xac0 [ 192.448783][ T7728] reiserfs_setattr+0xc0c/0x11a0 [ 192.453845][ T7728] ? reiserfs_commit_write+0x590/0x590 [ 192.459358][ T7728] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 192.465457][ T7728] ? current_time+0x1b7/0x270 [ 192.470257][ T7728] ? inode_set_ctime_current+0x2d0/0x2d0 [ 192.475930][ T7728] ? evm_inode_setattr+0x94/0x6a0 [ 192.481003][ T7728] ? bpf_lsm_inode_setattr+0x9/0x10 [ 192.486319][ T7728] ? try_break_deleg+0x79/0x120 [ 192.491211][ T7728] ? reiserfs_commit_write+0x590/0x590 [ 192.496709][ T7728] notify_change+0xb0d/0xe10 [ 192.501587][ T7728] do_truncate+0x19b/0x220 [ 192.506023][ T7728] ? put_page_bootmem+0x2c0/0x2c0 [ 192.511100][ T7728] ? bpf_lsm_path_truncate+0x9/0x10 [ 192.516601][ T7728] vfs_truncate+0x266/0x300 [ 192.521126][ T7728] do_sys_truncate+0xe0/0x1a0 [ 192.525825][ T7728] ? break_lease+0xd0/0xd0 [ 192.530549][ T7728] ? lockdep_hardirqs_on+0x98/0x150 [ 192.535981][ T7728] do_syscall_64+0x55/0xb0 [ 192.541149][ T7728] ? clear_bhb_loop+0x40/0x90 [ 192.546032][ T7728] ? clear_bhb_loop+0x40/0x90 [ 192.550971][ T7728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.557446][ T7728] RIP: 0033:0x7f8b18b8eec9 [ 192.562259][ T7728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.582755][ T7728] RSP: 002b:00007f8b19a01038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 192.591307][ T7728] RAX: ffffffffffffffda RBX: 00007f8b18de5fa0 RCX: 00007f8b18b8eec9 [ 192.599392][ T7728] RDX: 0000000000000000 RSI: 00000000003a6000 RDI: 0000200000000080 [ 192.607782][ T7728] RBP: 00007f8b18c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.617136][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.625684][ T7728] R13: 00007f8b18de6038 R14: 00007f8b18de5fa0 R15: 00007ffe3fead4f8 [ 192.634094][ T7728] [ 192.637646][ T7728] Kernel Offset: disabled [ 192.642079][ T7728] Rebooting in 86400 seconds..